$ rpki-client -vvf rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft File: 5C5CACqDeHpnr4y5qFH5OZdGwTI.mft (raw, json) Hash identifier: iIuR994Ym//1Y3xy2sFaKqkgtgYDlUgKd8uMRT7RYS0= Subject key identifier: 92:66:5A:FE:EF:33:4D:4D:B2:E4:5C:46:C8:C1:CB:D1:7A:D3:62:8F Authority key identifier: E4:2E:42:00:2A:83:78:7A:67:AF:8C:B9:A8:51:F9:39:97:46:C1:32 Certificate issuer: /CN=A91566DC/serialNumber=E42E42002A83787A67AF8CB9A851F9399746C132 Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft Manifest number: 82 Signing time: Sun 15 Jun 2025 05:43:06 +0000 Manifest this update: Sun 15 Jun 2025 05:43:05 +0000 Manifest next update: Sun 22 Jun 2025 05:43:05 +0000 Files and hashes: 1: 5C5CACqDeHpnr4y5qFH5OZdGwTI.crl (hash: jIfuJVLD/uG3peIIwkfuXtcxnWMB4IGyRT9ODR9MJv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.crl rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 05:43:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91566DC, serialNumber=E42E42002A83787A67AF8CB9A851F9399746C132 Validity Not Before: Jun 15 05:43:05 2025 GMT Not After : Jun 22 05:43:05 2025 GMT Subject: CN=684e5d6a-f78a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f0:e9:23:da:d0:79:02:02:71:8a:84:da:ca: 97:69:f6:4a:d9:60:30:2b:81:ec:dc:1f:55:51:1a: b3:28:b3:a9:7c:43:56:35:c6:45:03:3b:cb:ca:57: 9a:b4:03:17:18:97:48:f9:22:2b:2f:6f:99:dd:29: 02:7f:08:13:69:2c:58:85:ee:98:4b:9d:ce:8a:b6: c7:75:28:8d:48:96:cb:b2:78:7f:a1:ab:d6:e7:74: 42:4b:e0:34:2e:bb:9d:05:26:9d:2a:4d:f9:a9:ba: 0b:a1:89:92:38:0e:91:9c:f8:1d:11:a6:db:fd:30: 62:dd:ba:76:9f:d8:d8:f0:42:2f:ba:48:7e:8b:8b: f7:43:35:1c:e9:51:db:1f:b7:46:b4:67:f7:45:4e: 71:90:bd:bc:2e:88:fc:b9:2e:b9:4c:75:2c:39:e5: 80:37:36:b1:c2:83:c5:11:3f:7f:2c:c1:22:a9:91: 2f:61:8a:34:ca:63:32:1e:86:18:d9:63:a2:b2:79: 46:f0:41:26:51:76:0e:4e:86:3d:f8:ec:cc:11:2b: be:db:4a:ea:b4:b0:8d:64:c6:a3:ba:ff:b7:8a:0b: 87:bf:00:fb:36:61:07:47:35:49:18:b4:de:5b:1a: 63:bb:f6:f5:9a:ab:ba:f5:33:b1:67:fd:9e:10:9e: a3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:66:5A:FE:EF:33:4D:4D:B2:E4:5C:46:C8:C1:CB:D1:7A:D3:62:8F X509v3 Authority Key Identifier: keyid:E4:2E:42:00:2A:83:78:7A:67:AF:8C:B9:A8:51:F9:39:97:46:C1:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:0d:a1:8f:30:60:02:9a:3e:d1:32:e1:b2:fa:47:f2:ac:df: ea:7b:7d:6f:2d:15:09:12:6d:9b:f9:71:a9:8c:ed:92:11:20: 9b:c1:80:f2:e1:1f:7c:86:13:b6:b0:cc:3b:e0:d1:59:23:ce: f6:95:ee:e0:b4:03:1d:45:eb:41:33:e7:38:a1:40:8c:a2:37: 14:d3:c6:fa:3f:25:ac:e6:4a:8f:82:77:96:6b:c9:05:af:de: 9c:4b:eb:38:34:3c:74:2a:9d:c3:9c:e8:33:bc:f3:9a:34:d7: 0d:c9:97:e4:54:b1:b1:b1:4a:47:8d:f2:de:b5:7b:33:e1:ac: 89:00:8f:bd:d3:29:ac:62:76:52:61:67:fa:e4:74:08:79:2f: d5:c5:c3:f6:d1:d1:3d:e4:57:ea:47:33:7c:94:c5:01:0d:b7: 36:98:8a:c1:a1:44:79:fa:3b:a0:16:01:4f:73:d5:20:9d:f4: 31:12:83:d7:00:e2:ad:12:03:c0:2e:0a:dd:28:7d:e9:ed:d7: 87:58:e2:77:05:33:fc:cc:20:00:de:0b:3e:18:6d:25:ea:00: 12:67:30:ca:00:b3:06:57:27:8c:0d:07:5b:4b:42:4c:08:1f: ca:bb:68:b0:f5:61:45:08:f7:f9:d9:22:6b:88:90:08:08:3f: ef:fe:3c:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY2REMxMTAvBgNVBAUTKEU0MkU0MjAwMkE4Mzc4N0E2N0FGOENCOUE4NTFGOTM5 OTc0NkMxMzIwHhcNMjUwNjE1MDU0MzA1WhcNMjUwNjIyMDU0MzA1WjAYMRYwFAYD VQQDEw02ODRlNWQ2YS1mNzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0PDpI9rQeQICcYqE2sqXafZK2WAwK4Hs3B9VURqzKLOpfENWNcZFAzvLylea tAMXGJdI+SIrL2+Z3SkCfwgTaSxYhe6YS53OirbHdSiNSJbLsnh/oavW53RCS+A0 LrudBSadKk35qboLoYmSOA6RnPgdEabb/TBi3bp2n9jY8EIvukh+i4v3QzUc6VHb H7dGtGf3RU5xkL28Loj8uS65THUsOeWANzaxwoPFET9/LMEiqZEvYYo0ymMyHoYY 2WOisnlG8EEmUXYOToY9+OzMESu+20rqtLCNZMajuv+3iguHvwD7NmEHRzVJGLTe Wxpju/b1mqu69TOxZ/2eEJ6j9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJJmWv7v M01NsuRcRsjBy9F602KPMB8GA1UdIwQYMBaAFOQuQgAqg3h6Z6+MuahR+TmXRsEy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjZEQy84MENFMjc4QTg0 NkIxMUVGOUM0MjREM0FDNEY5QUUwMi81QzVDQUNxRGVIcG5yNHk1cUZINU9aZEd3 VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDNUNBQ3FEZUhwbnI0eTVxRkg1T1pkR3dUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjZEQy84MENFMjc4QTg0NkIxMUVGOUM0MjREM0FDNEY5QUUwMi81QzVDQUNxRGVI cG5yNHk1cUZINU9aZEd3VEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADDaGPMGACmj7RMuGy+kfyrN/qe31vLRUJEm2b+XGpjO2SESCbwYDy 4R98hhO2sMw74NFZI872le7gtAMdRetBM+c4oUCMojcU08b6PyWs5kqPgneWa8kF r96cS+s4NDx0Kp3DnOgzvPOaNNcNyZfkVLGxsUpHjfLetXsz4ayJAI+90ymsYnZS YWf65HQIeS/VxcP20dE95FfqRzN8lMUBDbc2mIrBoUR5+jugFgFPc9UgnfQxEoPX AOKtEgPALgrdKH3p7deHWOJ3BTP8zCAA3gs+GG0l6gASZzDKALMGVyeMDQdbS0JM CB/Ku2iw9WFFCPf52SJriJAICD/v/jxx -----END CERTIFICATE-----Generated at Sun Jun 15 17:46:31 2025 by rpki-client