$ rpki-client -vvf rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft File: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft (raw, json) Hash identifier: wHH/d3Cf/ZqHhN1fmdDTA6W+GmkLB6NX10M6Zl9W28Y= Subject key identifier: 33:83:3B:FA:C1:52:10:DB:9A:8F:43:78:64:F8:87:73:F7:77:B7:C2 Authority key identifier: 0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14 Certificate issuer: /CN=A91637FD/serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft Manifest number: 6F Signing time: Tue 17 Jun 2025 05:45:54 +0000 Manifest this update: Tue 17 Jun 2025 05:45:54 +0000 Manifest next update: Tue 24 Jun 2025 05:45:54 +0000 Files and hashes: 1: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl (hash: fiDliFchy+war8Sv/5uDwcfDa1GHu08I2klI/E5qvtE=) 2: D1E78BC0A15D11EFBAE3332CC4F9AE02.roa (hash: 03/IZSSaWCkjD0t5R6IQf4NgtsFNdSzPU+q4DaqUlgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 05:45:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91637FD, serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214 Validity Not Before: Jun 17 05:45:54 2025 GMT Not After : Jun 24 05:45:54 2025 GMT Subject: CN=68510112-ceec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:60:f1:c3:b7:d7:e3:22:8a:94:29:2f:7b:a5: c7:67:f5:a8:03:0b:1d:3b:76:06:e5:ba:6a:c4:3d: c9:bb:37:fa:3f:ee:d6:a7:88:cc:a1:b7:ea:64:0e: 3d:ae:05:3f:d1:ac:73:5f:12:26:4e:5e:5c:14:4b: 95:77:60:cf:0e:27:cd:61:0a:32:9a:e1:d5:ac:98: 04:a1:d7:46:e6:f8:65:15:87:65:b6:83:dc:37:ba: 96:09:69:05:aa:6b:d8:2c:d2:54:ef:ff:8d:4d:3d: a4:b0:fe:2f:db:d1:4a:34:76:a9:c9:e5:ab:ff:01: 57:fb:30:2b:da:0b:1e:a9:5b:5b:7a:52:aa:f2:07: 9f:82:4e:21:33:bf:d4:7d:5b:da:7d:32:46:13:c1: 90:2c:bb:05:34:90:96:5d:dd:9b:e3:e9:ac:d3:7c: bd:97:5b:76:b9:8b:8c:00:5b:f1:52:18:19:65:a9: 4f:e6:eb:c8:e8:4a:15:fb:07:9f:24:dd:f6:bd:d9: e2:77:42:b9:ef:38:1f:47:e9:ac:16:ec:11:01:55: cb:d4:3b:2d:64:05:18:d0:12:d3:28:8f:73:b0:e7: 66:31:8b:c3:8f:ad:97:11:3b:ed:8f:1b:c1:f0:86: bf:da:62:2c:2f:ff:5d:82:7f:29:94:16:c0:4c:cc: f1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:83:3B:FA:C1:52:10:DB:9A:8F:43:78:64:F8:87:73:F7:77:B7:C2 X509v3 Authority Key Identifier: keyid:0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:5b:9a:c3:55:0a:be:5e:61:d7:bd:f0:46:12:00:d4:5b:6b: ee:fd:e0:e2:27:20:33:24:54:20:d0:b3:c8:8b:e1:6a:82:53: db:50:5c:5d:f6:7f:14:e8:2c:ec:ab:65:53:55:7d:ba:60:5a: 11:17:3b:c0:14:e4:bc:61:14:9d:56:b0:93:73:bb:26:1c:6b: b4:30:4f:3e:7e:aa:b9:c2:96:6d:17:33:5e:5a:7e:71:d4:bc: 4b:11:4c:81:77:ec:fc:75:e3:40:10:5d:c8:d7:6a:02:f5:0f: b4:14:4f:89:21:47:2a:d9:ee:36:b3:cf:39:a1:a8:05:0c:36: 79:94:c0:07:c9:f2:fa:55:f2:98:ca:6c:f7:b4:21:6e:e1:8a: 15:d2:54:9a:80:eb:c0:b9:22:84:a9:b7:9a:55:63:06:fa:84: f4:dc:01:55:72:61:62:d4:3f:fd:b0:c0:40:92:c7:c8:23:9d: ad:fc:85:c8:52:9d:44:2c:16:15:28:eb:62:3f:48:5f:8b:fa: 65:28:f6:f6:da:d3:96:13:c5:83:50:b9:94:0e:fc:07:35:92: 57:b3:94:f7:ef:84:6f:af:f0:d8:b5:4c:3d:07:48:3c:5a:c1: 7a:b3:20:d3:3d:51:4b:72:ac:7a:a1:3b:b4:3b:8d:1a:d4:9e: ec:f8:39:7e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MzdGRDExMC8GA1UEBRMoMEFDRTZGNkFBNkEzRkFFMjdBMDg1QzdBMTI3RjlCQzk5 NDI0NTIxNDAeFw0yNTA2MTcwNTQ1NTRaFw0yNTA2MjQwNTQ1NTRaMBgxFjAUBgNV BAMTDTY4NTEwMTEyLWNlZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmYPHDt9fjIoqUKS97pcdn9agDCx07dgblumrEPcm7N/o/7taniMyht+pkDj2u BT/RrHNfEiZOXlwUS5V3YM8OJ81hCjKa4dWsmASh10bm+GUVh2W2g9w3upYJaQWq a9gs0lTv/41NPaSw/i/b0Uo0dqnJ5av/AVf7MCvaCx6pW1t6UqryB5+CTiEzv9R9 W9p9MkYTwZAsuwU0kJZd3Zvj6azTfL2XW3a5i4wAW/FSGBllqU/m68joShX7B58k 3fa92eJ3QrnvOB9H6awW7BEBVcvUOy1kBRjQEtMoj3Ow52Yxi8OPrZcRO+2PG8Hw hr/aYiwv/12CfymUFsBMzPEbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUM4M7+sFS ENuaj0N4ZPiHc/d3t8IwHwYDVR0jBBgwFoAUCs5vaqaj+uJ6CFx6En+byZQkUhQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYzN0ZEL0UyNDVCNUIyQTE1 QTExRUZBMUVDMkI1RkM0RjlBRTAyL0NzNXZhcWFqLXVKNkNGeDZFbi1ieVpRa1Vo US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ3M1dmFxYWotdUo2Q0Z4NkVuLWJ5WlFrVWhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYz N0ZEL0UyNDVCNUIyQTE1QTExRUZBMUVDMkI1RkM0RjlBRTAyL0NzNXZhcWFqLXVK NkNGeDZFbi1ieVpRa1VoUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADJbmsNVCr5eYde98EYSANRba+794OInIDMkVCDQs8iL4WqCU9tQXF32 fxToLOyrZVNVfbpgWhEXO8AU5LxhFJ1WsJNzuyYca7QwTz5+qrnClm0XM15afnHU vEsRTIF37Px140AQXcjXagL1D7QUT4khRyrZ7jazzzmhqAUMNnmUwAfJ8vpV8pjK bPe0IW7hihXSVJqA68C5IoSpt5pVYwb6hPTcAVVyYWLUP/2wwECSx8gjna38hchS nUQsFhUo62I/SF+L+mUo9vba05YTxYNQuZQO/Ac1klezlPfvhG+v8Ni1TD0HSDxa wXqzINM9UUtyrHqhO7Q7jRrUnuz4OX4= -----END CERTIFICATE-----Generated at Tue Jun 17 23:15:37 2025 by rpki-client