$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft File: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft (raw, json) Hash identifier: zDROcRbQZq43ksQOsrSDU8ykhcJr0eJhGOAuTtaHo4o= Subject key identifier: CF:99:85:3E:E2:B8:02:AD:4C:42:56:DB:10:7B:C8:11:8E:6C:C1:F6 Authority key identifier: E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79 Certificate issuer: /CN=A91698EC/serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79 Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft Manifest number: CA Signing time: Fri 13 Jun 2025 04:45:18 +0000 Manifest this update: Fri 13 Jun 2025 04:45:18 +0000 Manifest next update: Fri 20 Jun 2025 04:45:18 +0000 Files and hashes: 1: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl (hash: SMD3D/2h7XFnG4+Yd8h5GMEw6wMB9LaqhSJ1cdLOg1g=) 2: 1FCE5CE0214F11EFAB245D49C4F9AE02.roa (hash: CpFFYzKvaiG5h+2sUf464A2//gzHqQgpH0EvUR1TKwU=) 3: 02BCE50286AF11EF9EFFD52FC4F9AE02.roa (hash: 51G/atnUP8WE3vN2KzPoIXBsyS6vS2RXr0QbqdKbjAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91698EC, serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79 Validity Not Before: Jun 13 04:45:18 2025 GMT Not After : Jun 20 04:45:18 2025 GMT Subject: CN=684bacde-a480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ff:d2:c6:b4:65:10:43:01:91:4f:a9:21:b7: cc:a0:80:21:90:03:89:4e:78:77:a4:63:06:06:c2: e5:93:b9:24:dc:0b:62:6d:c0:39:75:23:0a:37:3a: a5:45:ea:73:b9:95:d6:95:32:2c:0a:0b:3d:0e:47: d7:2b:31:cd:30:71:3b:3c:13:07:47:aa:d8:dc:bf: 3c:77:f4:d3:a4:e8:f0:d2:26:7a:30:84:1b:80:1a: 8f:37:88:5f:ac:cd:45:bc:72:be:62:97:ac:87:44: 30:63:7b:37:b7:6a:eb:09:b9:4f:d3:62:94:4f:61: 2c:d4:07:6b:da:54:c3:66:71:20:5d:f2:39:dc:06: 03:e8:30:87:25:10:40:2e:77:8d:16:95:5c:b3:5c: 76:60:10:fc:1d:ad:2a:2d:55:5a:c6:11:62:8f:b3: e7:c4:e3:af:30:f0:66:0d:8d:d4:48:7b:bb:26:79: 13:29:5c:20:95:1b:d0:48:31:89:21:cc:12:fe:4f: fb:63:eb:c4:bb:1a:f2:43:57:11:59:c1:a8:43:53: 5c:60:10:cf:c9:fc:7b:d7:70:48:bc:b4:e1:ef:a5: d0:80:54:06:32:c8:17:c7:1d:68:20:6f:53:79:cc: d2:08:2d:ef:fc:9a:ac:fa:11:cc:5c:d3:3e:4a:ed: 4b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:99:85:3E:E2:B8:02:AD:4C:42:56:DB:10:7B:C8:11:8E:6C:C1:F6 X509v3 Authority Key Identifier: keyid:E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:2b:61:29:82:bf:f0:2c:4e:4d:af:c7:7b:c1:11:63:99:5d: ec:9e:56:d9:bf:7a:00:cf:e9:20:44:8a:b5:ab:73:58:6b:48: d4:4a:ed:fe:54:5f:31:48:3b:b5:0d:f1:15:51:37:48:68:e6: fd:94:6d:5c:d0:bf:e0:2e:d8:82:c9:17:e5:fe:13:5e:55:3c: 76:4a:45:fb:f9:ea:65:86:22:89:6d:4a:d2:52:c2:42:34:09: fc:2a:c2:03:75:5f:62:10:87:8a:e9:44:e4:86:9c:a0:13:f5: 1f:bd:7e:49:18:b5:60:80:35:a5:81:a7:b4:8f:c2:20:7d:78: d2:d8:a6:62:01:0d:93:db:8d:ab:3b:4c:a3:1e:05:20:39:32: fe:5a:4e:f0:19:8c:4d:26:57:0d:23:0b:0c:38:34:5c:d7:6e: 46:e5:91:1d:ab:57:7d:d9:ce:cf:46:b2:64:e1:ce:7b:0d:63: dc:61:6d:59:0a:3c:6d:5a:24:cd:83:b7:07:7d:fe:32:d4:2a: bf:d4:ac:2f:bb:bc:e1:0f:30:e3:33:06:ad:08:76:45:2f:6f: 8d:10:e9:ac:2c:25:26:ca:18:05:e5:e5:b3:51:5a:12:ab:9f: 49:8c:7b:af:2e:3a:fd:af:36:89:1a:b2:1b:22:73:ba:d0:a6: a7:7b:f5:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4RUMxMTAvBgNVBAUTKEU1OEYwRjUyQTREMkQxREU0NDY3NUFDQTE3NTU3QkY5 ODJFQzdENzkwHhcNMjUwNjEzMDQ0NTE4WhcNMjUwNjIwMDQ0NTE4WjAYMRYwFAYD VQQDEw02ODRiYWNkZS1hNDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArf/SxrRlEEMBkU+pIbfMoIAhkAOJTnh3pGMGBsLlk7kk3AtibcA5dSMKNzql RepzuZXWlTIsCgs9DkfXKzHNMHE7PBMHR6rY3L88d/TTpOjw0iZ6MIQbgBqPN4hf rM1FvHK+Ypesh0QwY3s3t2rrCblP02KUT2Es1Adr2lTDZnEgXfI53AYD6DCHJRBA LneNFpVcs1x2YBD8Ha0qLVVaxhFij7PnxOOvMPBmDY3USHu7JnkTKVwglRvQSDGJ IcwS/k/7Y+vEuxryQ1cRWcGoQ1NcYBDPyfx713BIvLTh76XQgFQGMsgXxx1oIG9T eczSCC3v/Jqs+hHMXNM+Su1LlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+ZhT7i uAKtTEJW2xB7yBGObMH2MB8GA1UdIwQYMBaAFOWPD1Kk0tHeRGdayhdVe/mC7H15 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OThFQy8yMUU1QTMwQTFF RTExMUVGOTNGOTg1M0RDNEY5QUUwMi81WThQVXFUUzBkNUVaMXJLRjFWNy1ZTHNm WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVZOFBVcVRTMGQ1RVoxcktGMVY3LVlMc2ZYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OThFQy8yMUU1QTMwQTFFRTExMUVGOTNGOTg1M0RDNEY5QUUwMi81WThQVXFUUzBk NUVaMXJLRjFWNy1ZTHNmWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuK2Epgr/wLE5Nr8d7wRFjmV3snlbZv3oAz+kgRIq1q3NYa0jUSu3+ VF8xSDu1DfEVUTdIaOb9lG1c0L/gLtiCyRfl/hNeVTx2SkX7+eplhiKJbUrSUsJC NAn8KsIDdV9iEIeK6UTkhpygE/UfvX5JGLVggDWlgae0j8IgfXjS2KZiAQ2T242r O0yjHgUgOTL+Wk7wGYxNJlcNIwsMODRc125G5ZEdq1d92c7PRrJk4c57DWPcYW1Z CjxtWiTNg7cHff4y1Cq/1Kwvu7zhDzDjMwatCHZFL2+NEOmsLCUmyhgF5eWzUVoS q59JjHuvLjr9rzaJGrIbInO60Kane/WL -----END CERTIFICATE-----Generated at Sun Jun 15 05:18:36 2025 by rpki-client