$ rpki-client -vvf rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft File: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft (raw, json) Hash identifier: VpI/7w6qC/GgSl6U7qAKZBoSefdNK93Fnl52wJMVPEE= Subject key identifier: F3:1B:C5:71:20:C6:33:1C:FC:AB:46:FD:A7:89:EF:53:BD:50:0B:57 Authority key identifier: E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69 Certificate issuer: /CN=A9170DD8/serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169 Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft Manifest number: 97 Signing time: Fri 13 Jun 2025 05:19:26 +0000 Manifest this update: Fri 13 Jun 2025 05:19:25 +0000 Manifest next update: Fri 20 Jun 2025 05:19:25 +0000 Files and hashes: 1: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl (hash: BIuHPwqP7JJDIFXs4GJKZ6/0hV/8LsM8s3Ar29Z3htk=) 2: 4D06CD2C667411EF8E723587C4F9AE02.roa (hash: 4PdtbIsL2ZotyQ7lOujn962oNOjC34OWUPtAk2nb5/I=) 3: 4CA4BE8E667411EF8E723587C4F9AE02.roa (hash: 8qwHnAzkWpQMSqbxW4gRTYW6uWniUVjWaHfJJJJlxJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170DD8, serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169 Validity Not Before: Jun 13 05:19:25 2025 GMT Not After : Jun 20 05:19:25 2025 GMT Subject: CN=684bb4de-1366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:27:ab:8f:3a:98:2e:68:e1:1c:f9:f2:e8:5a: 84:3c:05:71:3d:2b:75:ab:f5:42:de:b7:c3:f4:1c: 33:ab:82:bf:79:91:96:00:d4:a2:84:cd:8e:b5:91: ce:e6:2c:a9:6a:2f:5e:61:a4:b0:0e:71:b1:5d:14: 50:2f:12:85:57:e4:31:78:98:fe:bf:a0:6f:09:1a: 0c:27:4f:1c:31:c5:f6:47:71:12:39:a1:48:43:14: 09:e0:3a:36:d9:bd:3c:73:70:86:10:d3:be:e0:0a: 9c:b8:71:cd:e7:ed:dc:3b:b6:9a:7b:da:05:4b:f3: dc:b5:6b:a2:b3:08:d3:4b:ea:ba:fd:a6:48:ac:4b: e1:bd:ce:90:95:ff:73:e8:2c:01:ec:0e:bf:bf:a5: d7:b6:ff:e4:fe:c8:55:9b:d8:6b:e2:fb:b8:65:0e: 86:8a:e1:d3:63:0d:6f:00:dd:d8:38:ee:9e:a2:53: ee:94:3f:8a:83:c7:41:1c:b3:f2:e6:2c:ae:e5:00: cd:92:ab:fc:9b:33:ed:24:a6:e9:b6:10:ff:21:fc: 31:7e:26:66:a3:27:74:12:62:93:df:7f:26:c9:1d: 1c:23:0d:8e:b3:ad:d4:9b:0c:3a:cb:e7:d9:32:3e: fb:c9:b5:64:10:16:7d:25:4d:0b:bf:3e:1c:05:d3: 40:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1B:C5:71:20:C6:33:1C:FC:AB:46:FD:A7:89:EF:53:BD:50:0B:57 X509v3 Authority Key Identifier: keyid:E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:3b:9b:07:e3:5d:df:07:b7:49:24:b1:12:e9:11:ce:98:9d: 27:eb:96:6f:22:1a:bc:ea:ac:ec:11:e0:b6:78:e6:ed:ae:e8: c8:d5:48:1d:53:b5:c5:b4:c6:2b:dc:8f:29:12:02:26:2a:5a: 15:cb:a2:3f:04:f0:65:0e:26:db:1e:57:ae:c3:6b:e5:a5:7d: 58:a4:10:33:e4:11:01:93:a5:0f:ed:68:ca:a8:44:2c:dd:9b: 97:4f:b8:1b:65:8f:f9:f9:c5:2f:0b:ae:f1:83:77:bd:6d:93: 6b:24:20:9f:f0:20:ee:a2:07:50:a3:de:e2:b6:15:43:13:3f: a4:7d:2e:aa:84:73:23:23:2c:0d:cc:25:1a:c8:61:3f:47:66: e7:08:5a:50:67:b6:ba:c4:ae:b9:dc:d9:2f:ee:2d:d1:46:ee: 0d:c9:f8:e2:4a:b4:50:2c:3c:c5:cb:c9:d9:32:8a:59:15:7f: 8d:77:94:5b:ac:18:45:f8:4e:4d:3f:11:70:38:20:5c:67:fe: 43:26:7a:05:f1:9d:81:80:8e:3f:24:e3:2e:40:2c:dc:94:58: 10:c7:dc:6b:a5:79:b7:a2:cf:d2:99:d5:df:4a:62:46:30:9f: 70:19:81:b2:ef:53:05:22:21:38:40:ee:ac:dc:b3:b0:63:89: 23:e7:eb:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBERDgxMTAvBgNVBAUTKEU2QjU0RDAyN0NFMzQ5OEJGMzVFNEQwNjVCQzQ3OEE5 MzZDMTYxNjkwHhcNMjUwNjEzMDUxOTI1WhcNMjUwNjIwMDUxOTI1WjAYMRYwFAYD VQQDEw02ODRiYjRkZS0xMzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyerjzqYLmjhHPny6FqEPAVxPSt1q/VC3rfD9Bwzq4K/eZGWANSihM2OtZHO 5iypai9eYaSwDnGxXRRQLxKFV+QxeJj+v6BvCRoMJ08cMcX2R3ESOaFIQxQJ4Do2 2b08c3CGENO+4AqcuHHN5+3cO7aae9oFS/PctWuiswjTS+q6/aZIrEvhvc6Qlf9z 6CwB7A6/v6XXtv/k/shVm9hr4vu4ZQ6GiuHTYw1vAN3YOO6eolPulD+Kg8dBHLPy 5iyu5QDNkqv8mzPtJKbpthD/IfwxfiZmoyd0EmKT338myR0cIw2Os63Umww6y+fZ Mj77ybVkEBZ9JU0Lvz4cBdNAyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMbxXEg xjMc/KtG/aeJ71O9UAtXMB8GA1UdIwQYMBaAFOa1TQJ840mL815NBlvEeKk2wWFp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEREOC9BNjZBNzVFRTY1 QkIxMUVGQUZBMzJGODJDNEY5QUUwMi81clZOQW56alNZdnpYazBHVzhSNHFUYkJZ V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyVk5BbnpqU1l2elhrMEdXOFI0cVRiQllXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEREOC9BNjZBNzVFRTY1QkIxMUVGQUZBMzJGODJDNEY5QUUwMi81clZOQW56alNZ dnpYazBHVzhSNHFUYkJZV2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfO5sH413fB7dJJLES6RHOmJ0n65ZvIhq86qzsEeC2eObtrujI1Ugd U7XFtMYr3I8pEgImKloVy6I/BPBlDibbHleuw2vlpX1YpBAz5BEBk6UP7WjKqEQs 3ZuXT7gbZY/5+cUvC67xg3e9bZNrJCCf8CDuogdQo97ithVDEz+kfS6qhHMjIywN zCUayGE/R2bnCFpQZ7a6xK653Nkv7i3RRu4NyfjiSrRQLDzFy8nZMopZFX+Nd5Rb rBhF+E5NPxFwOCBcZ/5DJnoF8Z2BgI4/JOMuQCzclFgQx9xrpXm3os/SmdXfSmJG MJ9wGYGy71MFIiE4QO6s3LOwY4kj5+sL -----END CERTIFICATE-----Generated at Sat Jun 14 19:32:28 2025 by rpki-client