$ rpki-client -vvf rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft File: 5xSoFJfIF3hoy7TNszjD72zp6VM.mft (raw, json) Hash identifier: YTxuD+jXUeVmnIiJyNpGRRMNWuvu3QT0xw8WmVmMCCQ= Subject key identifier: C5:E0:7A:18:BA:E0:76:A4:9A:CF:97:A7:D7:D8:C1:61:42:A5:20:AE Authority key identifier: E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53 Certificate issuer: /CN=A9172C8D/serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953 Certificate serial: 0A55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft Manifest number: 0A4C Signing time: Fri 20 Jun 2025 19:38:08 +0000 Manifest this update: Fri 20 Jun 2025 19:38:07 +0000 Manifest next update: Fri 27 Jun 2025 19:38:07 +0000 Files and hashes: 1: 5xSoFJfIF3hoy7TNszjD72zp6VM.crl (hash: 1RFsYSsockXC+NjtzeKEhNNUGE0FNKqUYV0rT10rOt4=) 2: 9085F6C0B78911EFB9994180C4F9AE02.roa (hash: KPuYYAQ14XpM20WTZh+zfqEqRXqFeAhCtZEHNEUGMw8=) 3: CDD96B60B78911EF9BD3EF80C4F9AE02.roa (hash: sDoqH+F903pEZfTL5CZCahrin5P/dPEPc5OIr03Af9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 19:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2645 (0xa55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172C8D, serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953 Validity Not Before: Jun 20 19:38:07 2025 GMT Not After : Jun 27 19:38:07 2025 GMT Subject: CN=6855b89f-a18e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:bb:e8:f7:41:c7:3b:dd:aa:8a:37:db:07:fa: b7:9b:4c:1c:87:3c:49:a7:b8:65:20:a8:c6:56:60: 35:ef:44:3c:bc:75:72:37:9a:2b:d9:45:f0:1f:ac: c0:8c:85:ca:47:2e:ce:34:f8:9e:6d:58:32:8a:63: 07:16:b9:98:ce:dc:c1:1f:68:ab:d3:b9:3e:b4:1e: 64:31:0e:11:94:c6:a0:37:a7:2c:1d:80:cf:56:17: 8d:fb:a4:66:44:c8:01:2b:86:06:f9:2c:bd:26:f4: f6:c9:27:e8:05:dd:de:32:49:ec:2a:62:94:a4:9f: b5:5b:6d:93:69:70:d2:16:64:78:78:30:b8:de:df: 63:1a:f2:0d:d6:0c:b9:ca:61:fb:5c:ad:b5:3d:ec: 9f:91:a4:69:e2:bd:77:f8:58:90:33:07:90:7d:5b: d6:49:8a:79:28:af:c2:ac:7f:63:68:97:fc:44:28: 79:55:73:2f:69:5a:2e:81:94:12:99:b0:70:67:e2: ff:eb:49:83:ff:aa:e5:29:ae:c7:c6:7c:ae:f7:58: fd:ab:75:65:2a:3b:e9:49:29:1a:8a:ae:ad:11:a8: 8a:89:e0:f7:1e:a6:dd:50:65:f9:14:94:d3:46:77: c1:ed:85:8a:5d:92:bb:9b:78:89:6e:18:12:10:63: 01:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E0:7A:18:BA:E0:76:A4:9A:CF:97:A7:D7:D8:C1:61:42:A5:20:AE X509v3 Authority Key Identifier: keyid:E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:97:e8:45:0d:97:df:02:78:a3:55:c7:1f:c9:e3:21:04:4a: ed:85:61:ab:6d:74:9b:69:4d:4c:da:b9:ee:08:68:09:5d:0d: 92:58:e1:87:ff:91:df:b6:2c:3a:7f:5a:4e:6b:43:65:0b:7e: 7d:19:e3:4d:48:87:19:7e:4d:1f:78:2a:32:f0:74:82:c4:cd: 52:dd:a6:c6:d2:4c:bc:b4:d7:b2:f7:c2:47:92:cb:a5:6f:04: 36:db:ee:50:6c:cd:a6:ef:f5:75:3e:39:48:6a:1c:fd:98:69: 78:f7:5d:cf:16:96:2b:3c:13:e9:c4:12:8b:9f:6e:cf:9e:d4: a1:83:de:3c:b8:57:b9:35:89:c0:32:a8:50:4d:fe:8e:97:e8: b6:df:30:53:59:4b:5a:62:b4:d2:bd:f1:e9:02:b2:9e:5d:41: 43:82:7d:fb:8c:5a:95:ed:0c:2e:07:e5:5c:b0:44:46:c5:79: 76:13:0b:dc:8f:e8:48:41:24:0d:90:07:60:d6:09:d3:56:5e: a3:61:03:1e:44:98:c6:cf:9c:52:a1:1a:0f:e8:a0:cb:44:de: fd:e0:6d:d4:7d:1d:dc:ba:e8:cb:14:dd:ae:e5:7a:b2:17:b5: 4e:3e:aa:a9:01:7b:8d:a9:55:2b:93:c6:96:c3:b0:39:13:12: 95:24:cc:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDOEQxMTAvBgNVBAUTKEU3MTRBODE0OTdDODE3Nzg2OENCQjRDREIzMzhDM0VG NkNFOUU5NTMwHhcNMjUwNjIwMTkzODA3WhcNMjUwNjI3MTkzODA3WjAYMRYwFAYD VQQDEw02ODU1Yjg5Zi1hMThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3bvo90HHO92qijfbB/q3m0wchzxJp7hlIKjGVmA170Q8vHVyN5or2UXwH6zA jIXKRy7ONPiebVgyimMHFrmYztzBH2ir07k+tB5kMQ4RlMagN6csHYDPVheN+6Rm RMgBK4YG+Sy9JvT2ySfoBd3eMknsKmKUpJ+1W22TaXDSFmR4eDC43t9jGvIN1gy5 ymH7XK21PeyfkaRp4r13+FiQMweQfVvWSYp5KK/CrH9jaJf8RCh5VXMvaVougZQS mbBwZ+L/60mD/6rlKa7Hxnyu91j9q3VlKjvpSSkaiq6tEaiKieD3HqbdUGX5FJTT RnfB7YWKXZK7m3iJbhgSEGMB+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXgehi6 4Hakms+Xp9fYwWFCpSCuMB8GA1UdIwQYMBaAFOcUqBSXyBd4aMu0zbM4w+9s6elT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkM4RC85QTExMDg2NDY5 QkExMUVBQkMwQkQ4NjNDNEY5QUUwMi81eFNvRkpmSUYzaG95N1ROc3pqRDcyenA2 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV4U29GSmZJRjNob3k3VE5zempENzJ6cDZWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkM4RC85QTExMDg2NDY5QkExMUVBQkMwQkQ4NjNDNEY5QUUwMi81eFNvRkpmSUYz aG95N1ROc3pqRDcyenA2Vk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArl+hFDZffAnijVccfyeMhBErthWGrbXSbaU1M2rnuCGgJXQ2SWOGH /5Hftiw6f1pOa0NlC359GeNNSIcZfk0feCoy8HSCxM1S3abG0ky8tNey98JHksul bwQ22+5QbM2m7/V1PjlIahz9mGl4913PFpYrPBPpxBKLn27PntShg948uFe5NYnA MqhQTf6Ol+i23zBTWUtaYrTSvfHpArKeXUFDgn37jFqV7QwuB+VcsERGxXl2Ewvc j+hIQSQNkAdg1gnTVl6jYQMeRJjGz5xSoRoP6KDLRN794G3UfR3cuujLFN2u5Xqy F7VOPqqpAXuNqVUrk8aWw7A5ExKVJMwj -----END CERTIFICATE-----Generated at Fri Jun 20 23:47:05 2025 by rpki-client