$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft File: s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft (raw, json) Hash identifier: cWfNYgfLCH20JxxxMq9ABwi8fqBF7wWklbHrZrLFv+w= Subject key identifier: 92:13:00:45:87:1B:BB:8C:B6:84:76:F7:D0:4F:E7:52:2B:7C:A8:64 Authority key identifier: B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44 Certificate issuer: /CN=A917530D/serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44 Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft Manifest number: 0118 Signing time: Tue 17 Jun 2025 04:01:11 +0000 Manifest this update: Tue 17 Jun 2025 04:01:11 +0000 Manifest next update: Tue 24 Jun 2025 04:01:11 +0000 Files and hashes: 1: s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl (hash: 3iHZpXjrEZVuYrVGzaXalrOJKS+s180TDLEtkKj+3/8=) 2: 762CACD0B04311EF95390327C4F9AE02.roa (hash: 7lH097TnqT2Frr0JL7F0/A/6TnFN0hBEwwqzvbNC3Tc=) 3: A97CBD42A06611EFA888B57DC4F9AE02.roa (hash: iA4PiBqhCGu6j+QREktQJZZ0YDevgINmDR162rqZIpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 04:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917530D, serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44 Validity Not Before: Jun 17 04:01:11 2025 GMT Not After : Jun 24 04:01:11 2025 GMT Subject: CN=6850e887-fc0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c3:f2:72:b7:db:a7:d7:0e:87:34:f9:8e:56: de:52:87:a4:5e:2d:86:b5:4a:e0:bd:f8:c6:92:c0: fa:44:c4:43:ff:3f:e7:1a:6a:08:fc:a3:55:c1:94: 18:9c:9d:f6:29:68:38:98:de:e2:02:6c:8d:a7:5a: 5a:03:00:f8:28:67:ff:bf:a6:c1:02:cd:aa:51:77: ff:37:34:9b:9b:b2:3e:c7:70:19:c8:ee:a5:94:98: 11:ce:b9:60:99:0e:bd:50:e5:fc:24:75:3e:c5:43: ea:1f:bb:a9:39:55:f8:72:bf:8f:65:39:78:4d:b8: e7:3e:50:ee:e9:59:3b:48:71:4d:7a:56:f6:91:0e: 61:64:26:75:5b:fb:15:f8:4c:74:ff:2e:e0:1d:6f: 4f:43:83:25:6e:00:07:93:79:41:bb:d4:8f:18:ee: c8:5a:3d:9d:15:0d:b5:5c:4a:1d:32:67:22:01:05: f0:2c:c9:c0:56:31:f9:cf:0d:fd:3a:f6:dd:cb:53: e1:0d:cc:26:40:ea:f5:8f:f0:f8:9f:28:33:b5:6d: 28:c7:59:19:3d:92:2a:88:4f:6b:e1:39:c5:35:f0: c3:5a:cd:4f:81:6f:d0:d6:36:b8:f2:f0:bb:c0:54: 30:ac:a1:93:9d:3f:0a:59:a6:5b:6f:d4:09:86:60: 8f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:13:00:45:87:1B:BB:8C:B6:84:76:F7:D0:4F:E7:52:2B:7C:A8:64 X509v3 Authority Key Identifier: keyid:B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:46:9f:d6:7b:79:4c:85:ad:b1:23:4c:62:7b:b6:f9:00:76: 3d:8b:00:eb:6b:05:df:67:e3:37:ee:4e:7a:3b:ed:b5:86:67: 0a:0a:7a:f4:3b:47:25:3a:b2:99:b5:1e:c8:f2:0f:68:4c:75: 6b:90:56:42:ab:e5:23:b0:c3:9f:3c:6d:ad:01:93:6a:1b:84: 7a:8a:24:bc:70:35:50:2e:b3:a5:2d:46:d2:91:cd:63:a3:ca: 19:a2:a9:d7:74:e9:db:27:46:71:2f:d1:69:1c:c7:aa:e7:56: 98:ed:f1:3e:7c:8d:5d:35:2e:4b:5e:ae:f6:05:c2:45:36:3d: 9d:5a:b1:1c:a0:a8:42:fa:34:04:2d:09:84:f5:e9:7b:53:5b: e4:66:5b:c4:05:18:db:f2:34:50:f5:a3:94:43:b2:9e:b3:cc: a2:36:7b:75:ab:7d:ba:b2:06:1b:2b:fd:4a:ac:fc:ef:23:44: c3:9a:96:06:69:99:ad:62:d0:42:eb:11:17:91:4d:3d:c9:6c: 65:0e:16:1c:e3:78:27:67:d2:fd:af:45:72:97:e2:36:3e:49: 45:2d:78:ba:21:5f:e9:45:c3:1a:3a:20:f8:a8:82:22:6d:e6: 1b:ed:ff:a2:85:9e:1f:cc:f4:4e:67:c7:73:22:d5:35:25:f9: c8:7f:34:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMEQxMTAvBgNVBAUTKEIzOTkyRjBENDlCQUY2QTM2RkRBNjU4RTVCNDU5NDY5 NTIxRTVCNDQwHhcNMjUwNjE3MDQwMTExWhcNMjUwNjI0MDQwMTExWjAYMRYwFAYD VQQDEw02ODUwZTg4Ny1mYzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcPycrfbp9cOhzT5jlbeUoekXi2GtUrgvfjGksD6RMRD/z/nGmoI/KNVwZQY nJ32KWg4mN7iAmyNp1paAwD4KGf/v6bBAs2qUXf/NzSbm7I+x3AZyO6llJgRzrlg mQ69UOX8JHU+xUPqH7upOVX4cr+PZTl4TbjnPlDu6Vk7SHFNelb2kQ5hZCZ1W/sV +Ex0/y7gHW9PQ4MlbgAHk3lBu9SPGO7IWj2dFQ21XEodMmciAQXwLMnAVjH5zw39 Ovbdy1PhDcwmQOr1j/D4nygztW0ox1kZPZIqiE9r4TnFNfDDWs1PgW/Q1ja48vC7 wFQwrKGTnT8KWaZbb9QJhmCPuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJITAEWH G7uMtoR299BP51IrfKhkMB8GA1UdIwQYMBaAFLOZLw1Juvajb9pljltFlGlSHltE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwRC9ERDdFMDkxQ0I2 NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi9zNWt2RFVtNjlxTnYybVdPVzBXVWFWSWVX MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3M1a3ZEVW02OXFOdjJtV09XMFdVYVZJZVcwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTMwRC9ERDdFMDkxQ0I2NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi9zNWt2RFVtNjlx TnYybVdPVzBXVWFWSWVXMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARRp/We3lMha2xI0xie7b5AHY9iwDrawXfZ+M37k56O+21hmcKCnr0 O0clOrKZtR7I8g9oTHVrkFZCq+UjsMOfPG2tAZNqG4R6iiS8cDVQLrOlLUbSkc1j o8oZoqnXdOnbJ0ZxL9FpHMeq51aY7fE+fI1dNS5LXq72BcJFNj2dWrEcoKhC+jQE LQmE9el7U1vkZlvEBRjb8jRQ9aOUQ7Kes8yiNnt1q326sgYbK/1KrPzvI0TDmpYG aZmtYtBC6xEXkU09yWxlDhYc43gnZ9L9r0Vyl+I2PklFLXi6IV/pRcMaOiD4qIIi beYb7f+ihZ4fzPROZ8dzItU1JfnIfzTb -----END CERTIFICATE-----Generated at Thu Jun 19 05:56:27 2025 by rpki-client