$ rpki-client -vvf rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft File: 5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft (raw, json) Hash identifier: YzzKilyz110xRHt3aGT5GS2LT+mDkbWcG0VDhPSciF0= Subject key identifier: 9F:A2:08:89:A6:47:DE:09:D3:DA:52:AB:84:A3:CB:2D:D2:47:1B:0E Authority key identifier: E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D Certificate issuer: /CN=A91801A5/serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D Certificate serial: 0681 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft Manifest number: 0679 Signing time: Sat 14 Jun 2025 22:04:56 +0000 Manifest this update: Sat 14 Jun 2025 22:04:56 +0000 Manifest next update: Sat 21 Jun 2025 22:04:56 +0000 Files and hashes: 1: 5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl (hash: 95NettxxU7pZoBCNT75cUpmUAmizJEy3CV+Et3UcE/o=) 2: 54F537EC32CD11EFA6C5320EC4F9AE02.roa (hash: S55fbog5DZrTL6CQ8gLDN4CUVpPp3b9gzfe68beFEQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:04:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1665 (0x681) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91801A5, serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D Validity Not Before: Jun 14 22:04:56 2025 GMT Not After : Jun 21 22:04:56 2025 GMT Subject: CN=684df208-6960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8b:4e:2b:d0:53:98:80:28:85:6c:90:3a:de: 11:86:16:91:7b:68:7b:5f:bb:99:39:9e:51:b5:bf: 4c:6a:bc:fd:b3:b1:b3:4e:3f:a6:84:42:77:48:67: 5d:9e:7a:15:90:0c:44:2b:a6:42:ff:7a:23:5a:41: b4:59:44:67:1f:74:1d:67:7a:d2:58:ea:ec:55:3a: 08:a1:41:dd:68:69:77:96:bd:49:a2:1e:3b:44:93: 4b:d6:38:57:a4:5b:94:11:58:21:bf:6c:53:1f:dd: 9e:9d:64:63:6d:8b:5c:8a:5a:3b:13:0f:a0:a9:c2: 01:bb:39:f4:7d:51:f9:e9:62:0b:3e:0e:32:9f:bc: 2d:4b:b2:b4:8d:e0:92:73:48:5f:e0:5b:da:10:4d: d4:ba:19:34:2a:23:05:49:d6:bc:2f:92:f6:e0:f6: 81:d3:41:5d:62:ff:af:21:4e:41:08:dc:11:e8:47: 61:7f:a9:3b:83:c6:ff:77:04:52:1e:22:ec:c9:a5: 23:3a:f9:77:fa:36:e7:e3:84:b8:90:3f:73:6c:66: 88:0a:dd:91:2a:8c:dd:df:f5:34:a8:51:7d:72:4c: f0:98:0e:d5:fe:47:12:cd:1b:c4:98:16:db:47:71: 50:d5:a0:c3:80:e7:ac:97:c7:1c:df:60:67:e2:60: 80:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A2:08:89:A6:47:DE:09:D3:DA:52:AB:84:A3:CB:2D:D2:47:1B:0E X509v3 Authority Key Identifier: keyid:E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f0:2d:4b:ef:0a:ee:d0:4a:f2:dc:e2:4a:47:a1:c9:b4:9b: 1b:bd:56:cc:b8:ff:cb:4b:c4:50:7e:9f:55:e7:da:15:e6:2c: 4b:ea:ce:c1:55:4a:7a:bd:45:82:3a:4d:c3:66:c0:00:57:76: 0e:93:18:fe:f3:9c:9e:11:c9:f0:31:a8:e9:1a:e4:81:7b:42: 8f:be:27:9b:17:b2:c8:b5:1a:ff:d0:75:1d:b8:6f:28:6e:1f: 5a:dd:65:0c:da:11:1d:ab:c9:4f:10:d2:fa:67:45:a1:23:73: 07:ca:5a:48:0b:6c:fe:05:a7:05:79:ea:5a:8b:fa:47:85:3c: d6:c5:3a:f6:dd:e8:dc:cf:1c:8e:60:88:70:34:04:ee:bf:02: cb:3b:c0:1e:b4:0b:2b:ca:18:4a:a5:39:e3:c5:c3:e8:5b:5e: 1e:a8:48:1a:1b:8a:58:18:9f:fb:cf:68:51:71:91:a7:11:ef: 7a:bb:e4:63:ed:5c:f6:66:f0:81:88:c6:46:e8:25:b4:6e:1c: 6b:ca:ba:45:55:69:7d:5f:83:9e:05:ce:30:9d:6d:83:a6:73: 0b:23:c4:06:ec:3e:7f:5f:27:73:72:b8:25:a7:b1:5e:5b:4d: 6a:74:8b:16:56:2a:f2:58:7d:f4:95:f8:23:b1:59:e0:7a:35: 71:b3:b8:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAxQTUxMTAvBgNVBAUTKEU1RTFDRkNBRTFGOUU2RjEyMUNBMTM1NTFCNDBGNjk4 OTg0QjlEOUQwHhcNMjUwNjE0MjIwNDU2WhcNMjUwNjIxMjIwNDU2WjAYMRYwFAYD VQQDEw02ODRkZjIwOC02OTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYtOK9BTmIAohWyQOt4RhhaRe2h7X7uZOZ5Rtb9Marz9s7GzTj+mhEJ3SGdd nnoVkAxEK6ZC/3ojWkG0WURnH3QdZ3rSWOrsVToIoUHdaGl3lr1Joh47RJNL1jhX pFuUEVghv2xTH92enWRjbYtcilo7Ew+gqcIBuzn0fVH56WILPg4yn7wtS7K0jeCS c0hf4FvaEE3Uuhk0KiMFSda8L5L24PaB00FdYv+vIU5BCNwR6Edhf6k7g8b/dwRS HiLsyaUjOvl3+jbn44S4kD9zbGaICt2RKozd3/U0qFF9ckzwmA7V/kcSzRvEmBbb R3FQ1aDDgOesl8cc32Bn4mCAxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+iCImm R94J09pSq4Sjyy3SRxsOMB8GA1UdIwQYMBaAFOXhz8rh+ebxIcoTVRtA9piYS52d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDFBNS84NEI1RDYxQzdE NkQxMUVCQTZBNEE4MTdDNEY5QUUwMi81ZUhQeXVINTV2RWh5aE5WRzBEMm1KaExu WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVlSFB5dUg1NXZFaHloTlZHMEQybUpoTG5aMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDFBNS84NEI1RDYxQzdENkQxMUVCQTZBNEE4MTdDNEY5QUUwMi81ZUhQeXVINTV2 RWh5aE5WRzBEMm1KaExuWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAK8C1L7wru0Ery3OJKR6HJtJsbvVbMuP/LS8RQfp9V59oV5ixL6s7B VUp6vUWCOk3DZsAAV3YOkxj+85yeEcnwMajpGuSBe0KPviebF7LItRr/0HUduG8o bh9a3WUM2hEdq8lPENL6Z0WhI3MHylpIC2z+BacFeepai/pHhTzWxTr23ejczxyO YIhwNATuvwLLO8AetAsryhhKpTnjxcPoW14eqEgaG4pYGJ/7z2hRcZGnEe96u+Rj 7Vz2ZvCBiMZG6CW0bhxryrpFVWl9X4OeBc4wnW2DpnMLI8QG7D5/Xydzcrglp7Fe W01qdIsWViryWH30lfgjsVngejVxs7gj -----END CERTIFICATE-----Generated at Sun Jun 15 09:29:50 2025 by rpki-client