$ rpki-client -vvf rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft File: 5tR4mVLfAG9kzr8PNVcqW5bktzc.mft (raw, json) Hash identifier: X5r1v2RWG0HBU+lvt563hW4gKQpottyn0N7qQMtHp1s= Subject key identifier: 2E:BE:07:78:B3:89:E0:E5:75:09:EC:BA:11:FE:E0:A4:16:92:67:23 Authority key identifier: E6:D4:78:99:52:DF:00:6F:64:CE:BF:0F:35:57:2A:5B:96:E4:B7:37 Certificate issuer: /CN=A918E63A/serialNumber=E6D4789952DF006F64CEBF0F35572A5B96E4B737 Certificate serial: 07A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tR4mVLfAG9kzr8PNVcqW5bktzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft Manifest number: 07A4 Signing time: Thu 12 Jun 2025 20:56:11 +0000 Manifest this update: Thu 12 Jun 2025 20:56:11 +0000 Manifest next update: Thu 19 Jun 2025 20:56:11 +0000 Files and hashes: 1: 5tR4mVLfAG9kzr8PNVcqW5bktzc.crl (hash: RVWvsyn+7CKJkwWmoTYW1pPqzu+cZWSDQ2fnO8b5xDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.crl rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tR4mVLfAG9kzr8PNVcqW5bktzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:56:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1956 (0x7a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E63A, serialNumber=E6D4789952DF006F64CEBF0F35572A5B96E4B737 Validity Not Before: Jun 12 20:56:11 2025 GMT Not After : Jun 19 20:56:11 2025 GMT Subject: CN=684b3eeb-3223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:00:fd:4e:ad:ff:8a:8c:57:43:df:b4:98:32: 3c:5e:5d:53:17:58:d0:46:36:ed:b1:f4:89:76:d3: 3c:dc:59:a7:cd:07:1c:ef:39:38:db:b7:c9:6b:6f: b1:5a:a1:55:5a:e2:8c:10:9c:06:d2:df:cc:f6:b8: 3d:9d:da:a9:17:c4:9f:04:b7:77:cb:74:6f:ee:a1: fd:42:49:61:7f:ab:a8:cc:64:b0:8f:01:5b:f8:af: 27:69:5c:d8:dc:d8:57:61:58:c8:6f:a2:15:56:83: 1b:64:88:c2:e5:90:ed:e0:bb:2b:9d:db:3e:65:08: 3b:11:d0:7d:c4:d0:e4:ca:b3:eb:6c:f6:0d:d5:e3: dd:6d:ac:15:aa:43:41:5e:45:b5:ed:74:46:d5:62: ea:9d:ee:2a:f4:d9:e8:f5:86:a6:c2:52:2f:7d:c5: 66:f0:3c:8b:b6:da:e9:be:9e:84:4e:77:bb:72:ec: 63:4f:de:20:6b:bb:85:a9:70:fa:34:19:24:c5:24: 2f:36:f1:37:36:76:f9:ae:1c:95:af:f3:d8:96:52: 2f:d2:b4:bb:f8:ef:bf:71:0d:e6:0d:b7:46:0e:d8: 6b:53:50:23:6b:c2:f2:2a:e2:79:cc:ea:8d:84:d8: ee:47:ef:fa:50:20:94:1b:ee:c2:fb:2d:cb:c7:1e: 67:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:BE:07:78:B3:89:E0:E5:75:09:EC:BA:11:FE:E0:A4:16:92:67:23 X509v3 Authority Key Identifier: keyid:E6:D4:78:99:52:DF:00:6F:64:CE:BF:0F:35:57:2A:5B:96:E4:B7:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tR4mVLfAG9kzr8PNVcqW5bktzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:d3:28:30:4d:90:3b:01:da:cd:13:3f:5a:59:03:71:f5:75: 81:80:68:a6:d1:84:04:18:d7:13:19:85:bc:fd:e3:88:09:e8: 9f:68:59:61:17:07:c9:87:a4:68:bf:82:41:64:18:d5:2f:51: 31:2c:09:b0:72:e0:f2:1f:af:2a:b8:f6:07:52:2c:2f:ff:28: f0:a7:da:41:96:7d:a2:5a:75:6d:27:39:76:71:72:1e:52:49: ad:2b:b0:41:53:44:ef:a1:14:2e:6b:55:fa:4c:c7:6e:a5:38: f1:cd:ea:2e:f7:bf:c3:c4:e0:34:0a:d5:62:88:94:23:67:1c: 9b:10:a8:33:09:4a:37:0a:a1:9b:21:e2:fd:36:c9:bc:d2:25: 7c:73:7d:57:40:ab:e0:60:82:49:d8:ca:e3:87:30:6f:bc:75: b4:aa:d3:8c:73:73:e2:36:a6:0a:3d:2e:f9:2d:35:b0:c8:2d: f3:45:f1:fb:a7:a2:8d:a7:53:0b:e8:03:ee:fe:93:d2:4b:37: de:c4:ff:c4:22:16:0e:e1:c5:f0:74:d5:98:77:17:b4:d6:ab: dd:56:42:0a:b0:4d:df:47:3b:85:a9:79:1e:ee:97:64:e5:f0: b6:a7:a1:ed:82:97:01:e8:8e:99:7b:49:cb:57:e9:00:17:12: e7:3b:73:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2M0ExMTAvBgNVBAUTKEU2RDQ3ODk5NTJERjAwNkY2NENFQkYwRjM1NTcyQTVC OTZFNEI3MzcwHhcNMjUwNjEyMjA1NjExWhcNMjUwNjE5MjA1NjExWjAYMRYwFAYD VQQDEw02ODRiM2VlYi0zMjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5wD9Tq3/ioxXQ9+0mDI8Xl1TF1jQRjbtsfSJdtM83FmnzQcc7zk427fJa2+x WqFVWuKMEJwG0t/M9rg9ndqpF8SfBLd3y3Rv7qH9Qklhf6uozGSwjwFb+K8naVzY 3NhXYVjIb6IVVoMbZIjC5ZDt4Lsrnds+ZQg7EdB9xNDkyrPrbPYN1ePdbawVqkNB XkW17XRG1WLqne4q9Nno9YamwlIvfcVm8DyLttrpvp6ETne7cuxjT94ga7uFqXD6 NBkkxSQvNvE3Nnb5rhyVr/PYllIv0rS7+O+/cQ3mDbdGDthrU1Aja8LyKuJ5zOqN hNjuR+/6UCCUG+7C+y3Lxx5nJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6+B3iz ieDldQnsuhH+4KQWkmcjMB8GA1UdIwQYMBaAFObUeJlS3wBvZM6/DzVXKluW5Lc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTYzQS8zN0Q3QTVBRTAz MkYxMUVCQjU4ODJFMEFDNEY5QUUwMi81dFI0bVZMZkFHOWt6cjhQTlZjcVc1Ymt0 emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV0UjRtVkxmQUc5a3pyOFBOVmNxVzVia3R6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTYzQS8zN0Q3QTVBRTAzMkYxMUVCQjU4ODJFMEFDNEY5QUUwMi81dFI0bVZMZkFH OWt6cjhQTlZjcVc1Ymt0emMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg0ygwTZA7AdrNEz9aWQNx9XWBgGim0YQEGNcTGYW8/eOICeifaFlh FwfJh6Rov4JBZBjVL1ExLAmwcuDyH68quPYHUiwv/yjwp9pBln2iWnVtJzl2cXIe UkmtK7BBU0TvoRQua1X6TMdupTjxzeou97/DxOA0CtViiJQjZxybEKgzCUo3CqGb IeL9Nsm80iV8c31XQKvgYIJJ2MrjhzBvvHW0qtOMc3PiNqYKPS75LTWwyC3zRfH7 p6KNp1ML6APu/pPSSzfexP/EIhYO4cXwdNWYdxe01qvdVkIKsE3fRzuFqXke7pdk 5fC2p6HtgpcB6I6Ze0nLV+kAFxLnO3Mw -----END CERTIFICATE-----Generated at Sat Jun 14 19:40:48 2025 by rpki-client