$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft File: C5sr_BxrLAlndq91fTrxRUfkPnI.mft (raw, json) Hash identifier: ukPhXaAwRLWTD8qxEXPVJXfznS+cdyEv4hZIWhDgq6I= Subject key identifier: 0E:7E:33:95:2E:03:54:5D:3E:C9:29:46:B5:0E:A3:2F:72:3F:B8:6F Authority key identifier: 0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72 Certificate issuer: /CN=A918F646/serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72 Certificate serial: 11D6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft Manifest number: 11C1 Signing time: Mon 16 Jun 2025 17:13:22 +0000 Manifest this update: Mon 16 Jun 2025 17:13:22 +0000 Manifest next update: Mon 23 Jun 2025 17:13:22 +0000 Files and hashes: 1: C5sr_BxrLAlndq91fTrxRUfkPnI.crl (hash: ZKx5PpCN6FD8RvD8wUxP1drg2Fo6CucmC3ewDm+w5r8=) 2: 60FCDED2F48F11E89651151FC4F9AE02.roa (hash: TiqURCOWDtFV1lphAi7QXXgszXNq/kYQUGQ1WC3OpiM=) 3: DA0E6EFEE86411ECA54EC03BC4F9AE02.roa (hash: mYkKjSQQ/omFBmjS3V6LuAFr1BpNALu/wvYuWXKZHNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 17:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4566 (0x11d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F646, serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72 Validity Not Before: Jun 16 17:13:22 2025 GMT Not After : Jun 23 17:13:22 2025 GMT Subject: CN=685050b2-0ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:01:8f:12:96:af:4d:2a:e6:2b:b5:6a:0f:56: d5:e0:c1:e3:d4:4a:56:23:34:52:7d:b3:f8:c7:be: 1b:94:5d:78:c9:f1:7e:3f:d6:f7:e1:39:29:dc:98: 3b:e8:83:b1:95:c0:fe:d0:00:f7:70:fe:78:a5:c8: c5:92:3b:4d:27:1a:77:67:2a:53:0b:97:2b:55:db: 22:f8:da:3d:17:fd:6d:11:2d:1a:89:9e:68:bb:1c: 74:ea:41:b3:b6:3a:1b:f1:00:e4:27:2f:a8:6c:84: a7:03:a3:82:08:77:bb:0a:6d:2d:5e:55:79:5a:38: 0e:61:ca:71:78:3e:2b:c7:b8:28:3d:e1:f8:9e:5e: 02:f9:ef:7f:f2:b2:89:b0:88:4e:6b:9e:a3:ad:f4: 71:5a:55:41:01:90:0f:49:eb:fc:1f:9e:d2:81:bc: f3:aa:fa:e9:6e:e5:1d:67:1e:82:b2:df:a8:72:06: f4:3c:b8:ee:4a:ea:2c:66:d0:78:1d:d4:c3:a8:aa: e3:6b:fc:f7:c0:45:08:32:40:19:87:d4:b4:92:41: 08:c1:42:6e:ce:98:dd:dc:65:fc:3e:29:88:20:13: b4:39:05:a3:31:8a:95:c1:97:e6:5c:62:81:14:fa: 16:5b:c7:81:9f:35:c8:67:03:52:b7:0d:37:c4:13: a3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:7E:33:95:2E:03:54:5D:3E:C9:29:46:B5:0E:A3:2F:72:3F:B8:6F X509v3 Authority Key Identifier: keyid:0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:f9:2d:fb:87:01:7f:0c:f7:50:d7:f1:97:95:31:26:83:39: 07:ed:95:39:f6:7e:67:12:11:f3:9b:66:27:fb:d9:67:5a:19: 49:73:19:94:c0:32:37:9b:38:ed:cb:2e:47:a8:69:86:fb:1f: 55:74:ce:a7:44:8e:7e:0e:e3:1e:35:aa:c8:a5:74:fb:a6:d8: 74:82:6d:d4:ea:f5:0c:91:d6:77:dc:2e:81:24:a0:14:cc:0a: a0:a4:6c:2f:e5:88:8d:a7:c5:a4:37:9e:01:6d:ee:08:7f:c5: 70:06:ba:60:a9:0e:75:ae:c9:0c:71:8d:46:48:3a:33:55:19: b9:49:5f:f9:ae:71:b7:93:91:c3:8f:9e:b1:87:2a:60:93:dc: 44:2b:8c:c4:03:94:98:69:25:42:65:5c:51:7b:8a:74:78:bb: d3:a3:ae:4e:4e:8f:4e:d5:b3:dd:f1:43:03:ac:02:8f:2a:d1: c2:0d:6d:12:9c:43:f4:d4:7b:ae:ff:ee:e5:0a:4f:6a:61:b6: 7d:cb:1a:a7:a5:e7:f0:75:a8:8b:81:4e:8e:1f:bc:6f:53:c0: ca:de:e2:04:ae:43:cf:f7:65:42:6a:08:f8:66:42:2e:1b:20: f3:60:23:51:a5:66:c0:cb:66:ea:fb:a0:71:cc:71:ae:89:cf: 93:ac:12:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY2NDYxMTAvBgNVBAUTKDBCOUIyQkZDMUM2QjJDMDk2Nzc2QUY3NTdEM0FGMTQ1 NDdFNDNFNzIwHhcNMjUwNjE2MTcxMzIyWhcNMjUwNjIzMTcxMzIyWjAYMRYwFAYD VQQDEw02ODUwNTBiMi0wZWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1QGPEpavTSrmK7VqD1bV4MHj1EpWIzRSfbP4x74blF14yfF+P9b34Tkp3Jg7 6IOxlcD+0AD3cP54pcjFkjtNJxp3ZypTC5crVdsi+No9F/1tES0aiZ5ouxx06kGz tjob8QDkJy+obISnA6OCCHe7Cm0tXlV5WjgOYcpxeD4rx7goPeH4nl4C+e9/8rKJ sIhOa56jrfRxWlVBAZAPSev8H57SgbzzqvrpbuUdZx6Cst+ocgb0PLjuSuosZtB4 HdTDqKrja/z3wEUIMkAZh9S0kkEIwUJuzpjd3GX8PimIIBO0OQWjMYqVwZfmXGKB FPoWW8eBnzXIZwNStw03xBOjRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5+M5Uu A1RdPskpRrUOoy9yP7hvMB8GA1UdIwQYMBaAFAubK/wcaywJZ3avdX068UVH5D5y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjY0Ni9DRUNFOEM5QUY0 OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9DNXNyX0J4ckxBbG5kcTkxZlRyeFJVZmtQ bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0M1c3JfQnhyTEFsbmRxOTFmVHJ4UlVma1BuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjY0Ni9DRUNFOEM5QUY0OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9DNXNyX0J4ckxB bG5kcTkxZlRyeFJVZmtQbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBs+S37hwF/DPdQ1/GXlTEmgzkH7ZU59n5nEhHzm2Yn+9lnWhlJcxmU wDI3mzjtyy5HqGmG+x9VdM6nRI5+DuMeNarIpXT7pth0gm3U6vUMkdZ33C6BJKAU zAqgpGwv5YiNp8WkN54Bbe4If8VwBrpgqQ51rskMcY1GSDozVRm5SV/5rnG3k5HD j56xhypgk9xEK4zEA5SYaSVCZVxRe4p0eLvTo65OTo9O1bPd8UMDrAKPKtHCDW0S nEP01Huu/+7lCk9qYbZ9yxqnpefwdaiLgU6OH7xvU8DK3uIErkPP92VCagj4ZkIu GyDzYCNRpWbAy2bq+6BxzHGuic+TrBK2 -----END CERTIFICATE-----Generated at Tue Jun 17 04:37:23 2025 by rpki-client