$ rpki-client -vvf rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft File: 5IPa-2wrg71IK24pCn5AU1W1Ltk.mft (raw, json) Hash identifier: FuZKdKYiqegoQmRSu0wNAR/3YxviuZIJOn6lT01dNRI= Subject key identifier: FA:90:AC:C8:78:CC:DC:2E:60:6D:7E:82:7D:DF:48:37:2F:69:81:50 Authority key identifier: E4:83:DA:FB:6C:2B:83:BD:48:2B:6E:29:0A:7E:40:53:55:B5:2E:D9 Certificate issuer: /CN=A919136B/serialNumber=E483DAFB6C2B83BD482B6E290A7E405355B52ED9 Certificate serial: 1065 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft Manifest number: 1059 Signing time: Fri 20 Jun 2025 17:23:27 +0000 Manifest this update: Fri 20 Jun 2025 17:23:27 +0000 Manifest next update: Fri 27 Jun 2025 17:23:27 +0000 Files and hashes: 1: 5IPa-2wrg71IK24pCn5AU1W1Ltk.crl (hash: pGyKuZ2+9G9BIIOuyFrRCzpfE2jovBU2usBgLHwl7uA=) 2: 99B6039C215311EA86E1E020C4F9AE02.roa (hash: GBYQ/lKi3z5roPUPwktfDVMLitw965pomXZAG5jfako=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.crl rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 17:23:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4197 (0x1065) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919136B, serialNumber=E483DAFB6C2B83BD482B6E290A7E405355B52ED9 Validity Not Before: Jun 20 17:23:27 2025 GMT Not After : Jun 27 17:23:27 2025 GMT Subject: CN=6855990f-2627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:80:3f:54:c2:4b:ac:58:be:7a:72:66:cf:3e: d1:fa:f4:82:3b:2d:10:01:01:5f:f7:bb:f7:33:af: 3d:e9:41:c5:e1:ba:fb:13:97:95:35:c2:3e:09:e0: 27:a6:6e:96:01:1c:39:41:31:ba:cb:d8:ef:3b:db: 81:3c:1c:71:ec:b9:ef:b0:ac:2b:d4:ac:3c:e0:19: 3b:97:d7:a5:fe:8c:4a:95:b7:42:b4:ee:c7:c9:43: 7f:ac:24:8b:62:62:69:a9:44:74:3a:c4:94:7b:cb: f3:c0:7c:9b:86:72:eb:8f:8f:13:f7:2f:41:5e:65: f1:59:21:26:30:47:c0:1a:16:57:ed:22:ff:4f:fb: 39:06:f7:86:1e:2e:14:5d:1a:64:73:85:3a:58:c2: 6c:b4:ba:a0:28:23:c2:9f:ce:ba:9e:e8:73:49:12: 4f:68:aa:da:bb:85:81:66:98:a7:f2:88:6f:d6:7e: e5:3f:19:b8:6f:18:f6:d8:fe:25:34:9f:35:e8:0c: d2:28:8d:a1:00:42:36:62:31:37:49:38:76:84:a4: 49:e8:5d:2d:6e:f0:9f:3f:07:91:80:e0:4e:08:8f: 57:26:38:e5:a9:58:af:af:65:3f:9c:cb:cc:7a:8f: 7c:d8:75:a2:b3:c3:51:87:6d:5b:2e:7c:59:11:ec: d3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:90:AC:C8:78:CC:DC:2E:60:6D:7E:82:7D:DF:48:37:2F:69:81:50 X509v3 Authority Key Identifier: keyid:E4:83:DA:FB:6C:2B:83:BD:48:2B:6E:29:0A:7E:40:53:55:B5:2E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:d5:0e:45:26:90:e0:24:db:07:55:5c:42:6a:09:70:f7:1c: 13:58:e4:0b:15:ed:46:ed:6d:e2:65:d1:e4:f9:a1:1b:3d:ec: 6a:dc:e0:52:9c:fa:0c:9f:28:c8:69:1d:08:be:68:22:4a:f1: f9:92:71:33:d3:0b:8d:6d:a8:3b:54:d6:72:27:2f:9c:67:e3: ad:cc:c3:66:32:4f:48:a8:b5:3f:57:a9:df:8c:71:82:8d:53: d0:fc:52:7f:8f:01:78:c0:46:e1:76:f8:95:93:71:6a:ff:39: 9d:37:a0:39:d1:f8:02:3e:c7:ec:6e:11:11:34:a8:10:9a:fe: 09:66:ad:c6:c3:09:0e:41:67:a9:9b:41:cc:1f:7d:88:36:f0: c8:2b:56:aa:81:c8:cd:70:d8:af:fe:9a:58:3d:0e:03:d0:ef: 8e:ab:34:74:a8:13:bd:1f:99:72:36:05:dc:02:b3:a9:a4:29: 07:84:dd:03:2b:72:ca:c2:8a:d4:08:b9:61:51:0d:c4:4f:88: c5:de:5d:0e:f7:af:81:8a:17:fc:27:11:63:8d:86:d2:4f:ea: 3c:90:e4:21:0c:c5:27:65:a1:22:e5:9a:fa:9e:f1:ca:9e:28: ab:f2:99:5f:8a:bf:eb:83:cc:5c:d0:e7:ed:91:9c:39:49:e3: 23:7b:03:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEzNkIxMTAvBgNVBAUTKEU0ODNEQUZCNkMyQjgzQkQ0ODJCNkUyOTBBN0U0MDUz NTVCNTJFRDkwHhcNMjUwNjIwMTcyMzI3WhcNMjUwNjI3MTcyMzI3WjAYMRYwFAYD VQQDEw02ODU1OTkwZi0yNjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl4A/VMJLrFi+enJmzz7R+vSCOy0QAQFf97v3M6896UHF4br7E5eVNcI+CeAn pm6WARw5QTG6y9jvO9uBPBxx7LnvsKwr1Kw84Bk7l9el/oxKlbdCtO7HyUN/rCSL YmJpqUR0OsSUe8vzwHybhnLrj48T9y9BXmXxWSEmMEfAGhZX7SL/T/s5BveGHi4U XRpkc4U6WMJstLqgKCPCn866nuhzSRJPaKrau4WBZpin8ohv1n7lPxm4bxj22P4l NJ816AzSKI2hAEI2YjE3STh2hKRJ6F0tbvCfPweRgOBOCI9XJjjlqVivr2U/nMvM eo982HWis8NRh21bLnxZEezT2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqQrMh4 zNwuYG1+gn3fSDcvaYFQMB8GA1UdIwQYMBaAFOSD2vtsK4O9SCtuKQp+QFNVtS7Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTM2Qi9GN0M4N0U4NDNB N0IxMUU5QUNCQzZBMThDNEY5QUUwMi81SVBhLTJ3cmc3MUlLMjRwQ241QVUxVzFM dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVJUGEtMndyZzcxSUsyNHBDbjVBVTFXMUx0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTM2Qi9GN0M4N0U4NDNBN0IxMUU5QUNCQzZBMThDNEY5QUUwMi81SVBhLTJ3cmc3 MUlLMjRwQ241QVUxVzFMdGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ1Q5FJpDgJNsHVVxCaglw9xwTWOQLFe1G7W3iZdHk+aEbPexq3OBS nPoMnyjIaR0IvmgiSvH5knEz0wuNbag7VNZyJy+cZ+OtzMNmMk9IqLU/V6nfjHGC jVPQ/FJ/jwF4wEbhdviVk3Fq/zmdN6A50fgCPsfsbhERNKgQmv4JZq3GwwkOQWep m0HMH32INvDIK1aqgcjNcNiv/ppYPQ4D0O+OqzR0qBO9H5lyNgXcArOppCkHhN0D K3LKworUCLlhUQ3ET4jF3l0O96+Bihf8JxFjjYbST+o8kOQhDMUnZaEi5Zr6nvHK niir8plfir/rg8xc0OftkZw5SeMjewP3 -----END CERTIFICATE-----Generated at Sat Jun 21 05:16:49 2025 by rpki-client