$ rpki-client -vvf rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft File: 5VbchrlOkc-bLilEqF9xaS2glNI.mft (raw, json) Hash identifier: gBYM6foXjb+aO40FYyrIzzKKTkXYqadwlcjfYyWsqQw= Subject key identifier: 8D:45:70:D6:C7:5B:34:51:E6:27:83:6F:72:0B:2B:EA:37:6A:03:72 Authority key identifier: E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2 Certificate issuer: /CN=A919B20D/serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2 Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft Manifest number: 0120 Signing time: Fri 13 Jun 2025 03:44:42 +0000 Manifest this update: Fri 13 Jun 2025 03:44:41 +0000 Manifest next update: Fri 20 Jun 2025 03:44:41 +0000 Files and hashes: 1: 5VbchrlOkc-bLilEqF9xaS2glNI.crl (hash: 6ndzmEAXXrvdVEGnUaTSzCmeSOmDF4YdzMzVVvLMvaY=) 2: 4B3E4A0693DE11EE81D1045FC4F9AE02.roa (hash: KJ0WK2K4oHZZ0XrPq/Vfzr7zXyGgds8k3sXRub+VApA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B20D, serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2 Validity Not Before: Jun 13 03:44:41 2025 GMT Not After : Jun 20 03:44:41 2025 GMT Subject: CN=684b9eaa-db84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:51:f3:3b:1a:d8:f0:7e:8d:cd:18:b6:38:39: ab:9f:3d:31:c9:0a:ad:ce:12:d1:62:e2:ba:d9:bc: fb:3c:78:87:e2:fa:58:9f:e7:34:0f:06:87:8a:74: 12:d8:14:7b:2e:b6:34:54:2d:db:27:f8:a0:e8:89: b3:ac:0f:46:65:5e:98:e5:8d:0e:c7:5d:c1:bc:d4: 38:73:db:44:25:11:82:5e:d9:8d:00:36:e3:f3:a8: 9b:86:cd:51:f6:7a:d3:c2:2b:e7:9b:18:13:dd:d0: a9:27:bf:a9:fd:c5:eb:e5:81:19:24:e2:6f:b1:f1: dd:fd:e0:2c:c9:da:21:cd:b2:c0:59:d7:97:51:0e: b3:bb:8e:b9:a7:4b:a3:31:a7:34:fc:08:8e:3a:b5: c6:88:e7:b9:61:00:07:60:5e:b2:17:2c:f7:42:ed: fa:f8:8a:f7:32:5d:d8:f8:22:3e:4b:cb:ef:4d:4d: 72:18:e7:6d:cc:29:4d:e2:20:ff:ac:24:d1:7e:d8: 71:4d:26:21:aa:af:f1:ca:c2:38:3c:fa:72:09:7b: f7:e2:d3:4a:8a:f9:7a:7d:d4:18:09:30:b9:2e:7c: 2c:09:80:f0:ab:19:8b:79:4f:98:02:30:9c:75:24: 5e:0f:80:ab:2b:ef:20:ba:e0:c5:71:33:65:9a:fd: cc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:45:70:D6:C7:5B:34:51:E6:27:83:6F:72:0B:2B:EA:37:6A:03:72 X509v3 Authority Key Identifier: keyid:E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:36:27:18:2a:67:4f:fc:6b:8c:4e:90:c8:6c:75:ee:c7:98: 5c:08:96:16:b6:51:80:46:8e:fc:2b:07:ba:c7:41:d9:50:f8: 81:36:de:63:67:2c:12:8d:83:4a:db:d5:aa:ba:7a:dd:0f:9a: 00:e6:0e:36:e1:a6:d4:87:a5:f7:39:79:0d:29:88:d7:2a:94: db:57:64:50:65:65:f2:16:cc:1b:22:09:3a:c2:d5:ed:c4:03: a6:40:47:75:a9:ec:f8:bd:a5:8e:a2:8a:84:b9:14:de:40:9e: a8:a2:5a:50:a7:f0:06:1e:05:1f:6b:d9:0c:99:60:a8:73:89: d8:6f:2b:2e:97:a5:c8:ca:f7:d2:55:39:9b:4d:83:03:92:60: 37:b8:43:15:2e:b9:03:57:f7:39:90:73:14:05:af:d4:d2:15: d3:0c:14:dc:ed:72:27:f3:32:1a:b2:73:3c:05:ea:63:58:b9: 8f:90:4b:f7:b6:de:80:8f:35:d4:47:44:3a:64:a2:15:4b:0f: cb:79:65:d8:47:25:33:9d:7a:d2:df:a1:8f:67:d4:86:39:7e: 41:13:55:8c:a3:b8:18:a4:a7:60:23:34:d7:5c:7c:c5:f5:15: 27:a1:ac:d0:63:83:fb:a0:25:95:7d:66:67:b6:f7:11:c2:33: 04:93:5d:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIyMEQxMTAvBgNVBAUTKEU1NTZEQzg2Qjk0RTkxQ0Y5QjJFMjk0NEE4NUY3MTY5 MkRBMDk0RDIwHhcNMjUwNjEzMDM0NDQxWhcNMjUwNjIwMDM0NDQxWjAYMRYwFAYD VQQDEw02ODRiOWVhYS1kYjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoVHzOxrY8H6NzRi2ODmrnz0xyQqtzhLRYuK62bz7PHiH4vpYn+c0DwaHinQS 2BR7LrY0VC3bJ/ig6ImzrA9GZV6Y5Y0Ox13BvNQ4c9tEJRGCXtmNADbj86ibhs1R 9nrTwivnmxgT3dCpJ7+p/cXr5YEZJOJvsfHd/eAsydohzbLAWdeXUQ6zu465p0uj Mac0/AiOOrXGiOe5YQAHYF6yFyz3Qu36+Ir3Ml3Y+CI+S8vvTU1yGOdtzClN4iD/ rCTRfthxTSYhqq/xysI4PPpyCXv34tNKivl6fdQYCTC5LnwsCYDwqxmLeU+YAjCc dSReD4CrK+8guuDFcTNlmv3M7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1FcNbH WzRR5ieDb3ILK+o3agNyMB8GA1UdIwQYMBaAFOVW3Ia5TpHPmy4pRKhfcWktoJTS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjIwRC82MUFDQkY0Njkz QTkxMUVFOTE0OUUzNTRDNEY5QUUwMi81VmJjaHJsT2tjLWJMaWxFcUY5eGFTMmds TkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVWYmNocmxPa2MtYkxpbEVxRjl4YVMyZ2xOSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjIwRC82MUFDQkY0NjkzQTkxMUVFOTE0OUUzNTRDNEY5QUUwMi81VmJjaHJsT2tj LWJMaWxFcUY5eGFTMmdsTkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbNicYKmdP/GuMTpDIbHXux5hcCJYWtlGARo78Kwe6x0HZUPiBNt5j ZywSjYNK29WqunrdD5oA5g424abUh6X3OXkNKYjXKpTbV2RQZWXyFswbIgk6wtXt xAOmQEd1qez4vaWOooqEuRTeQJ6oolpQp/AGHgUfa9kMmWCoc4nYbysul6XIyvfS VTmbTYMDkmA3uEMVLrkDV/c5kHMUBa/U0hXTDBTc7XIn8zIasnM8BepjWLmPkEv3 tt6AjzXUR0Q6ZKIVSw/LeWXYRyUznXrS36GPZ9SGOX5BE1WMo7gYpKdgIzTXXHzF 9RUnoazQY4P7oCWVfWZntvcRwjMEk10G -----END CERTIFICATE-----Generated at Sat Jun 14 19:21:51 2025 by rpki-client