$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft File: 5fjJ4D7R71BndlYU2mtRJq1vyz4.mft (raw, json) Hash identifier: 29qhWWFIFOWV9YGVBPn/CbsddYYpsuo1Nmw5lO6bD2A= Subject key identifier: 45:C1:A8:77:49:92:E0:C6:F4:D3:CF:92:5B:FD:1C:1A:E8:2C:D4:4F Authority key identifier: E5:F8:C9:E0:3E:D1:EF:50:67:76:56:14:DA:6B:51:26:AD:6F:CB:3E Certificate issuer: /CN=A91A6548/serialNumber=E5F8C9E03ED1EF5067765614DA6B5126AD6FCB3E Certificate serial: 050D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5fjJ4D7R71BndlYU2mtRJq1vyz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft Manifest number: 0509 Signing time: Sat 14 Jun 2025 23:22:32 +0000 Manifest this update: Sat 14 Jun 2025 23:22:31 +0000 Manifest next update: Sat 21 Jun 2025 23:22:31 +0000 Files and hashes: 1: 5fjJ4D7R71BndlYU2mtRJq1vyz4.crl (hash: C40U4RPYhPDCCzSmk3vHJcLAbNAvNCVJa3emksfiwh8=) 2: E6EC55EE0D7E11EC94917272C4F9AE02.roa (hash: ZFPLjWKhXylD4Z8vt5rlOjVNLoBd2B0qS7n8g9uJPA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.crl rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5fjJ4D7R71BndlYU2mtRJq1vyz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1293 (0x50d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6548, serialNumber=E5F8C9E03ED1EF5067765614DA6B5126AD6FCB3E Validity Not Before: Jun 14 23:22:31 2025 GMT Not After : Jun 21 23:22:31 2025 GMT Subject: CN=684e0438-9927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8e:22:79:ad:6c:3f:73:a8:32:c7:0d:1f:09: 30:9b:0f:92:e1:d8:00:c2:26:92:9a:59:d5:c5:0c: bf:74:cc:f5:e7:8d:41:9e:72:a9:bb:c4:79:40:ab: 7f:b8:aa:57:fb:70:5f:86:c7:73:6a:d5:07:af:1f: d1:7a:5c:be:40:e6:7a:20:da:a5:8d:5d:96:25:82: 95:70:50:af:1f:98:60:cc:8e:80:57:37:62:bf:98: 95:8e:a4:22:f0:42:c4:aa:14:a2:d9:2b:45:0c:8e: f8:9b:ca:e1:b7:f5:11:48:d3:1b:11:03:d2:e3:59: 10:e8:43:15:e1:21:f1:eb:83:89:66:fd:5f:7f:9e: 62:91:79:34:84:d8:b3:39:6a:e5:61:91:26:fe:dd: 17:d9:82:f4:5e:79:bd:53:04:71:41:25:e2:3e:b4: 55:2b:0c:52:1f:33:37:9f:d9:7c:35:35:15:fc:76: c9:ac:1b:56:c1:d2:e5:41:ea:76:9c:99:63:92:08: b7:8d:10:5b:c2:b7:52:bc:ce:62:b3:c9:0d:c9:9c: c2:b1:56:3e:49:78:bf:61:67:18:2a:bf:82:95:34: 44:a4:a7:41:61:fc:ef:98:d3:b6:04:85:6b:48:ca: 90:2b:76:ad:8d:85:87:a2:2c:c9:c3:51:2a:38:c7: 3e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C1:A8:77:49:92:E0:C6:F4:D3:CF:92:5B:FD:1C:1A:E8:2C:D4:4F X509v3 Authority Key Identifier: keyid:E5:F8:C9:E0:3E:D1:EF:50:67:76:56:14:DA:6B:51:26:AD:6F:CB:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5fjJ4D7R71BndlYU2mtRJq1vyz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:3f:5b:2d:a8:10:e1:cb:96:41:50:05:61:fe:5f:92:69:e7: 23:60:a1:da:5d:3c:2c:1b:38:ed:2e:33:9d:19:fa:0d:f6:d1: 0e:44:4f:dc:f5:d2:c5:71:e1:f2:9d:90:1f:32:f7:7a:fa:70: 6f:fc:a1:a7:0f:2e:e7:e2:d2:c2:93:12:58:b1:7a:c6:2a:f9: ce:d3:f4:49:3f:6e:e2:e5:01:2a:e8:d7:02:6a:cf:b7:9c:68: d2:35:ba:f5:9c:a9:0f:a9:67:25:a3:78:82:d0:89:11:e6:03: 07:93:ab:94:3c:e8:13:35:b8:a6:c8:29:7a:e7:70:e8:64:f6: 03:14:36:9b:41:46:13:f4:4a:40:19:0d:79:af:92:98:7c:4c: 79:b7:39:42:ef:3e:7e:42:5f:a1:a2:8a:f8:b5:be:9b:23:61: b4:22:66:68:f5:0a:31:32:d6:bb:84:c5:eb:c6:90:be:8b:cb: 05:85:11:b9:55:be:b6:d0:5b:71:a7:76:95:93:d9:da:b8:b9: c5:44:78:f4:0c:bd:6e:39:1e:e3:89:79:dd:c7:5d:97:36:9c: a0:4d:f5:b6:e6:71:34:d3:53:7f:8e:6e:d6:c7:39:fa:66:6a: 05:ab:be:70:fb:e0:5e:14:15:f8:03:ec:17:82:33:96:e5:13: b6:91:9c:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY1NDgxMTAvBgNVBAUTKEU1RjhDOUUwM0VEMUVGNTA2Nzc2NTYxNERBNkI1MTI2 QUQ2RkNCM0UwHhcNMjUwNjE0MjMyMjMxWhcNMjUwNjIxMjMyMjMxWjAYMRYwFAYD VQQDEw02ODRlMDQzOC05OTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxo4iea1sP3OoMscNHwkwmw+S4dgAwiaSmlnVxQy/dMz1541BnnKpu8R5QKt/ uKpX+3BfhsdzatUHrx/Rely+QOZ6INqljV2WJYKVcFCvH5hgzI6AVzdiv5iVjqQi 8ELEqhSi2StFDI74m8rht/URSNMbEQPS41kQ6EMV4SHx64OJZv1ff55ikXk0hNiz OWrlYZEm/t0X2YL0Xnm9UwRxQSXiPrRVKwxSHzM3n9l8NTUV/HbJrBtWwdLlQep2 nJljkgi3jRBbwrdSvM5is8kNyZzCsVY+SXi/YWcYKr+ClTREpKdBYfzvmNO2BIVr SMqQK3atjYWHoizJw1EqOMc+cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXBqHdJ kuDG9NPPklv9HBroLNRPMB8GA1UdIwQYMBaAFOX4yeA+0e9QZ3ZWFNprUSatb8s+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjU0OC83RENGMjQ4QTBE N0MxMUVDQkFCREQ1NkRDNEY5QUUwMi81ZmpKNEQ3UjcxQm5kbFlVMm10UkpxMXZ5 ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVmako0RDdSNzFCbmRsWVUybXRSSnExdnl6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjU0OC83RENGMjQ4QTBEN0MxMUVDQkFCREQ1NkRDNEY5QUUwMi81ZmpKNEQ3Ujcx Qm5kbFlVMm10UkpxMXZ5ejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbP1stqBDhy5ZBUAVh/l+SaecjYKHaXTwsGzjtLjOdGfoN9tEORE/c 9dLFceHynZAfMvd6+nBv/KGnDy7n4tLCkxJYsXrGKvnO0/RJP27i5QEq6NcCas+3 nGjSNbr1nKkPqWclo3iC0IkR5gMHk6uUPOgTNbimyCl653DoZPYDFDabQUYT9EpA GQ15r5KYfEx5tzlC7z5+Ql+hoor4tb6bI2G0ImZo9QoxMta7hMXrxpC+i8sFhRG5 Vb620Ftxp3aVk9nauLnFRHj0DL1uOR7jiXndx12XNpygTfW25nE001N/jm7Wxzn6 ZmoFq75w++BeFBX4A+wXgjOW5RO2kZwW -----END CERTIFICATE-----Generated at Sun Jun 15 08:20:27 2025 by rpki-client