$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft File: t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft (raw, json) Hash identifier: zkNMFghmRuc0fkmmTfD2gI2RAmlj/qPvMh+6NcxpHWU= Subject key identifier: 5E:D1:08:40:4D:C7:25:12:A0:65:E1:9E:34:A0:B0:E7:20:6F:19:AA Authority key identifier: B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04 Certificate issuer: /CN=A91A9197/serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504 Certificate serial: 017F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft Manifest number: 017C Signing time: Fri 13 Jun 2025 02:43:15 +0000 Manifest this update: Fri 13 Jun 2025 02:43:14 +0000 Manifest next update: Fri 20 Jun 2025 02:43:14 +0000 Files and hashes: 1: t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl (hash: eHZ2zVRnyCM1RG6XifksO+9eglNIzwxa52gnO6JYSnk=) 2: F4260C1C68DC11EE842D825BC4F9AE02.roa (hash: ZHAMruYyeptNNpeohfIoYoif7sb87BSzSS5PG7gezGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:43:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9197, serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504 Validity Not Before: Jun 13 02:43:14 2025 GMT Not After : Jun 20 02:43:14 2025 GMT Subject: CN=684b9043-5edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:34:f1:2f:a5:c0:b9:bb:ce:04:67:38:1b:07: 94:8d:c2:6f:80:ba:63:a6:21:0a:e0:fe:c3:3c:2b: c1:d6:c1:da:c1:da:ee:7d:7b:b6:3f:d7:a8:d4:52: 43:17:61:ea:65:78:16:7f:c1:d0:44:f8:25:3d:82: 24:38:a4:39:a7:3c:09:9e:5c:a9:86:24:02:c8:61: 86:c2:5d:51:a8:e2:71:d7:02:e6:fb:c9:1f:98:2a: 49:fa:59:99:7d:55:8d:ec:0a:9c:54:46:1a:c0:a7: 1b:7f:12:36:6f:f1:c3:f5:02:e5:01:83:13:32:32: c9:1b:d1:8a:c1:40:9d:2e:73:17:c3:b2:d1:51:2b: 01:73:00:0c:32:8f:f9:fd:37:6c:a2:a8:11:0d:ae: 6b:e8:60:b5:cc:16:42:e5:37:49:4c:18:9d:6f:c0: e6:94:1c:fe:11:d6:6b:9b:34:c9:4c:ce:83:a4:4b: 17:95:f0:9d:26:a5:d6:17:c8:1d:b3:c1:81:57:66: 8f:71:bb:a2:58:08:ae:cc:67:94:4c:c3:ed:71:a8: ae:1d:41:54:ec:e4:85:b7:11:9a:2b:13:82:32:03: ba:2a:02:cb:3a:4a:c3:c6:e4:e5:36:89:76:fe:8c: 20:32:4d:5b:82:14:b8:b1:c7:b7:bb:bd:9c:8a:be: e9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D1:08:40:4D:C7:25:12:A0:65:E1:9E:34:A0:B0:E7:20:6F:19:AA X509v3 Authority Key Identifier: keyid:B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:1a:29:d0:34:bd:a9:04:95:ee:a4:c5:4a:fe:e4:4b:6d:a6: f6:a9:06:70:fb:00:ed:46:cf:58:d2:08:1d:ae:55:66:80:99: 72:76:ba:72:39:9c:18:c2:eb:bb:c7:ce:a2:94:e3:26:4a:d1: 66:d8:1a:16:cc:ce:b4:f5:96:29:63:0f:e7:72:75:4b:e0:d5: 0a:a2:31:25:67:bc:b4:2a:e1:43:86:b6:6e:b6:bd:60:d0:e4: 7d:d4:52:fa:6b:a1:b5:a6:87:fa:67:11:bb:43:41:55:cb:87: aa:27:6a:86:65:4e:bb:06:1e:e8:f5:fb:5f:68:97:e7:d0:a5: 62:16:78:64:94:a3:5a:df:bd:1f:48:0f:35:f8:9d:98:aa:c4: 3d:76:da:51:21:52:a7:26:99:9a:50:63:6e:fb:a4:ae:2a:f2: f0:ad:ca:b3:2c:0e:02:52:ee:20:8c:9e:c6:f0:9b:7e:e4:54: fc:f1:4e:69:a9:92:39:92:3d:28:70:4f:6f:9b:af:1f:6a:68: a3:87:c0:7f:c5:5d:1e:20:7e:38:2b:46:59:3b:41:7c:27:22: bc:24:11:e2:2e:82:a8:88:94:3e:d1:49:23:5f:f2:0b:d1:2e: a3:1f:5a:95:7a:6a:bc:c0:73:0c:bf:70:88:f1:40:f8:ae:4f: 99:00:a1:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxOTcxMTAvBgNVBAUTKEI3RkU2QTQyNERCNTY1MjYxQjQ3M0E3MTIzMUQ1OUUy MThEQzQ1MDQwHhcNMjUwNjEzMDI0MzE0WhcNMjUwNjIwMDI0MzE0WjAYMRYwFAYD VQQDEw02ODRiOTA0My01ZWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5TTxL6XAubvOBGc4GweUjcJvgLpjpiEK4P7DPCvB1sHawdrufXu2P9eo1FJD F2HqZXgWf8HQRPglPYIkOKQ5pzwJnlyphiQCyGGGwl1RqOJx1wLm+8kfmCpJ+lmZ fVWN7AqcVEYawKcbfxI2b/HD9QLlAYMTMjLJG9GKwUCdLnMXw7LRUSsBcwAMMo/5 /TdsoqgRDa5r6GC1zBZC5TdJTBidb8DmlBz+EdZrmzTJTM6DpEsXlfCdJqXWF8gd s8GBV2aPcbuiWAiuzGeUTMPtcaiuHUFU7OSFtxGaKxOCMgO6KgLLOkrDxuTlNol2 /owgMk1bghS4sce3u72cir7p8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7RCEBN xyUSoGXhnjSgsOcgbxmqMB8GA1UdIwQYMBaAFLf+akJNtWUmG0c6cSMdWeIY3EUE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTE5Ny80RjNDNzk4QTA2 OUQxMUVFQjg3OThEMTRDNEY5QUUwMi90XzVxUWsyMVpTWWJSenB4SXgxWjRoamNS UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RfNXFRazIxWlNZYlJ6cHhJeDFaNGhqY1JRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTE5Ny80RjNDNzk4QTA2OUQxMUVFQjg3OThEMTRDNEY5QUUwMi90XzVxUWsyMVpT WWJSenB4SXgxWjRoamNSUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKGinQNL2pBJXupMVK/uRLbab2qQZw+wDtRs9Y0ggdrlVmgJlydrpy OZwYwuu7x86ilOMmStFm2BoWzM609ZYpYw/ncnVL4NUKojElZ7y0KuFDhrZutr1g 0OR91FL6a6G1pof6ZxG7Q0FVy4eqJ2qGZU67Bh7o9ftfaJfn0KViFnhklKNa370f SA81+J2YqsQ9dtpRIVKnJpmaUGNu+6SuKvLwrcqzLA4CUu4gjJ7G8Jt+5FT88U5p qZI5kj0ocE9vm68famijh8B/xV0eIH44K0ZZO0F8JyK8JBHiLoKoiJQ+0UkjX/IL 0S6jH1qVemq8wHMMv3CI8UD4rk+ZAKFY -----END CERTIFICATE-----Generated at Sat Jun 14 19:35:17 2025 by rpki-client