$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft File: 5esYDNbcUWxm01KwR7npxaUCcOM.mft (raw, json) Hash identifier: eyZ1gCQt8ZxaA+JmnIa7ateXDPOHHLf4u+jhpDRNm8k= Subject key identifier: E5:35:B8:B6:EE:D3:89:D9:2A:4B:A9:3E:A1:40:F1:32:2B:33:30:89 Authority key identifier: E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3 Certificate issuer: /CN=A91ABFD9/serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3 Certificate serial: 08C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft Manifest number: 08AC Signing time: Sat 14 Jun 2025 20:18:56 +0000 Manifest this update: Sat 14 Jun 2025 20:18:55 +0000 Manifest next update: Sat 21 Jun 2025 20:18:55 +0000 Files and hashes: 1: 5esYDNbcUWxm01KwR7npxaUCcOM.crl (hash: JdZnWXcp3zOukXaN1685fHEf5vMD4jLzlq08ym7qzvM=) 2: E2E21364C4F811EAB8D31113C4F9AE02.roa (hash: KT6K45U/vV1zQkhhfiaxr9a9XeTKLIwG0eEDcyR3ERI=) 3: F1A54AC47A5611EB876D281FC4F9AE02.roa (hash: LbbFjEbhHg5fzKZNW2jokQ6UuaIS/rDPKgFU2q0pJeg=) 4: 36945EC2232711EBA0F14F17C4F9AE02.roa (hash: Gzcr6RaAc7WjlspRH4slQcyVh4i/nmyVkR/RXd4O0KM=) 5: 6AE50E1C21E011EBBF36CD21C4F9AE02.roa (hash: Lg2iSZUiBgCc3+l3q9JExUq+jxWe1fvszct9oy4Ys3k=) 6: E22ECDEAC4F811EAB8D31113C4F9AE02.roa (hash: tlDd7aRrzNeu6uslbfPluCcOk663EDpRsH8KL9nqlD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:18:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2248 (0x8c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABFD9, serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3 Validity Not Before: Jun 14 20:18:55 2025 GMT Not After : Jun 21 20:18:55 2025 GMT Subject: CN=684dd930-3bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:66:8d:10:af:91:08:3b:fc:f9:4a:fe:53:36: d8:de:52:5f:61:e1:aa:69:a7:4c:9e:85:22:f4:97: f6:54:55:a6:c2:47:f4:3a:28:ab:59:e7:a4:13:f4: 72:20:87:a3:83:01:a5:49:ae:82:c1:14:63:ae:f7: d0:f3:5e:b3:a4:15:11:b2:a4:a5:c1:ca:f1:7d:0e: 06:98:7a:0b:da:c2:f3:51:44:68:ec:2d:33:a4:09: 18:8a:08:69:3b:eb:a9:00:99:7f:dc:6a:c3:df:c4: 63:88:35:a8:bf:d8:88:7a:27:17:ac:c8:30:93:bd: a6:18:ae:16:93:de:5e:e5:5f:c4:cb:76:71:96:d0: 1c:67:d2:99:8d:e7:06:e1:4f:1e:a4:9a:e7:fa:a7: a9:d7:1f:2d:cc:19:b4:52:43:26:84:f6:cb:aa:1a: 37:b4:8a:15:e3:97:54:b7:d4:4b:62:3d:cc:76:66: dd:34:7e:41:de:d7:68:61:9d:a5:9a:df:cb:33:f3: e2:ad:63:f1:ec:82:b7:0d:e1:9c:42:85:5e:74:8d: 89:0b:11:87:ec:5d:85:af:f8:cb:80:33:b3:62:e5: 3a:96:eb:4f:04:e6:c6:e1:0d:68:72:0c:4e:f3:32: 88:b2:8e:3c:95:8b:42:2e:9a:5b:66:76:70:f9:39: f0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:35:B8:B6:EE:D3:89:D9:2A:4B:A9:3E:A1:40:F1:32:2B:33:30:89 X509v3 Authority Key Identifier: keyid:E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:86:64:de:07:b0:12:09:dd:e2:cb:9b:86:d6:d9:20:28:e3: 12:db:87:75:e8:11:25:59:0f:76:bf:fe:8a:e7:ea:ec:ba:b7: 50:0e:14:1d:5f:05:ca:4a:40:02:5b:f3:14:8c:a8:e1:98:76: fd:27:3e:38:20:5b:22:f5:73:9b:07:27:ce:70:f2:23:58:d9: b8:58:f3:db:43:7c:3b:d9:da:00:bd:e3:a8:c8:00:bb:0e:cf: c7:15:be:65:36:96:d1:f1:81:f8:60:ea:36:62:ca:a7:e6:91: 21:94:7d:a0:dc:83:cb:d3:72:fe:b5:e2:c2:4c:3c:dd:5e:92: 40:37:b2:bb:48:af:fe:f9:da:56:40:d5:97:40:3b:45:60:ae: 21:28:62:e9:c0:a3:89:2d:0f:46:75:4a:c5:01:bc:cf:44:4a: 8b:d6:a0:2f:08:60:5d:1c:b6:2f:10:58:5b:f2:79:b7:15:bf: 0a:b4:bc:3c:3e:6e:79:31:a4:a9:17:a4:2d:81:83:d7:e4:0a: f7:14:c1:17:66:01:79:d4:3b:97:8d:d3:f8:d8:cb:8d:1f:28: 32:a1:f0:b2:a2:e5:f6:55:8e:90:5a:f2:69:e2:aa:31:69:11: 74:c6:71:93:92:e4:d0:94:81:bb:5f:bc:8f:49:88:61:d7:67: 7a:e9:97:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJGRDkxMTAvBgNVBAUTKEU1RUIxODBDRDZEQzUxNkM2NkQzNTJCMDQ3QjlFOUM1 QTUwMjcwRTMwHhcNMjUwNjE0MjAxODU1WhcNMjUwNjIxMjAxODU1WjAYMRYwFAYD VQQDEw02ODRkZDkzMC0zYmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2aNEK+RCDv8+Ur+UzbY3lJfYeGqaadMnoUi9Jf2VFWmwkf0OiirWeekE/Ry IIejgwGlSa6CwRRjrvfQ816zpBURsqSlwcrxfQ4GmHoL2sLzUURo7C0zpAkYighp O+upAJl/3GrD38RjiDWov9iIeicXrMgwk72mGK4Wk95e5V/Ey3ZxltAcZ9KZjecG 4U8epJrn+qep1x8tzBm0UkMmhPbLqho3tIoV45dUt9RLYj3MdmbdNH5B3tdoYZ2l mt/LM/PirWPx7IK3DeGcQoVedI2JCxGH7F2Fr/jLgDOzYuU6lutPBObG4Q1ocgxO 8zKIso48lYtCLppbZnZw+Tnw9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOU1uLbu 04nZKkupPqFA8TIrMzCJMB8GA1UdIwQYMBaAFOXrGAzW3FFsZtNSsEe56cWlAnDj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkZEOS80QUU4MDQxRUI5 RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VXeG0wMUt3UjducHhhVUNj T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVlc1lETmJjVVd4bTAxS3dSN25weGFVQ2NPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkZEOS80QUU4MDQxRUI5RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VX eG0wMUt3UjducHhhVUNjT00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLhmTeB7ASCd3iy5uG1tkgKOMS24d16BElWQ92v/6K5+rsurdQDhQd XwXKSkACW/MUjKjhmHb9Jz44IFsi9XObByfOcPIjWNm4WPPbQ3w72doAveOoyAC7 Ds/HFb5lNpbR8YH4YOo2Ysqn5pEhlH2g3IPL03L+teLCTDzdXpJAN7K7SK/++dpW QNWXQDtFYK4hKGLpwKOJLQ9GdUrFAbzPREqL1qAvCGBdHLYvEFhb8nm3Fb8KtLw8 Pm55MaSpF6QtgYPX5Ar3FMEXZgF51DuXjdP42MuNHygyofCyouX2VY6QWvJp4qox aRF0xnGTkuTQlIG7X7yPSYhh12d66ZeV -----END CERTIFICATE-----Generated at Sun Jun 15 05:08:36 2025 by rpki-client