$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.mft File: 5EZZ6m_c00PGwef_0BSlsHgYlos.mft (raw, json) Hash identifier: SFAecq+ivXjvGGD1zREMvG062jjrJcF2SPO5EA/uJw4= Subject key identifier: FE:40:B6:26:13:08:16:C3:F9:36:F9:8C:CE:24:C9:B3:18:7F:11:A4 Authority key identifier: E4:46:59:EA:6F:DC:D3:43:C6:C1:E7:FF:D0:14:A5:B0:78:18:96:8B Certificate issuer: /CN=A91B3062/serialNumber=E44659EA6FDCD343C6C1E7FFD014A5B07818968B Certificate serial: 06C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EZZ6m_c00PGwef_0BSlsHgYlos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.mft Manifest number: 06BD Signing time: Mon 16 Jun 2025 21:49:21 +0000 Manifest this update: Mon 16 Jun 2025 21:49:21 +0000 Manifest next update: Mon 23 Jun 2025 21:49:21 +0000 Files and hashes: 1: 5EZZ6m_c00PGwef_0BSlsHgYlos.crl (hash: JlxFToPpz903ZDcIdljkBwn4g5DmocJQATT7Zp/a/HQ=) 2: C8FB0DB8616D11EB928F0250C4F9AE02.roa (hash: wvBpCoANMp6HM7/0VPGZvZaF4FC0qm23TRsKibzPLZk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.crl rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EZZ6m_c00PGwef_0BSlsHgYlos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 21:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1730 (0x6c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3062, serialNumber=E44659EA6FDCD343C6C1E7FFD014A5B07818968B Validity Not Before: Jun 16 21:49:21 2025 GMT Not After : Jun 23 21:49:21 2025 GMT Subject: CN=68509161-bebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b6:58:7b:7f:2b:70:a5:56:42:e2:84:4d:5c: cd:ea:81:7f:ba:55:4a:fd:74:88:28:12:ba:14:71: 86:8f:66:70:8b:25:89:dd:26:4a:3c:9d:51:55:4f: 99:28:96:bf:5a:39:0f:b3:9a:7e:36:51:64:e3:d5: 4a:6c:3c:68:09:7d:f0:b0:3d:37:9c:9e:64:91:32: 3b:35:8e:ea:41:86:69:6c:a0:43:39:fa:95:f4:e6: f0:fb:c9:f5:19:62:78:7e:ce:0b:50:d6:5b:01:8f: ec:6e:8b:de:be:42:ac:1d:fb:e8:82:f4:7d:31:9d: bb:ec:a2:de:6b:2c:be:88:77:3f:fd:cc:5b:ed:a9: a4:2f:5d:8f:28:69:f2:3d:1f:16:2d:ad:e5:7b:2a: 4a:e5:51:5e:36:55:9d:32:59:6d:da:55:72:a0:2e: 44:06:19:a3:f6:7c:c1:4a:84:5f:58:4e:ee:21:82: 13:d6:b1:fa:5f:e9:bc:ef:93:f9:e5:7d:70:b1:89: 87:8b:97:cd:7e:e7:4c:ac:f5:bd:f4:43:48:74:db: 04:6f:5c:05:d7:bb:ff:8c:85:a5:5e:59:d7:ba:a2: 8e:ef:ce:88:8a:08:69:75:18:7a:cf:64:10:ed:19: 99:9d:49:2e:6a:e0:3d:1e:b4:ea:15:94:df:c5:e3: 97:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:40:B6:26:13:08:16:C3:F9:36:F9:8C:CE:24:C9:B3:18:7F:11:A4 X509v3 Authority Key Identifier: keyid:E4:46:59:EA:6F:DC:D3:43:C6:C1:E7:FF:D0:14:A5:B0:78:18:96:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EZZ6m_c00PGwef_0BSlsHgYlos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:cb:c0:5d:52:5d:bc:06:df:06:a7:ed:dd:ae:ff:9e:c9:92: 95:a7:d7:2e:45:4c:c9:f7:d7:ee:10:76:20:e1:68:94:e9:b9: 9f:6e:d2:be:c9:a1:a0:a9:ef:66:cb:d8:39:70:9c:4e:d1:29: 2d:36:c7:05:12:03:c5:be:0f:7f:7a:05:3f:b2:06:b9:a5:f1: 65:6a:1f:d8:9c:6d:78:f0:ed:2a:a6:eb:c1:1f:30:f7:87:a3: 51:a9:c5:30:c4:cd:e9:fb:ea:0a:f1:14:88:04:1b:3b:37:0c: ff:61:ab:43:1c:31:9d:b1:f4:ce:3e:44:8f:2c:0f:94:ea:2b: 11:f2:de:39:06:7e:f1:c6:41:51:a8:20:4f:16:53:fb:98:02: ab:1b:e2:bd:c8:32:56:42:75:b9:5d:3a:93:2f:07:c3:38:27: 1f:60:23:e1:72:a3:33:42:07:b2:fb:89:42:c7:18:8a:88:26: b9:23:38:43:75:1a:4b:37:74:45:e7:5a:49:6c:5b:50:4d:3c: a2:71:67:31:c8:aa:d0:45:22:e4:03:3e:7e:ab:dc:05:1b:1a: 07:61:91:e8:bb:d3:de:75:f0:6f:b2:ac:b9:1a:52:1b:49:32: 61:50:bb:b9:a5:af:1c:f9:52:98:d0:48:c4:85:96:8e:76:25: e8:c9:c5:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMwNjIxMTAvBgNVBAUTKEU0NDY1OUVBNkZEQ0QzNDNDNkMxRTdGRkQwMTRBNUIw NzgxODk2OEIwHhcNMjUwNjE2MjE0OTIxWhcNMjUwNjIzMjE0OTIxWjAYMRYwFAYD VQQDEw02ODUwOTE2MS1iZWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbZYe38rcKVWQuKETVzN6oF/ulVK/XSIKBK6FHGGj2ZwiyWJ3SZKPJ1RVU+Z KJa/WjkPs5p+NlFk49VKbDxoCX3wsD03nJ5kkTI7NY7qQYZpbKBDOfqV9Obw+8n1 GWJ4fs4LUNZbAY/sbovevkKsHfvogvR9MZ277KLeayy+iHc//cxb7amkL12PKGny PR8WLa3leypK5VFeNlWdMllt2lVyoC5EBhmj9nzBSoRfWE7uIYIT1rH6X+m875P5 5X1wsYmHi5fNfudMrPW99ENIdNsEb1wF17v/jIWlXlnXuqKO786IighpdRh6z2QQ 7RmZnUkuauA9HrTqFZTfxeOXxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP5AtiYT CBbD+Tb5jM4kybMYfxGkMB8GA1UdIwQYMBaAFORGWepv3NNDxsHn/9AUpbB4GJaL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzA2Mi85ODgwODlFNDYx NkIxMUVCQTY0Nzg3NEFDNEY5QUUwMi81RVpaNm1fYzAwUEd3ZWZfMEJTbHNIZ1ls b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVFWlo2bV9jMDBQR3dlZl8wQlNsc0hnWWxvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzA2Mi85ODgwODlFNDYxNkIxMUVCQTY0Nzg3NEFDNEY5QUUwMi81RVpaNm1fYzAw UEd3ZWZfMEJTbHNIZ1lsb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJy8BdUl28Bt8Gp+3drv+eyZKVp9cuRUzJ99fuEHYg4WiU6bmfbtK+ yaGgqe9my9g5cJxO0SktNscFEgPFvg9/egU/sga5pfFlah/YnG148O0qpuvBHzD3 h6NRqcUwxM3p++oK8RSIBBs7Nwz/YatDHDGdsfTOPkSPLA+U6isR8t45Bn7xxkFR qCBPFlP7mAKrG+K9yDJWQnW5XTqTLwfDOCcfYCPhcqMzQgey+4lCxxiKiCa5IzhD dRpLN3RF51pJbFtQTTyicWcxyKrQRSLkAz5+q9wFGxoHYZHou9PedfBvsqy5GlIb STJhULu5pa8c+VKY0EjEhZaOdiXoycXe -----END CERTIFICATE-----Generated at Tue Jun 17 20:25:12 2025 by rpki-client