$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft File: 5MWJuJPSconPhG3wWt-1lgNkKP0.mft (raw, json) Hash identifier: 9emZfCzfoTVsiIsj7ZH1Xpoy39cag5pDOBj6/IYGgJ4= Subject key identifier: 71:CE:33:6B:71:C2:62:71:8A:9A:D8:3F:7D:AB:AE:78:E9:46:9A:5F Authority key identifier: E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD Certificate issuer: /CN=A91B8AC8/serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft Manifest number: 6B Signing time: Thu 19 Jun 2025 06:23:13 +0000 Manifest this update: Thu 19 Jun 2025 06:23:12 +0000 Manifest next update: Thu 26 Jun 2025 06:23:12 +0000 Files and hashes: 1: 5MWJuJPSconPhG3wWt-1lgNkKP0.crl (hash: 3REzPmAy9F9SwPuwT30l0i6psYGQXt9jHkQwPRCYC7w=) 2: 8FFA61D4B13D11EF9EFDE433C4F9AE02.roa (hash: EhNDnWOJJGSPSxGl0lercQlAl3yvPmyKkzL2DPkH1sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8AC8, serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD Validity Not Before: Jun 19 06:23:12 2025 GMT Not After : Jun 26 06:23:12 2025 GMT Subject: CN=6853acd0-86be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f8:16:e5:e4:f4:81:f9:eb:62:b3:2c:f1:4e: 83:86:5e:71:42:a4:69:9f:31:b3:94:6c:b6:f3:13: d7:d6:74:c7:71:16:08:4b:1f:c1:32:7f:1b:2d:b6: 08:86:9d:57:bf:37:93:ac:aa:15:2d:02:76:57:7e: 57:06:66:39:36:6b:18:23:b7:7f:b6:26:70:b4:32: 5c:72:fd:d7:44:ef:73:0b:42:d6:71:ca:0a:73:57: ff:a5:ca:74:88:1e:18:3a:a3:ce:60:28:42:ef:10: 93:ae:c8:f8:3e:0a:f9:eb:ff:9d:71:fd:fd:e7:6d: 3b:4f:9d:7c:37:0b:78:c6:3f:05:73:1f:36:0a:b1: 2e:9e:0c:ec:2b:34:eb:d0:c8:b2:af:77:0e:87:b4: 81:25:ab:73:f1:c8:fa:73:33:22:11:d8:42:72:b2: d3:9f:f0:ae:21:5e:61:ed:28:fb:5d:9f:be:af:64: 23:97:f0:74:28:e9:23:44:8b:36:ef:ed:f7:11:5b: 35:82:0e:65:8e:c8:d5:db:d0:4f:1e:cf:06:a4:99: 0c:1b:de:12:c6:0c:c2:23:ed:2b:64:03:37:b8:1a: 6f:76:f2:db:f0:5a:db:a7:68:11:24:cd:fe:a5:8b: bb:21:fd:74:62:fe:6e:82:0a:d5:81:2e:7b:91:61: 68:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CE:33:6B:71:C2:62:71:8A:9A:D8:3F:7D:AB:AE:78:E9:46:9A:5F X509v3 Authority Key Identifier: keyid:E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:21:c1:6b:2d:d1:ae:a3:60:4d:f2:27:bd:65:07:3f:a9:90: 91:6e:18:c3:1c:61:ab:2b:4c:a7:27:4f:1d:aa:37:48:2f:cc: 93:98:8f:a1:19:49:52:e6:4f:99:12:65:a4:77:d5:f6:30:4d: 80:ba:9f:1d:03:cd:b4:ac:f2:c4:eb:5d:1f:87:d7:44:02:44: 2b:cd:bd:ca:bb:33:b8:b6:f7:00:9e:b6:c6:e8:94:5c:dd:16: 3e:d4:fd:e7:2b:1b:eb:9d:25:59:c1:20:23:b3:66:77:9a:2d: 49:04:16:e3:cf:e1:60:eb:88:46:ed:ad:e5:20:d8:46:71:cb: b9:83:a9:c1:c8:66:1d:c7:b4:8f:41:0e:3e:aa:48:1a:87:cc: 53:52:b5:04:fc:d3:04:0d:15:48:2d:85:2c:53:35:94:d3:68: df:15:e5:88:b7:cc:93:64:de:17:65:4f:e4:16:f9:18:6a:7c: 5f:12:b3:28:26:af:2b:37:87:33:c0:0a:37:47:49:40:d4:ff: 96:29:47:a6:0a:26:03:05:25:6c:2c:25:e7:6f:6c:15:b6:e7: b9:ef:ae:15:f2:22:5d:be:1f:d6:36:93:76:32:a1:e7:e6:55: 29:80:71:67:01:48:d0:e6:5d:b2:43:1f:12:f7:40:57:f1:82: 63:32:dc:f6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEFDODExMC8GA1UEBRMoRTRDNTg5Qjg5M0QyNzI4OUNGODQ2REYwNUFERkI1OTYw MzY0MjhGRDAeFw0yNTA2MTkwNjIzMTJaFw0yNTA2MjYwNjIzMTJaMBgxFjAUBgNV BAMTDTY4NTNhY2QwLTg2YmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDn+Bbl5PSB+etisyzxToOGXnFCpGmfMbOUbLbzE9fWdMdxFghLH8EyfxsttgiG nVe/N5OsqhUtAnZXflcGZjk2axgjt3+2JnC0Mlxy/ddE73MLQtZxygpzV/+lynSI Hhg6o85gKELvEJOuyPg+Cvnr/51x/f3nbTtPnXw3C3jGPwVzHzYKsS6eDOwrNOvQ yLKvdw6HtIElq3PxyPpzMyIR2EJystOf8K4hXmHtKPtdn76vZCOX8HQo6SNEizbv 7fcRWzWCDmWOyNXb0E8ezwakmQwb3hLGDMIj7StkAze4Gm928tvwWtunaBEkzf6l i7sh/XRi/m6CCtWBLnuRYWjNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcc4za3HC YnGKmtg/fauueOlGml8wHwYDVR0jBBgwFoAU5MWJuJPSconPhG3wWt+1lgNkKP0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4QUM4L0UxMkQxMDUyQjEz QzExRUZBQUY5RDczMUM0RjlBRTAyLzVNV0p1SlBTY29uUGhHM3dXdC0xbGdOa0tQ MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNU1XSnVKUFNjb25QaEczd1d0LTFsZ05rS1AwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 QUM4L0UxMkQxMDUyQjEzQzExRUZBQUY5RDczMUM0RjlBRTAyLzVNV0p1SlBTY29u UGhHM3dXdC0xbGdOa0tQMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB8hwWst0a6jYE3yJ71lBz+pkJFuGMMcYasrTKcnTx2qN0gvzJOYj6EZ SVLmT5kSZaR31fYwTYC6nx0DzbSs8sTrXR+H10QCRCvNvcq7M7i29wCetsbolFzd Fj7U/ecrG+udJVnBICOzZneaLUkEFuPP4WDriEbtreUg2EZxy7mDqcHIZh3HtI9B Dj6qSBqHzFNStQT80wQNFUgthSxTNZTTaN8V5Yi3zJNk3hdlT+QW+RhqfF8Ssygm rys3hzPACjdHSUDU/5YpR6YKJgMFJWwsJedvbBW257nvrhXyIl2+H9Y2k3Yyoefm VSmAcWcBSNDmXbJDHxL3QFfxgmMy3PY= -----END CERTIFICATE-----Generated at Fri Jun 20 08:25:22 2025 by rpki-client