$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft File: 5CnUKeZreXs9ihy-JJFXetw4pI4.mft (raw, json) Hash identifier: TGmAyEKTk4l95cHmzegarEf3QEK2WZwb1vl8OxrcoAA= Subject key identifier: 90:BD:8F:C8:6D:0A:E7:91:89:59:1B:8B:8A:48:EC:47:0F:99:D5:3B Authority key identifier: E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E Certificate issuer: /CN=A91CC711/serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft Manifest number: E9 Signing time: Sun 15 Jun 2025 04:55:24 +0000 Manifest this update: Sun 15 Jun 2025 04:55:23 +0000 Manifest next update: Sun 22 Jun 2025 04:55:23 +0000 Files and hashes: 1: 5CnUKeZreXs9ihy-JJFXetw4pI4.crl (hash: 8mrtGTd+ZynarKUR1JJSnuFmmXmk6aEjwf9wAsXtux4=) 2: 06FA65A81F2711EF98DA2926C4F9AE02.roa (hash: oS4PRK+VFwkVhFqqmzFtlUlVZ/0tESve4AVvdpaS7tg=) 3: 25ED44B41EE411EFA62B1335C4F9AE02.roa (hash: zb91MkoqcDkuzuZwD7VYBRLCNDf9oSeL0ikN94ozVn8=) 4: A7FC5DEE8D0411EFBD7A0057C4F9AE02.roa (hash: TGsIq74Qma+U6c7Ey8qeEz04VjG5STVU5SpvAS46Q6U=) 5: 359CBDB28D0D11EF90882959C4F9AE02.roa (hash: qdwbcsIyL1f3wI2tO7dwB6BR0n7SfSV/G7xRpNDHqtU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC711, serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E Validity Not Before: Jun 15 04:55:23 2025 GMT Not After : Jun 22 04:55:23 2025 GMT Subject: CN=684e523b-c168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0e:6c:8e:62:72:9d:34:41:9b:50:3a:99:70: b9:4f:4d:8e:15:d9:2f:4b:d8:34:87:dd:cb:a8:60: 08:04:87:36:64:8a:0d:54:e3:3c:b5:eb:0f:40:8a: 6d:6c:92:9c:c0:e4:8c:49:3e:5b:69:a2:6e:c0:fc: 24:69:8a:71:0d:0c:cb:69:9d:b2:5a:1a:4f:b8:66: 02:09:c9:0d:eb:f8:9c:a6:00:7d:fe:79:2f:2a:62: b6:29:7b:42:f2:59:86:d1:1a:ee:62:27:cc:a7:19: 9c:02:67:00:54:2d:fb:38:ab:52:8b:9d:09:cf:94: a2:75:08:3b:db:ee:61:34:6f:ed:05:25:9b:c0:df: 69:83:eb:03:36:b7:c9:e3:f8:32:79:e6:b5:25:48: f5:ba:77:45:ce:1c:c9:96:d8:14:69:81:05:73:17: 5d:46:a6:0a:f9:a4:f8:94:02:d0:20:97:13:04:de: 67:80:1a:0f:83:fb:51:14:d4:06:9e:9e:56:2c:16: 01:ba:55:8f:0c:86:57:d7:a1:70:45:cc:e9:04:5b: 2a:d5:9b:4b:91:57:fb:a8:5d:a6:13:4b:79:de:ee: ba:79:b3:3e:b8:7e:45:d1:b3:a2:88:e9:59:67:54: 3d:c1:8c:97:2a:2a:1c:eb:d3:7c:d0:f7:98:19:05: 2c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:BD:8F:C8:6D:0A:E7:91:89:59:1B:8B:8A:48:EC:47:0F:99:D5:3B X509v3 Authority Key Identifier: keyid:E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:22:e2:33:ec:66:89:fc:4a:04:9c:52:77:82:99:dd:4b:c4: 9f:2c:15:83:5e:93:59:fd:fa:d7:04:a9:5d:4f:28:16:a7:13: 4b:d6:f0:b5:19:c3:12:62:57:41:8b:c8:93:8b:f8:20:5e:6b: 5e:75:35:28:c0:c1:92:d5:e3:98:8c:70:77:d8:24:3d:8a:f4: bb:d1:0d:7d:37:cd:c8:97:29:9e:65:ca:94:d1:b1:1c:01:1a: b1:6f:83:05:06:bf:b6:3a:ff:c9:6c:39:2a:0f:d7:c3:24:56: 1c:86:5f:d6:6b:2d:ab:bf:08:b6:fe:14:a8:4d:ad:0b:58:45: 9d:15:f1:6d:e1:82:47:cf:06:51:c8:a9:08:1a:38:77:e4:af: 2e:f7:4c:e1:a7:3a:fd:c6:12:24:72:cd:f9:fc:7b:d0:df:67: 85:a3:c3:12:0f:a4:96:d9:f4:9b:da:60:ad:3e:60:c3:b8:b2: 0b:15:43:fe:3e:a7:3d:70:f5:6e:fb:c4:da:c9:3e:da:7e:58: 6d:f8:9d:28:cc:41:3e:8b:67:6c:2a:11:be:8d:29:2c:60:84: 8d:8a:db:09:db:9b:5d:9e:af:3a:18:4c:96:4d:0e:1f:46:b3: 52:b2:e7:39:3f:fa:1b:c5:e9:4f:29:87:b7:a4:bd:35:e7:9d: 2a:c7:d2:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M3MTExMTAvBgNVBAUTKEU0MjlENDI5RTY2Qjc5N0IzRDhBMUNCRTI0OTE1NzdB REMzOEE0OEUwHhcNMjUwNjE1MDQ1NTIzWhcNMjUwNjIyMDQ1NTIzWjAYMRYwFAYD VQQDEw02ODRlNTIzYi1jMTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzw5sjmJynTRBm1A6mXC5T02OFdkvS9g0h93LqGAIBIc2ZIoNVOM8tesPQIpt bJKcwOSMST5baaJuwPwkaYpxDQzLaZ2yWhpPuGYCCckN6/icpgB9/nkvKmK2KXtC 8lmG0RruYifMpxmcAmcAVC37OKtSi50Jz5SidQg72+5hNG/tBSWbwN9pg+sDNrfJ 4/gyeea1JUj1undFzhzJltgUaYEFcxddRqYK+aT4lALQIJcTBN5ngBoPg/tRFNQG np5WLBYBulWPDIZX16FwRczpBFsq1ZtLkVf7qF2mE0t53u66ebM+uH5F0bOiiOlZ Z1Q9wYyXKioc69N80PeYGQUsfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJC9j8ht CueRiVkbi4pI7EcPmdU7MB8GA1UdIwQYMBaAFOQp1Cnma3l7PYocviSRV3rcOKSO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzcxMS9DN0QxQjA1NDFF RTMxMUVGOTBEMjEyMzRDNEY5QUUwMi81Q25VS2VacmVYczlpaHktSkpGWGV0dzRw STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDblVLZVpyZVhzOWloeS1KSkZYZXR3NHBJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzcxMS9DN0QxQjA1NDFFRTMxMUVGOTBEMjEyMzRDNEY5QUUwMi81Q25VS2VacmVY czlpaHktSkpGWGV0dzRwSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANIuIz7GaJ/EoEnFJ3gpndS8SfLBWDXpNZ/frXBKldTygWpxNL1vC1 GcMSYldBi8iTi/ggXmtedTUowMGS1eOYjHB32CQ9ivS70Q19N83IlymeZcqU0bEc ARqxb4MFBr+2Ov/JbDkqD9fDJFYchl/Way2rvwi2/hSoTa0LWEWdFfFt4YJHzwZR yKkIGjh35K8u90zhpzr9xhIkcs35/HvQ32eFo8MSD6SW2fSb2mCtPmDDuLILFUP+ Pqc9cPVu+8TayT7aflht+J0ozEE+i2dsKhG+jSksYISNitsJ25tdnq86GEyWTQ4f RrNSsuc5P/obxelPKYe3pL01550qx9JV -----END CERTIFICATE-----Generated at Sun Jun 15 09:53:24 2025 by rpki-client