$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft File: 5yN2M529XTAqWcz6d6wJzRcjlU0.mft (raw, json) Hash identifier: gUqp/9LhDkPdUxXcdLPQYqtpTkRl7cQeJJa2LIkyam8= Subject key identifier: 2A:FD:F3:07:9D:35:98:F0:09:24:90:62:07:3C:5E:AF:7B:56:F8:C4 Authority key identifier: E7:23:76:33:9D:BD:5D:30:2A:59:CC:FA:77:AC:09:CD:17:23:95:4D Certificate issuer: /CN=A91CD60C/serialNumber=E72376339DBD5D302A59CCFA77AC09CD1723954D Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft Manifest number: 7F Signing time: Thu 19 Jun 2025 06:07:21 +0000 Manifest this update: Thu 19 Jun 2025 06:07:21 +0000 Manifest next update: Thu 26 Jun 2025 06:07:21 +0000 Files and hashes: 1: 5yN2M529XTAqWcz6d6wJzRcjlU0.crl (hash: WrKoYdpC/MMixnZej5gNzpAHUgm8UV3LvaZKZ9OWZ+s=) 2: AC8EE79E975B11EFB1D18E82C4F9AE02.roa (hash: sqDKPZ1qrocmicYcNGEqHeOR7eFUFOhb8W65lVkqel0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.crl rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD60C, serialNumber=E72376339DBD5D302A59CCFA77AC09CD1723954D Validity Not Before: Jun 19 06:07:21 2025 GMT Not After : Jun 26 06:07:21 2025 GMT Subject: CN=6853a919-dbe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0f:90:0d:d1:84:e8:1c:0b:aa:61:ce:8e:37: e7:37:b0:31:37:dd:42:c3:1e:b7:0b:92:66:92:a7: 1f:74:b9:b2:62:c4:c9:a0:1c:e3:91:93:f4:dd:85: 0d:e9:02:9b:20:e7:90:25:22:c0:6b:85:f7:e5:38: 64:7a:2f:65:7f:07:dd:dd:33:0e:c1:01:74:6d:3b: 16:dc:26:fa:2a:fd:17:a4:d6:44:bc:6e:7b:2f:5a: 76:17:68:ef:a3:f0:7e:1e:cb:24:2a:3e:ca:d7:3c: 9a:1a:b3:42:2d:84:d8:11:86:6f:25:99:6d:c4:5e: 7c:0c:75:e5:54:9b:84:8b:0e:2d:04:30:55:f4:0f: 9b:d9:34:35:a7:37:e3:d9:49:05:f8:9b:38:4f:0c: b4:18:e0:fe:dc:88:46:85:16:bf:c7:0c:89:32:da: ae:e0:0a:dd:23:b1:da:88:c6:d3:7b:b3:4a:f9:64: 08:02:cc:e7:57:3f:42:31:9b:bc:c3:e4:78:79:64: 8a:22:24:a6:72:42:1c:f0:89:fe:aa:a4:a6:3f:e1: c6:c5:c6:4c:ad:de:42:fe:50:56:56:51:ab:45:ef: 17:d5:04:06:96:40:97:49:fe:10:fa:0a:c3:cf:d9: 0c:88:8b:b4:c9:b8:98:6a:b6:7b:03:f8:0f:26:78: 18:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:FD:F3:07:9D:35:98:F0:09:24:90:62:07:3C:5E:AF:7B:56:F8:C4 X509v3 Authority Key Identifier: keyid:E7:23:76:33:9D:BD:5D:30:2A:59:CC:FA:77:AC:09:CD:17:23:95:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:b8:9b:71:fc:d8:e9:43:28:0c:f6:eb:ff:8b:5e:3e:6f:e7: 21:35:2b:45:a5:bc:92:36:1b:b0:21:e9:77:a7:04:8b:45:2c: 04:c4:a7:bd:46:a0:80:0e:0b:70:80:1f:8a:bf:20:79:a0:76: 0b:34:a4:c1:c6:02:ec:32:98:cb:7c:30:37:1d:43:b0:ea:ca: 5a:bc:80:e4:d8:db:7c:b2:3e:ed:d1:3f:bd:a1:f6:83:01:f6: ef:cb:ea:30:56:fc:09:22:1b:d5:d3:5f:7a:ea:ec:91:69:51: 90:15:7a:c2:26:15:e2:fb:83:91:57:b7:62:f2:bd:8b:d2:a1: 3c:a8:86:2b:96:2e:1b:88:54:42:c3:0a:e4:02:23:dc:18:55: 60:9a:52:4e:19:86:9c:c8:07:eb:6f:ec:74:95:51:46:91:9c: cb:59:54:4d:8b:31:65:b0:a0:d9:0d:0e:b2:5d:d2:e5:2b:64: 0a:be:43:da:56:04:8f:5a:aa:95:80:9d:3d:3b:79:a7:42:a0: 4e:c4:0c:4a:69:a6:c7:79:aa:ca:c5:27:6b:0d:78:2c:b7:3a: 82:cb:0d:4f:4d:b8:fe:bc:75:ee:1d:03:6e:b0:87:cd:56:74: a2:2e:39:35:0d:28:aa:63:17:b7:d0:75:82:76:ea:49:8e:d8: d7:c6:ec:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q2MEMxMTAvBgNVBAUTKEU3MjM3NjMzOURCRDVEMzAyQTU5Q0NGQTc3QUMwOUNE MTcyMzk1NEQwHhcNMjUwNjE5MDYwNzIxWhcNMjUwNjI2MDYwNzIxWjAYMRYwFAYD VQQDEw02ODUzYTkxOS1kYmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyA+QDdGE6BwLqmHOjjfnN7AxN91Cwx63C5JmkqcfdLmyYsTJoBzjkZP03YUN 6QKbIOeQJSLAa4X35Thkei9lfwfd3TMOwQF0bTsW3Cb6Kv0XpNZEvG57L1p2F2jv o/B+HsskKj7K1zyaGrNCLYTYEYZvJZltxF58DHXlVJuEiw4tBDBV9A+b2TQ1pzfj 2UkF+Js4Twy0GOD+3IhGhRa/xwyJMtqu4ArdI7HaiMbTe7NK+WQIAsznVz9CMZu8 w+R4eWSKIiSmckIc8In+qqSmP+HGxcZMrd5C/lBWVlGrRe8X1QQGlkCXSf4Q+grD z9kMiIu0ybiYarZ7A/gPJngYiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCr98wed NZjwCSSQYgc8Xq97VvjEMB8GA1UdIwQYMBaAFOcjdjOdvV0wKlnM+nesCc0XI5VN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDYwQy8xODhGMTE3Mjk3 M0QxMUVGQTUxOTYwNThDNEY5QUUwMi81eU4yTTUyOVhUQXFXY3o2ZDZ3SnpSY2ps VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV5TjJNNTI5WFRBcVdjejZkNndKelJjamxVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDYwQy8xODhGMTE3Mjk3M0QxMUVGQTUxOTYwNThDNEY5QUUwMi81eU4yTTUyOVhU QXFXY3o2ZDZ3SnpSY2psVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCquJtx/NjpQygM9uv/i14+b+chNStFpbySNhuwIel3pwSLRSwExKe9 RqCADgtwgB+KvyB5oHYLNKTBxgLsMpjLfDA3HUOw6spavIDk2Nt8sj7t0T+9ofaD Afbvy+owVvwJIhvV01966uyRaVGQFXrCJhXi+4ORV7di8r2L0qE8qIYrli4biFRC wwrkAiPcGFVgmlJOGYacyAfrb+x0lVFGkZzLWVRNizFlsKDZDQ6yXdLlK2QKvkPa VgSPWqqVgJ09O3mnQqBOxAxKaabHearKxSdrDXgstzqCyw1PTbj+vHXuHQNusIfN VnSiLjk1DSiqYxe30HWCdupJjtjXxuz8 -----END CERTIFICATE-----Generated at Fri Jun 20 01:09:24 2025 by rpki-client