$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft File: 1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft (raw, json) Hash identifier: ISpnhk4N6EXRTLTqHM/6HNiGSGMI/smyGdVpCPDcIOM= Subject key identifier: 02:45:EB:8A:5D:08:EE:C1:8F:A8:03:F0:E9:AB:F7:AF:70:36:9D:D4 Authority key identifier: D7:0E:59:4B:81:A1:65:8C:2A:DD:F4:A3:26:8E:F9:CF:08:F9:65:0F Certificate issuer: /CN=A91CFFBE/serialNumber=D70E594B81A1658C2ADDF4A3268EF9CF08F9650F Certificate serial: 0589 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft Manifest number: 0585 Signing time: Thu 12 Jun 2025 22:53:08 +0000 Manifest this update: Thu 12 Jun 2025 22:53:08 +0000 Manifest next update: Thu 19 Jun 2025 22:53:08 +0000 Files and hashes: 1: 1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl (hash: dUoO2mL0ECvhxCk9TxXzzryC/q6tR/H8FF8UQOSlbL0=) 2: 05A2A4008FE811EEACB1296AC4F9AE02.roa (hash: OvWek+7GoTr0MOzRQOUQXIl3oHCUTRccIlCGDYFLUR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1417 (0x589) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFBE, serialNumber=D70E594B81A1658C2ADDF4A3268EF9CF08F9650F Validity Not Before: Jun 12 22:53:08 2025 GMT Not After : Jun 19 22:53:08 2025 GMT Subject: CN=684b5a54-de8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0b:c4:ce:bb:46:d4:4f:00:bc:5d:61:49:20: 36:94:1d:d8:8e:e4:ed:0f:b6:a8:69:67:ea:17:f4: 38:08:66:b3:53:6e:d9:e1:1e:b0:83:e3:ec:ac:22: 3d:03:cc:1c:42:a1:6a:82:cf:71:da:ff:f9:0c:7e: 28:c1:1f:44:5e:c2:c6:62:ee:9c:6e:b9:b1:dd:36: 61:aa:2e:1b:6f:92:ff:eb:31:26:f2:0a:71:1c:9b: 85:e2:62:25:73:b3:20:d2:be:e2:a7:89:f8:f0:e7: 90:45:69:4f:66:4f:1d:a3:9b:40:ec:ea:42:2f:69: 07:93:4f:96:b7:2e:8c:03:c5:36:5a:b3:0d:fd:23: 14:4e:39:5b:3f:12:b3:7d:35:7f:ca:f2:43:56:f2: a9:70:87:56:81:99:7e:ac:08:ae:f3:2e:b9:aa:7e: 46:0c:8c:39:c2:8c:23:63:37:e3:d9:2d:cc:40:9b: 02:01:31:02:00:e9:54:16:a0:97:ff:4c:8f:e3:0f: 6b:8b:f8:39:e6:c1:21:ae:ae:12:e6:4e:62:70:9a: 69:19:e7:49:d5:7c:a4:c0:b4:fb:95:77:7e:e3:47: 1d:52:db:41:b0:36:17:51:04:9f:2f:5b:fe:73:16: 6d:0d:54:4a:91:73:45:c8:cd:56:fd:0b:d5:1b:79: ef:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:45:EB:8A:5D:08:EE:C1:8F:A8:03:F0:E9:AB:F7:AF:70:36:9D:D4 X509v3 Authority Key Identifier: keyid:D7:0E:59:4B:81:A1:65:8C:2A:DD:F4:A3:26:8E:F9:CF:08:F9:65:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:c2:af:65:74:72:5a:8c:e5:6e:f6:bc:df:52:50:8e:c8:3f: 01:9d:e6:ff:b7:89:24:03:62:aa:39:f4:1c:71:f2:0c:8a:37: 58:e4:aa:c8:61:17:01:ee:95:28:e8:c3:88:73:d2:32:03:12: b2:02:07:9d:94:10:b7:a6:05:72:31:01:00:2d:c7:80:5e:5c: 10:13:ed:e1:97:65:2b:3d:ad:7e:d5:8d:fa:68:c2:ff:60:e8: b7:d4:3e:b2:80:cd:bb:5c:8d:79:54:9e:0a:0b:26:4f:e4:62: e3:1c:a6:d9:05:7d:ae:1b:6e:bb:3b:54:72:76:8e:b6:06:31: a3:65:21:79:26:a9:c2:03:c4:58:6b:7e:3c:c3:14:92:c4:e5: eb:1e:24:39:34:d7:ce:a2:4a:01:d8:29:5b:b5:17:ce:bc:bf: 1d:a9:1a:d0:16:30:44:aa:49:3d:9f:f9:8a:b8:62:b6:79:89: 08:f4:17:5c:c2:da:36:53:de:d2:67:68:41:ea:76:90:d6:d9: fa:74:97:38:e7:5f:5a:91:99:88:98:c8:0c:8d:03:95:39:63: dc:f8:6e:bc:5a:bd:42:e7:78:a4:bc:3a:37:cb:d0:b9:44:29: b8:aa:c7:28:5c:e8:38:ea:c6:bc:45:2c:1e:6f:f8:5a:b0:e7: 92:f8:30:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQkUxMTAvBgNVBAUTKEQ3MEU1OTRCODFBMTY1OEMyQURERjRBMzI2OEVGOUNG MDhGOTY1MEYwHhcNMjUwNjEyMjI1MzA4WhcNMjUwNjE5MjI1MzA4WjAYMRYwFAYD VQQDEw02ODRiNWE1NC1kZThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQvEzrtG1E8AvF1hSSA2lB3YjuTtD7aoaWfqF/Q4CGazU27Z4R6wg+PsrCI9 A8wcQqFqgs9x2v/5DH4owR9EXsLGYu6cbrmx3TZhqi4bb5L/6zEm8gpxHJuF4mIl c7Mg0r7ip4n48OeQRWlPZk8do5tA7OpCL2kHk0+Wty6MA8U2WrMN/SMUTjlbPxKz fTV/yvJDVvKpcIdWgZl+rAiu8y65qn5GDIw5wowjYzfj2S3MQJsCATECAOlUFqCX /0yP4w9ri/g55sEhrq4S5k5icJppGedJ1XykwLT7lXd+40cdUttBsDYXUQSfL1v+ cxZtDVRKkXNFyM1W/QvVG3nvqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJF64pd CO7Bj6gD8Omr969wNp3UMB8GA1UdIwQYMBaAFNcOWUuBoWWMKt30oyaO+c8I+WUP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZCRS83NDIyMzcwNkRB RkExMUVCODJGRTMxNjJDNEY5QUUwMi8xdzVaUzRHaFpZd3EzZlNqSm83NXp3ajVa UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF3NVpTNEdoWll3cTNmU2pKbzc1endqNVpROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkZCRS83NDIyMzcwNkRBRkExMUVCODJGRTMxNjJDNEY5QUUwMi8xdzVaUzRHaFpZ d3EzZlNqSm83NXp3ajVaUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAwq9ldHJajOVu9rzfUlCOyD8Bneb/t4kkA2KqOfQccfIMijdY5KrI YRcB7pUo6MOIc9IyAxKyAgedlBC3pgVyMQEALceAXlwQE+3hl2UrPa1+1Y36aML/ YOi31D6ygM27XI15VJ4KCyZP5GLjHKbZBX2uG267O1Rydo62BjGjZSF5JqnCA8RY a348wxSSxOXrHiQ5NNfOokoB2ClbtRfOvL8dqRrQFjBEqkk9n/mKuGK2eYkI9Bdc wto2U97SZ2hB6naQ1tn6dJc4519akZmImMgMjQOVOWPc+G68Wr1C53ikvDo3y9C5 RCm4qscoXOg46sa8RSweb/hasOeS+DCa -----END CERTIFICATE-----Generated at Sat Jun 14 19:37:25 2025 by rpki-client