$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft File: 05fnjG3TxpaFEzQVMschiNd1Z68.mft (raw, json) Hash identifier: 7l7SZGQbgHfLOz0gO2GEVK4eeGaKOBaEnenhyJI5G3k= Subject key identifier: 9A:7E:4D:4C:BD:A6:45:E5:13:5C:97:A6:36:3F:D7:DD:BA:42:00:DA Authority key identifier: D3:97:E7:8C:6D:D3:C6:96:85:13:34:15:32:C7:21:88:D7:75:67:AF Certificate issuer: /CN=A91D3CA7/serialNumber=D397E78C6DD3C6968513341532C72188D77567AF Certificate serial: 02C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft Manifest number: 02C2 Signing time: Sun 15 Jun 2025 01:07:22 +0000 Manifest this update: Sun 15 Jun 2025 01:07:21 +0000 Manifest next update: Sun 22 Jun 2025 01:07:21 +0000 Files and hashes: 1: 05fnjG3TxpaFEzQVMschiNd1Z68.crl (hash: a2I34bt5Z2dvvNb9o4llatdm8kz0Bx/9nHxbPeghqiY=) 2: DE183F1CF46611EC815F7283C4F9AE02.roa (hash: 9MdpJxrwdV0aU1f/zX8n/hykvTdPQn1kKe0kWScV57Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.crl rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 711 (0x2c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3CA7, serialNumber=D397E78C6DD3C6968513341532C72188D77567AF Validity Not Before: Jun 15 01:07:21 2025 GMT Not After : Jun 22 01:07:21 2025 GMT Subject: CN=684e1cca-53c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e3:61:4f:d4:0a:db:c1:ad:25:e4:53:7f:f2: c0:20:85:86:48:1b:6f:09:ad:57:12:c9:fd:16:12: 85:e5:42:e3:bd:36:55:bd:9f:b3:6d:91:3c:e1:c3: 4a:aa:9a:04:99:62:d9:97:a2:3c:c0:a5:f0:d1:f5: 5e:55:8c:6a:05:e4:0c:91:07:e3:47:01:7d:77:c2: 97:5f:6b:90:84:be:3f:e2:6d:5f:98:dd:de:40:c2: b6:08:58:32:b2:3c:66:b5:3c:cc:4e:1c:8e:d2:74: 6d:03:78:c0:d5:07:ab:d6:ef:f1:dc:9c:d3:02:f4: 71:ef:ec:70:e6:37:9b:a3:9d:90:e6:58:13:db:90: 0f:c0:35:37:01:ff:67:6e:6d:7c:b2:1f:4b:b3:15: 28:41:ec:22:d1:26:5f:12:3d:6e:3e:b1:73:22:16: 19:cd:7e:c1:72:24:e3:38:03:7e:41:85:e4:7a:84: 04:c7:e5:b3:32:aa:c4:c5:a6:2b:20:c5:1d:94:34: 35:dd:a4:49:ef:71:39:31:2d:1f:82:06:4d:8d:e7: 2f:a5:3d:87:aa:ed:ca:55:f8:b1:80:d4:15:9d:41: b0:bd:d1:05:5c:ec:5c:6d:8d:3a:dc:5a:55:19:4e: 44:80:4b:72:2e:dc:1a:eb:d4:48:02:dc:1f:27:41: 51:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:7E:4D:4C:BD:A6:45:E5:13:5C:97:A6:36:3F:D7:DD:BA:42:00:DA X509v3 Authority Key Identifier: keyid:D3:97:E7:8C:6D:D3:C6:96:85:13:34:15:32:C7:21:88:D7:75:67:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:3f:3c:ed:ce:36:44:61:82:01:2a:1b:0f:2c:aa:2e:b9:a8: e6:59:8c:56:60:7a:2c:5e:29:a0:e4:9d:02:90:4d:7f:f3:7e: ba:1d:51:d5:0b:b6:79:d7:b7:05:0b:05:17:03:bf:74:a7:15: 28:b2:33:12:56:61:74:58:1a:70:74:13:77:4a:2b:aa:32:62: 53:02:6d:96:0b:6b:c7:e8:8f:a9:92:74:14:77:a1:ca:c2:55: 9b:0a:8e:a9:02:93:14:80:c1:7d:06:c8:a4:e0:fe:5c:74:e5: ff:d9:a2:32:c5:c0:50:9a:68:29:fa:ed:97:2d:4b:ef:75:28: 2a:c2:9e:25:71:48:5d:c1:7a:2d:24:8f:34:21:8a:f5:9a:d1: 8c:69:d5:6c:dc:eb:29:9d:ef:a4:5f:4f:60:b6:a8:cb:45:39: 22:fd:23:fc:31:b6:0f:03:a5:68:9e:b8:74:54:06:bd:a5:f9: ef:4f:3e:23:6b:ae:08:4f:77:47:fa:13:e0:2c:07:7f:ef:ff: 92:1e:0a:47:86:87:48:25:82:04:09:eb:ef:1c:68:74:ac:7c: 61:84:e9:28:78:1c:dd:ac:8e:a0:85:46:ec:09:bd:22:d9:1b: c4:0b:6a:8e:8a:40:45:d9:fe:fe:08:4c:57:0a:b2:05:4b:c5: 91:b2:41:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNDQTcxMTAvBgNVBAUTKEQzOTdFNzhDNkREM0M2OTY4NTEzMzQxNTMyQzcyMTg4 RDc3NTY3QUYwHhcNMjUwNjE1MDEwNzIxWhcNMjUwNjIyMDEwNzIxWjAYMRYwFAYD VQQDEw02ODRlMWNjYS01M2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeNhT9QK28GtJeRTf/LAIIWGSBtvCa1XEsn9FhKF5ULjvTZVvZ+zbZE84cNK qpoEmWLZl6I8wKXw0fVeVYxqBeQMkQfjRwF9d8KXX2uQhL4/4m1fmN3eQMK2CFgy sjxmtTzMThyO0nRtA3jA1Qer1u/x3JzTAvRx7+xw5jebo52Q5lgT25APwDU3Af9n bm18sh9LsxUoQewi0SZfEj1uPrFzIhYZzX7BciTjOAN+QYXkeoQEx+WzMqrExaYr IMUdlDQ13aRJ73E5MS0fggZNjecvpT2Hqu3KVfixgNQVnUGwvdEFXOxcbY063FpV GU5EgEtyLtwa69RIAtwfJ0FRnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJp+TUy9 pkXlE1yXpjY/1926QgDaMB8GA1UdIwQYMBaAFNOX54xt08aWhRM0FTLHIYjXdWev MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0NBNy8zRjBFMEUwNkY0 NjExMUVDODIzQ0EwN0NDNEY5QUUwMi8wNWZuakczVHhwYUZFelFWTXNjaGlOZDFa NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA1Zm5qRzNUeHBhRkV6UVZNc2NoaU5kMVo2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0NBNy8zRjBFMEUwNkY0NjExMUVDODIzQ0EwN0NDNEY5QUUwMi8wNWZuakczVHhw YUZFelFWTXNjaGlOZDFaNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7PzztzjZEYYIBKhsPLKouuajmWYxWYHosXimg5J0CkE1/8366HVHV C7Z517cFCwUXA790pxUosjMSVmF0WBpwdBN3SiuqMmJTAm2WC2vH6I+pknQUd6HK wlWbCo6pApMUgMF9Bsik4P5cdOX/2aIyxcBQmmgp+u2XLUvvdSgqwp4lcUhdwXot JI80IYr1mtGMadVs3Ospne+kX09gtqjLRTki/SP8MbYPA6Vonrh0VAa9pfnvTz4j a64IT3dH+hPgLAd/7/+SHgpHhodIJYIECevvHGh0rHxhhOkoeBzdrI6ghUbsCb0i 2RvEC2qOikBF2f7+CExXCrIFS8WRskGq -----END CERTIFICATE-----Generated at Sun Jun 15 09:58:33 2025 by rpki-client