$ rpki-client -vvf rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft File: 5NzsWVobtnOJciNlasY5uVNS3XM.mft (raw, json) Hash identifier: VMj3DkuYLSKe0SqDiv22oNrge6SLfEOH0KSDPXToD0o= Subject key identifier: 36:C5:7C:F9:F3:76:0B:BA:4D:AF:47:7E:32:67:56:52:8A:67:05:EF Authority key identifier: E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73 Certificate issuer: /CN=A91D604E/serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73 Certificate serial: 0CB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft Manifest number: 0CAA Signing time: Sat 14 Jun 2025 18:04:39 +0000 Manifest this update: Sat 14 Jun 2025 18:04:38 +0000 Manifest next update: Sat 21 Jun 2025 18:04:38 +0000 Files and hashes: 1: 5NzsWVobtnOJciNlasY5uVNS3XM.crl (hash: YbcY7U+35WuV0MwQSmp33nUYB3oeHAy+p14itiDGOGA=) 2: D1C40E28183411EF99FD8776C4F9AE02.roa (hash: chBs/iSmoBtAd9EtvA3mnCGyh8XU8yYYJZGBD7EHNow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3255 (0xcb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D604E, serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73 Validity Not Before: Jun 14 18:04:38 2025 GMT Not After : Jun 21 18:04:38 2025 GMT Subject: CN=684db9b6-0568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1a:51:ba:d5:f0:68:32:73:c8:f9:5c:6b:94: 07:31:12:f7:97:89:b6:e8:0e:07:de:a7:55:84:d7: 9c:98:75:a7:56:79:07:6d:a3:85:3f:52:f1:5c:c2: c1:98:21:0d:28:2d:67:dd:3a:b5:89:c7:75:d3:80: f5:fe:fd:92:2b:b7:87:d8:af:d9:54:c6:01:31:61: 8f:ba:70:58:9a:1d:8a:5d:b0:9c:6c:b5:f2:58:2b: ea:3f:54:be:fe:db:4b:40:dc:81:84:88:c1:31:9a: 9a:ba:73:51:54:fb:75:36:d9:52:f4:0b:dc:f3:3f: 2e:08:16:72:74:b9:64:27:57:11:90:ff:d2:b7:84: 5a:c0:af:01:aa:b4:8f:7e:ca:51:45:3f:6a:62:ed: 50:75:06:77:f0:63:9b:57:cb:32:b7:2e:cd:19:d0: 02:c1:b3:5e:e7:c8:d4:1e:14:10:1b:9b:c4:14:41: 2a:42:62:3a:ef:34:9f:a8:35:8d:8c:db:4d:29:db: 4e:82:0f:9a:39:09:c3:7c:5e:17:72:8a:3d:81:70: 03:bc:c6:08:14:38:fd:9d:6f:05:3b:60:9b:42:08: 8d:4a:21:64:ac:97:47:31:ee:dc:bb:b4:f9:3b:55: 8f:e6:a7:06:71:fb:e9:b9:dc:da:44:fb:01:5a:c4: 96:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C5:7C:F9:F3:76:0B:BA:4D:AF:47:7E:32:67:56:52:8A:67:05:EF X509v3 Authority Key Identifier: keyid:E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:98:f9:f6:25:68:8d:b7:ad:be:a8:10:a5:57:87:b7:02:81: 2a:0f:78:c1:1f:ce:17:57:8c:ee:3c:1c:e8:d9:e8:6e:90:22: 1d:cf:8e:80:d2:fd:73:82:8e:a4:d6:6a:32:37:71:0e:b4:2b: 83:56:bc:b7:8d:04:d1:da:af:33:b1:e9:e9:67:1d:09:6b:53: f4:a4:37:ec:32:2a:50:2b:6d:38:6b:25:4d:0a:7f:0c:96:b5: 74:6f:86:f6:fd:ef:9f:bc:ea:29:d9:cf:53:f5:ce:67:a3:53: 5d:36:c7:83:52:20:ca:47:cd:07:f0:09:1e:d2:d3:48:4c:95: 81:01:18:fc:f6:f8:52:a0:e2:db:0e:5d:44:49:57:0b:ad:67: 2f:9e:08:e4:48:0a:8b:1f:d9:25:a1:a8:78:30:27:ee:8c:89: b4:7b:44:24:4c:3c:ab:e0:59:31:d2:54:71:2a:cf:23:71:8e: 60:10:8a:22:32:1c:e1:ed:4b:c2:59:97:8e:ad:7b:72:3f:90: 0e:dd:d1:22:71:6a:72:5b:dd:8b:06:b9:4b:53:d8:e3:aa:31: e8:f9:2d:be:d7:cf:e7:ec:92:6e:7b:fb:1c:51:5c:4e:ef:2e: 64:04:ec:a6:1c:93:5a:5a:3a:18:8b:e5:4a:48:33:7b:67:95: a0:98:5d:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwNEUxMTAvBgNVBAUTKEU0RENFQzU5NUExQkI2NzM4OTcyMjM2NTZBQzYzOUI5 NTM1MkRENzMwHhcNMjUwNjE0MTgwNDM4WhcNMjUwNjIxMTgwNDM4WjAYMRYwFAYD VQQDEw02ODRkYjliNi0wNTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7hpRutXwaDJzyPlca5QHMRL3l4m26A4H3qdVhNecmHWnVnkHbaOFP1LxXMLB mCENKC1n3Tq1icd104D1/v2SK7eH2K/ZVMYBMWGPunBYmh2KXbCcbLXyWCvqP1S+ /ttLQNyBhIjBMZqaunNRVPt1NtlS9Avc8z8uCBZydLlkJ1cRkP/St4RawK8BqrSP fspRRT9qYu1QdQZ38GObV8syty7NGdACwbNe58jUHhQQG5vEFEEqQmI67zSfqDWN jNtNKdtOgg+aOQnDfF4Xcoo9gXADvMYIFDj9nW8FO2CbQgiNSiFkrJdHMe7cu7T5 O1WP5qcGcfvpudzaRPsBWsSWeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbFfPnz dgu6Ta9HfjJnVlKKZwXvMB8GA1UdIwQYMBaAFOTc7FlaG7ZziXIjZWrGOblTUt1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjA0RS85MUI1QzBDMEY0 RUQxMUU5OENCRkEwMTNDNEY5QUUwMi81TnpzV1ZvYnRuT0pjaU5sYXNZNXVWTlMz WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVOenNXVm9idG5PSmNpTmxhc1k1dVZOUzNYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjA0RS85MUI1QzBDMEY0RUQxMUU5OENCRkEwMTNDNEY5QUUwMi81TnpzV1ZvYnRu T0pjaU5sYXNZNXVWTlMzWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBmPn2JWiNt62+qBClV4e3AoEqD3jBH84XV4zuPBzo2ehukCIdz46A 0v1zgo6k1moyN3EOtCuDVry3jQTR2q8zsenpZx0Ja1P0pDfsMipQK204ayVNCn8M lrV0b4b2/e+fvOop2c9T9c5no1NdNseDUiDKR80H8Ake0tNITJWBARj89vhSoOLb Dl1ESVcLrWcvngjkSAqLH9kloah4MCfujIm0e0QkTDyr4Fkx0lRxKs8jcY5gEIoi Mhzh7UvCWZeOrXtyP5AO3dEicWpyW92LBrlLU9jjqjHo+S2+18/n7JJue/scUVxO 7y5kBOymHJNaWjoYi+VKSDN7Z5WgmF3F -----END CERTIFICATE-----Generated at Sun Jun 15 08:00:08 2025 by rpki-client