$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft File: e14ORHE1uxchraYfZdx1yV9U2wI.mft (raw, json) Hash identifier: PWOlNu5Yf9f9CGSyf8xL57vlrchxtongWWtewe0+xn8= Subject key identifier: 37:53:B3:42:48:94:00:C5:18:53:E3:4B:06:22:A8:36:C6:51:32:66 Authority key identifier: 7B:5E:0E:44:71:35:BB:17:21:AD:A6:1F:65:DC:75:C9:5F:54:DB:02 Certificate issuer: /CN=A91D8226/serialNumber=7B5E0E447135BB1721ADA61F65DC75C95F54DB02 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e14ORHE1uxchraYfZdx1yV9U2wI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft Manifest number: 5E Signing time: Fri 13 Jun 2025 06:02:32 +0000 Manifest this update: Fri 13 Jun 2025 06:02:31 +0000 Manifest next update: Fri 20 Jun 2025 06:02:31 +0000 Files and hashes: 1: e14ORHE1uxchraYfZdx1yV9U2wI.crl (hash: qPsZ51sd4GcIonsz64JkKAFOOo6sotgorHNhHCI9ato=) 2: E4086C08BC2311EF9A445084C4F9AE02.roa (hash: r/4IGYNLMpKuCk8NRggWB2EhHJYpkEkj/MdGzvjYmVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.crl rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e14ORHE1uxchraYfZdx1yV9U2wI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8226, serialNumber=7B5E0E447135BB1721ADA61F65DC75C95F54DB02 Validity Not Before: Jun 13 06:02:31 2025 GMT Not After : Jun 20 06:02:31 2025 GMT Subject: CN=684bbef8-89f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:12:94:b7:dc:9a:4f:0e:dc:94:ba:09:bd:93: 16:68:19:72:ea:85:cd:a9:10:6d:1d:66:b8:60:e3: b6:75:f7:1b:b6:fd:fc:6e:94:c4:3a:0e:28:d8:b0: 62:2c:56:02:5c:0b:f5:b3:33:28:93:55:04:6c:1b: 10:fb:fa:c9:69:65:d8:8d:ec:b4:9d:0f:13:02:53: 80:a7:e6:77:95:e1:0b:f0:7b:74:87:47:13:85:a1: 4a:29:41:1d:79:d9:08:87:85:5e:d5:f3:6e:19:e3: 21:43:24:40:85:3f:ec:f4:53:1c:38:2d:38:0d:e2: a2:d9:3c:ec:df:fa:a8:23:1c:fa:f5:0d:ad:e1:30: b9:bf:ed:78:3e:bb:74:38:43:09:f0:ff:de:a5:6c: 1e:12:bf:77:b4:31:c5:66:1f:c2:4d:73:a5:f4:c9: f8:90:f7:d5:54:7f:00:8d:48:f5:f4:22:9b:bd:60: f9:14:4a:85:3f:5e:64:e4:3e:b0:99:a9:64:95:15: 99:cb:c8:19:76:5b:52:bc:d4:de:9c:84:4f:4d:61: cb:6b:71:1a:f9:88:24:ff:2d:d0:78:16:ac:25:26: 69:47:92:4f:5d:a6:4e:a8:ba:6a:e1:78:6a:27:f4: fb:17:20:6e:f9:50:71:3a:fd:97:cf:e2:4a:56:86: 65:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:53:B3:42:48:94:00:C5:18:53:E3:4B:06:22:A8:36:C6:51:32:66 X509v3 Authority Key Identifier: keyid:7B:5E:0E:44:71:35:BB:17:21:AD:A6:1F:65:DC:75:C9:5F:54:DB:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e14ORHE1uxchraYfZdx1yV9U2wI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a1:b8:8f:76:2f:8a:a1:fc:28:38:74:a2:eb:b5:91:3f:82: 17:53:16:a0:18:90:f9:9c:36:eb:e6:49:8b:c7:eb:8e:cc:72: 5c:6c:a4:74:8a:ff:77:b5:2d:bb:c9:14:80:dd:af:2e:33:70: 54:be:81:2d:96:43:b3:3a:5f:b8:27:4d:63:b7:6c:4a:b5:6d: b0:b8:88:b1:da:db:33:2e:13:1b:28:fe:4a:0f:d7:d8:14:8a: 92:d1:a5:da:55:12:27:4b:28:ba:c4:d0:a1:09:6b:72:f4:f1: 75:c8:45:1b:b4:75:78:64:c5:6d:20:94:fc:d9:24:c7:ad:b5: bd:5b:d6:75:f9:11:04:78:67:9c:4d:d3:83:a0:e7:4e:11:fc: 70:1a:b4:1b:0e:ee:ce:9d:5d:69:16:67:05:c7:de:63:c6:d3: 9b:f7:e2:de:60:f9:6d:02:67:5e:7f:53:3a:dd:89:82:62:e0: 79:32:5c:c0:00:08:d4:8a:1f:71:b7:ed:e6:b4:d0:c9:af:ba: 4e:cf:d9:e5:c3:ff:6f:85:d6:24:a2:7c:ce:34:5f:67:c5:34: 4f:89:29:30:a5:61:f4:52:5c:2b:1b:94:ac:01:4d:b9:d2:85: e4:4e:92:0e:27:16:b8:b0:8c:ef:d9:38:47:91:dd:a9:1b:0a: d2:5c:27:39 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODIyNjExMC8GA1UEBRMoN0I1RTBFNDQ3MTM1QkIxNzIxQURBNjFGNjVEQzc1Qzk1 RjU0REIwMjAeFw0yNTA2MTMwNjAyMzFaFw0yNTA2MjAwNjAyMzFaMBgxFjAUBgNV BAMTDTY4NGJiZWY4LTg5ZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMEpS33JpPDtyUugm9kxZoGXLqhc2pEG0dZrhg47Z19xu2/fxulMQ6DijYsGIs VgJcC/WzMyiTVQRsGxD7+slpZdiN7LSdDxMCU4Cn5neV4Qvwe3SHRxOFoUopQR15 2QiHhV7V824Z4yFDJECFP+z0Uxw4LTgN4qLZPOzf+qgjHPr1Da3hMLm/7Xg+u3Q4 Qwnw/96lbB4Sv3e0McVmH8JNc6X0yfiQ99VUfwCNSPX0Ipu9YPkUSoU/XmTkPrCZ qWSVFZnLyBl2W1K81N6chE9NYctrcRr5iCT/LdB4FqwlJmlHkk9dpk6oumrheGon 9PsXIG75UHE6/ZfP4kpWhmWPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUN1OzQkiU AMUYU+NLBiKoNsZRMmYwHwYDVR0jBBgwFoAUe14ORHE1uxchraYfZdx1yV9U2wIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MjI2L0VDNERGMzE0QkMx RjExRUZBQURBNzQ1RkM0RjlBRTAyL2UxNE9SSEUxdXhjaHJhWWZaZHgxeVY5VTJ3 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZTE0T1JIRTF1eGNocmFZZlpkeDF5VjlVMndJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 MjI2L0VDNERGMzE0QkMxRjExRUZBQURBNzQ1RkM0RjlBRTAyL2UxNE9SSEUxdXhj aHJhWWZaZHgxeVY5VTJ3SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGyhuI92L4qh/Cg4dKLrtZE/ghdTFqAYkPmcNuvmSYvH647MclxspHSK /3e1LbvJFIDdry4zcFS+gS2WQ7M6X7gnTWO3bEq1bbC4iLHa2zMuExso/koP19gU ipLRpdpVEidLKLrE0KEJa3L08XXIRRu0dXhkxW0glPzZJMettb1b1nX5EQR4Z5xN 04Og504R/HAatBsO7s6dXWkWZwXH3mPG05v34t5g+W0CZ15/UzrdiYJi4HkyXMAA CNSKH3G37ea00Mmvuk7P2eXD/2+F1iSifM40X2fFNE+JKTClYfRSXCsblKwBTbnS heROkg4nFriwjO/ZOEeR3akbCtJcJzk= -----END CERTIFICATE-----Generated at Sun Jun 15 08:48:58 2025 by rpki-client