$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.mft File: 5dmsjXWxbbnyPICt2LO72OWLaHg.mft (raw, json) Hash identifier: N4XNY1b/AhIFDaF1zkLg+Djemq8xgfc5OynnkwMeHsI= Subject key identifier: DE:45:63:A3:7A:CC:4A:5C:AB:0F:11:C0:D4:D1:3F:39:2A:33:6A:22 Authority key identifier: E5:D9:AC:8D:75:B1:6D:B9:F2:3C:80:AD:D8:B3:BB:D8:E5:8B:68:78 Certificate issuer: /CN=A91D8400/serialNumber=E5D9AC8D75B16DB9F23C80ADD8B3BBD8E58B6878 Certificate serial: 0404 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5dmsjXWxbbnyPICt2LO72OWLaHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.mft Manifest number: 03FF Signing time: Sun 15 Jun 2025 00:10:30 +0000 Manifest this update: Sun 15 Jun 2025 00:10:30 +0000 Manifest next update: Sun 22 Jun 2025 00:10:30 +0000 Files and hashes: 1: 5dmsjXWxbbnyPICt2LO72OWLaHg.crl (hash: k6wxKbeuecgPqU1tXZOLMLCwSGiG6vCL8oF/BSY9G2g=) 2: 46C1646C781611ECADCDAB0EC4F9AE02.roa (hash: X0bJVDOuH3hxzxDqtFhaGE8zyPysnrk6jtT4gfdw6QQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.crl rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5dmsjXWxbbnyPICt2LO72OWLaHg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1028 (0x404) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8400, serialNumber=E5D9AC8D75B16DB9F23C80ADD8B3BBD8E58B6878 Validity Not Before: Jun 15 00:10:30 2025 GMT Not After : Jun 22 00:10:30 2025 GMT Subject: CN=684e0f76-b33e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:25:99:fd:b7:60:15:62:75:af:5b:95:10:e9: b0:4d:bd:20:d5:26:18:56:27:1c:1d:8f:56:d5:82: 81:7d:9a:70:84:62:e9:41:6e:10:44:19:9e:ba:24: 20:94:a5:67:c5:11:db:a2:89:47:54:98:b1:ae:f2: 7c:63:58:d0:c6:83:43:34:91:37:92:e3:a8:6a:e7: 1a:5d:96:e9:9d:98:bd:07:a9:de:bb:e7:b6:58:60: 54:7f:f1:ae:7f:1a:f3:41:7d:18:f0:19:1b:a9:f4: 19:25:44:89:e4:44:b4:a5:78:d2:d8:40:1b:7c:0b: d1:55:bf:31:5e:7f:f9:37:cc:f0:f6:be:4c:7b:23: 7a:aa:30:f9:23:00:50:13:18:ce:d5:e6:9d:6a:fa: ce:52:67:2e:de:bc:74:3e:79:65:8c:ad:d5:f4:21: eb:58:26:88:61:6a:5a:fc:c0:1f:33:77:14:b5:cd: 13:7f:91:de:0a:a3:c9:76:24:1c:19:3d:78:50:94: e9:0e:f3:71:8a:90:a8:8d:bd:f2:e8:97:d2:09:0d: 62:36:ba:4b:76:5f:72:2a:62:bf:c5:a7:92:eb:6b: 21:2f:47:3f:63:f1:03:45:35:0e:96:e6:cf:82:20: d1:57:98:01:71:74:1d:5b:35:8c:54:05:ac:2f:83: db:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:45:63:A3:7A:CC:4A:5C:AB:0F:11:C0:D4:D1:3F:39:2A:33:6A:22 X509v3 Authority Key Identifier: keyid:E5:D9:AC:8D:75:B1:6D:B9:F2:3C:80:AD:D8:B3:BB:D8:E5:8B:68:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5dmsjXWxbbnyPICt2LO72OWLaHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:bd:c5:ec:41:04:86:68:79:83:d5:3e:d6:fa:3c:6e:a0:cd: a5:f3:e3:04:a2:ed:52:08:57:d7:0f:8b:33:bd:45:c2:f2:2b: 76:ba:30:8a:76:e8:ab:41:ac:bf:17:1e:99:39:c9:d2:28:01: e8:8a:90:58:0d:c1:3e:36:c4:3f:ea:b9:67:57:4f:e0:56:e3: 4f:e9:47:84:39:f0:a5:d0:3e:4f:f2:d1:49:60:74:19:15:9f: 43:57:5a:72:ab:cf:7f:be:87:76:f3:c2:9d:e6:68:cc:9f:45: 3e:09:33:00:ea:cd:5a:62:e2:7a:08:5f:c2:70:90:87:8e:d7: 0a:5d:19:8d:7d:a2:2e:bc:d1:b4:63:8b:22:7e:cb:e1:9d:8f: 6d:65:14:e0:58:d1:1b:80:f1:83:a0:65:66:a8:cd:6f:94:42: 8c:e9:d7:35:bd:a0:ae:f2:ea:eb:ba:12:a8:3d:b0:5d:16:1b: 69:9b:08:5d:60:bd:75:f6:7b:fd:92:cf:51:c5:f9:ce:82:b8: ed:95:ab:b6:46:35:6d:ad:d9:99:47:21:c8:02:96:ba:00:ba: f2:c2:a6:b4:38:ea:2a:5a:11:4b:cb:66:b2:3f:4d:a5:25:06: c7:51:b5:e3:b0:17:cf:af:42:8d:58:1f:91:1d:cf:14:77:27: 37:b5:9e:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg0MDAxMTAvBgNVBAUTKEU1RDlBQzhENzVCMTZEQjlGMjNDODBBREQ4QjNCQkQ4 RTU4QjY4NzgwHhcNMjUwNjE1MDAxMDMwWhcNMjUwNjIyMDAxMDMwWjAYMRYwFAYD VQQDEw02ODRlMGY3Ni1iMzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSWZ/bdgFWJ1r1uVEOmwTb0g1SYYViccHY9W1YKBfZpwhGLpQW4QRBmeuiQg lKVnxRHboolHVJixrvJ8Y1jQxoNDNJE3kuOoaucaXZbpnZi9B6neu+e2WGBUf/Gu fxrzQX0Y8BkbqfQZJUSJ5ES0pXjS2EAbfAvRVb8xXn/5N8zw9r5MeyN6qjD5IwBQ ExjO1eadavrOUmcu3rx0PnlljK3V9CHrWCaIYWpa/MAfM3cUtc0Tf5HeCqPJdiQc GT14UJTpDvNxipCojb3y6JfSCQ1iNrpLdl9yKmK/xaeS62shL0c/Y/EDRTUOlubP giDRV5gBcXQdWzWMVAWsL4PbyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5FY6N6 zEpcqw8RwNTRPzkqM2oiMB8GA1UdIwQYMBaAFOXZrI11sW258jyArdizu9jli2h4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODQwMC9GNjgxQkJBNDc4 MTExMUVDQTM5N0QwMzRDNEY5QUUwMi81ZG1zalhXeGJibnlQSUN0MkxPNzJPV0xh SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVkbXNqWFd4YmJueVBJQ3QyTE83Mk9XTGFIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODQwMC9GNjgxQkJBNDc4MTExMUVDQTM5N0QwMzRDNEY5QUUwMi81ZG1zalhXeGJi bnlQSUN0MkxPNzJPV0xhSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlvcXsQQSGaHmD1T7W+jxuoM2l8+MEou1SCFfXD4szvUXC8it2ujCK duirQay/Fx6ZOcnSKAHoipBYDcE+NsQ/6rlnV0/gVuNP6UeEOfCl0D5P8tFJYHQZ FZ9DV1pyq89/vod288Kd5mjMn0U+CTMA6s1aYuJ6CF/CcJCHjtcKXRmNfaIuvNG0 Y4sifsvhnY9tZRTgWNEbgPGDoGVmqM1vlEKM6dc1vaCu8urruhKoPbBdFhtpmwhd YL119nv9ks9RxfnOgrjtlau2RjVtrdmZRyHIApa6ALrywqa0OOoqWhFLy2ayP02l JQbHUbXjsBfPr0KNWB+RHc8Udyc3tZ7S -----END CERTIFICATE-----Generated at Sun Jun 15 07:14:57 2025 by rpki-client