$ rpki-client -vvf rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.mft File: s5m0raB1Aagp1W8h2o613DIDSlY.mft (raw, json) Hash identifier: sUra9FXnrxQKWp94t7VmaHfJpMl6g2fJ1op+MOTzXpw= Subject key identifier: 85:19:1E:02:5A:5B:98:95:E9:E6:F6:26:F4:EA:6A:34:0B:4A:F0:F1 Authority key identifier: B3:99:B4:AD:A0:75:01:A8:29:D5:6F:21:DA:8E:B5:DC:32:03:4A:56 Certificate issuer: /CN=A91D98FC/serialNumber=B399B4ADA07501A829D56F21DA8EB5DC32034A56 Certificate serial: 0CB6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5m0raB1Aagp1W8h2o613DIDSlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.mft Manifest number: 0CA8 Signing time: Sat 14 Jun 2025 18:04:31 +0000 Manifest this update: Sat 14 Jun 2025 18:04:31 +0000 Manifest next update: Sat 21 Jun 2025 18:04:31 +0000 Files and hashes: 1: s5m0raB1Aagp1W8h2o613DIDSlY.crl (hash: qeKcr9sJLmOzbfw0DXvtnm31buiv5W41tEq3P61Z8gk=) 2: 238AAE04B3CD11EF82D5B34FC4F9AE02.roa (hash: Vh7yMYlqWkmmCVoJUzEKALaYDnLO+UKuaoILrbL+tGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.crl rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5m0raB1Aagp1W8h2o613DIDSlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:04:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3254 (0xcb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D98FC, serialNumber=B399B4ADA07501A829D56F21DA8EB5DC32034A56 Validity Not Before: Jun 14 18:04:31 2025 GMT Not After : Jun 21 18:04:31 2025 GMT Subject: CN=684db9af-71ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f2:b1:63:b7:f2:61:a4:42:be:b4:97:8c:87: 16:43:d1:46:7f:e0:a9:66:6a:05:10:4c:1c:26:ba: 95:a8:99:84:47:4d:27:5d:b5:13:cc:5c:11:65:bb: a0:5a:36:d2:b8:23:d5:c9:1c:4b:f8:5b:ba:19:fc: d6:40:d0:ad:f9:3b:b6:f1:21:bc:c3:1d:21:8a:c0: 08:f3:91:c0:86:99:8d:c5:c6:f0:b7:ea:ac:bd:f8: 01:49:f5:b9:b2:03:45:f2:a0:28:f5:1f:2f:41:4f: 7d:c4:ad:3a:60:b5:ba:98:29:b4:20:4c:62:90:b7: 38:e8:57:d6:d7:62:0c:e5:92:03:6f:78:33:c9:9f: 60:8d:6a:e1:9e:e3:40:9b:96:8b:0f:6a:89:21:a8: a5:f9:fa:d0:aa:82:e4:91:87:c4:fa:3a:49:46:eb: c7:1f:71:dd:1b:bb:3e:85:3b:6b:54:fb:ae:f4:72: a9:66:a9:cb:0f:1e:b4:22:bf:a5:6f:44:6f:ad:62: 75:c3:76:e0:47:0b:00:78:75:53:9f:5a:14:54:2d: ef:7d:a9:65:51:83:74:b2:01:09:4b:3a:6b:a8:1f: 33:1f:d9:84:4a:5e:15:60:50:21:22:0d:1a:b8:40: 8f:5d:16:8a:29:20:e1:f3:45:61:66:83:b0:49:da: 7d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:19:1E:02:5A:5B:98:95:E9:E6:F6:26:F4:EA:6A:34:0B:4A:F0:F1 X509v3 Authority Key Identifier: keyid:B3:99:B4:AD:A0:75:01:A8:29:D5:6F:21:DA:8E:B5:DC:32:03:4A:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5m0raB1Aagp1W8h2o613DIDSlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:2a:11:e5:08:ed:65:01:ba:fb:35:cb:76:4b:bf:35:3a:44: eb:d9:10:73:c4:f8:1d:77:0c:6f:80:59:2b:ea:b3:99:bb:6b: 4e:ed:d3:0f:d3:37:45:fc:90:74:27:1a:15:3c:f4:91:37:88: 3e:6d:65:bd:ca:5e:a3:ba:6e:4e:2a:04:a2:31:f7:94:d7:f6: a7:68:6b:62:5a:a5:22:6f:4f:54:0c:63:cb:a8:14:1d:27:8f: a9:69:25:a2:72:04:89:7c:7c:cf:5e:df:a5:bc:5c:f9:00:b9: 54:91:0a:bc:16:e0:5d:c6:b7:51:cc:b1:eb:4e:bf:9c:df:4a: 4f:2b:36:0f:3f:e4:d0:ed:50:76:fa:33:ad:ab:a2:8c:d2:37: 7e:08:20:31:1c:c7:8c:3d:58:da:b2:96:0e:66:80:00:99:60: 04:8c:7e:18:7c:6b:cd:b9:5b:2e:c7:d6:ed:e1:3b:d4:6a:84: 76:aa:4a:4d:8e:79:c5:4d:44:51:2f:d0:9a:1a:52:56:f2:5a: a4:f3:01:6f:ee:ab:9d:0b:86:f0:5d:2b:aa:14:fc:22:15:c5: 5a:52:38:2b:bb:89:c7:79:c2:68:f3:6d:ef:0c:64:a0:62:00: 79:fc:fb:42:38:83:51:3b:67:5a:ae:ea:d8:4c:26:5c:68:06: 4d:9f:65:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk4RkMxMTAvBgNVBAUTKEIzOTlCNEFEQTA3NTAxQTgyOUQ1NkYyMURBOEVCNURD MzIwMzRBNTYwHhcNMjUwNjE0MTgwNDMxWhcNMjUwNjIxMTgwNDMxWjAYMRYwFAYD VQQDEw02ODRkYjlhZi03MWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6PKxY7fyYaRCvrSXjIcWQ9FGf+CpZmoFEEwcJrqVqJmER00nXbUTzFwRZbug WjbSuCPVyRxL+Fu6GfzWQNCt+Tu28SG8wx0hisAI85HAhpmNxcbwt+qsvfgBSfW5 sgNF8qAo9R8vQU99xK06YLW6mCm0IExikLc46FfW12IM5ZIDb3gzyZ9gjWrhnuNA m5aLD2qJIail+frQqoLkkYfE+jpJRuvHH3HdG7s+hTtrVPuu9HKpZqnLDx60Ir+l b0RvrWJ1w3bgRwsAeHVTn1oUVC3vfallUYN0sgEJSzprqB8zH9mESl4VYFAhIg0a uECPXRaKKSDh80VhZoOwSdp9OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUZHgJa W5iV6eb2JvTqajQLSvDxMB8GA1UdIwQYMBaAFLOZtK2gdQGoKdVvIdqOtdwyA0pW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOThGQy8xQzg5OUUyNkY0 RUMxMUU5OEZCRTlCMEZDNEY5QUUwMi9zNW0wcmFCMUFhZ3AxVzhoMm82MTNESURT bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M1bTByYUIxQWFncDFXOGgybzYxM0RJRFNsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OThGQy8xQzg5OUUyNkY0RUMxMUU5OEZCRTlCMEZDNEY5QUUwMi9zNW0wcmFCMUFh Z3AxVzhoMm82MTNESURTbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEKhHlCO1lAbr7Nct2S781OkTr2RBzxPgddwxvgFkr6rOZu2tO7dMP 0zdF/JB0JxoVPPSRN4g+bWW9yl6jum5OKgSiMfeU1/anaGtiWqUib09UDGPLqBQd J4+paSWicgSJfHzPXt+lvFz5ALlUkQq8FuBdxrdRzLHrTr+c30pPKzYPP+TQ7VB2 +jOtq6KM0jd+CCAxHMeMPVjaspYOZoAAmWAEjH4YfGvNuVsux9bt4TvUaoR2qkpN jnnFTURRL9CaGlJW8lqk8wFv7qudC4bwXSuqFPwiFcVaUjgru4nHecJo823vDGSg YgB5/PtCOINRO2darurYTCZcaAZNn2Xm -----END CERTIFICATE-----Generated at Sun Jun 15 08:35:59 2025 by rpki-client