$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft File: 5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft (raw, json) Hash identifier: HJNwm52HCXJOwZwYtFUSDR4J1KfI1YZtWslJJ5PQIn8= Subject key identifier: 67:24:7C:9F:F6:DF:68:3E:2E:12:76:B4:BC:B6:8D:11:B5:7D:65:D2 Authority key identifier: E4:6B:BF:01:76:89:56:E8:66:AE:C4:43:F2:BB:13:50:1F:2E:73:79 Certificate issuer: /CN=A91D9F0A/serialNumber=E46BBF01768956E866AEC443F2BB13501F2E7379 Certificate serial: 13B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft Manifest number: 1391 Signing time: Mon 16 Jun 2025 17:02:19 +0000 Manifest this update: Mon 16 Jun 2025 17:02:18 +0000 Manifest next update: Mon 23 Jun 2025 17:02:18 +0000 Files and hashes: 1: 5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl (hash: q9rw5jATEsVAQLycEoqC3RSuA5C+hT5jGXSj8j40fDs=) 2: 3F6E94ACF5CF11EF90104A57C4F9AE02.roa (hash: 7uQFFcgxthASWlrUTTAafSbuld5eAvVIoBe4dcMvHgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 17:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5048 (0x13b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9F0A, serialNumber=E46BBF01768956E866AEC443F2BB13501F2E7379 Validity Not Before: Jun 16 17:02:18 2025 GMT Not After : Jun 23 17:02:18 2025 GMT Subject: CN=68504e1b-e7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7c:38:95:14:f1:69:20:82:9c:d1:75:6e:64: a1:84:f1:1d:b4:53:8a:db:f0:88:0c:db:46:4d:d6: bf:fe:c6:06:8a:ae:4d:51:d7:ee:b3:50:f7:c3:f9: 63:50:50:b5:a5:59:eb:2d:fb:1f:87:2c:4f:00:9f: 78:b4:2e:d8:f5:aa:dd:bb:26:45:9b:e9:df:47:c0: de:09:b4:4e:e6:b6:a0:34:75:5a:72:bd:1e:aa:28: 81:bf:a0:b3:3c:c5:aa:9e:d7:a4:f5:1d:b5:5e:18: 7e:b2:3e:ba:69:eb:e4:97:4c:9b:05:d8:d9:ad:ae: 01:7e:19:83:41:0f:8e:26:db:b5:cc:fe:ec:17:22: 3d:27:98:22:98:00:46:17:88:8b:60:af:3a:2e:47: 27:96:b0:52:88:13:dc:2f:c1:8a:c6:8c:89:e0:83: 37:91:17:0d:b8:26:09:50:43:de:b4:8b:d9:c7:6a: 92:cf:d8:5c:ec:f3:8e:11:e9:72:c0:0a:13:20:78: ee:a7:ae:41:25:36:dd:f3:2f:17:56:a4:41:e6:a4: 5e:8c:a4:f3:33:78:83:19:a1:58:6c:cc:30:ef:14: 1b:48:8a:07:20:66:5f:4f:31:5b:9a:5e:5b:07:6b: b8:f9:64:05:36:8d:d7:70:29:df:bf:77:13:55:c5: 5e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:24:7C:9F:F6:DF:68:3E:2E:12:76:B4:BC:B6:8D:11:B5:7D:65:D2 X509v3 Authority Key Identifier: keyid:E4:6B:BF:01:76:89:56:E8:66:AE:C4:43:F2:BB:13:50:1F:2E:73:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:78:0e:73:da:9f:2f:e3:e6:13:02:95:4f:4d:73:04:d8:51: 49:a4:dc:c4:dd:08:0d:ae:7a:3b:c2:47:69:19:7e:99:e3:7e: a9:83:04:b8:b8:e1:07:fa:81:29:3e:e6:ab:9b:8c:1f:44:80: ae:ff:35:17:2a:27:a2:a6:10:b6:75:9d:e4:1b:86:7c:5a:eb: 87:2e:6e:44:ab:3f:d8:d7:38:a6:d6:c8:29:59:25:19:fc:97: b8:8e:60:11:a1:6c:6e:19:97:0c:2e:97:94:32:11:9f:a0:cc: ae:28:d3:82:61:9e:4a:ec:f8:15:cd:0d:df:09:05:2b:84:01: c1:3c:f0:28:07:be:f0:1b:8c:55:22:0b:91:17:19:fc:d3:80: ab:e4:e4:be:56:59:e6:04:b1:8c:c4:2f:2d:6a:7b:5e:20:a1: 5c:17:0d:3e:0f:bf:f4:35:0f:c3:dd:52:62:0c:b4:e8:dc:9c: 9d:f0:b8:f1:b4:31:e6:b3:25:e2:b5:0f:bd:c3:f2:d4:5d:fc: e8:75:77:2d:3c:b1:28:1c:02:47:ce:08:71:48:28:90:a9:ca: 42:42:a9:d0:6d:15:40:58:9a:09:c2:fa:cf:14:7b:37:f9:e7: eb:73:9b:cd:7c:1f:87:fc:87:64:f2:a9:9d:3d:9b:fe:12:8a: 0e:18:06:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGMEExMTAvBgNVBAUTKEU0NkJCRjAxNzY4OTU2RTg2NkFFQzQ0M0YyQkIxMzUw MUYyRTczNzkwHhcNMjUwNjE2MTcwMjE4WhcNMjUwNjIzMTcwMjE4WjAYMRYwFAYD VQQDEw02ODUwNGUxYi1lN2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXw4lRTxaSCCnNF1bmShhPEdtFOK2/CIDNtGTda//sYGiq5NUdfus1D3w/lj UFC1pVnrLfsfhyxPAJ94tC7Y9arduyZFm+nfR8DeCbRO5ragNHVacr0eqiiBv6Cz PMWqntek9R21Xhh+sj66aevkl0ybBdjZra4BfhmDQQ+OJtu1zP7sFyI9J5gimABG F4iLYK86LkcnlrBSiBPcL8GKxoyJ4IM3kRcNuCYJUEPetIvZx2qSz9hc7POOEely wAoTIHjup65BJTbd8y8XVqRB5qRejKTzM3iDGaFYbMww7xQbSIoHIGZfTzFbml5b B2u4+WQFNo3XcCnfv3cTVcVeoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGckfJ/2 32g+LhJ2tLy2jRG1fWXSMB8GA1UdIwQYMBaAFORrvwF2iVboZq7EQ/K7E1AfLnN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUYwQS9FODYwMjFENkEy M0MxMUU4OEE2RkU2NkNDNEY5QUUwMi81R3VfQVhhSlZ1aG1yc1JEOHJzVFVCOHVj M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVHdV9BWGFKVnVobXJzUkQ4cnNUVUI4dWMzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUYwQS9FODYwMjFENkEyM0MxMUU4OEE2RkU2NkNDNEY5QUUwMi81R3VfQVhhSlZ1 aG1yc1JEOHJzVFVCOHVjM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDeA5z2p8v4+YTApVPTXME2FFJpNzE3QgNrno7wkdpGX6Z436pgwS4 uOEH+oEpPuarm4wfRICu/zUXKieiphC2dZ3kG4Z8WuuHLm5Eqz/Y1zim1sgpWSUZ /Je4jmARoWxuGZcMLpeUMhGfoMyuKNOCYZ5K7PgVzQ3fCQUrhAHBPPAoB77wG4xV IguRFxn804Cr5OS+VlnmBLGMxC8tanteIKFcFw0+D7/0NQ/D3VJiDLTo3Jyd8Ljx tDHmsyXitQ+9w/LUXfzodXctPLEoHAJHzghxSCiQqcpCQqnQbRVAWJoJwvrPFHs3 +efrc5vNfB+H/Idk8qmdPZv+EooOGAbi -----END CERTIFICATE-----Generated at Tue Jun 17 10:25:30 2025 by rpki-client