$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft File: 53anM2-PZ4WjagEEaEC1FKDUGSk.mft (raw, json) Hash identifier: ULXb+eEOuYYxyrf3csyjZhaPDtgOcbL/nI/fR146gvg= Subject key identifier: 5D:C7:D0:C6:A8:8E:28:F9:D5:75:AE:9E:CB:6E:C2:E1:0D:E5:78:B9 Authority key identifier: E7:76:A7:33:6F:8F:67:85:A3:6A:01:04:68:40:B5:14:A0:D4:19:29 Certificate issuer: /CN=A91E1486/serialNumber=E776A7336F8F6785A36A01046840B514A0D41929 Certificate serial: 0C47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft Manifest number: 0C41 Signing time: Sat 14 Jun 2025 18:20:30 +0000 Manifest this update: Sat 14 Jun 2025 18:20:29 +0000 Manifest next update: Sat 21 Jun 2025 18:20:29 +0000 Files and hashes: 1: 53anM2-PZ4WjagEEaEC1FKDUGSk.crl (hash: EP96uYE2OYEsw1Inqw0e/5wyj9hRxcIChzYvS8ET980=) 2: 964FB9AE06A111EAAE446E30C4F9AE02.roa (hash: 7T6rttGkDUZMLr7YNcGWXFP6okk75uTuQj2yDiVmYPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.crl rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3143 (0xc47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1486, serialNumber=E776A7336F8F6785A36A01046840B514A0D41929 Validity Not Before: Jun 14 18:20:29 2025 GMT Not After : Jun 21 18:20:29 2025 GMT Subject: CN=684dbd6e-8269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bc:ab:57:f1:11:aa:02:84:9d:9d:42:10:a7: 7e:66:87:41:40:f6:43:49:bd:68:5d:b3:ff:72:f4: 9b:01:f8:df:05:e0:26:e8:63:d6:a5:05:f7:75:e7: 95:aa:39:0d:f0:85:f9:c0:2c:37:9e:4b:44:bb:9a: 7f:7d:49:5c:b2:1f:80:fe:76:21:74:91:e4:b7:38: ca:55:98:43:4d:ad:ab:67:e2:71:a2:4e:52:db:39: 5b:44:7d:fb:40:ca:84:93:f8:8b:3e:22:49:18:f3: 6b:ad:be:84:c4:a8:c7:6a:d5:28:e6:4e:ec:97:b6: 58:7e:c3:3b:ed:82:57:71:42:01:65:a9:84:ec:d0: b1:0f:e5:64:1e:e1:02:13:8b:a6:0f:e0:65:72:73: 3c:cc:85:ce:17:95:85:1f:17:ac:25:c4:40:18:fd: a4:9f:ed:6d:d2:7e:c9:da:fc:70:10:2c:41:c9:94: a7:aa:c1:7f:1d:0a:fb:ae:18:fc:67:f3:7d:ce:fb: b4:33:51:d3:e2:16:8a:3c:8e:d2:e8:91:a1:c2:24: c2:93:5f:28:0d:81:8f:c5:98:18:28:a4:0c:fc:59: c9:48:f9:e4:f4:ca:22:a7:61:e6:86:8a:07:c6:4b: 20:0b:44:1b:fe:7e:15:68:f0:5d:b3:be:91:dd:63: b1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C7:D0:C6:A8:8E:28:F9:D5:75:AE:9E:CB:6E:C2:E1:0D:E5:78:B9 X509v3 Authority Key Identifier: keyid:E7:76:A7:33:6F:8F:67:85:A3:6A:01:04:68:40:B5:14:A0:D4:19:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:c3:83:f1:b2:82:71:4a:92:f2:99:47:17:a7:b7:6d:f1:da: 45:bf:1a:d0:c1:1a:42:42:4d:43:fb:f7:55:2f:21:32:ad:8a: 2f:7d:4e:8a:e8:a6:a8:bd:94:8c:45:b1:70:b6:2f:75:de:e9: e4:f6:0c:89:ba:de:52:7f:80:ef:12:b7:3f:4b:c5:fd:33:e3: 7a:18:25:8f:54:5f:a6:1a:08:50:46:51:a7:de:51:e4:bd:a8: 1f:b7:3e:78:2b:a2:ea:57:1a:33:22:cf:52:ac:83:60:ff:e3: 9c:6a:9f:b0:9b:75:32:c3:da:83:91:54:0b:1b:ee:3b:71:d0: 1e:8f:fa:9c:c4:7c:fe:35:a7:23:91:20:1b:6c:f3:52:86:cf: 89:49:8c:b2:95:a2:1c:4a:0a:2c:f8:47:45:19:5a:bf:8c:f4: c4:2d:71:38:04:a5:cc:cd:89:ea:69:2c:57:8e:97:2c:5c:17: c1:03:1c:0d:fa:40:d8:28:a6:0b:e0:bf:b5:dc:d0:3a:12:55: ff:70:13:29:36:7a:58:9e:a6:7c:c8:b3:56:01:eb:c2:c7:08: 74:0c:32:fd:f1:52:2f:26:1e:31:f9:5c:8f:74:d4:64:82:a2: cc:ca:2f:75:d5:a1:af:e7:91:85:1f:27:8d:c2:1a:91:1d:8b: f7:ef:97:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE0ODYxMTAvBgNVBAUTKEU3NzZBNzMzNkY4RjY3ODVBMzZBMDEwNDY4NDBCNTE0 QTBENDE5MjkwHhcNMjUwNjE0MTgyMDI5WhcNMjUwNjIxMTgyMDI5WjAYMRYwFAYD VQQDEw02ODRkYmQ2ZS04MjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7yrV/ERqgKEnZ1CEKd+ZodBQPZDSb1oXbP/cvSbAfjfBeAm6GPWpQX3deeV qjkN8IX5wCw3nktEu5p/fUlcsh+A/nYhdJHktzjKVZhDTa2rZ+Jxok5S2zlbRH37 QMqEk/iLPiJJGPNrrb6ExKjHatUo5k7sl7ZYfsM77YJXcUIBZamE7NCxD+VkHuEC E4umD+BlcnM8zIXOF5WFHxesJcRAGP2kn+1t0n7J2vxwECxByZSnqsF/HQr7rhj8 Z/N9zvu0M1HT4haKPI7S6JGhwiTCk18oDYGPxZgYKKQM/FnJSPnk9Moip2HmhooH xksgC0Qb/n4VaPBds76R3WOx7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3H0Mao jij51XWunstuwuEN5Xi5MB8GA1UdIwQYMBaAFOd2pzNvj2eFo2oBBGhAtRSg1Bkp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTQ4Ni8wNkM0QjJGRTA2 QTAxMUVBQUQ2OURDMkFDNEY5QUUwMi81M2FuTTItUFo0V2phZ0VFYUVDMUZLRFVH U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUzYW5NMi1QWjRXamFnRUVhRUMxRktEVUdTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTQ4Ni8wNkM0QjJGRTA2QTAxMUVBQUQ2OURDMkFDNEY5QUUwMi81M2FuTTItUFo0 V2phZ0VFYUVDMUZLRFVHU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3w4PxsoJxSpLymUcXp7dt8dpFvxrQwRpCQk1D+/dVLyEyrYovfU6K 6KaovZSMRbFwti913unk9gyJut5Sf4DvErc/S8X9M+N6GCWPVF+mGghQRlGn3lHk vagftz54K6LqVxozIs9SrINg/+Ocap+wm3Uyw9qDkVQLG+47cdAej/qcxHz+Nacj kSAbbPNShs+JSYyylaIcSgos+EdFGVq/jPTELXE4BKXMzYnqaSxXjpcsXBfBAxwN +kDYKKYL4L+13NA6ElX/cBMpNnpYnqZ8yLNWAevCxwh0DDL98VIvJh4x+VyPdNRk gqLMyi911aGv55GFHyeNwhqRHYv375fO -----END CERTIFICATE-----Generated at Sun Jun 15 05:11:25 2025 by rpki-client