$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/5F9h77yy57HkFLLL3DRQ9_hGGJ0.mft File: 5F9h77yy57HkFLLL3DRQ9_hGGJ0.mft (raw, json) Hash identifier: m1BMDJQqc0nrxpxTQep2uDplKXftaTCKXKTubv0dm78= Subject key identifier: 62:E9:FB:EC:A3:B7:D5:B6:1D:5D:88:CB:81:AE:F4:12:BB:E2:AC:6C Authority key identifier: E4:5F:61:EF:BC:B2:E7:B1:E4:14:B2:CB:DC:34:50:F7:F8:46:18:9D Certificate issuer: /CN=A91E4ED1/serialNumber=E45F61EFBCB2E7B1E414B2CBDC3450F7F846189D Certificate serial: 0C27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5F9h77yy57HkFLLL3DRQ9_hGGJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/5F9h77yy57HkFLLL3DRQ9_hGGJ0.mft Manifest number: 0C25 Signing time: Sat 14 Jun 2025 18:27:37 +0000 Manifest this update: Sat 14 Jun 2025 18:27:36 +0000 Manifest next update: Sat 21 Jun 2025 18:27:36 +0000 Files and hashes: 1: 5F9h77yy57HkFLLL3DRQ9_hGGJ0.crl (hash: E5yI22jOwIhTN3HE2reZAMWrMDRTA/ejDsvuLWXGitg=) 2: D77C5AC003E611F0A9F5535FC4F9AE02.roa (hash: C3dI3f47oUkTpODJD7lPzsLlPec49Cck1X3kjiuVXDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/5F9h77yy57HkFLLL3DRQ9_hGGJ0.crl rsync://rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/5F9h77yy57HkFLLL3DRQ9_hGGJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5F9h77yy57HkFLLL3DRQ9_hGGJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:27:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3111 (0xc27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4ED1, serialNumber=E45F61EFBCB2E7B1E414B2CBDC3450F7F846189D Validity Not Before: Jun 14 18:27:36 2025 GMT Not After : Jun 21 18:27:36 2025 GMT Subject: CN=684dbf18-094d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f8:fb:0e:81:36:56:61:c6:e9:ce:61:03:67: 76:e9:5a:b2:be:d5:e0:7f:bc:e7:bd:6e:f7:cf:3a: 63:ff:50:26:de:70:f1:45:4e:d0:bc:fd:a7:35:8b: 3e:74:f4:be:af:1b:a7:3f:29:eb:46:1b:24:9e:f3: b2:fb:be:05:c4:42:be:d8:4a:b8:49:51:35:ea:68: 8e:42:ce:ce:cf:a2:9f:ad:70:cc:7d:8d:44:2c:de: 94:8d:e0:a2:cd:62:1f:54:dd:93:8e:c4:fa:61:8a: e5:c4:17:74:f0:95:79:68:e1:4e:37:6f:25:c5:1d: b1:6c:38:e1:67:a7:29:8a:39:ab:f3:d0:2a:7a:d5: 50:c3:71:db:18:05:44:eb:b8:5e:53:d3:e2:07:75: 34:62:ae:8c:76:54:4e:ac:f2:bf:18:14:7c:95:b4: 7d:ac:75:e9:79:19:83:96:b1:4b:28:85:5e:ea:3a: 71:e1:5d:be:7e:37:47:05:93:8f:19:db:4d:da:79: f6:c5:c6:c2:f2:69:1d:ef:5d:81:86:45:5a:16:89: cf:85:9c:f0:e3:b1:21:a0:19:6a:86:c8:32:52:dc: 27:ab:08:33:da:b5:dc:fd:a4:16:50:c5:e3:e5:0c: bc:dd:f8:de:84:f4:62:76:d7:7e:53:a7:19:b0:99: 39:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E9:FB:EC:A3:B7:D5:B6:1D:5D:88:CB:81:AE:F4:12:BB:E2:AC:6C X509v3 Authority Key Identifier: keyid:E4:5F:61:EF:BC:B2:E7:B1:E4:14:B2:CB:DC:34:50:F7:F8:46:18:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/5F9h77yy57HkFLLL3DRQ9_hGGJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5F9h77yy57HkFLLL3DRQ9_hGGJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/5F9h77yy57HkFLLL3DRQ9_hGGJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:aa:c2:b2:64:c9:81:28:43:d9:df:c0:90:f3:dd:65:91:37: 83:87:18:90:9a:eb:48:94:11:d0:07:c6:9a:ec:bf:9a:ad:86: e5:c0:38:f6:92:e1:3d:de:a8:04:b2:3b:01:ae:b7:18:8f:ca: af:7b:8c:57:5b:11:e4:04:ee:32:ec:e1:0f:1c:17:f6:46:85: 2b:eb:b7:cd:2c:df:61:de:a3:f1:ed:ef:06:d4:d9:4d:66:bf: 3f:fa:f2:4f:da:f3:38:23:9c:03:c4:57:17:45:61:54:a3:91: 9d:cf:b3:6f:9f:08:4e:b9:2c:c6:20:b5:5f:c1:67:e4:9f:4b: ba:ee:cd:a5:70:73:35:0d:7a:2a:34:14:ff:ac:9f:70:b6:a1: 2a:2b:09:fd:89:e7:eb:d5:36:4b:4a:6f:a9:8d:4f:9c:32:87: dd:1c:2a:ba:13:cd:5f:46:00:b3:56:92:4b:ac:9f:02:55:b4: 95:8f:24:7f:74:17:c1:5a:5c:c4:15:4d:89:33:7e:89:30:91: e3:c3:d3:ac:8a:80:02:2b:ed:14:8c:d9:d3:22:88:26:5a:a0: ab:76:c9:31:8d:5c:52:74:b8:16:84:4d:d5:df:11:7e:9c:22: 3b:2b:a8:2b:49:7f:60:37:d5:43:da:60:f5:cc:77:0c:2b:59: fe:7a:55:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRDExMTAvBgNVBAUTKEU0NUY2MUVGQkNCMkU3QjFFNDE0QjJDQkRDMzQ1MEY3 Rjg0NjE4OUQwHhcNMjUwNjE0MTgyNzM2WhcNMjUwNjIxMTgyNzM2WjAYMRYwFAYD VQQDEw02ODRkYmYxOC0wOTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPj7DoE2VmHG6c5hA2d26VqyvtXgf7znvW73zzpj/1Am3nDxRU7QvP2nNYs+ dPS+rxunPynrRhsknvOy+74FxEK+2Eq4SVE16miOQs7Oz6KfrXDMfY1ELN6UjeCi zWIfVN2TjsT6YYrlxBd08JV5aOFON28lxR2xbDjhZ6cpijmr89AqetVQw3HbGAVE 67heU9PiB3U0Yq6MdlROrPK/GBR8lbR9rHXpeRmDlrFLKIVe6jpx4V2+fjdHBZOP GdtN2nn2xcbC8mkd712BhkVaFonPhZzw47EhoBlqhsgyUtwnqwgz2rXc/aQWUMXj 5Qy83fjehPRidtd+U6cZsJk57QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLp++yj t9W2HV2Iy4Gu9BK74qxsMB8GA1UdIwQYMBaAFORfYe+8suex5BSyy9w0UPf4Rhid MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVEMS81RkRENzhCMjBC NjQxMUVBOTA5MjMwNjZDNEY5QUUwMi81RjloNzd5eTU3SGtGTExMM0RSUTlfaEdH SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVGOWg3N3l5NTdIa0ZMTEwzRFJROV9oR0dKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVEMS81RkRENzhCMjBCNjQxMUVBOTA5MjMwNjZDNEY5QUUwMi81RjloNzd5eTU3 SGtGTExMM0RSUTlfaEdHSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVqsKyZMmBKEPZ38CQ891lkTeDhxiQmutIlBHQB8aa7L+arYblwDj2 kuE93qgEsjsBrrcYj8qve4xXWxHkBO4y7OEPHBf2RoUr67fNLN9h3qPx7e8G1NlN Zr8/+vJP2vM4I5wDxFcXRWFUo5Gdz7NvnwhOuSzGILVfwWfkn0u67s2lcHM1DXoq NBT/rJ9wtqEqKwn9iefr1TZLSm+pjU+cMofdHCq6E81fRgCzVpJLrJ8CVbSVjyR/ dBfBWlzEFU2JM36JMJHjw9OsioACK+0UjNnTIogmWqCrdskxjVxSdLgWhE3V3xF+ nCI7K6grSX9gN9VD2mD1zHcMK1n+elXI -----END CERTIFICATE-----Generated at Sun Jun 15 08:49:06 2025 by rpki-client