$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft File: IsfsPNntTFDolKEbzXDQMQzV-Fk.mft (raw, json) Hash identifier: 09ljF+lxPPJLrsT3kQXP6arGnxtanZFfL5k7IaihydE= Subject key identifier: CE:14:3D:7A:79:22:AA:D7:F6:BC:32:80:E3:DE:65:32:F3:0E:62:33 Authority key identifier: 22:C7:EC:3C:D9:ED:4C:50:E8:94:A1:1B:CD:70:D0:31:0C:D5:F8:59 Certificate issuer: /CN=A91EC225/serialNumber=22C7EC3CD9ED4C50E894A11BCD70D0310CD5F859 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft Manifest number: 5E Signing time: Wed 18 Jun 2025 17:37:16 +0000 Manifest this update: Wed 18 Jun 2025 17:37:15 +0000 Manifest next update: Wed 25 Jun 2025 17:37:15 +0000 Files and hashes: 1: IsfsPNntTFDolKEbzXDQMQzV-Fk.crl (hash: HMKheSXD7XqE1Rc4a8O27pk6bM5tqRkRavaPvtL7vIw=) 2: 25D2B94CDECD11EFA79E4065C4F9AE02.roa (hash: AoCtdlkJJmrM0z3AC3jCQKm47jbQAWLBDnBBfT5EtYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.crl rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 17:37:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC225, serialNumber=22C7EC3CD9ED4C50E894A11BCD70D0310CD5F859 Validity Not Before: Jun 18 17:37:15 2025 GMT Not After : Jun 25 17:37:15 2025 GMT Subject: CN=6852f94c-ed57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6e:03:67:63:9a:d5:79:48:d0:81:85:76:7c: 79:db:69:a5:51:4c:eb:a0:6f:79:44:77:a3:f5:91: 64:28:23:87:f9:f0:93:2a:57:27:56:bd:fe:33:92: 05:7a:27:b8:f9:95:8f:4d:7e:68:e6:20:c2:a7:67: ed:39:aa:88:f4:eb:35:0b:86:12:f3:1e:53:33:d5: 9b:b8:72:b2:8b:a0:66:49:47:9a:f7:4b:b0:6a:8d: 31:24:1a:bd:b2:c9:4b:7e:2a:d4:2c:42:b8:d6:f9: 80:42:63:88:2a:a7:c4:39:b9:e9:a6:39:53:97:8b: a0:9e:93:4f:2f:b3:b6:c4:79:cd:5c:dc:04:00:0c: 4a:f7:32:7f:ff:3d:a9:66:ad:2f:35:2e:eb:e3:74: c1:1e:91:d3:18:cf:46:df:09:47:5c:bd:d9:31:49: 44:3f:21:76:54:9b:0d:dd:2b:c7:06:77:57:05:86: c2:23:0d:46:4d:35:cf:8d:cb:3d:e8:8b:e1:b2:d2: 8e:51:49:f7:a9:ef:c6:f4:62:f5:bf:33:2a:2a:fe: a5:03:1a:a9:77:85:0f:9d:01:25:92:d4:f8:87:d8: 9e:c2:fe:07:58:a8:bd:6f:17:36:f2:3d:f1:a1:95: 1e:59:1c:8a:7c:7a:5f:2c:75:37:88:db:1f:31:5e: f8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:14:3D:7A:79:22:AA:D7:F6:BC:32:80:E3:DE:65:32:F3:0E:62:33 X509v3 Authority Key Identifier: keyid:22:C7:EC:3C:D9:ED:4C:50:E8:94:A1:1B:CD:70:D0:31:0C:D5:F8:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:8c:fa:d7:b0:36:b2:00:27:0f:4a:9e:3a:ab:1a:e2:7c:97: 52:1b:bf:8d:7a:85:5e:17:c6:0e:6f:35:10:cf:4d:47:36:d3: 2e:14:11:9f:a1:f6:5c:2b:00:35:6f:b5:41:5f:06:d1:24:a6: 3d:80:fc:59:60:e2:49:1f:e6:26:16:ce:64:78:57:4b:63:40: e7:2a:c5:fc:a8:73:5d:31:8e:c6:32:9a:e4:2f:9b:e2:97:39: f6:f0:a5:d9:ad:84:64:77:8c:94:8d:68:9f:91:97:61:54:5c: 77:30:fb:15:ac:37:c1:f5:d9:0b:99:11:34:96:80:fd:37:95: ff:e8:8e:77:bb:58:a9:95:a5:d7:68:96:2c:5e:28:fe:e2:d7: c4:16:75:73:83:f6:09:17:87:aa:92:9a:51:4e:a3:9e:85:59: 85:b6:8a:12:ae:e6:10:47:51:da:be:45:3b:33:fa:c7:b6:2c: 29:6e:f4:54:c9:f6:f4:fc:b6:f7:31:f7:c4:59:4d:77:1a:72: 6f:22:02:32:d1:ec:23:33:72:26:cc:35:59:7b:e7:bd:4b:28: 6b:db:4c:e9:17:fd:a0:61:cd:b8:d2:a2:02:c0:8a:21:3d:dd: 23:ee:50:af:fe:0f:06:6d:71:27:d7:1e:f4:f6:7f:e8:3f:d8: 08:1d:10:71 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QzIyNTExMC8GA1UEBRMoMjJDN0VDM0NEOUVENEM1MEU4OTRBMTFCQ0Q3MEQwMzEw Q0Q1Rjg1OTAeFw0yNTA2MTgxNzM3MTVaFw0yNTA2MjUxNzM3MTVaMBgxFjAUBgNV BAMTDTY4NTJmOTRjLWVkNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnbgNnY5rVeUjQgYV2fHnbaaVRTOugb3lEd6P1kWQoI4f58JMqVydWvf4zkgV6 J7j5lY9NfmjmIMKnZ+05qoj06zULhhLzHlMz1Zu4crKLoGZJR5r3S7BqjTEkGr2y yUt+KtQsQrjW+YBCY4gqp8Q5uemmOVOXi6Cek08vs7bEec1c3AQADEr3Mn//Palm rS81LuvjdMEekdMYz0bfCUdcvdkxSUQ/IXZUmw3dK8cGd1cFhsIjDUZNNc+Nyz3o i+Gy0o5RSfep78b0YvW/Myoq/qUDGql3hQ+dASWS1PiH2J7C/gdYqL1vFzbyPfGh lR5ZHIp8el8sdTeI2x8xXvg7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzhQ9enki qtf2vDKA495lMvMOYjMwHwYDVR0jBBgwFoAUIsfsPNntTFDolKEbzXDQMQzV+Fkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDMjI1L0M5NDQ3RkYwQkVG OTExRUZCQ0Y2ODk0NEM0RjlBRTAyL0lzZnNQTm50VEZEb2xLRWJ6WERRTVF6Vi1G ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSXNmc1BObnRURkRvbEtFYnpYRFFNUXpWLUZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD MjI1L0M5NDQ3RkYwQkVGOTExRUZCQ0Y2ODk0NEM0RjlBRTAyL0lzZnNQTm50VEZE b2xLRWJ6WERRTVF6Vi1Gay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKKM+tewNrIAJw9KnjqrGuJ8l1Ibv416hV4Xxg5vNRDPTUc20y4UEZ+h 9lwrADVvtUFfBtEkpj2A/Flg4kkf5iYWzmR4V0tjQOcqxfyoc10xjsYymuQvm+KX OfbwpdmthGR3jJSNaJ+Rl2FUXHcw+xWsN8H12QuZETSWgP03lf/ojne7WKmVpddo lixeKP7i18QWdXOD9gkXh6qSmlFOo56FWYW2ihKu5hBHUdq+RTsz+se2LClu9FTJ 9vT8tvcx98RZTXcacm8iAjLR7CMzcibMNVl7571LKGvbTOkX/aBhzbjSogLAiiE9 3SPuUK/+DwZtcSfXHvT2f+g/2AgdEHE= -----END CERTIFICATE-----Generated at Thu Jun 19 21:58:30 2025 by rpki-client