$ rpki-client -vvf rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft File: 5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft (raw, json) Hash identifier: uylTbeNZMOd4IpgsMRgnOX3LE8izFxOBG5PYITmzXvc= Subject key identifier: 2C:1B:6F:60:21:FB:27:F5:EB:42:88:FF:1D:DE:F0:0D:4E:8F:B3:3F Authority key identifier: E6:1F:A1:24:A6:18:E2:56:67:CC:31:CC:FC:49:16:CE:07:6F:DA:57 Certificate issuer: /CN=A91F35BB/serialNumber=E61FA124A618E25667CC31CCFC4916CE076FDA57 Certificate serial: 04E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft Manifest number: 04E0 Signing time: Sat 09 Aug 2025 00:12:08 +0000 Manifest this update: Sat 09 Aug 2025 00:12:07 +0000 Manifest next update: Sat 16 Aug 2025 00:12:07 +0000 Files and hashes: 1: 5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl (hash: fO0U8uaT++y3qSd16pGJD2U+ofULjCulAh0kQJFHFzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1248 (0x4e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F35BB, serialNumber=E61FA124A618E25667CC31CCFC4916CE076FDA57 Validity Not Before: Aug 9 00:12:07 2025 GMT Not After : Aug 16 00:12:07 2025 GMT Subject: CN=68969258-fda8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b2:ca:48:ee:55:2b:f7:b8:4d:06:7d:78:80: 59:11:d8:19:2e:0a:25:e5:1f:0e:b8:4f:3d:c2:48: 86:f9:13:f1:53:79:d4:98:2f:f9:d2:3a:c4:06:28: 17:43:f5:b8:e1:84:31:6e:41:0b:67:df:7d:be:a1: 7e:2b:db:29:da:f3:37:d4:2f:ce:8a:1b:b3:dc:97: cb:8d:2d:e6:aa:3e:1a:60:c7:51:cf:3a:01:13:a3: 83:c5:c3:0f:3a:60:34:dd:94:ec:47:c3:21:cf:ac: 78:42:07:db:ff:71:b0:24:b5:23:a8:e0:c2:00:d6: df:96:9d:33:cb:7e:71:47:b6:c7:63:17:49:ae:9f: 22:37:5f:e6:9e:af:97:14:49:c9:e2:6e:10:10:bf: d3:db:9c:19:94:fe:f6:89:fd:fc:89:a7:38:f4:ee: 9c:f0:f3:e4:d9:ac:b0:9f:67:b0:3c:11:cb:9c:0f: 26:f8:d0:11:5b:28:5f:d3:10:f5:23:5e:88:eb:4b: 6e:32:92:89:d8:fa:3a:d3:42:ca:e9:f8:b1:cb:19: 4e:58:6b:74:04:97:55:f7:67:70:fa:e1:d5:d4:8c: 20:48:5e:3e:61:9e:3e:99:1a:ad:5f:d4:61:9c:25: f6:8c:c2:0c:d0:42:b4:8e:b5:f2:d4:20:eb:0c:ce: ec:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1B:6F:60:21:FB:27:F5:EB:42:88:FF:1D:DE:F0:0D:4E:8F:B3:3F X509v3 Authority Key Identifier: keyid:E6:1F:A1:24:A6:18:E2:56:67:CC:31:CC:FC:49:16:CE:07:6F:DA:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:c8:fd:93:53:15:5e:89:02:b4:25:b7:ee:b8:b9:00:00:4b: cb:09:56:25:2a:be:b1:7b:b7:90:a8:53:56:e0:dc:3d:73:76: 9a:bf:97:8a:0d:36:1d:21:70:f1:cc:96:8c:cc:6f:43:77:30: b0:59:6b:10:18:b6:63:cf:e1:6a:b6:a4:9e:42:28:90:cd:c1: 09:7f:58:30:a0:ea:84:7b:3f:f1:42:8c:98:92:5c:f5:f1:22: 47:00:fe:9c:2a:94:14:13:9d:21:b7:15:e3:7a:57:0c:b9:17: d5:1f:6d:5e:11:31:17:00:de:35:7d:97:db:05:83:3c:6b:fb: a9:8d:7d:df:7f:b2:f1:7d:21:47:c4:fb:60:70:28:d6:5b:b6: 69:92:51:31:ce:33:43:59:e9:6b:14:ee:f2:6b:21:55:c8:06: 6d:de:5f:e2:eb:59:33:59:81:da:13:f6:91:6f:be:07:c5:5c: 7c:db:86:49:37:95:18:f8:34:ff:15:8d:6c:92:e8:d2:08:97: 7d:b2:49:10:87:9c:c6:a6:8b:4e:45:18:c1:22:38:90:21:fc: 83:e3:f2:b3:d2:27:8f:1a:1f:37:ad:80:a0:3c:b2:ec:46:a7: 8f:6e:eb:2a:a7:ad:7b:eb:d2:ab:fb:4f:a2:07:2e:1a:32:7a: 97:58:6e:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM1QkIxMTAvBgNVBAUTKEU2MUZBMTI0QTYxOEUyNTY2N0NDMzFDQ0ZDNDkxNkNF MDc2RkRBNTcwHhcNMjUwODA5MDAxMjA3WhcNMjUwODE2MDAxMjA3WjAYMRYwFAYD VQQDEw02ODk2OTI1OC1mZGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrLKSO5VK/e4TQZ9eIBZEdgZLgol5R8OuE89wkiG+RPxU3nUmC/50jrEBigX Q/W44YQxbkELZ999vqF+K9sp2vM31C/Oihuz3JfLjS3mqj4aYMdRzzoBE6ODxcMP OmA03ZTsR8Mhz6x4Qgfb/3GwJLUjqODCANbflp0zy35xR7bHYxdJrp8iN1/mnq+X FEnJ4m4QEL/T25wZlP72if38iac49O6c8PPk2aywn2ewPBHLnA8m+NARWyhf0xD1 I16I60tuMpKJ2Po600LK6fixyxlOWGt0BJdV92dw+uHV1IwgSF4+YZ4+mRqtX9Rh nCX2jMIM0EK0jrXy1CDrDM7sDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwbb2Ah +yf160KI/x3e8A1Oj7M/MB8GA1UdIwQYMBaAFOYfoSSmGOJWZ8wxzPxJFs4Hb9pX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzVCQi8wNzYzN0QwMjI3 RkIxMUVDODg4MEQxNzBDNEY5QUUwMi81aC1oSktZWTRsWm56REhNX0VrV3pnZHYy bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVoLWhKS1lZNGxabnpESE1fRWtXemdkdjJsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzVCQi8wNzYzN0QwMjI3RkIxMUVDODg4MEQxNzBDNEY5QUUwMi81aC1oSktZWTRs Wm56REhNX0VrV3pnZHYybGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHyP2TUxVeiQK0JbfuuLkAAEvLCVYlKr6xe7eQqFNW4Nw9c3aav5eK DTYdIXDxzJaMzG9DdzCwWWsQGLZjz+FqtqSeQiiQzcEJf1gwoOqEez/xQoyYklz1 8SJHAP6cKpQUE50htxXjelcMuRfVH21eETEXAN41fZfbBYM8a/upjX3ff7LxfSFH xPtgcCjWW7ZpklExzjNDWelrFO7yayFVyAZt3l/i61kzWYHaE/aRb74HxVx824ZJ N5UY+DT/FY1skujSCJd9skkQh5zGpotORRjBIjiQIfyD4/Kz0iePGh83rYCgPLLs RqePbusqp61769Kr+0+iBy4aMnqXWG77 -----END CERTIFICATE-----Generated at Sat Aug 9 03:02:34 2025 by rpki-client