$ rpki-client -vvf rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft File: 5L99WWC2svPFIUHvK2Aq0RT0DKg.mft (raw, json) Hash identifier: A3BDBKxektf8BKK1+x/tEvAY+HOGs3gh9IVfCQSpyFM= Subject key identifier: 8B:C1:4F:1A:A0:ED:02:D2:9A:6C:AF:48:9A:10:1B:35:F5:5C:44:CD Authority key identifier: E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8 Certificate issuer: /CN=A91F53A5/serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8 Certificate serial: 0306 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft Manifest number: 0302 Signing time: Sun 15 Jun 2025 00:56:33 +0000 Manifest this update: Sun 15 Jun 2025 00:56:32 +0000 Manifest next update: Sun 22 Jun 2025 00:56:32 +0000 Files and hashes: 1: 5L99WWC2svPFIUHvK2Aq0RT0DKg.crl (hash: MkV/fQK7QNPsnhie46eIpHcDXHpTmR7ke5ykg1rinN0=) 2: 99C51F96DA6D11EC86CE4D59C4F9AE02.roa (hash: nd3BoBWmWncY6CXZjinblw8tRKQ0C9HJdvIgBJwhEHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 774 (0x306) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F53A5, serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8 Validity Not Before: Jun 15 00:56:32 2025 GMT Not After : Jun 22 00:56:32 2025 GMT Subject: CN=684e1a40-1e8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:50:48:0c:8c:68:05:80:bf:c9:b0:91:39:4a: 43:44:cc:aa:9a:a2:69:64:bb:a6:3f:38:bb:2f:64: bd:ea:ec:64:e8:9a:bf:10:92:98:f8:d5:03:cc:6d: 7b:4c:61:ab:37:ac:14:67:0d:6b:fa:f7:2b:39:65: a1:22:d6:86:66:3a:32:c4:3a:64:36:2b:17:1e:1d: 50:0c:8c:87:2c:ac:21:5d:21:f7:f2:50:c5:f0:93: 1e:30:ff:68:de:96:8d:0d:8d:98:7b:a6:53:3f:bd: 25:ef:27:2f:3d:3a:c5:25:b7:df:4e:a1:97:15:19: 3d:34:19:3c:40:c7:df:69:66:04:97:b4:df:44:42: d4:9c:b6:47:02:bc:32:af:da:20:d9:0e:89:e7:83: d5:35:5c:ad:41:b8:d0:ce:0f:6b:0c:e2:73:12:c9: 83:5d:e6:99:29:da:87:5b:95:ee:17:f2:20:6e:74: d5:c8:a8:2c:c2:7a:c2:ab:f6:8c:04:52:55:08:65: bb:2c:c5:7d:65:a9:83:1f:3a:1d:4a:12:a5:d6:a9: 14:45:46:e9:aa:52:b9:e0:e6:cd:20:79:b4:3c:6f: 0f:5c:be:60:87:87:6b:b7:1e:ed:f9:a5:00:63:56: e1:57:ef:2f:d8:06:5e:4e:83:58:9d:d4:a9:20:d9: 5c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C1:4F:1A:A0:ED:02:D2:9A:6C:AF:48:9A:10:1B:35:F5:5C:44:CD X509v3 Authority Key Identifier: keyid:E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:06:4a:38:24:3a:91:65:84:60:f5:f8:6b:6f:09:5e:e7:a1: 77:a4:73:ea:cd:07:13:3b:77:ca:92:bf:1e:06:15:bf:05:e3: 51:ae:43:cb:f1:38:89:1b:49:34:cb:40:3e:95:94:b9:e9:bd: d4:4f:91:e6:3a:76:d4:31:67:27:52:14:a1:e6:90:1e:69:58: 5e:82:78:d6:e6:78:99:c9:c1:a0:76:4b:7a:ea:2a:ad:87:39: 6e:34:6f:e0:ef:1f:ad:e7:dc:18:5e:9c:a2:4a:ad:01:74:be: 59:00:84:11:d9:b6:05:33:f7:f3:10:50:2e:9e:97:c5:14:b0: 91:c9:77:ec:48:a1:ea:d6:2f:39:d5:6b:ed:10:a4:98:a8:07: ca:bc:e6:39:08:36:dd:64:f0:fc:9f:a4:77:b4:31:2f:fb:9a: c1:3c:90:7f:18:80:30:c5:c5:fd:b4:af:db:a4:01:4b:35:39: 9e:c2:cd:c5:91:84:07:78:39:6d:39:07:68:35:e3:d4:d2:42: 33:c4:c3:51:77:4c:5e:af:37:0b:1b:40:6e:34:67:7a:a2:61: 51:0a:4a:7b:e7:a7:52:3c:3e:44:f2:2c:b7:ea:60:1a:33:55: ce:e0:bc:f9:a0:30:95:18:4d:35:cc:94:3f:3f:6b:e0:8f:d5: 4d:6e:a7:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUzQTUxMTAvBgNVBAUTKEU0QkY3RDU5NjBCNkIyRjNDNTIxNDFFRjJCNjAyQUQx MTRGNDBDQTgwHhcNMjUwNjE1MDA1NjMyWhcNMjUwNjIyMDA1NjMyWjAYMRYwFAYD VQQDEw02ODRlMWE0MC0xZThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1BIDIxoBYC/ybCROUpDRMyqmqJpZLumPzi7L2S96uxk6Jq/EJKY+NUDzG17 TGGrN6wUZw1r+vcrOWWhItaGZjoyxDpkNisXHh1QDIyHLKwhXSH38lDF8JMeMP9o 3paNDY2Ye6ZTP70l7ycvPTrFJbffTqGXFRk9NBk8QMffaWYEl7TfRELUnLZHArwy r9og2Q6J54PVNVytQbjQzg9rDOJzEsmDXeaZKdqHW5XuF/IgbnTVyKgswnrCq/aM BFJVCGW7LMV9ZamDHzodShKl1qkURUbpqlK54ObNIHm0PG8PXL5gh4drtx7t+aUA Y1bhV+8v2AZeToNYndSpINlcKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvBTxqg 7QLSmmyvSJoQGzX1XETNMB8GA1UdIwQYMBaAFOS/fVlgtrLzxSFB7ytgKtEU9Ayo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTNBNS81MDBDRkU5OERB NjYxMUVDODBERkU3MzZDNEY5QUUwMi81TDk5V1dDMnN2UEZJVUh2SzJBcTBSVDBE S2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVMOTlXV0Myc3ZQRklVSHZLMkFxMFJUMERLZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTNBNS81MDBDRkU5OERBNjYxMUVDODBERkU3MzZDNEY5QUUwMi81TDk5V1dDMnN2 UEZJVUh2SzJBcTBSVDBES2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANBko4JDqRZYRg9fhrbwle56F3pHPqzQcTO3fKkr8eBhW/BeNRrkPL 8TiJG0k0y0A+lZS56b3UT5HmOnbUMWcnUhSh5pAeaVhegnjW5niZycGgdkt66iqt hzluNG/g7x+t59wYXpyiSq0BdL5ZAIQR2bYFM/fzEFAunpfFFLCRyXfsSKHq1i85 1WvtEKSYqAfKvOY5CDbdZPD8n6R3tDEv+5rBPJB/GIAwxcX9tK/bpAFLNTmews3F kYQHeDltOQdoNePU0kIzxMNRd0xerzcLG0BuNGd6omFRCkp756dSPD5E8iy36mAa M1XO4Lz5oDCVGE01zJQ/P2vgj9VNbqf2 -----END CERTIFICATE-----Generated at Sun Jun 15 09:51:24 2025 by rpki-client