$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft File: c5C6Rl4CIu4xQH5VCebenj-pENs.mft (raw, json) Hash identifier: mxxTmrxsEzzAjWGmNpmlZw1lZdtixjqZXT0cIwygcbw= Subject key identifier: 65:6C:0D:5E:0E:19:D6:BA:9F:8D:81:E0:98:E1:C3:50:B5:10:DF:0E Authority key identifier: 73:90:BA:46:5E:02:22:EE:31:40:7E:55:09:E6:DE:9E:3F:A9:10:DB Certificate issuer: /CN=A91CA6E6/serialNumber=7390BA465E0222EE31407E5509E6DE9E3FA910DB Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft Manifest number: 027A Signing time: Mon 21 Jul 2025 03:26:18 +0000 Manifest this update: Mon 21 Jul 2025 03:26:18 +0000 Manifest next update: Mon 28 Jul 2025 03:26:18 +0000 Files and hashes: 1: c5C6Rl4CIu4xQH5VCebenj-pENs.crl (hash: CgNh9LxmZGCKs4XZ6bLii5Uja/MamBgL6LLI057nqSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.crl rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA6E6, serialNumber=7390BA465E0222EE31407E5509E6DE9E3FA910DB Validity Not Before: Jul 21 03:26:18 2025 GMT Not After : Jul 28 03:26:18 2025 GMT Subject: CN=687db35a-d15f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:38:14:65:b0:4c:9a:a7:c2:06:4e:3f:54:c0: c6:0b:93:d2:de:f4:4e:d1:10:c1:41:32:50:82:7d: 65:7c:1b:94:ce:47:d7:10:1a:27:7b:e5:01:28:17: 87:19:55:d0:67:12:4f:6c:d4:9b:13:df:f2:f7:7c: d4:8b:c6:2b:f4:e9:f9:6a:6c:eb:7e:03:cd:eb:b6: b6:40:c2:16:17:6e:c7:3f:4d:00:6a:bc:95:0d:2c: 7d:f4:84:e6:0d:3e:5f:f9:37:4f:8e:09:e3:22:fc: 52:8e:af:4a:b5:f9:24:2c:e8:60:19:bc:3c:6d:e1: 87:d5:52:f0:44:e8:a7:97:bd:02:fc:4a:6e:66:b4: e3:6c:2d:a8:a2:dd:97:d8:a4:b6:97:55:6e:e8:17: 4f:78:7f:84:f5:a0:c1:55:93:55:99:1e:62:da:6c: 1b:4a:e7:ed:56:f4:0b:b2:5b:54:78:e0:5d:b9:33: 48:b9:d3:d6:52:b9:73:6d:10:df:f7:72:6f:64:44: 44:08:f7:b5:23:2a:53:5e:be:c3:57:8d:df:7c:54: 62:c5:c9:21:16:9c:30:00:50:86:c7:69:ec:8b:d9: 54:93:8d:04:2f:6f:99:2f:1e:7e:f1:bc:60:51:1b: 29:68:58:ec:15:5f:fe:d4:99:85:a1:8a:1d:fc:72: 91:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6C:0D:5E:0E:19:D6:BA:9F:8D:81:E0:98:E1:C3:50:B5:10:DF:0E X509v3 Authority Key Identifier: keyid:73:90:BA:46:5E:02:22:EE:31:40:7E:55:09:E6:DE:9E:3F:A9:10:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:d9:fa:48:2e:5d:c9:23:85:bb:e5:72:8f:7a:d3:e1:99:88: f3:3c:5c:19:b2:40:ae:29:2a:e2:8a:0f:48:3e:93:1d:dd:39: bc:f6:f5:2e:a3:3a:f5:89:d2:30:55:da:78:c8:dc:6c:da:99: 26:50:fb:44:db:bf:fc:9a:60:13:4c:8e:d7:bc:2c:73:80:57: 95:08:7b:0f:37:82:cc:1b:85:04:be:7c:31:df:52:72:1f:a8: 40:e7:3d:3f:fa:a2:0c:a6:58:13:d6:e3:42:e2:a7:90:fe:77: f6:a3:af:92:0e:30:0f:94:e4:c6:98:76:86:10:e0:b2:08:17: 2b:9f:29:d7:14:27:d6:77:ac:4b:96:ba:49:92:29:5c:85:22: 71:c2:f9:63:07:0b:3d:4f:9e:ec:a5:87:27:43:37:22:6d:cb: 2b:3b:b7:c1:8e:a8:79:83:ac:34:79:13:e2:cc:88:c6:66:f6: 3f:72:b2:be:3c:04:5f:e4:85:77:98:03:2f:bc:78:30:9a:45: b9:50:67:4a:18:ab:8f:7a:3d:32:55:b7:bb:e5:16:af:42:ef: e5:b8:12:e6:5f:a0:ca:be:3b:6c:27:7d:f2:9b:1f:f2:20:2b: 77:f6:d8:98:16:31:d9:31:d6:69:44:cb:90:f4:84:c3:a9:fa: ae:ef:29:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E2RTYxMTAvBgNVBAUTKDczOTBCQTQ2NUUwMjIyRUUzMTQwN0U1NTA5RTZERTlF M0ZBOTEwREIwHhcNMjUwNzIxMDMyNjE4WhcNMjUwNzI4MDMyNjE4WjAYMRYwFAYD VQQDEw02ODdkYjM1YS1kMTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApjgUZbBMmqfCBk4/VMDGC5PS3vRO0RDBQTJQgn1lfBuUzkfXEBone+UBKBeH GVXQZxJPbNSbE9/y93zUi8Yr9On5amzrfgPN67a2QMIWF27HP00AaryVDSx99ITm DT5f+TdPjgnjIvxSjq9KtfkkLOhgGbw8beGH1VLwROinl70C/EpuZrTjbC2oot2X 2KS2l1Vu6BdPeH+E9aDBVZNVmR5i2mwbSuftVvQLsltUeOBduTNIudPWUrlzbRDf 93JvZERECPe1IypTXr7DV43ffFRixckhFpwwAFCGx2nsi9lUk40EL2+ZLx5+8bxg URspaFjsFV/+1JmFoYod/HKRKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVsDV4O Gda6n42B4Jjhw1C1EN8OMB8GA1UdIwQYMBaAFHOQukZeAiLuMUB+VQnm3p4/qRDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTZFNi8zQjgzQUZFMEYw RDAxMUVEODA1MDc2NkFDNEY5QUUwMi9jNUM2Umw0Q0l1NHhRSDVWQ2ViZW5qLXBF TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M1QzZSbDRDSXU0eFFINVZDZWJlbmotcEVOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTZFNi8zQjgzQUZFMEYwRDAxMUVEODA1MDc2NkFDNEY5QUUwMi9jNUM2Umw0Q0l1 NHhRSDVWQ2ViZW5qLXBFTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt2fpILl3JI4W75XKPetPhmYjzPFwZskCuKSriig9IPpMd3Tm89vUu ozr1idIwVdp4yNxs2pkmUPtE27/8mmATTI7XvCxzgFeVCHsPN4LMG4UEvnwx31Jy H6hA5z0/+qIMplgT1uNC4qeQ/nf2o6+SDjAPlOTGmHaGEOCyCBcrnynXFCfWd6xL lrpJkilchSJxwvljBws9T57spYcnQzcibcsrO7fBjqh5g6w0eRPizIjGZvY/crK+ PARf5IV3mAMvvHgwmkW5UGdKGKuPej0yVbe75RavQu/luBLmX6DKvjtsJ33ymx/y ICt39tiYFjHZMdZpRMuQ9ITDqfqu7ymy -----END CERTIFICATE-----Generated at Mon Jul 21 18:22:25 2025 by rpki-client