$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft File: 5nV74dIYmt6NdyyclIZDEL45LXA.mft (raw, json) Hash identifier: WYDDFZXzYTMIoEKKoNWpmPGE3HNYSGzsfMwFxz9QU3k= Subject key identifier: E5:B4:2F:D1:6E:A3:02:D9:12:82:3D:89:79:A3:C6:24:25:8B:C3:30 Authority key identifier: E6:75:7B:E1:D2:18:9A:DE:8D:77:2C:9C:94:86:43:10:BE:39:2D:70 Certificate issuer: /CN=A9111F9E/serialNumber=E6757BE1D2189ADE8D772C9C94864310BE392D70 Certificate serial: 0464 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft Manifest number: 045E Signing time: Sat 31 May 2025 00:22:29 +0000 Manifest this update: Sat 31 May 2025 00:22:28 +0000 Manifest next update: Sat 07 Jun 2025 00:22:28 +0000 Files and hashes: 1: 5nV74dIYmt6NdyyclIZDEL45LXA.crl (hash: 0Rux+Nl++cagBH80b3csH/cuypQiZOO4nqE8/qhQgVs=) 2: 2B70BBE889E111EEB5E86A0EC4F9AE02.roa (hash: ii2gJPxNc38H3aArS7srunxvBmsm9HkEFksE6I5LOY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.crl rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:22:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1124 (0x464) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111F9E, serialNumber=E6757BE1D2189ADE8D772C9C94864310BE392D70 Validity Not Before: May 31 00:22:28 2025 GMT Not After : Jun 7 00:22:28 2025 GMT Subject: CN=683a4bc5-a03c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:61:90:67:93:41:1a:79:b4:01:88:fb:48:fb: 19:88:ae:ac:e7:41:6e:7b:6e:eb:41:a4:ed:04:6d: 7b:4d:fd:4e:7f:4c:9a:2d:a9:39:32:81:9e:f1:e2: b4:8d:87:ee:1c:4c:2f:6b:50:53:47:16:b2:0c:e9: b7:9e:15:eb:b1:cc:f1:c8:cc:f2:c4:57:80:a5:c5: eb:c6:cc:a5:7e:4c:8b:c9:aa:ba:19:69:9a:55:17: e5:a1:10:1f:c6:38:64:b6:22:c9:e5:3e:7a:f6:19: 30:c1:23:6d:06:10:02:50:b0:28:84:c1:7d:ae:e6: 51:04:89:cc:92:cc:6f:86:cf:f3:86:01:71:12:bf: 4a:e4:1d:9e:b7:62:07:ee:67:ff:9f:48:65:69:1f: ce:46:68:e5:d2:18:a1:77:f7:60:e2:fb:dc:7a:56: 89:36:a7:61:fc:30:eb:ae:3c:54:a6:75:ae:4b:29: 34:4e:5d:17:22:a6:63:7f:d9:72:2a:2f:7f:45:14: 1a:03:05:81:3f:45:19:af:96:76:59:a2:97:63:1e: 5b:68:de:7b:bd:e9:af:3b:21:c8:84:74:4d:57:74: b0:47:7d:51:7a:7e:16:21:cf:8d:c5:c1:6a:93:50: 2e:3d:31:13:9b:5c:63:91:14:7b:c1:e9:64:d1:17: 70:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B4:2F:D1:6E:A3:02:D9:12:82:3D:89:79:A3:C6:24:25:8B:C3:30 X509v3 Authority Key Identifier: keyid:E6:75:7B:E1:D2:18:9A:DE:8D:77:2C:9C:94:86:43:10:BE:39:2D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:37:a7:0f:5c:00:e0:d9:e5:6b:07:a0:7b:5a:b7:b0:8d:11: e7:54:f5:05:6c:59:71:4f:a2:fe:42:f8:22:11:3a:3c:f5:66: 27:0b:82:34:e4:d8:f6:0d:66:11:69:d1:0f:db:ca:d1:09:fb: 63:94:4a:c7:3b:e3:a2:2d:13:71:35:e6:4c:ba:9c:da:a1:e8: c1:b3:d8:6a:ec:6e:e6:47:5a:90:0e:89:58:97:b7:05:40:ce: 00:49:44:8c:20:c3:6b:26:f6:5d:a2:00:68:7c:da:91:07:43: 19:ba:b5:56:2c:35:c2:73:d6:b8:87:95:21:59:1a:52:27:7a: 32:5e:40:58:6a:3d:79:5d:63:52:19:80:48:48:34:17:2a:4d: 10:9b:14:e3:a9:2f:cd:9e:59:b8:17:74:0d:56:6b:7e:28:f1: e4:ed:09:7f:bd:37:c0:24:32:c3:1c:8c:7e:74:1a:8a:51:f2: bd:e5:d5:55:96:c2:c8:e7:a5:c9:26:dd:76:6b:67:33:f6:84: 67:d7:18:e1:ed:ba:7b:eb:d1:89:63:b4:ac:16:4f:0a:21:03: ee:61:2f:cc:b1:3a:f8:70:e7:59:1f:ca:4f:6f:3a:d1:17:bf: 87:3f:18:8c:b1:46:19:10:f1:fb:70:fa:79:f3:87:c0:29:39: 27:2a:9d:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFGOUUxMTAvBgNVBAUTKEU2NzU3QkUxRDIxODlBREU4RDc3MkM5Qzk0ODY0MzEw QkUzOTJENzAwHhcNMjUwNTMxMDAyMjI4WhcNMjUwNjA3MDAyMjI4WjAYMRYwFAYD VQQDEw02ODNhNGJjNS1hMDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2mGQZ5NBGnm0AYj7SPsZiK6s50Fue27rQaTtBG17Tf1Of0yaLak5MoGe8eK0 jYfuHEwva1BTRxayDOm3nhXrsczxyMzyxFeApcXrxsylfkyLyaq6GWmaVRfloRAf xjhktiLJ5T569hkwwSNtBhACULAohMF9ruZRBInMksxvhs/zhgFxEr9K5B2et2IH 7mf/n0hlaR/ORmjl0hihd/dg4vvcelaJNqdh/DDrrjxUpnWuSyk0Tl0XIqZjf9ly Ki9/RRQaAwWBP0UZr5Z2WaKXYx5baN57vemvOyHIhHRNV3SwR31Ren4WIc+NxcFq k1AuPTETm1xjkRR7welk0Rdw2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOW0L9Fu owLZEoI9iXmjxiQli8MwMB8GA1UdIwQYMBaAFOZ1e+HSGJrejXcsnJSGQxC+OS1w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUY5RS8wMDZDRTk5QzUw MDYxMUVDOTA1NkNENDVDNEY5QUUwMi81blY3NGRJWW10Nk5keXljbElaREVMNDVM WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVuVjc0ZElZbXQ2TmR5eWNsSVpERUw0NUxYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUY5RS8wMDZDRTk5QzUwMDYxMUVDOTA1NkNENDVDNEY5QUUwMi81blY3NGRJWW10 Nk5keXljbElaREVMNDVMWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEN6cPXADg2eVrB6B7WrewjRHnVPUFbFlxT6L+QvgiETo89WYnC4I0 5Nj2DWYRadEP28rRCftjlErHO+OiLRNxNeZMupzaoejBs9hq7G7mR1qQDolYl7cF QM4ASUSMIMNrJvZdogBofNqRB0MZurVWLDXCc9a4h5UhWRpSJ3oyXkBYaj15XWNS GYBISDQXKk0QmxTjqS/Nnlm4F3QNVmt+KPHk7Ql/vTfAJDLDHIx+dBqKUfK95dVV lsLI56XJJt12a2cz9oRn1xjh7bp769GJY7SsFk8KIQPuYS/MsTr4cOdZH8pPbzrR F7+HPxiMsUYZEPH7cPp584fAKTknKp1h -----END CERTIFICATE-----Generated at Sat May 31 17:31:53 2025 by rpki-client