$ rpki-client -vvf rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft File: 5c15IB7rS9nw73ZW5zJfVxZffqA.mft (raw, json) Hash identifier: 14Sa/8R00VLjrewtzO71rm4SLIEqYyZJudZn+pnQrAI= Subject key identifier: D1:53:B1:07:7C:18:B7:E5:2A:F1:CA:E9:87:93:FD:55:D6:40:2B:31 Authority key identifier: E5:CD:79:20:1E:EB:4B:D9:F0:EF:76:56:E7:32:5F:57:16:5F:7E:A0 Certificate issuer: /CN=A911218D/serialNumber=E5CD79201EEB4BD9F0EF7656E7325F57165F7EA0 Certificate serial: 07C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft Manifest number: 07B7 Signing time: Fri 30 May 2025 21:26:02 +0000 Manifest this update: Fri 30 May 2025 21:26:01 +0000 Manifest next update: Fri 06 Jun 2025 21:26:01 +0000 Files and hashes: 1: 5c15IB7rS9nw73ZW5zJfVxZffqA.crl (hash: UK/73CyJsbGiobir8X0+1TMIv2xYFmY8tU0MVjrBahc=) 2: C14B7B728D0611EDB02E7331C4F9AE02.roa (hash: cW5d9zgypzyK0jiQh7AOhsQ2I4bzZRwKwFE4H9ImC3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.crl rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1990 (0x7c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911218D, serialNumber=E5CD79201EEB4BD9F0EF7656E7325F57165F7EA0 Validity Not Before: May 30 21:26:01 2025 GMT Not After : Jun 6 21:26:01 2025 GMT Subject: CN=683a226a-1622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ac:74:29:74:eb:94:f0:97:c6:f7:66:c2:a0: ae:ef:e2:17:75:0e:a7:61:0f:22:6b:3d:ac:67:ec: 09:55:ae:fd:6f:aa:26:6c:cb:27:e3:cc:11:96:21: 1e:99:b0:3e:15:f2:82:7e:0a:7b:6b:52:a0:d9:37: 12:d0:36:14:11:1a:90:6b:a8:2c:ad:7a:ad:c5:05: 6a:3f:55:ec:b6:56:ec:96:1d:61:f4:a4:50:01:48: b8:c7:38:49:70:77:86:f9:01:4a:68:11:92:6a:c5: b7:68:82:54:37:82:35:54:ef:5d:37:39:e2:5a:04: 8f:26:c4:38:0d:5b:e0:da:7c:d1:8e:7c:cd:8d:3d: 1a:71:4b:44:6e:28:79:45:d5:32:1a:0b:22:84:06: 25:e2:9c:4a:52:4b:18:c9:b6:da:f2:10:21:30:53: 24:12:b5:a1:47:23:18:7c:8c:bd:bf:4d:a3:d7:eb: 82:f4:af:60:75:e9:a7:5c:20:2d:63:90:e5:e0:da: 36:df:4d:17:61:6f:69:f5:53:88:8b:cf:b7:f3:1b: 53:b6:3d:d9:b1:da:7b:fb:5d:ba:5f:10:e3:31:59: 72:f4:df:e6:75:96:00:e4:53:cf:0f:b3:02:43:45: 1f:3c:5a:c6:79:f7:d2:f0:16:cc:79:a8:5c:c3:59: f8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:53:B1:07:7C:18:B7:E5:2A:F1:CA:E9:87:93:FD:55:D6:40:2B:31 X509v3 Authority Key Identifier: keyid:E5:CD:79:20:1E:EB:4B:D9:F0:EF:76:56:E7:32:5F:57:16:5F:7E:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:d1:0c:f9:6e:84:58:62:00:b1:65:b6:b0:ce:c0:7b:f6:59: e4:71:41:76:d9:09:17:81:f3:32:19:e1:13:f3:ee:a4:56:bc: ad:1e:55:c0:96:05:b8:14:b6:94:0f:fb:44:67:21:6b:e6:2c: 01:f9:1e:f0:d3:ea:19:dc:d4:a5:f3:3c:f0:29:2d:10:16:a2: 2a:17:0c:04:e4:7d:ac:42:3f:99:95:16:ee:e6:36:1b:5d:2c: 27:96:d6:3f:18:0d:70:e7:d7:c6:db:1d:1f:17:5a:89:c4:d4: 45:01:2c:69:50:f7:b2:32:7d:b3:fd:97:d8:4e:d2:58:10:6e: e4:e8:8f:b7:10:f3:ad:6a:98:0c:02:0f:5f:98:a5:ae:bd:40: 91:b8:7d:b8:99:c5:1f:dc:8e:f5:05:c3:29:ca:f9:6a:84:19: 58:56:e7:5b:88:8c:6e:32:fc:de:0e:c6:7d:cb:79:5d:c4:7b: 79:cd:b9:85:ea:b0:73:46:64:18:c8:47:fb:c8:9f:23:3f:88: e1:0d:56:8f:90:83:07:af:f0:08:60:35:a3:c8:bc:6f:7c:59: 0d:78:b9:e2:49:24:48:ce:a1:2c:b3:ee:0a:e6:bf:69:de:f2: 6b:b8:71:7a:8f:be:be:f0:b9:62:63:ff:64:6f:b6:10:74:03: 08:b6:ba:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIxOEQxMTAvBgNVBAUTKEU1Q0Q3OTIwMUVFQjRCRDlGMEVGNzY1NkU3MzI1RjU3 MTY1RjdFQTAwHhcNMjUwNTMwMjEyNjAxWhcNMjUwNjA2MjEyNjAxWjAYMRYwFAYD VQQDEw02ODNhMjI2YS0xNjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqx0KXTrlPCXxvdmwqCu7+IXdQ6nYQ8iaz2sZ+wJVa79b6ombMsn48wRliEe mbA+FfKCfgp7a1Kg2TcS0DYUERqQa6gsrXqtxQVqP1Xstlbslh1h9KRQAUi4xzhJ cHeG+QFKaBGSasW3aIJUN4I1VO9dNzniWgSPJsQ4DVvg2nzRjnzNjT0acUtEbih5 RdUyGgsihAYl4pxKUksYybba8hAhMFMkErWhRyMYfIy9v02j1+uC9K9gdemnXCAt Y5Dl4No2300XYW9p9VOIi8+38xtTtj3Zsdp7+126XxDjMVly9N/mdZYA5FPPD7MC Q0UfPFrGeffS8BbMeahcw1n47wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFTsQd8 GLflKvHK6YeT/VXWQCsxMB8GA1UdIwQYMBaAFOXNeSAe60vZ8O92VucyX1cWX36g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjE4RC8wRUI2NzQ4QUZG QzgxMUVBODRBMzY2N0NDNEY5QUUwMi81YzE1SUI3clM5bnc3M1pXNXpKZlZ4WmZm cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVjMTVJQjdyUzludzczWlc1ekpmVnhaZmZxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjE4RC8wRUI2NzQ4QUZGQzgxMUVBODRBMzY2N0NDNEY5QUUwMi81YzE1SUI3clM5 bnc3M1pXNXpKZlZ4WmZmcUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg0Qz5boRYYgCxZbawzsB79lnkcUF22QkXgfMyGeET8+6kVrytHlXA lgW4FLaUD/tEZyFr5iwB+R7w0+oZ3NSl8zzwKS0QFqIqFwwE5H2sQj+ZlRbu5jYb XSwnltY/GA1w59fG2x0fF1qJxNRFASxpUPeyMn2z/ZfYTtJYEG7k6I+3EPOtapgM Ag9fmKWuvUCRuH24mcUf3I71BcMpyvlqhBlYVudbiIxuMvzeDsZ9y3ldxHt5zbmF 6rBzRmQYyEf7yJ8jP4jhDVaPkIMHr/AIYDWjyLxvfFkNeLniSSRIzqEss+4K5r9p 3vJruHF6j76+8LliY/9kb7YQdAMItrqI -----END CERTIFICATE-----Generated at Sat May 31 17:34:20 2025 by rpki-client