$ rpki-client -vvf rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft File: 5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft (raw, json) Hash identifier: 0el1JQLo9tG/TGUMB1WlHJEYnqrGBDlN1fMTfI/9QZs= Subject key identifier: EE:31:F2:E3:64:43:97:6C:0A:A6:0C:62:32:0A:3A:2F:05:A4:A7:73 Authority key identifier: E5:06:93:CA:18:5B:B6:5D:92:CA:FB:30:E3:76:F5:1B:95:9A:D2:D8 Certificate issuer: /CN=A9115122/serialNumber=E50693CA185BB65D92CAFB30E376F51B959AD2D8 Certificate serial: 018A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft Manifest number: 0187 Signing time: Mon 09 Jun 2025 02:39:34 +0000 Manifest this update: Mon 09 Jun 2025 02:39:33 +0000 Manifest next update: Mon 16 Jun 2025 02:39:33 +0000 Files and hashes: 1: 5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl (hash: 9YQ2sOKjAxTfg4DBlBBw3CuzcxgsdOMtDopKf540IjM=) 2: D4B97082EF2211EDB7EFE882C4F9AE02.roa (hash: hB47ivnW+fJgf8IJJ0l6aDuxJFT7bxRrB7EorTuGqJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 02:39:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115122, serialNumber=E50693CA185BB65D92CAFB30E376F51B959AD2D8 Validity Not Before: Jun 9 02:39:33 2025 GMT Not After : Jun 16 02:39:33 2025 GMT Subject: CN=68464965-fd95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:0f:19:fc:1c:eb:89:ab:b2:d4:0f:7b:33:51: e3:d6:74:84:24:c9:84:36:75:43:ac:90:4e:3b:31: 82:e0:d6:1e:75:c2:95:2d:16:15:82:d4:c4:11:8f: 9a:1b:7e:60:e4:59:3d:88:f1:14:48:d1:f0:c4:64: 61:d5:02:b7:73:b0:59:ff:e6:b5:56:e4:8b:c8:23: 23:58:8b:9a:c3:33:7e:e6:83:b9:0b:ee:45:a0:48: c2:b0:82:c4:0c:ce:fb:55:a7:e5:88:36:dc:a3:98: c0:1e:1e:ce:64:1d:02:b4:5a:b9:b2:8a:5b:11:3d: de:26:ce:b8:be:97:79:bf:4b:3a:67:4e:aa:20:17: 25:0f:45:d0:dd:8f:c3:71:9f:dc:04:35:ad:6d:82: 87:6a:43:0a:43:32:f4:b6:42:db:f8:bb:31:a8:d2: c7:64:3d:fc:e4:6f:5d:6c:3c:69:34:4a:c6:4f:5b: 75:69:7f:35:5c:3e:ba:0c:01:2f:7e:41:60:e3:d6: d9:e3:e6:4c:7c:6b:e8:f4:cb:e0:cc:86:2e:41:fe: 6a:a2:0d:ec:39:94:f5:b5:45:1e:ff:cf:78:29:47: 49:f3:36:e0:73:ee:db:38:a6:81:0a:ce:dc:39:05: 96:cc:2e:79:3e:7a:84:d9:65:fa:b3:67:7c:6c:1d: 6e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:31:F2:E3:64:43:97:6C:0A:A6:0C:62:32:0A:3A:2F:05:A4:A7:73 X509v3 Authority Key Identifier: keyid:E5:06:93:CA:18:5B:B6:5D:92:CA:FB:30:E3:76:F5:1B:95:9A:D2:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:54:46:5c:0b:43:2d:ba:5f:d4:a2:9f:11:9f:9c:7b:b5:24: 3c:41:c7:e8:51:6d:fc:76:24:5b:12:a4:b2:0a:80:b6:5c:7f: 36:3c:e4:99:86:9d:6a:ca:3b:df:44:aa:a5:71:b2:b7:be:64: 3d:ec:ec:4f:76:0b:ca:de:f5:17:0f:85:b4:b8:b3:33:b2:4e: 6f:05:88:b3:13:ba:9e:c2:44:d7:02:e0:fa:c7:7c:d2:92:4d: 11:ce:61:4f:7f:0b:6c:13:88:5b:67:3c:53:27:be:8a:7c:62: 0a:03:13:da:69:61:63:d5:8a:a4:26:3d:3b:6d:d1:9a:ab:19: 36:6a:13:3f:a0:a0:a6:09:d4:58:14:e2:9d:20:b3:bc:21:5e: b0:25:78:4e:64:b9:fa:fa:9f:4d:c0:c7:94:fd:75:f5:40:3d: ac:39:fb:4e:9b:d5:94:f2:b4:98:02:63:93:bf:44:0e:f6:64: 74:58:cf:b3:9e:af:82:d7:f5:f0:9a:44:92:cc:65:b2:84:12: 8a:1a:e3:1c:a6:76:1a:46:2d:47:39:15:dc:88:93:02:be:ca: d2:8f:05:6b:1b:f4:b9:dc:41:7c:09:3f:ae:7a:db:e9:79:e0: 39:eb:36:5d:4b:8c:57:00:cc:2a:08:ed:62:70:a5:1f:c1:c4: 1a:2b:d2:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTUxMjIxMTAvBgNVBAUTKEU1MDY5M0NBMTg1QkI2NUQ5MkNBRkIzMEUzNzZGNTFC OTU5QUQyRDgwHhcNMjUwNjA5MDIzOTMzWhcNMjUwNjE2MDIzOTMzWjAYMRYwFAYD VQQDEw02ODQ2NDk2NS1mZDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6A8Z/Bzriauy1A97M1Hj1nSEJMmENnVDrJBOOzGC4NYedcKVLRYVgtTEEY+a G35g5Fk9iPEUSNHwxGRh1QK3c7BZ/+a1VuSLyCMjWIuawzN+5oO5C+5FoEjCsILE DM77VafliDbco5jAHh7OZB0CtFq5sopbET3eJs64vpd5v0s6Z06qIBclD0XQ3Y/D cZ/cBDWtbYKHakMKQzL0tkLb+LsxqNLHZD385G9dbDxpNErGT1t1aX81XD66DAEv fkFg49bZ4+ZMfGvo9MvgzIYuQf5qog3sOZT1tUUe/894KUdJ8zbgc+7bOKaBCs7c OQWWzC55PnqE2WX6s2d8bB1uGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4x8uNk Q5dsCqYMYjIKOi8FpKdzMB8GA1UdIwQYMBaAFOUGk8oYW7Zdksr7MON29RuVmtLY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTEyMi8zMEM3QTM4RUVG MUYxMUVEQkY3MUNDODBDNEY5QUUwMi81UWFUeWhoYnRsMlN5dnN3NDNiMUc1V2Ew dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRYVR5aGhidGwyU3l2c3c0M2IxRzVXYTB0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTEyMi8zMEM3QTM4RUVGMUYxMUVEQkY3MUNDODBDNEY5QUUwMi81UWFUeWhoYnRs MlN5dnN3NDNiMUc1V2EwdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjVEZcC0Mtul/Uop8Rn5x7tSQ8QcfoUW38diRbEqSyCoC2XH82POSZ hp1qyjvfRKqlcbK3vmQ97OxPdgvK3vUXD4W0uLMzsk5vBYizE7qewkTXAuD6x3zS kk0RzmFPfwtsE4hbZzxTJ76KfGIKAxPaaWFj1YqkJj07bdGaqxk2ahM/oKCmCdRY FOKdILO8IV6wJXhOZLn6+p9NwMeU/XX1QD2sOftOm9WU8rSYAmOTv0QO9mR0WM+z nq+C1/XwmkSSzGWyhBKKGuMcpnYaRi1HORXciJMCvsrSjwVrG/S53EF8CT+uetvp eeA56zZdS4xXAMwqCO1icKUfwcQaK9Ie -----END CERTIFICATE-----Generated at Mon Jun 9 23:45:20 2025 by rpki-client