$ rpki-client -vvf rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft File: MayWR8f4cKZrot54hUTNjDJr3_k.mft (raw, json) Hash identifier: FpnCPgd7km0UN+HYu6NojRCCTR0CkrK2fby8anRTizs= Subject key identifier: 77:95:9B:82:E1:0F:51:05:DF:67:20:90:A5:1E:E0:13:7E:95:25:38 Authority key identifier: 31:AC:96:47:C7:F8:70:A6:6B:A2:DE:78:85:44:CD:8C:32:6B:DF:F9 Certificate issuer: /CN=A91218BB/serialNumber=31AC9647C7F870A66BA2DE788544CD8C326BDFF9 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft Manifest number: 5E Signing time: Tue 01 Jul 2025 07:50:49 +0000 Manifest this update: Tue 01 Jul 2025 07:50:49 +0000 Manifest next update: Tue 08 Jul 2025 07:50:49 +0000 Files and hashes: 1: MayWR8f4cKZrot54hUTNjDJr3_k.crl (hash: +IldHAVwV/GjozeSeM91C3EHdLX4xLkM4YQxESqUcF8=) 2: 4DD6D628C8D211EF9F1BE312C4F9AE02.roa (hash: sUWfAuRTWaVVgcAthywuFU4ZlijXzthACuza893doh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.crl rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91218BB, serialNumber=31AC9647C7F870A66BA2DE788544CD8C326BDFF9 Validity Not Before: Jul 1 07:50:49 2025 GMT Not After : Jul 8 07:50:49 2025 GMT Subject: CN=68639359-6dd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8d:96:26:b3:45:e3:34:a1:ea:be:29:58:ec: a8:8c:5e:8d:3f:2a:b4:26:c2:c4:f4:91:ba:8e:de: d9:69:a4:05:04:55:1b:fe:0f:d5:80:75:ee:87:7a: 08:0e:60:40:41:59:eb:f0:b2:0b:eb:12:a2:f1:36: 18:92:78:14:9b:12:5c:9f:c1:0d:2c:b1:e5:74:43: ba:aa:32:ca:b2:b9:f2:67:52:80:04:f9:65:4b:68: f2:9f:c9:4e:65:bf:ba:ea:86:60:cb:90:c3:3d:b8: b3:cb:31:f5:8e:2d:47:9e:f9:69:4a:8c:e3:a7:24: 7a:02:8a:00:8c:ef:42:5e:51:36:41:fa:4b:4a:d7: 5d:09:99:5b:37:fa:4f:33:04:3f:70:03:45:b2:32: 31:0e:1c:2c:ee:00:81:9b:fb:c9:df:9d:f9:75:80: 1b:74:07:0f:a1:2f:46:69:fb:2c:66:bd:77:c0:f1: 83:df:59:a3:65:29:e0:ed:a4:93:f4:ad:14:43:9a: b5:f8:93:e2:8a:39:75:54:09:0d:e4:36:d9:2f:c1: b6:3e:91:24:4d:09:28:15:91:f4:bf:38:f3:66:13: f4:a4:4d:e6:6f:04:76:08:81:61:a7:3c:0f:bf:d3: f0:0f:d3:fd:4b:a4:15:a6:48:23:19:5b:c2:b1:4c: 7e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:95:9B:82:E1:0F:51:05:DF:67:20:90:A5:1E:E0:13:7E:95:25:38 X509v3 Authority Key Identifier: keyid:31:AC:96:47:C7:F8:70:A6:6B:A2:DE:78:85:44:CD:8C:32:6B:DF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:2a:ed:0e:fa:0b:77:16:aa:68:35:04:7a:a2:7a:74:21:31: 87:7d:b3:6a:de:9b:96:0d:d7:68:23:6c:4f:72:d9:76:ae:0a: 57:97:e4:26:e6:ff:22:04:8a:38:a5:e1:37:36:d6:5c:32:85: 0f:48:75:68:4e:88:2d:98:92:65:ae:55:c6:b8:a1:a2:ff:cb: fe:47:0e:32:e9:17:db:c4:aa:01:c4:b7:81:53:fb:25:0e:6e: 9c:9c:09:39:b4:8e:02:f9:6f:91:c0:94:c3:a0:58:87:9c:12: 9c:40:76:47:83:a1:cf:14:33:62:81:3d:22:90:a3:35:2a:a4: 63:06:b5:d6:7d:70:73:30:63:45:d3:36:1e:22:49:e0:3a:16: 48:8c:9e:78:68:82:ff:7d:f3:90:91:99:fd:82:24:f5:d3:dd: 8b:55:73:94:8e:59:7c:33:f9:d9:67:aa:5a:47:a6:53:23:68: 99:f5:0f:81:61:a1:79:9c:63:85:16:38:56:56:76:f0:7e:da: c5:3a:99:6f:62:05:65:54:76:bc:8a:e9:57:7e:65:3a:da:81: d7:07:ee:51:3e:17:27:4f:2e:79:15:9b:10:d5:7b:f9:e7:fd: 1a:a5:13:0f:ea:c1:29:a0:79:3e:bd:bd:c4:40:c0:6d:6c:42: c1:98:48:9f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MThCQjExMC8GA1UEBRMoMzFBQzk2NDdDN0Y4NzBBNjZCQTJERTc4ODU0NENEOEMz MjZCREZGOTAeFw0yNTA3MDEwNzUwNDlaFw0yNTA3MDgwNzUwNDlaMBgxFjAUBgNV BAMTDTY4NjM5MzU5LTZkZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmjZYms0XjNKHqvilY7KiMXo0/KrQmwsT0kbqO3tlppAUEVRv+D9WAde6HeggO YEBBWevwsgvrEqLxNhiSeBSbElyfwQ0sseV0Q7qqMsqyufJnUoAE+WVLaPKfyU5l v7rqhmDLkMM9uLPLMfWOLUee+WlKjOOnJHoCigCM70JeUTZB+ktK110JmVs3+k8z BD9wA0WyMjEOHCzuAIGb+8nfnfl1gBt0Bw+hL0Zp+yxmvXfA8YPfWaNlKeDtpJP0 rRRDmrX4k+KKOXVUCQ3kNtkvwbY+kSRNCSgVkfS/OPNmE/SkTeZvBHYIgWGnPA+/ 0/AP0/1LpBWmSCMZW8KxTH7PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUd5WbguEP UQXfZyCQpR7gE36VJTgwHwYDVR0jBBgwFoAUMayWR8f4cKZrot54hUTNjDJr3/kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIxOEJCLzZBMEIyMDU0QzhD NTExRUY4RUM1NTU2NUM0RjlBRTAyL01heVdSOGY0Y0tacm90NTRoVVROakRKcjNf ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTWF5V1I4ZjRjS1pyb3Q1NGhVVE5qREpyM19rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIx OEJCLzZBMEIyMDU0QzhDNTExRUY4RUM1NTU2NUM0RjlBRTAyL01heVdSOGY0Y0ta cm90NTRoVVROakRKcjNfay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMYq7Q76C3cWqmg1BHqienQhMYd9s2rem5YN12gjbE9y2XauCleX5Cbm /yIEijil4Tc21lwyhQ9IdWhOiC2YkmWuVca4oaL/y/5HDjLpF9vEqgHEt4FT+yUO bpycCTm0jgL5b5HAlMOgWIecEpxAdkeDoc8UM2KBPSKQozUqpGMGtdZ9cHMwY0XT Nh4iSeA6FkiMnnhogv9985CRmf2CJPXT3YtVc5SOWXwz+dlnqlpHplMjaJn1D4Fh oXmcY4UWOFZWdvB+2sU6mW9iBWVUdryK6Vd+ZTragdcH7lE+FydPLnkVmxDVe/nn /RqlEw/qwSmgeT69vcRAwG1sQsGYSJ8= -----END CERTIFICATE-----Generated at Wed Jul 2 12:41:57 2025 by rpki-client