$ rpki-client -vvf rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft File: 5nG8sr6VpsiFJxIdiBXovPGKoeI.mft (raw, json) Hash identifier: +WGiWaJbj1y1Il2RWsfg8PGSdyfd21lAyFnfcvHtbZo= Subject key identifier: AA:80:D9:0C:88:99:42:D7:29:04:04:9E:71:3A:2C:0D:FB:0F:48:E4 Authority key identifier: E6:71:BC:B2:BE:95:A6:C8:85:27:12:1D:88:15:E8:BC:F1:8A:A1:E2 Certificate issuer: /CN=A9124926/serialNumber=E671BCB2BE95A6C88527121D8815E8BCF18AA1E2 Certificate serial: 09CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft Manifest number: 09C5 Signing time: Sun 08 Jun 2025 19:42:08 +0000 Manifest this update: Sun 08 Jun 2025 19:42:08 +0000 Manifest next update: Sun 15 Jun 2025 19:42:08 +0000 Files and hashes: 1: 5nG8sr6VpsiFJxIdiBXovPGKoeI.crl (hash: t7vtfS3FxukhZUE3pH2tLUZ07ovTnL9T/Y8S0sBoVlI=) 2: 209BA8B682DF11EAABBC5018C4F9AE02.roa (hash: 8aW0SKFCuzpKiRgqZbEn9MAhCjT3ayoMsYjGk6vj7OA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.crl rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 19:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2509 (0x9cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124926, serialNumber=E671BCB2BE95A6C88527121D8815E8BCF18AA1E2 Validity Not Before: Jun 8 19:42:08 2025 GMT Not After : Jun 15 19:42:08 2025 GMT Subject: CN=6845e790-1178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:33:d1:6e:09:8a:44:ee:38:5f:ba:18:75:ed: 82:b2:d3:3e:c8:05:6c:4c:fe:d0:a9:57:71:bc:0e: aa:07:e9:79:83:9c:b6:f3:07:da:c5:86:0c:22:fe: 49:6f:c1:87:72:31:bd:d9:a9:81:7b:50:f1:4f:00: d5:d2:4f:3d:01:71:cc:af:e0:2f:56:75:b5:47:c3: e6:16:03:ae:51:ec:91:de:d4:e6:3e:de:0d:2b:89: c0:da:e8:78:20:db:4a:c2:07:64:27:75:da:8e:42: 57:b4:6c:b0:71:39:d7:d8:bc:40:dd:8f:f5:c1:7a: 4e:88:23:da:04:06:3b:d7:68:7c:71:fd:41:fd:b1: 38:82:35:d5:3a:0b:a2:e0:79:01:ab:ef:d6:62:09: cf:2c:b2:40:38:05:48:e2:b0:7a:63:7a:34:92:2d: 20:f6:29:6c:06:c5:74:07:e2:08:f1:6b:c2:5b:66: 5d:0c:1b:93:76:b7:a2:86:d5:5d:08:34:55:a3:f2: dc:62:a0:07:7b:c0:01:1a:e0:37:c7:49:c6:1c:f5: ad:5c:c8:8b:2a:f9:00:bb:46:32:8a:cd:52:da:72: df:e5:31:fa:b9:91:f1:cb:97:dc:d1:48:21:ea:44: 32:9c:73:ae:44:95:e7:a3:6c:8a:37:70:6a:b7:78: 1d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:80:D9:0C:88:99:42:D7:29:04:04:9E:71:3A:2C:0D:FB:0F:48:E4 X509v3 Authority Key Identifier: keyid:E6:71:BC:B2:BE:95:A6:C8:85:27:12:1D:88:15:E8:BC:F1:8A:A1:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:0c:bd:45:04:0c:85:e4:64:a0:5d:bd:f9:81:2a:ad:8a:9f: 34:2b:f5:94:6c:1b:23:e0:f2:8a:88:70:c1:dc:3b:e6:44:94: d0:37:9d:5e:69:8c:27:b5:5a:3c:45:a2:69:6f:df:34:90:de: 59:a5:a6:f4:58:63:b4:f3:d1:b0:75:d4:73:48:fa:43:5b:02: 5f:bf:b9:a7:1e:c5:8f:31:2d:6c:ee:96:58:11:61:96:d7:5f: 46:30:c7:8f:cb:90:bc:68:39:a4:c7:f3:30:ad:8a:e3:67:ba: 19:41:6f:7d:d2:7d:fb:05:69:d4:94:72:23:f0:a8:71:4c:39: 2d:de:53:e7:75:67:82:0e:d1:93:75:2a:b6:d1:b0:30:97:f5: b8:a0:82:bf:9d:0a:31:d6:fb:dc:8e:8a:30:15:c2:c1:c4:15: 35:40:bf:c0:88:fa:30:68:9f:49:e8:c5:ff:c9:e8:a0:05:ff: 3c:25:71:9a:a7:16:64:00:d7:ff:b7:cf:d7:2a:7d:dc:42:53: 13:b8:57:88:ae:e5:f3:34:3f:2d:60:a2:e1:4f:5c:14:d8:c0: db:37:a0:b6:c4:7a:9e:7a:47:0f:8c:53:cd:7d:67:ad:7f:ea: 27:d1:2a:ad:99:d3:48:9c:42:0a:1b:f5:06:bc:b3:78:d9:4c: 57:a5:b0:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ5MjYxMTAvBgNVBAUTKEU2NzFCQ0IyQkU5NUE2Qzg4NTI3MTIxRDg4MTVFOEJD RjE4QUExRTIwHhcNMjUwNjA4MTk0MjA4WhcNMjUwNjE1MTk0MjA4WjAYMRYwFAYD VQQDEw02ODQ1ZTc5MC0xMTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDPRbgmKRO44X7oYde2CstM+yAVsTP7QqVdxvA6qB+l5g5y28wfaxYYMIv5J b8GHcjG92amBe1DxTwDV0k89AXHMr+AvVnW1R8PmFgOuUeyR3tTmPt4NK4nA2uh4 INtKwgdkJ3XajkJXtGywcTnX2LxA3Y/1wXpOiCPaBAY712h8cf1B/bE4gjXVOgui 4HkBq+/WYgnPLLJAOAVI4rB6Y3o0ki0g9ilsBsV0B+II8WvCW2ZdDBuTdreihtVd CDRVo/LcYqAHe8ABGuA3x0nGHPWtXMiLKvkAu0Yyis1S2nLf5TH6uZHxy5fc0Ugh 6kQynHOuRJXno2yKN3Bqt3gdYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKqA2QyI mULXKQQEnnE6LA37D0jkMB8GA1UdIwQYMBaAFOZxvLK+labIhScSHYgV6LzxiqHi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDkyNi9CMzg1NzhDNDgy RDkxMUVBQjlGQ0QyODVDNEY5QUUwMi81bkc4c3I2VnBzaUZKeElkaUJYb3ZQR0tv ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVuRzhzcjZWcHNpRkp4SWRpQlhvdlBHS29lSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDkyNi9CMzg1NzhDNDgyRDkxMUVBQjlGQ0QyODVDNEY5QUUwMi81bkc4c3I2VnBz aUZKeElkaUJYb3ZQR0tvZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8DL1FBAyF5GSgXb35gSqtip80K/WUbBsj4PKKiHDB3DvmRJTQN51e aYwntVo8RaJpb980kN5Zpab0WGO089GwddRzSPpDWwJfv7mnHsWPMS1s7pZYEWGW 119GMMePy5C8aDmkx/MwrYrjZ7oZQW990n37BWnUlHIj8KhxTDkt3lPndWeCDtGT dSq20bAwl/W4oIK/nQox1vvcjoowFcLBxBU1QL/AiPowaJ9J6MX/yeigBf88JXGa pxZkANf/t8/XKn3cQlMTuFeIruXzND8tYKLhT1wU2MDbN6C2xHqeekcPjFPNfWet f+on0SqtmdNInEIKG/UGvLN42UxXpbDo -----END CERTIFICATE-----Generated at Mon Jun 9 18:01:21 2025 by rpki-client