$ rpki-client -vvf rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft File: a5tdFBgYlY1zBFgvJU6hddhD4_0.mft (raw, json) Hash identifier: mYNk3awJzwbSLebxjF+sSH9NVqBBlBqkW+pD7myk55Y= Subject key identifier: 5A:E8:F5:1E:0F:79:3F:7F:E1:1B:2A:A4:FD:45:57:BD:87:05:50:27 Authority key identifier: 6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD Certificate issuer: /CN=A91359CD/serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Certificate serial: 09C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft Manifest number: 09C0 Signing time: Fri 30 May 2025 20:10:25 +0000 Manifest this update: Fri 30 May 2025 20:10:24 +0000 Manifest next update: Fri 06 Jun 2025 20:10:24 +0000 Files and hashes: 1: a5tdFBgYlY1zBFgvJU6hddhD4_0.crl (hash: DI8yZbNuEQk12Aswa18rGD3yGs6zJBvLlzOVbsrh0WM=) 2: 8F467E0082DD11EABD325010C4F9AE02.roa (hash: nTti14+ixHvCqHgk8IwtFdkQ1Ouiq6aL3zx3Hm8MMGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:10:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2504 (0x9c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91359CD, serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Validity Not Before: May 30 20:10:24 2025 GMT Not After : Jun 6 20:10:24 2025 GMT Subject: CN=683a10b1-def1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:33:af:4e:fd:87:8c:63:ef:74:3d:ae:0a:a1: 5a:b4:2d:55:1c:db:ed:18:54:ee:49:14:54:9c:ad: 59:27:d0:8c:e4:1a:4e:fb:21:43:92:78:4c:8f:62: c7:3e:3f:d2:ff:41:0e:b4:27:e3:32:14:d4:77:c8: 9c:b1:6e:07:8d:d2:92:92:b0:38:99:04:73:46:cf: ed:b4:3f:b4:3d:d0:4d:8a:7b:0a:5e:fa:ec:68:30: c5:36:1b:18:45:80:a3:3a:33:54:fc:5c:ec:0d:f4: 40:38:25:e8:7a:32:48:af:de:4e:26:3f:02:7b:28: 8c:11:c9:0b:21:22:76:19:4a:56:80:7a:80:b3:48: 3c:69:c0:47:1d:11:92:10:9c:d7:f8:c7:c4:eb:37: 1f:cf:04:3d:ae:a0:de:d4:f7:13:35:5e:5f:65:b8: 79:98:bd:01:d8:5c:ea:35:4b:f3:25:a1:86:91:62: ab:20:0b:cd:cd:5c:ce:3c:5e:39:07:f4:b2:88:43: 79:3c:45:64:75:c3:36:14:45:ed:63:dc:15:4e:99: 7d:79:6b:05:9f:9f:27:5f:e3:86:a3:e8:2b:a4:4c: 11:1b:11:22:7d:b0:c9:27:68:1d:b4:04:87:7e:64: bd:dd:92:71:e7:9a:86:f4:4c:87:b7:ef:30:3b:74: 8c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E8:F5:1E:0F:79:3F:7F:E1:1B:2A:A4:FD:45:57:BD:87:05:50:27 X509v3 Authority Key Identifier: keyid:6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:44:31:34:82:09:17:32:a9:18:2e:42:7d:0a:7c:f4:b4:da: 6c:7a:d5:18:4f:58:4e:ac:b3:47:95:e7:e4:6a:a9:c1:18:c6: 69:b5:e6:f1:6d:dd:c1:9e:9b:92:54:ad:f5:18:6d:c3:ca:86: 97:f8:8d:f3:27:c1:fc:c3:6b:3e:d9:04:33:a4:eb:92:ae:45: 8c:c0:e4:88:86:07:c3:84:0f:39:c7:34:e2:76:e6:38:9b:a2: 1b:d3:ba:cf:24:79:ef:81:75:38:57:c8:27:4e:dd:5e:90:ce: 6d:5f:b3:ff:c4:ef:dd:f0:c2:69:5e:c8:e3:a4:ef:1a:e5:cf: 6c:9b:3e:c9:c2:68:37:0b:08:a2:77:44:5c:c6:3c:63:7b:cd: e6:fb:f5:36:47:c0:77:57:b5:a8:1b:70:ae:1a:e7:b9:05:f5: f5:e8:b5:fc:c8:f9:4a:cc:75:c3:45:97:96:ce:c4:cb:e8:f2: b8:2c:0f:1e:a6:09:90:5f:5b:9f:71:17:7b:03:91:23:be:ab: 4c:24:2a:5f:55:e4:d0:7d:24:91:32:41:ea:04:40:ad:02:c5: d4:8c:c7:39:95:dd:0d:d5:84:20:b3:6a:57:78:23:7e:88:e6: 7e:c3:50:76:26:c4:da:86:63:8a:3e:57:da:92:43:e6:41:6d: b0:e6:f9:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU5Q0QxMTAvBgNVBAUTKDZCOUI1RDE0MTgxODk1OEQ3MzA0NTgyRjI1NEVBMTc1 RDg0M0UzRkQwHhcNMjUwNTMwMjAxMDI0WhcNMjUwNjA2MjAxMDI0WjAYMRYwFAYD VQQDEw02ODNhMTBiMS1kZWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjOvTv2HjGPvdD2uCqFatC1VHNvtGFTuSRRUnK1ZJ9CM5BpO+yFDknhMj2LH Pj/S/0EOtCfjMhTUd8icsW4HjdKSkrA4mQRzRs/ttD+0PdBNinsKXvrsaDDFNhsY RYCjOjNU/FzsDfRAOCXoejJIr95OJj8CeyiMEckLISJ2GUpWgHqAs0g8acBHHRGS EJzX+MfE6zcfzwQ9rqDe1PcTNV5fZbh5mL0B2FzqNUvzJaGGkWKrIAvNzVzOPF45 B/SyiEN5PEVkdcM2FEXtY9wVTpl9eWsFn58nX+OGo+grpEwRGxEifbDJJ2gdtASH fmS93ZJx55qG9EyHt+8wO3SMUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFro9R4P eT9/4RsqpP1FV72HBVAnMB8GA1UdIwQYMBaAFGubXRQYGJWNcwRYLyVOoXXYQ+P9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTlDRC8xODVGRkMyODgy REIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZMXpCRmd2SlU2aGRkaEQ0 XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E1dGRGQmdZbFkxekJGZ3ZKVTZoZGRoRDRfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTlDRC8xODVGRkMyODgyREIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZ MXpCRmd2SlU2aGRkaEQ0XzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmRDE0ggkXMqkYLkJ9Cnz0tNpsetUYT1hOrLNHlefkaqnBGMZptebx bd3BnpuSVK31GG3DyoaX+I3zJ8H8w2s+2QQzpOuSrkWMwOSIhgfDhA85xzTiduY4 m6Ib07rPJHnvgXU4V8gnTt1ekM5tX7P/xO/d8MJpXsjjpO8a5c9smz7Jwmg3Cwii d0Rcxjxje83m+/U2R8B3V7WoG3CuGue5BfX16LX8yPlKzHXDRZeWzsTL6PK4LA8e pgmQX1ufcRd7A5EjvqtMJCpfVeTQfSSRMkHqBECtAsXUjMc5ld0N1YQgs2pXeCN+ iOZ+w1B2JsTahmOKPlfakkPmQW2w5vnn -----END CERTIFICATE-----Generated at Sat May 31 16:46:47 2025 by rpki-client