$ rpki-client -vvf rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft File: A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft (raw, json) Hash identifier: 2Hvw9O8HHTVl3IxyT6VNXQwUCKGjZOgLECkdsO1yjU0= Subject key identifier: 2C:77:F3:78:AB:E7:3F:34:6F:F8:52:B9:C3:9E:8E:0E:D9:B2:68:F5 Authority key identifier: 03:91:D9:A7:0E:89:3E:75:1B:C6:12:89:C5:44:17:B8:7A:10:45:59 Certificate issuer: /CN=A91380F7/serialNumber=0391D9A70E893E751BC61289C54417B87A104559 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft Manifest number: 67 Signing time: Mon 09 Jun 2025 05:56:09 +0000 Manifest this update: Mon 09 Jun 2025 05:56:09 +0000 Manifest next update: Mon 16 Jun 2025 05:56:09 +0000 Files and hashes: 1: A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl (hash: jbTxpz/TPcfvWJw2o1QHnf6oNFMxNDP+flR6Dait1JQ=) 2: 9B3FE178A7FA11EFA7886875C4F9AE02.roa (hash: wskyOCDE340iqc6+xbxJBMsRJGfe9vODWh/hz8Ga1HM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 05:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91380F7, serialNumber=0391D9A70E893E751BC61289C54417B87A104559 Validity Not Before: Jun 9 05:56:09 2025 GMT Not After : Jun 16 05:56:09 2025 GMT Subject: CN=68467779-d49d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5e:e7:cd:bf:e0:0f:32:fe:69:82:1b:36:ab: 65:75:96:72:96:07:87:02:3e:64:68:e4:c1:f8:da: 68:f1:e4:08:cc:62:b7:5f:5c:13:37:57:97:a5:86: 49:b7:55:98:ec:4f:24:ea:90:b7:bf:f7:f5:f5:01: 2f:ae:69:e4:e9:02:f1:7b:32:6e:c3:45:5e:e5:ae: 06:e8:1b:d0:91:72:27:5e:0f:ce:68:91:9b:13:9f: d1:3e:5d:34:d3:da:75:61:02:b4:fe:9d:94:44:09: 64:0e:19:f7:69:a4:f9:a8:13:cf:78:b1:3e:74:9b: bd:58:28:9e:df:2c:3e:f7:76:f4:ad:95:bc:b9:62: 0f:0e:a8:4b:5e:b7:37:27:0d:74:74:3c:79:8c:9b: 30:4a:1f:86:57:78:87:64:66:7e:4f:95:cf:30:58: 39:ea:65:aa:25:58:e2:d0:0d:7d:10:c3:63:a6:d3: 3f:d5:1b:c9:77:13:33:77:61:23:f3:ec:de:f3:62: a9:8a:c2:0b:ec:a1:19:ce:7c:55:7a:60:ba:e0:83: 81:61:0b:4f:fe:eb:bf:2a:e9:f5:87:e8:59:60:f2: e6:ee:37:a2:28:2e:94:02:be:22:a8:45:24:b4:6a: 7b:0d:21:7c:59:e3:82:42:e9:e3:61:93:2d:bd:12: 42:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:77:F3:78:AB:E7:3F:34:6F:F8:52:B9:C3:9E:8E:0E:D9:B2:68:F5 X509v3 Authority Key Identifier: keyid:03:91:D9:A7:0E:89:3E:75:1B:C6:12:89:C5:44:17:B8:7A:10:45:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:8c:fe:1c:c5:87:fb:29:f7:c2:ed:c0:11:f2:11:bd:1c:28: 7b:c5:45:93:16:88:5a:d7:90:f7:8a:c6:2d:ce:04:0b:b4:24: 12:69:bc:3b:ce:ad:0c:c9:c0:61:00:f4:7c:a3:5b:24:e7:26: af:24:02:82:4c:47:52:89:76:47:57:ac:a6:13:80:a4:c5:a2: 79:38:af:a9:21:c2:a3:25:ee:53:7b:b2:c7:a5:1f:aa:83:f7: 0d:88:3b:dd:00:d4:1a:3e:e9:31:4e:25:7d:d7:15:10:e5:bd: 0e:4d:c5:47:92:f7:ab:72:ff:7f:b5:fe:c4:16:21:a7:28:60: 9b:1e:2d:0b:6f:39:c3:dd:03:4c:85:ba:f9:02:a9:21:d2:28: 22:66:83:89:b2:57:56:fd:fd:d1:7e:c6:3a:5d:b7:03:f8:9c: da:23:fa:ca:62:36:f9:a5:0c:57:dd:4c:53:86:bb:93:74:7e: 24:f6:2c:49:7f:31:83:a5:bc:7d:84:44:b4:47:b8:64:44:4f: 14:35:7b:75:b0:d1:d0:64:12:19:f6:8e:50:97:34:eb:8c:9c: 9a:bb:55:c5:0e:24:37:38:13:42:d7:19:3a:c1:f0:d3:0e:c0: 1d:1e:37:83:72:b3:ac:79:15:44:a4:44:b0:ed:cd:69:1f:ba: 84:6c:d7:47 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODBGNzExMC8GA1UEBRMoMDM5MUQ5QTcwRTg5M0U3NTFCQzYxMjg5QzU0NDE3Qjg3 QTEwNDU1OTAeFw0yNTA2MDkwNTU2MDlaFw0yNTA2MTYwNTU2MDlaMBgxFjAUBgNV BAMTDTY4NDY3Nzc5LWQ0OWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIXufNv+APMv5pghs2q2V1lnKWB4cCPmRo5MH42mjx5AjMYrdfXBM3V5elhkm3 VZjsTyTqkLe/9/X1AS+uaeTpAvF7Mm7DRV7lrgboG9CRcideD85okZsTn9E+XTTT 2nVhArT+nZRECWQOGfdppPmoE894sT50m71YKJ7fLD73dvStlby5Yg8OqEtetzcn DXR0PHmMmzBKH4ZXeIdkZn5Plc8wWDnqZaolWOLQDX0Qw2Om0z/VG8l3EzN3YSPz 7N7zYqmKwgvsoRnOfFV6YLrgg4FhC0/+678q6fWH6Flg8ubuN6IoLpQCviKoRSS0 ansNIXxZ44JC6eNhky29EkLrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULHfzeKvn PzRv+FK5w56ODtmyaPUwHwYDVR0jBBgwFoAUA5HZpw6JPnUbxhKJxUQXuHoQRVkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4MEY3L0E3RUJDMUQyQTdG ODExRUZCQjQ0RjM3MUM0RjlBRTAyL0E1SFpwdzZKUG5VYnhoS0p4VVFYdUhvUVJW ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQTVIWnB3NkpQblVieGhLSnhVUVh1SG9RUlZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 MEY3L0E3RUJDMUQyQTdGODExRUZCQjQ0RjM3MUM0RjlBRTAyL0E1SFpwdzZKUG5V YnhoS0p4VVFYdUhvUVJWay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADSM/hzFh/sp98LtwBHyEb0cKHvFRZMWiFrXkPeKxi3OBAu0JBJpvDvO rQzJwGEA9HyjWyTnJq8kAoJMR1KJdkdXrKYTgKTFonk4r6khwqMl7lN7sselH6qD 9w2IO90A1Bo+6TFOJX3XFRDlvQ5NxUeS96ty/3+1/sQWIacoYJseLQtvOcPdA0yF uvkCqSHSKCJmg4myV1b9/dF+xjpdtwP4nNoj+spiNvmlDFfdTFOGu5N0fiT2LEl/ MYOlvH2ERLRHuGRETxQ1e3Ww0dBkEhn2jlCXNOuMnJq7VcUOJDc4E0LXGTrB8NMO wB0eN4Nys6x5FUSkRLDtzWkfuoRs10c= -----END CERTIFICATE-----Generated at Mon Jun 9 22:34:43 2025 by rpki-client