$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft File: 5pLFtgs-8cIERDn8OQrVbcPLzWM.mft (raw, json) Hash identifier: pDq2Aievrd61t+tELg45PSxbopra9aCzBzIWY9F2XqA= Subject key identifier: 15:39:5A:03:0A:AF:B4:46:9F:34:16:55:1F:5B:95:A4:4F:32:AF:9A Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63 Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63 Certificate serial: 081D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft Manifest number: 07D0 Signing time: Fri 30 May 2025 21:43:33 +0000 Manifest this update: Fri 30 May 2025 21:43:33 +0000 Manifest next update: Fri 06 Jun 2025 21:43:33 +0000 Files and hashes: 1: 5pLFtgs-8cIERDn8OQrVbcPLzWM.crl (hash: KuVevdMnNycnPWXryCUh38tZtHSFpP4g6iKPQXClZ3I=) 2: 9D00ABAC089C11F09075A534C4F9AE02.roa (hash: HmTougKy3rF1ntb28J+0HCxyJCj3J7caTv76b+CnSpw=) 3: 244B9D1874CB11EEB3C0267DC4F9AE02.roa (hash: 58z0sDsYRtdYBAtwDhNvP7kyEQJboZJS4GpwJLh2ing=) 4: 9765FB988A5D11EE9E6AA223C4F9AE02.roa (hash: gdVUdTDJS2HzCLE0SH5abxwvNMrpuz9i+05KM/O5dKM=) 5: F3643AD6089C11F09BB44535C4F9AE02.roa (hash: d4eF712UMcuWBXICMHSbDq1rVUXEx57Lk10/0qmDX9M=) 6: 06166DF4DC6D11EFBD34F40EC4F9AE02.roa (hash: zAVhFCx+Y0sm2rtgFn1OnJdCE1tYjDSThjKJO14bltw=) 7: 79986EE8FE3D11EFB763F62EC4F9AE02.roa (hash: oPWHOSVVHxMTlEOgiAm0tO2SzI3zA9mMs78DXNw+B34=) 8: 215A8FDE4B9E11EEBF766C7FC4F9AE02.roa (hash: ewzgLIZLx9Y5nPTQhL+AITVEb8oh3TwTplFpZhdDOMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:43:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2077 (0x81d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63 Validity Not Before: May 30 21:43:33 2025 GMT Not After : Jun 6 21:43:33 2025 GMT Subject: CN=683a2685-4bef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:62:06:34:2f:79:9d:d3:7c:e1:3f:90:4e:af: 2f:df:7a:75:f0:b3:42:6b:54:3a:9a:27:3c:03:46: 67:2f:5b:d5:92:12:70:59:ad:eb:d6:ca:3e:1c:9c: 71:10:7f:e6:51:76:ae:d6:07:4a:c5:dd:37:03:84: ad:25:bf:31:10:48:f3:71:78:83:97:69:cc:61:a1: e3:d2:f1:22:8a:8e:cc:d7:ab:17:bf:12:4a:ae:fc: 62:eb:ad:61:68:1c:b2:e2:46:f6:da:36:34:01:03: 7c:92:e5:ca:6b:fd:6a:d6:07:70:0a:24:e3:a5:b6: 48:44:85:56:65:d3:c1:dc:ae:15:61:9c:87:63:b8: e8:c6:e8:ad:9e:a4:15:d6:3b:bc:df:a1:8f:7d:8f: ef:41:24:7e:bf:b7:2e:90:9f:10:07:15:4e:74:dc: d0:10:ea:cc:6f:45:68:3a:65:7e:b6:0c:c0:d6:b9: 66:07:b1:e9:e5:e8:e5:ae:3f:52:87:09:f8:74:7b: a8:aa:19:4f:75:2e:e7:51:9b:3b:eb:5a:5f:86:73: 2b:7c:a3:71:c7:58:66:0d:42:62:4d:34:89:e0:c7: 20:06:a6:fc:73:4e:85:b7:cd:ad:18:71:9c:99:e6: b0:8d:29:b8:68:60:3d:e6:da:94:e6:f3:bb:84:fd: c0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:39:5A:03:0A:AF:B4:46:9F:34:16:55:1F:5B:95:A4:4F:32:AF:9A X509v3 Authority Key Identifier: keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:e8:28:ed:01:47:56:b5:bc:7f:69:b1:79:7e:5d:84:1d:3d: 62:fd:6b:ab:7f:bb:47:ee:77:bc:26:eb:2a:cc:ce:9d:0f:15: 32:ff:dd:f8:2c:c0:da:89:45:da:f9:86:2c:7a:64:a5:c5:d8: 59:79:da:db:44:fd:84:62:6a:85:87:9b:3f:15:9e:4b:64:8a: db:a3:1b:b5:78:bd:ed:91:1f:1f:15:09:15:d4:bd:f4:0d:1a: a0:d5:1d:3e:d1:5d:3d:72:44:c3:c9:fa:75:b4:c2:d7:34:95: 16:e0:f1:7e:fc:02:d5:a5:d3:ab:af:4c:7b:2d:55:35:84:e6: f3:5b:65:19:0b:1c:7d:89:84:9a:cf:76:8d:df:19:4f:03:bd: c4:71:aa:71:2b:5c:aa:57:fd:22:08:1e:01:bb:2b:2c:3a:0a: 4f:88:ca:31:63:d4:a4:69:0f:3e:3c:73:83:f6:cf:99:6c:ba: dc:3f:ca:c6:97:aa:5b:cf:84:6c:4c:43:2b:05:80:69:19:e0: 36:27:05:d1:6b:92:ed:49:a9:4a:77:0b:76:65:12:74:33:08: dd:a4:84:81:44:23:fa:75:71:20:70:38:d4:bd:23:3b:47:6e: 2a:54:a1:06:34:19:16:58:d4:18:4d:08:bb:d3:d5:0e:a0:4b: d6:e4:22:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QxRUExMTAvBgNVBAUTKEU2OTJDNUI2MEIzRUYxQzIwNDQ0MzlGQzM5MEFENTZE QzNDQkNENjMwHhcNMjUwNTMwMjE0MzMzWhcNMjUwNjA2MjE0MzMzWjAYMRYwFAYD VQQDEw02ODNhMjY4NS00YmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWIGNC95ndN84T+QTq8v33p18LNCa1Q6mic8A0ZnL1vVkhJwWa3r1so+HJxx EH/mUXau1gdKxd03A4StJb8xEEjzcXiDl2nMYaHj0vEiio7M16sXvxJKrvxi661h aByy4kb22jY0AQN8kuXKa/1q1gdwCiTjpbZIRIVWZdPB3K4VYZyHY7joxuitnqQV 1ju836GPfY/vQSR+v7cukJ8QBxVOdNzQEOrMb0VoOmV+tgzA1rlmB7Hp5ejlrj9S hwn4dHuoqhlPdS7nUZs761pfhnMrfKNxx1hmDUJiTTSJ4McgBqb8c06Ft82tGHGc meawjSm4aGA95tqU5vO7hP3A5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBU5WgMK r7RGnzQWVR9blaRPMq+aMB8GA1UdIwQYMBaAFOaSxbYLPvHCBEQ5/DkK1W3Dy81j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDFFQS85QzkzMkI0ODE3 M0ExMUVCQTNCOTdFN0ZDNEY5QUUwMi81cExGdGdzLThjSUVSRG44T1FyVmJjUEx6 V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVwTEZ0Z3MtOGNJRVJEbjhPUXJWYmNQTHpXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDFFQS85QzkzMkI0ODE3M0ExMUVCQTNCOTdFN0ZDNEY5QUUwMi81cExGdGdzLThj SUVSRG44T1FyVmJjUEx6V00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH6CjtAUdWtbx/abF5fl2EHT1i/Wurf7tH7ne8JusqzM6dDxUy/934 LMDaiUXa+YYsemSlxdhZedrbRP2EYmqFh5s/FZ5LZIrboxu1eL3tkR8fFQkV1L30 DRqg1R0+0V09ckTDyfp1tMLXNJUW4PF+/ALVpdOrr0x7LVU1hObzW2UZCxx9iYSa z3aN3xlPA73EcapxK1yqV/0iCB4BuyssOgpPiMoxY9SkaQ8+PHOD9s+ZbLrcP8rG l6pbz4RsTEMrBYBpGeA2JwXRa5LtSalKdwt2ZRJ0MwjdpISBRCP6dXEgcDjUvSM7 R24qVKEGNBkWWNQYTQi709UOoEvW5CKk -----END CERTIFICATE-----Generated at Sat May 31 17:06:32 2025 by rpki-client