$ rpki-client -vvf rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft File: 53p5hBmz84yLAlkKKUx7NffDREw.mft (raw, json) Hash identifier: 4pPnJv5jEUYxhsM7tD+UD1BAZH33h9URtbr5GTJG98I= Subject key identifier: 04:0E:89:AD:2C:D0:3C:CE:EE:DB:27:0B:9F:F0:16:B5:00:15:6F:53 Authority key identifier: E7:7A:79:84:19:B3:F3:8C:8B:02:59:0A:29:4C:7B:35:F7:C3:44:4C Certificate issuer: /CN=A914530B/serialNumber=E77A798419B3F38C8B02590A294C7B35F7C3444C Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft Manifest number: 5C Signing time: Tue 03 Jun 2025 07:01:43 +0000 Manifest this update: Tue 03 Jun 2025 07:01:43 +0000 Manifest next update: Tue 10 Jun 2025 07:01:43 +0000 Files and hashes: 1: 53p5hBmz84yLAlkKKUx7NffDREw.crl (hash: OvZCfff/Q0q2cQ/JBmnZ4nrA0strcR9xRitZrCtClX8=) 2: 87A33C66B79D11EF9A384C65C4F9AE02.roa (hash: PmWdGEFbgxUM5JARv+3955i+yLCgnSi8KLnrb7A4Hd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.crl rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 07:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914530B, serialNumber=E77A798419B3F38C8B02590A294C7B35F7C3444C Validity Not Before: Jun 3 07:01:43 2025 GMT Not After : Jun 10 07:01:43 2025 GMT Subject: CN=683e9dd7-833b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ac:70:9d:b6:0e:ac:ab:f8:15:1d:95:1e:85: 3a:e8:a1:04:e9:68:77:02:8d:c6:1a:ba:99:53:e6: 46:06:ec:7d:2d:72:f2:a7:ed:09:ac:3e:40:d8:58: 04:a8:53:10:e7:99:15:92:6b:b8:55:69:2a:40:4d: 83:84:44:76:e0:d9:8b:8e:d1:3f:ed:44:dc:16:5c: f2:00:78:61:13:d5:23:7e:2c:77:d2:af:cc:6c:9b: 1b:0c:79:e9:ae:09:2f:d0:66:3b:99:8e:41:06:45: e8:97:d3:94:7e:7b:bd:6f:c7:ca:f4:66:ab:46:1a: 5e:ef:53:e9:ab:df:42:6e:06:f7:20:6b:8d:e2:e6: f4:45:27:93:ac:3d:4e:1d:a7:58:8a:8d:88:03:8e: b0:29:f0:54:0c:cd:27:d9:e6:bd:36:2c:a5:9f:23: f7:95:48:4e:3f:5f:58:d1:16:55:88:13:2d:12:a2: a1:fb:b2:3a:4e:f0:37:3a:43:81:60:b1:94:3f:ed: f2:8c:5c:fb:54:9a:ce:4c:0a:71:84:08:b8:59:74: 68:c8:f1:a7:a9:65:8a:d0:90:1c:60:79:29:8a:0a: e3:94:19:b9:d8:c8:f6:aa:d6:ba:53:d5:9b:6f:2f: 18:86:c9:42:45:0c:e6:63:f7:37:13:e5:09:17:ca: 19:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:0E:89:AD:2C:D0:3C:CE:EE:DB:27:0B:9F:F0:16:B5:00:15:6F:53 X509v3 Authority Key Identifier: keyid:E7:7A:79:84:19:B3:F3:8C:8B:02:59:0A:29:4C:7B:35:F7:C3:44:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f1:a8:c8:3f:10:3c:d0:81:8c:1e:29:30:14:3a:10:63:d0: e7:73:8d:5a:cb:47:71:b2:bf:6f:ef:53:60:51:4f:63:99:fd: 77:81:29:75:cb:90:5e:af:f9:06:a3:44:7b:aa:83:7a:ae:61: b7:10:e2:e8:a7:ce:da:23:b7:41:f3:95:87:06:f9:f5:38:fe: 42:12:b2:cf:f3:44:76:16:4c:d2:c9:75:b6:2e:d7:fa:30:85: a2:21:37:e6:b2:85:94:e0:c6:fa:48:a2:33:40:f1:71:37:40: a5:90:57:92:11:ab:c6:a8:28:13:4e:fd:ba:a9:a2:c3:0c:70: d1:98:a1:5f:1b:fe:f5:a7:80:b3:e1:1d:7d:4c:e5:81:75:bb: 9d:3c:97:03:be:8f:10:1f:3d:b8:d6:fb:61:a1:70:d6:ad:35: 50:47:81:2e:77:24:67:1e:cb:98:0c:50:3f:62:0a:b1:36:39: 36:66:1a:9f:dd:d5:6c:d8:ea:75:35:b8:2e:af:b7:d6:9a:50: ed:2c:26:dd:fa:12:b1:d4:dc:29:56:32:d1:2d:b6:de:b8:f3: cb:56:f5:7b:97:e6:15:6c:73:af:fd:2b:df:d6:3c:e8:bd:62: 20:4f:e6:44:39:79:e3:fd:c0:ee:fe:b1:51:2d:e8:e9:2a:d0: 4b:d5:a9:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NTMwQjExMC8GA1UEBRMoRTc3QTc5ODQxOUIzRjM4QzhCMDI1OTBBMjk0QzdCMzVG N0MzNDQ0QzAeFw0yNTA2MDMwNzAxNDNaFw0yNTA2MTAwNzAxNDNaMBgxFjAUBgNV BAMTDTY4M2U5ZGQ3LTgzM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxrHCdtg6sq/gVHZUehTrooQTpaHcCjcYauplT5kYG7H0tcvKn7QmsPkDYWASo UxDnmRWSa7hVaSpATYOERHbg2YuO0T/tRNwWXPIAeGET1SN+LHfSr8xsmxsMeemu CS/QZjuZjkEGReiX05R+e71vx8r0ZqtGGl7vU+mr30JuBvcga43i5vRFJ5OsPU4d p1iKjYgDjrAp8FQMzSfZ5r02LKWfI/eVSE4/X1jRFlWIEy0SoqH7sjpO8Dc6Q4Fg sZQ/7fKMXPtUms5MCnGECLhZdGjI8aepZYrQkBxgeSmKCuOUGbnYyPaq1rpT1Ztv LxiGyUJFDOZj9zcT5QkXyhl9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBA6JrSzQ PM7u2ycLn/AWtQAVb1MwHwYDVR0jBBgwFoAU53p5hBmz84yLAlkKKUx7NffDREww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1MzBCLzlFNzVEREI2Qjc5 QTExRUZBMEQ2OTc1REM0RjlBRTAyLzUzcDVoQm16ODR5TEFsa0tLVXg3TmZmRFJF dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNTNwNWhCbXo4NHlMQWxrS0tVeDdOZmZEUkV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 MzBCLzlFNzVEREI2Qjc5QTExRUZBMEQ2OTc1REM0RjlBRTAyLzUzcDVoQm16ODR5 TEFsa0tLVXg3TmZmRFJFdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ3xqMg/EDzQgYweKTAUOhBj0OdzjVrLR3Gyv2/vU2BRT2OZ/XeBKXXL kF6v+QajRHuqg3quYbcQ4uinztojt0HzlYcG+fU4/kISss/zRHYWTNLJdbYu1/ow haIhN+ayhZTgxvpIojNA8XE3QKWQV5IRq8aoKBNO/bqposMMcNGYoV8b/vWngLPh HX1M5YF1u508lwO+jxAfPbjW+2GhcNatNVBHgS53JGcey5gMUD9iCrE2OTZmGp/d 1WzY6nU1uC6vt9aaUO0sJt36ErHU3ClWMtEttt6488tW9XuX5hVsc6/9K9/WPOi9 YiBP5kQ5eeP9wO7+sVEt6Okq0EvVqSM= -----END CERTIFICATE-----Generated at Tue Jun 3 23:30:19 2025 by rpki-client