$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft File: 5viFuMHmNK45nsq4FzoD245MEpQ.mft (raw, json) Hash identifier: 46Uunep/G1Zjtl01jWXU7XkZQ64DTg9T+Pzi+1+pamM= Subject key identifier: CE:93:49:6C:32:CB:0D:08:0E:BB:D0:1E:3B:58:A2:C0:65:86:D3:D8 Authority key identifier: E6:F8:85:B8:C1:E6:34:AE:39:9E:CA:B8:17:3A:03:DB:8E:4C:12:94 Certificate issuer: /CN=A914C4D7/serialNumber=E6F885B8C1E634AE399ECAB8173A03DB8E4C1294 Certificate serial: 0DD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft Manifest number: 0DCC Signing time: Fri 30 May 2025 18:04:15 +0000 Manifest this update: Fri 30 May 2025 18:04:14 +0000 Manifest next update: Fri 06 Jun 2025 18:04:14 +0000 Files and hashes: 1: 5viFuMHmNK45nsq4FzoD245MEpQ.crl (hash: 6z5YHxo4QCbJXwUo/75FDlyyS0te7e7BQl3HxW3nTNc=) 2: 1801797EB79211E986129837C4F9AE02.roa (hash: I7CEbkBg9Av7yOv0PNqj77FDrgxZjjIl1US16C5a7sQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.crl rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:04:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3541 (0xdd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C4D7, serialNumber=E6F885B8C1E634AE399ECAB8173A03DB8E4C1294 Validity Not Before: May 30 18:04:14 2025 GMT Not After : Jun 6 18:04:14 2025 GMT Subject: CN=6839f31e-9a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b5:d7:df:96:b0:0e:4c:88:15:a2:0f:67:f1: 62:6b:21:cf:40:dc:53:9e:12:34:1c:c2:bb:a7:8f: 52:4d:df:35:4c:69:22:03:87:a7:a7:5e:73:87:55: 00:f3:a3:15:5c:ed:b4:a9:42:31:c2:cc:39:3a:ad: ea:10:c8:02:e9:18:f6:21:c0:97:51:ca:07:94:52: 83:bd:b0:6f:b9:5b:6b:36:de:b8:87:ad:ff:5b:d8: 64:f5:a0:96:4a:4d:54:8b:7f:ee:f9:b5:63:7e:17: 73:83:7b:93:ac:b1:bc:e8:71:b1:af:9d:fa:32:4c: 9a:61:64:ea:06:73:45:8c:22:00:80:3d:4d:59:42: 1c:48:59:4e:e2:54:55:f4:5a:fc:b5:38:97:36:08: 2f:6e:e7:68:16:9b:b6:8e:3d:ab:23:98:1e:60:e9: ef:97:1d:4c:4b:7b:ee:d6:e7:2c:20:80:37:94:31: df:bf:f2:7b:b3:c5:ad:60:69:65:54:09:d8:95:85: 13:10:ea:ca:d7:ee:c3:ee:7c:ad:a7:de:91:a4:dd: d1:fa:ab:c3:44:80:e8:2f:67:b9:6e:93:7d:47:4c: d6:ad:36:d8:67:27:dd:77:9a:b7:61:a8:26:21:bd: 4a:35:32:a3:0f:97:30:91:15:c8:3f:70:78:f4:c4: 75:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:93:49:6C:32:CB:0D:08:0E:BB:D0:1E:3B:58:A2:C0:65:86:D3:D8 X509v3 Authority Key Identifier: keyid:E6:F8:85:B8:C1:E6:34:AE:39:9E:CA:B8:17:3A:03:DB:8E:4C:12:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:e7:0f:90:df:9d:4a:41:aa:f9:b6:3e:1e:86:3d:09:56:bf: be:76:e2:df:58:6c:ce:6a:81:f5:a1:9f:9e:56:6f:33:60:c4: 2a:0b:5a:63:44:37:73:fc:aa:9d:61:b4:8e:f6:9d:0e:a4:58: 06:a5:4d:fa:47:fe:04:dd:8e:8d:d7:5e:a3:ff:45:82:a1:17: c7:f3:14:b7:b2:fa:ac:90:ca:d2:f5:56:67:01:a8:4c:b8:bd: f6:ef:22:53:c0:8e:37:1b:fc:d7:55:27:8c:01:58:db:96:0b: bb:63:4d:cc:d9:34:01:0c:15:f4:9e:8d:4a:98:01:47:58:31: f4:d7:7b:81:ee:38:56:a5:13:d2:3f:a2:f0:9f:69:0f:6e:d8: 9a:de:9f:0c:53:15:14:68:ec:e5:45:1a:a8:7d:9d:1b:f1:9b: ed:cd:dc:07:80:d3:22:9c:df:e9:29:50:80:11:56:80:df:b8: ac:6d:94:a5:3e:5d:45:da:36:fb:e8:f7:df:b4:51:7a:ce:af: 2e:2c:1e:d8:76:d2:0c:4b:d2:52:8a:77:0c:e5:77:e7:7e:2e: c4:4c:97:53:7b:3b:4f:b7:9e:9d:1b:d8:14:4c:2c:2e:86:b3: f3:12:95:45:5a:48:b0:8c:ca:df:dc:42:28:6a:4a:49:45:aa: 2f:b8:18:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0RDcxMTAvBgNVBAUTKEU2Rjg4NUI4QzFFNjM0QUUzOTlFQ0FCODE3M0EwM0RC OEU0QzEyOTQwHhcNMjUwNTMwMTgwNDE0WhcNMjUwNjA2MTgwNDE0WjAYMRYwFAYD VQQDEw02ODM5ZjMxZS05YTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLXX35awDkyIFaIPZ/FiayHPQNxTnhI0HMK7p49STd81TGkiA4enp15zh1UA 86MVXO20qUIxwsw5Oq3qEMgC6Rj2IcCXUcoHlFKDvbBvuVtrNt64h63/W9hk9aCW Sk1Ui3/u+bVjfhdzg3uTrLG86HGxr536MkyaYWTqBnNFjCIAgD1NWUIcSFlO4lRV 9Fr8tTiXNggvbudoFpu2jj2rI5geYOnvlx1MS3vu1ucsIIA3lDHfv/J7s8WtYGll VAnYlYUTEOrK1+7D7nytp96RpN3R+qvDRIDoL2e5bpN9R0zWrTbYZyfdd5q3Yagm Ib1KNTKjD5cwkRXIP3B49MR1AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6TSWwy yw0IDrvQHjtYosBlhtPYMB8GA1UdIwQYMBaAFOb4hbjB5jSuOZ7KuBc6A9uOTBKU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRENy85OUQ5MTUzQUI3 OTAxMUU5QkVFOEREMzRDNEY5QUUwMi81dmlGdU1IbU5LNDVuc3E0RnpvRDI0NU1F cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV2aUZ1TUhtTks0NW5zcTRGem9EMjQ1TUVwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzRENy85OUQ5MTUzQUI3OTAxMUU5QkVFOEREMzRDNEY5QUUwMi81dmlGdU1IbU5L NDVuc3E0RnpvRDI0NU1FcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+5w+Q351KQar5tj4ehj0JVr++duLfWGzOaoH1oZ+eVm8zYMQqC1pj RDdz/KqdYbSO9p0OpFgGpU36R/4E3Y6N116j/0WCoRfH8xS3svqskMrS9VZnAahM uL327yJTwI43G/zXVSeMAVjblgu7Y03M2TQBDBX0no1KmAFHWDH013uB7jhWpRPS P6Lwn2kPbtia3p8MUxUUaOzlRRqofZ0b8ZvtzdwHgNMinN/pKVCAEVaA37isbZSl Pl1F2jb76PfftFF6zq8uLB7YdtIMS9JSincM5Xfnfi7ETJdTeztPt56dG9gUTCwu hrPzEpVFWkiwjMrf3EIoakpJRaovuBhQ -----END CERTIFICATE-----Generated at Sat May 31 17:20:37 2025 by rpki-client