$ rpki-client -vvf rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.mft File: 5c6UvYXPCPR6j97JcE8dztA4Bow.mft (raw, json) Hash identifier: OA3JiaHSaHTdcqg7FWKNacnhsv4tX3/tTMEsuAYby2E= Subject key identifier: FA:C7:62:49:E0:DE:40:2D:0F:98:BD:CC:9E:8F:6F:19:63:1B:87:07 Authority key identifier: E5:CE:94:BD:85:CF:08:F4:7A:8F:DE:C9:70:4F:1D:CE:D0:38:06:8C Certificate issuer: /CN=A91517A0/serialNumber=E5CE94BD85CF08F47A8FDEC9704F1DCED038068C Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c6UvYXPCPR6j97JcE8dztA4Bow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.mft Manifest number: 68 Signing time: Sat 31 May 2025 06:31:40 +0000 Manifest this update: Sat 31 May 2025 06:31:40 +0000 Manifest next update: Sat 07 Jun 2025 06:31:40 +0000 Files and hashes: 1: 5c6UvYXPCPR6j97JcE8dztA4Bow.crl (hash: pxorD+FgK3st0FmgT39mEdP+fAO1fBJ18a3XKdNuJwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.crl rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c6UvYXPCPR6j97JcE8dztA4Bow.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:31:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91517A0, serialNumber=E5CE94BD85CF08F47A8FDEC9704F1DCED038068C Validity Not Before: May 31 06:31:40 2025 GMT Not After : Jun 7 06:31:40 2025 GMT Subject: CN=683aa24c-81f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fe:13:41:02:ba:3b:a7:25:4a:8e:c6:e5:48: 19:c0:d8:cb:f4:11:03:75:61:4f:cd:18:7b:1f:ef: 14:dc:18:52:ec:2e:d3:87:b6:01:d2:55:fe:37:dd: b7:de:59:f9:d8:16:6c:c1:9a:24:02:99:83:3b:c8: c1:44:0b:11:9c:08:0f:0f:14:89:b6:83:8b:28:a4: e8:a8:1b:1b:f5:46:79:30:df:df:a4:67:f2:c2:d3: 5f:3d:cf:5e:79:79:65:35:3e:ac:05:eb:40:f1:8d: b6:74:7c:68:26:6b:a3:03:2f:aa:61:fb:c2:28:4d: 12:61:a4:f8:15:59:8a:d6:2e:79:2a:9e:85:e0:5d: 7b:44:7a:c5:25:62:fc:d3:3c:6b:ad:03:a8:aa:55: 64:d9:76:ab:3d:f0:5e:da:bf:6e:b2:f0:e3:dd:a0: d1:ec:41:af:30:f5:74:54:b0:9c:50:c8:6e:08:6e: 6d:80:d2:31:f1:17:d1:a1:ff:a5:70:83:10:8a:ea: 60:54:e0:9e:24:5f:4e:a1:9d:27:38:8b:20:59:50: da:8e:cb:0a:23:0d:5d:9b:c7:b4:f9:5a:03:e9:ee: c1:14:f4:8b:a5:06:0c:aa:61:73:5e:c5:4b:dc:76: ee:0f:45:8d:67:e9:0f:a8:de:d6:c2:2e:4f:7f:1d: 78:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C7:62:49:E0:DE:40:2D:0F:98:BD:CC:9E:8F:6F:19:63:1B:87:07 X509v3 Authority Key Identifier: keyid:E5:CE:94:BD:85:CF:08:F4:7A:8F:DE:C9:70:4F:1D:CE:D0:38:06:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c6UvYXPCPR6j97JcE8dztA4Bow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:9b:86:df:93:00:70:cf:a0:ae:8f:7d:58:de:0a:c7:ba:d4: c0:dc:0d:c4:36:9a:a3:e0:82:5c:47:eb:c6:ac:60:ba:34:e2: ca:9e:c6:b9:6d:4c:8f:ba:f4:8f:60:04:d7:fb:da:ce:a1:18: 41:50:9b:ab:43:fb:b0:db:54:99:eb:5e:89:bc:79:47:c5:ca: a5:15:89:99:31:37:fa:08:75:6b:04:fd:2d:97:6f:5f:3b:f0: 1b:72:a8:c3:e7:af:1c:f3:61:1f:02:f1:9a:5c:d0:89:69:07: 16:ee:f2:56:d0:78:ff:98:82:58:a8:2d:b1:ab:8b:cf:94:af: 39:e8:64:37:20:22:04:18:00:33:20:c0:d1:08:a4:a3:34:ae: f5:28:b9:54:20:7c:b3:60:fb:98:68:c7:d2:06:f9:00:79:b3: d9:45:66:c3:f0:f5:41:38:3a:ce:6d:b8:f8:27:09:52:b6:55: 89:65:f8:02:28:b9:6b:6f:43:fe:35:dd:51:33:48:ff:33:47: 8e:3b:43:16:ac:f3:ba:c7:93:03:ba:d4:e3:6f:4d:f2:90:db: 42:7f:02:3d:0f:32:8e:a4:14:70:5e:5b:8e:45:a5:65:83:3d: c3:7a:7d:20:d1:b0:04:3f:14:02:f1:e6:e0:86:08:21:4e:16: be:0e:dd:f2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MTdBMDExMC8GA1UEBRMoRTVDRTk0QkQ4NUNGMDhGNDdBOEZERUM5NzA0RjFEQ0VE MDM4MDY4QzAeFw0yNTA1MzEwNjMxNDBaFw0yNTA2MDcwNjMxNDBaMBgxFjAUBgNV BAMTDTY4M2FhMjRjLTgxZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCm/hNBAro7pyVKjsblSBnA2Mv0EQN1YU/NGHsf7xTcGFLsLtOHtgHSVf433bfe WfnYFmzBmiQCmYM7yMFECxGcCA8PFIm2g4sopOioGxv1Rnkw39+kZ/LC0189z155 eWU1PqwF60DxjbZ0fGgma6MDL6ph+8IoTRJhpPgVWYrWLnkqnoXgXXtEesUlYvzT PGutA6iqVWTZdqs98F7av26y8OPdoNHsQa8w9XRUsJxQyG4Ibm2A0jHxF9Gh/6Vw gxCK6mBU4J4kX06hnSc4iyBZUNqOywojDV2bx7T5WgPp7sEU9IulBgyqYXNexUvc du4PRY1n6Q+o3tbCLk9/HXilAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+sdiSeDe QC0PmL3Mno9vGWMbhwcwHwYDVR0jBBgwFoAU5c6UvYXPCPR6j97JcE8dztA4Boww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxN0EwLzk1NUZBNTUyOUY2 OTExRUZBNEZFQUY2NUM0RjlBRTAyLzVjNlV2WVhQQ1BSNmo5N0pjRThkenRBNEJv dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNWM2VXZZWFBDUFI2ajk3SmNFOGR6dEE0Qm93LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx N0EwLzk1NUZBNTUyOUY2OTExRUZBNEZFQUY2NUM0RjlBRTAyLzVjNlV2WVhQQ1BS Nmo5N0pjRThkenRBNEJvdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB6bht+TAHDPoK6PfVjeCse61MDcDcQ2mqPgglxH68asYLo04sqexrlt TI+69I9gBNf72s6hGEFQm6tD+7DbVJnrXom8eUfFyqUViZkxN/oIdWsE/S2Xb187 8BtyqMPnrxzzYR8C8Zpc0IlpBxbu8lbQeP+YglioLbGri8+UrznoZDcgIgQYADMg wNEIpKM0rvUouVQgfLNg+5hox9IG+QB5s9lFZsPw9UE4Os5tuPgnCVK2VYll+AIo uWtvQ/413VEzSP8zR447Qxas87rHkwO61ONvTfKQ20J/Aj0PMo6kFHBeW45FpWWD PcN6fSDRsAQ/FALx5uCGCCFOFr4O3fI= -----END CERTIFICATE-----Generated at Sat May 31 17:03:26 2025 by rpki-client