$ rpki-client -vvf rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft File: 5r9G5TDfkimPrAMq-8mECcRDBDk.mft (raw, json) Hash identifier: sYtGGbCBXyTy/1aruaek9Dgbjn7+SrPvV6EI29+78DU= Subject key identifier: FF:0D:8D:E7:F7:F1:8D:C2:AF:D1:ED:C2:77:45:68:BC:E6:73:C9:AC Authority key identifier: E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39 Certificate issuer: /CN=A91527F9/serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439 Certificate serial: 34AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft Manifest number: 3496 Signing time: Fri 30 May 2025 14:58:58 +0000 Manifest this update: Fri 30 May 2025 14:58:57 +0000 Manifest next update: Fri 06 Jun 2025 14:58:57 +0000 Files and hashes: 1: 5r9G5TDfkimPrAMq-8mECcRDBDk.crl (hash: rtq53k7YMGIpiSzaxPjMGFh86kze8Wjd8jD5NCBBQbk=) 2: 909C5126F0A711EEA6150174C4F9AE02.roa (hash: HW9R1Ep56SryGIz4W6P5CqXSgSxlXz4KavtGaF387a4=) 3: AD5BA998D85D11EB8E31070BC4F9AE02.roa (hash: AqcTvl3JE8iQmp2mHhzhnxH+2xnTnNkhAQ8gJbtZg+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 14:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13482 (0x34aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91527F9, serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439 Validity Not Before: May 30 14:58:57 2025 GMT Not After : Jun 6 14:58:57 2025 GMT Subject: CN=6839c7b2-c7dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a2:d2:c7:dc:24:ba:d9:91:e9:c8:d4:a5:ae: 6e:d7:4d:61:d3:d5:ea:f9:0d:12:dd:bc:59:0a:5f: 0a:ed:bf:6c:0e:08:9d:99:ab:84:ca:aa:12:46:08: b4:e7:5d:a8:fc:17:8d:77:54:82:25:b2:45:eb:3a: 04:72:cc:54:95:e1:54:fc:35:27:e8:5d:e9:65:e3: 16:ca:bf:29:34:88:76:5d:8e:b3:dc:a0:75:5e:0f: 18:8f:ca:8b:1f:4d:3e:c1:ce:fe:2e:15:55:fa:1d: 4e:ff:ae:f6:f7:81:67:46:8a:f0:ec:58:05:08:5b: a6:c9:1b:3d:51:1d:f5:40:b5:de:47:28:50:3b:93: 13:9b:cf:47:74:45:b0:d6:b0:ff:77:72:4d:22:40: e0:aa:85:85:e7:ae:61:97:0c:42:20:ee:98:29:46: 64:dd:58:7f:53:a2:53:6f:38:1a:e1:ae:c7:3b:fe: e7:2e:d4:3d:9f:8d:e9:c7:18:79:01:6d:be:83:d5: 24:22:79:d5:9d:b9:b3:a3:db:de:12:00:eb:31:5d: 61:a1:96:9e:bf:6f:07:e5:03:51:f9:b4:d8:98:30: 04:3a:52:25:e3:94:60:fe:62:c4:a4:7d:e0:bc:32: 14:e4:d9:ae:ba:d0:47:06:af:0f:88:0e:a4:13:f2: 14:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:0D:8D:E7:F7:F1:8D:C2:AF:D1:ED:C2:77:45:68:BC:E6:73:C9:AC X509v3 Authority Key Identifier: keyid:E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:25:bd:94:8f:f5:57:5d:7a:77:d5:fd:03:a6:e4:26:60:b9: 1c:c4:48:b4:a1:ab:52:11:42:d2:ff:c1:e0:b3:f6:80:ee:54: ed:8b:82:7d:71:4b:0c:73:99:11:f1:d3:f1:9a:2d:c5:c8:5e: a7:c6:1c:f3:d1:ce:07:92:7c:4a:56:7f:52:87:7d:4b:c5:29: 4a:d7:6a:8f:04:b3:db:e6:e5:c3:b0:6e:a6:93:0a:58:68:af: da:32:ad:a9:28:5e:19:e1:d9:18:8c:36:ca:c5:4d:e2:ac:b2: 09:49:db:ae:23:73:53:dc:57:f3:a4:8b:7a:c6:de:63:0b:89: 57:bb:0d:30:ac:26:d1:7d:4f:01:87:ff:62:d3:c6:5e:d2:4c: 19:d9:81:48:5c:68:1b:24:90:bd:51:7d:b4:2e:73:e7:ff:ad: 3b:77:f3:fe:ed:bf:b6:a3:fd:81:fd:68:dc:ce:6b:f4:4d:89: d5:ed:b6:54:c6:32:4b:b5:b0:ce:57:3f:4f:f6:66:46:e6:fa: b1:5e:59:9c:7f:9a:0f:73:b0:ed:a8:02:5c:a8:2c:22:cf:3e: f9:d7:53:cc:a6:4e:c5:68:0b:87:b6:4b:5c:5f:6d:b3:6b:0b: 96:ed:77:d2:06:01:ca:26:54:2f:cf:ec:72:3a:76:99:01:6f: f1:c5:1e:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI3RjkxMTAvBgNVBAUTKEU2QkY0NkU1MzBERjkyMjk4RkFDMDMyQUZCQzk4NDA5 QzQ0MzA0MzkwHhcNMjUwNTMwMTQ1ODU3WhcNMjUwNjA2MTQ1ODU3WjAYMRYwFAYD VQQDEw02ODM5YzdiMi1jN2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaLSx9wkutmR6cjUpa5u101h09Xq+Q0S3bxZCl8K7b9sDgidmauEyqoSRgi0 512o/BeNd1SCJbJF6zoEcsxUleFU/DUn6F3pZeMWyr8pNIh2XY6z3KB1Xg8Yj8qL H00+wc7+LhVV+h1O/67294FnRorw7FgFCFumyRs9UR31QLXeRyhQO5MTm89HdEWw 1rD/d3JNIkDgqoWF565hlwxCIO6YKUZk3Vh/U6JTbzga4a7HO/7nLtQ9n43pxxh5 AW2+g9UkInnVnbmzo9veEgDrMV1hoZaev28H5QNR+bTYmDAEOlIl45Rg/mLEpH3g vDIU5NmuutBHBq8PiA6kE/IULQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP8Njef3 8Y3Cr9HtwndFaLzmc8msMB8GA1UdIwQYMBaAFOa/RuUw35Ipj6wDKvvJhAnEQwQ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjdGOS82RUQyRUJBQTFE OUExMUUyQUU5M0FEODcwOEIwMkNEMi81cjlHNVREZmtpbVByQU1xLThtRUNjUkRC RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyOUc1VERma2ltUHJBTXEtOG1FQ2NSREJEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjdGOS82RUQyRUJBQTFEOUExMUUyQUU5M0FEODcwOEIwMkNEMi81cjlHNVREZmtp bVByQU1xLThtRUNjUkRCRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHJb2Uj/VXXXp31f0DpuQmYLkcxEi0oatSEULS/8Hgs/aA7lTti4J9 cUsMc5kR8dPxmi3FyF6nxhzz0c4HknxKVn9Sh31LxSlK12qPBLPb5uXDsG6mkwpY aK/aMq2pKF4Z4dkYjDbKxU3irLIJSduuI3NT3FfzpIt6xt5jC4lXuw0wrCbRfU8B h/9i08Ze0kwZ2YFIXGgbJJC9UX20LnPn/607d/P+7b+2o/2B/Wjczmv0TYnV7bZU xjJLtbDOVz9P9mZG5vqxXlmcf5oPc7DtqAJcqCwizz7511PMpk7FaAuHtktcX22z awuW7XfSBgHKJlQvz+xyOnaZAW/xxR6R -----END CERTIFICATE-----Generated at Sat May 31 16:26:52 2025 by rpki-client