$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft File: 5cOmhsg97m0zv-xUHqy0pKCJknk.mft (raw, json) Hash identifier: bIZNkQdhYAA/Y9keGCYChKp4nTvMTBLW/TXz5iY8APQ= Subject key identifier: A9:D9:0D:73:A6:7B:5E:06:69:0C:23:C9:7C:EA:55:82:62:27:92:B1 Authority key identifier: E5:C3:A6:86:C8:3D:EE:6D:33:BF:EC:54:1E:AC:B4:A4:A0:89:92:79 Certificate issuer: /CN=A9153AA6/serialNumber=E5C3A686C83DEE6D33BFEC541EACB4A4A0899279 Certificate serial: 16CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft Manifest number: 16C4 Signing time: Fri 30 May 2025 16:50:55 +0000 Manifest this update: Fri 30 May 2025 16:50:54 +0000 Manifest next update: Fri 06 Jun 2025 16:50:54 +0000 Files and hashes: 1: 5cOmhsg97m0zv-xUHqy0pKCJknk.crl (hash: qnHOxYbWN1S+r6mtRQrqAsLUVYejMk2H0wzxtkT3MJQ=) 2: 99C6F94CF52511E7948D5A0BC4F9AE02.roa (hash: vVPzJlO8vaF4Vh+BV9iHSW1TnZ35r0+ZhJx7At1qJd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.crl rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:50:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5837 (0x16cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153AA6, serialNumber=E5C3A686C83DEE6D33BFEC541EACB4A4A0899279 Validity Not Before: May 30 16:50:54 2025 GMT Not After : Jun 6 16:50:54 2025 GMT Subject: CN=6839e1ef-479a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:74:12:68:8e:b2:5d:f1:97:49:43:29:7f:60: 7c:6a:0d:c4:6a:0e:7f:25:82:a0:72:08:ef:07:7a: fa:e7:1c:a3:99:20:11:01:7d:c5:10:f8:f6:3d:ac: fb:d3:d0:20:87:b4:60:78:44:f1:79:85:65:39:a0: 2e:3c:e7:f9:f1:f2:0e:0f:09:11:c6:ef:99:c8:a4: 8d:b9:49:d3:d2:37:a0:11:b3:ea:e2:62:86:57:f7: c3:03:99:cb:e1:8b:93:5a:25:de:3c:4a:65:eb:46: 8b:d4:24:48:17:0c:60:9e:60:c4:57:bd:26:32:8e: 21:46:20:fa:d5:f8:c5:99:73:fb:a8:f2:12:a4:cd: 73:9b:70:1b:02:d8:c9:e5:40:62:57:38:f1:37:12: 60:27:15:7e:7a:40:5f:fd:81:3c:6e:5c:95:cc:4e: 58:f1:fc:f7:f3:ae:d9:d0:b9:e3:41:8b:34:9d:2b: ad:14:63:fe:ce:a5:75:a6:82:7c:cc:16:5a:0e:01: f0:55:8a:f5:8d:3f:1c:bf:bb:9e:65:6c:e2:1e:d4: 3f:14:89:5f:1e:48:46:99:4f:87:25:58:db:f8:cc: 42:1d:a3:da:c1:e0:3e:02:e0:9d:2b:f7:aa:5e:d2: 03:df:fb:05:e2:f1:8a:4d:eb:20:97:d4:27:77:33: 8f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D9:0D:73:A6:7B:5E:06:69:0C:23:C9:7C:EA:55:82:62:27:92:B1 X509v3 Authority Key Identifier: keyid:E5:C3:A6:86:C8:3D:EE:6D:33:BF:EC:54:1E:AC:B4:A4:A0:89:92:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:e2:42:f4:8a:a4:b4:cf:49:b0:a1:24:e8:0a:4a:78:00:f9: ad:83:50:a4:5c:42:3f:36:99:7d:ac:91:d3:46:a1:27:c9:38: 00:da:85:a4:fe:25:fb:80:98:d7:98:89:6a:0f:63:f7:cd:d4: 10:aa:89:1c:84:d4:6d:01:af:4b:f9:d0:c4:3b:0c:d6:99:2a: 33:4e:b0:ca:e3:2a:4a:15:4d:0e:a9:25:72:f3:f4:3d:d6:0a: c9:36:84:fc:e7:22:4d:4e:05:fd:53:22:1e:72:11:d8:9d:ce: c3:39:0f:9a:80:f5:b0:14:b3:7f:ad:f4:03:9c:23:19:01:79: 35:a8:14:6d:f6:67:6e:3f:76:55:be:0f:a0:24:0f:c6:89:5d: 38:fa:83:51:a7:46:ed:8d:33:77:34:50:9d:60:93:e1:b3:28: 7a:86:0c:4c:ab:e7:92:06:e8:c3:36:30:07:ca:27:e4:6b:39: b0:63:6a:b1:24:c3:8c:b7:51:2d:2b:c1:dc:6e:ba:54:b8:91: bf:26:21:d6:72:30:7b:26:63:1e:75:6d:eb:7f:ba:b5:e2:a0: dc:4d:50:fc:72:10:36:4c:11:03:9a:10:ac:29:e7:c1:72:70: 23:4f:fc:77:0c:fd:10:fd:eb:4a:9c:07:8e:f4:9a:ab:38:0c: 10:52:cb:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNBQTYxMTAvBgNVBAUTKEU1QzNBNjg2QzgzREVFNkQzM0JGRUM1NDFFQUNCNEE0 QTA4OTkyNzkwHhcNMjUwNTMwMTY1MDU0WhcNMjUwNjA2MTY1MDU0WjAYMRYwFAYD VQQDEw02ODM5ZTFlZi00NzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0nQSaI6yXfGXSUMpf2B8ag3Eag5/JYKgcgjvB3r65xyjmSARAX3FEPj2Paz7 09Agh7RgeETxeYVlOaAuPOf58fIODwkRxu+ZyKSNuUnT0jegEbPq4mKGV/fDA5nL 4YuTWiXePEpl60aL1CRIFwxgnmDEV70mMo4hRiD61fjFmXP7qPISpM1zm3AbAtjJ 5UBiVzjxNxJgJxV+ekBf/YE8blyVzE5Y8fz3867Z0LnjQYs0nSutFGP+zqV1poJ8 zBZaDgHwVYr1jT8cv7ueZWziHtQ/FIlfHkhGmU+HJVjb+MxCHaPaweA+AuCdK/eq XtID3/sF4vGKTesgl9QndzOP/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKnZDXOm e14GaQwjyXzqVYJiJ5KxMB8GA1UdIwQYMBaAFOXDpobIPe5tM7/sVB6stKSgiZJ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0FBNi85QzNEODdFNkY1 MjQxMUU3OTY0NEIwMDlDNEY5QUUwMi81Y09taHNnOTdtMHp2LXhVSHF5MHBLQ0pr bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVjT21oc2c5N20wenYteFVIcXkwcEtDSmtuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0FBNi85QzNEODdFNkY1MjQxMUU3OTY0NEIwMDlDNEY5QUUwMi81Y09taHNnOTdt MHp2LXhVSHF5MHBLQ0prbmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb4kL0iqS0z0mwoSToCkp4APmtg1CkXEI/Npl9rJHTRqEnyTgA2oWk /iX7gJjXmIlqD2P3zdQQqokchNRtAa9L+dDEOwzWmSozTrDK4ypKFU0OqSVy8/Q9 1grJNoT85yJNTgX9UyIechHYnc7DOQ+agPWwFLN/rfQDnCMZAXk1qBRt9mduP3ZV vg+gJA/GiV04+oNRp0btjTN3NFCdYJPhsyh6hgxMq+eSBujDNjAHyifkazmwY2qx JMOMt1EtK8HcbrpUuJG/JiHWcjB7JmMedW3rf7q14qDcTVD8chA2TBEDmhCsKefB cnAjT/x3DP0Q/etKnAeO9JqrOAwQUst4 -----END CERTIFICATE-----Generated at Sat May 31 17:47:19 2025 by rpki-client