$ rpki-client -vvf rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft File: 5C5CACqDeHpnr4y5qFH5OZdGwTI.mft (raw, json) Hash identifier: FwiKUz9rEiYCnpBkq9ywMXX129rRhcxcSiB3arR1UE0= Subject key identifier: 45:34:90:6D:09:04:82:7C:1A:65:92:E3:8A:24:80:5E:42:6B:B8:6A Authority key identifier: E4:2E:42:00:2A:83:78:7A:67:AF:8C:B9:A8:51:F9:39:97:46:C1:32 Certificate issuer: /CN=A91566DC/serialNumber=E42E42002A83787A67AF8CB9A851F9399746C132 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft Manifest number: 7A Signing time: Sat 31 May 2025 06:16:41 +0000 Manifest this update: Sat 31 May 2025 06:16:41 +0000 Manifest next update: Sat 07 Jun 2025 06:16:41 +0000 Files and hashes: 1: 5C5CACqDeHpnr4y5qFH5OZdGwTI.crl (hash: Yr/NRW34XLf1fxF7kSQyH5sJFv2sGkSMVc60qNEGdvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.crl rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91566DC, serialNumber=E42E42002A83787A67AF8CB9A851F9399746C132 Validity Not Before: May 31 06:16:41 2025 GMT Not After : Jun 7 06:16:41 2025 GMT Subject: CN=683a9ec9-c1c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a7:a0:41:e5:f5:5f:9f:3c:c2:03:f6:f5:c5: 7c:4f:ea:e3:81:29:8c:6c:76:fb:c7:85:31:27:e3: 4d:df:d5:f3:1b:e5:6e:e6:95:84:71:9f:b7:d9:19: 72:af:56:59:7d:8e:ed:bd:64:73:ca:12:57:67:75: 58:f2:18:77:68:80:83:2b:05:37:17:63:a3:fe:f0: 77:14:ac:e9:f9:87:92:f4:20:a6:89:01:72:c1:76: d9:ed:90:11:b2:bb:84:cb:ca:05:8d:d1:0b:cb:fa: c1:84:d6:49:e6:e6:34:29:7c:08:84:5e:ea:ad:12: 90:cd:5d:70:ec:e2:68:bd:0d:18:54:25:27:02:ee: 95:15:69:81:ef:94:cc:53:aa:63:75:bc:94:fa:c4: 8a:4c:5c:a3:20:da:78:c7:8f:c8:40:e5:49:59:89: a9:26:81:e7:65:f1:85:3b:78:f1:19:56:94:66:74: b5:80:e6:fa:1b:0f:09:8e:5a:de:7a:b6:af:77:a9: 99:45:30:da:a1:6e:13:e9:0c:d7:30:87:41:69:d5: 07:f6:24:43:24:10:41:08:3c:3f:14:ac:e7:91:46: c2:eb:a8:56:8e:c5:60:67:de:d5:8e:c8:97:04:62: 9d:32:48:38:92:33:c3:ce:07:ec:3a:fa:91:05:fc: 09:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:34:90:6D:09:04:82:7C:1A:65:92:E3:8A:24:80:5E:42:6B:B8:6A X509v3 Authority Key Identifier: keyid:E4:2E:42:00:2A:83:78:7A:67:AF:8C:B9:A8:51:F9:39:97:46:C1:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:29:5e:82:79:12:fa:12:13:dc:d6:1c:fd:1a:a3:80:0e:6a: 22:76:2f:83:63:44:d2:03:a2:69:e7:77:02:12:21:06:a8:7d: 95:6a:49:30:19:73:c7:fd:c1:09:94:ad:2d:a8:59:15:65:e5: f7:67:5a:34:c6:30:18:4e:6d:b0:6e:b9:74:c7:82:be:f4:6d: e2:93:85:6c:a8:b5:ac:a1:3a:9c:03:a8:3a:af:68:bc:db:6c: 8c:90:1d:31:33:17:7a:54:18:28:37:bb:5a:dc:8a:9b:10:d4: f6:cf:b4:8a:5d:72:4b:29:3b:af:fe:63:82:cd:88:9f:fb:6a: 55:ee:1b:c1:12:5e:ce:a8:aa:4f:22:73:55:6c:4e:1b:a1:ed: 60:8c:bf:5c:17:af:e7:15:3d:64:9a:cb:1c:1d:a8:51:05:0d: 27:28:02:c0:b0:f0:41:06:dc:ef:10:43:bb:2c:43:a3:8f:f1: 16:b8:9b:ca:34:e4:94:30:db:55:17:04:b9:29:b7:65:c8:2e: b1:00:28:06:97:74:e8:c3:26:9f:d7:01:af:84:85:99:e3:1e: 50:92:03:6a:eb:f1:48:b2:5d:89:8a:14:4b:a9:28:7d:d7:b3: 94:c6:fe:21:64:2d:fd:ba:65:dd:19:bc:0e:9c:98:c3:28:f8: a1:59:10:7c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjZEQzExMC8GA1UEBRMoRTQyRTQyMDAyQTgzNzg3QTY3QUY4Q0I5QTg1MUY5Mzk5 NzQ2QzEzMjAeFw0yNTA1MzEwNjE2NDFaFw0yNTA2MDcwNjE2NDFaMBgxFjAUBgNV BAMTDTY4M2E5ZWM5LWMxYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBp6BB5fVfnzzCA/b1xXxP6uOBKYxsdvvHhTEn403f1fMb5W7mlYRxn7fZGXKv Vll9ju29ZHPKEldndVjyGHdogIMrBTcXY6P+8HcUrOn5h5L0IKaJAXLBdtntkBGy u4TLygWN0QvL+sGE1knm5jQpfAiEXuqtEpDNXXDs4mi9DRhUJScC7pUVaYHvlMxT qmN1vJT6xIpMXKMg2njHj8hA5UlZiakmgedl8YU7ePEZVpRmdLWA5vobDwmOWt56 tq93qZlFMNqhbhPpDNcwh0Fp1Qf2JEMkEEEIPD8UrOeRRsLrqFaOxWBn3tWOyJcE Yp0ySDiSM8POB+w6+pEF/AmHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURTSQbQkE gnwaZZLjiiSAXkJruGowHwYDVR0jBBgwFoAU5C5CACqDeHpnr4y5qFH5OZdGwTIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2NkRDLzgwQ0UyNzhBODQ2 QjExRUY5QzQyNEQzQUM0RjlBRTAyLzVDNUNBQ3FEZUhwbnI0eTVxRkg1T1pkR3dU SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNUM1Q0FDcURlSHBucjR5NXFGSDVPWmRHd1RJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 NkRDLzgwQ0UyNzhBODQ2QjExRUY5QzQyNEQzQUM0RjlBRTAyLzVDNUNBQ3FEZUhw bnI0eTVxRkg1T1pkR3dUSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG8pXoJ5EvoSE9zWHP0ao4AOaiJ2L4NjRNIDomnndwISIQaofZVqSTAZ c8f9wQmUrS2oWRVl5fdnWjTGMBhObbBuuXTHgr70beKThWyotayhOpwDqDqvaLzb bIyQHTEzF3pUGCg3u1rcipsQ1PbPtIpdckspO6/+Y4LNiJ/7alXuG8ESXs6oqk8i c1VsThuh7WCMv1wXr+cVPWSayxwdqFEFDScoAsCw8EEG3O8QQ7ssQ6OP8Ra4m8o0 5JQw21UXBLkpt2XILrEAKAaXdOjDJp/XAa+EhZnjHlCSA2rr8UiyXYmKFEupKH3X s5TG/iFkLf26Zd0ZvA6cmMMo+KFZEHw= -----END CERTIFICATE-----Generated at Sat May 31 16:29:33 2025 by rpki-client