$ rpki-client -vvf rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft File: 5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft (raw, json) Hash identifier: zqdKAAXuLmlf/8PqzVfT5A1hOc9Lc3YtmtBDGj/FM4Q= Subject key identifier: 3A:33:A3:B9:B4:9E:C1:7A:30:37:5D:48:10:BE:6D:DF:AC:3F:07:B5 Authority key identifier: E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69 Certificate issuer: /CN=A916148F/serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569 Certificate serial: 028F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft Manifest number: 028B Signing time: Thu 05 Jun 2025 01:27:22 +0000 Manifest this update: Thu 05 Jun 2025 01:27:22 +0000 Manifest next update: Thu 12 Jun 2025 01:27:22 +0000 Files and hashes: 1: 5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl (hash: joQjXM/ipKI8W1bwPl3fxhI1iJSBHDYJwwJ3RUzDu64=) 2: E757164C074511EDB229157DC4F9AE02.roa (hash: onRdgGkpkgbRrilTwhd//fNz2yNBz6ru8beWXJE4ohY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 01:27:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 655 (0x28f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916148F, serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569 Validity Not Before: Jun 5 01:27:22 2025 GMT Not After : Jun 12 01:27:22 2025 GMT Subject: CN=6840f27a-a1c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fc:1c:94:9d:4d:be:9d:49:ec:62:c0:6a:a0: f2:74:19:38:a4:00:58:e8:cc:3a:06:ff:59:c1:87: fa:b1:69:91:30:7f:2a:91:2d:6e:4c:8d:94:1c:00: d3:99:f5:9c:d7:f7:73:c8:24:5e:fb:97:8b:96:f7: b2:cd:30:68:ec:b3:17:28:e8:45:5d:07:24:68:d2: 2f:bb:18:c5:3b:17:70:6b:fa:5b:0e:06:b9:01:cf: 69:23:38:35:e9:a5:59:06:28:5a:74:58:26:82:b8: 48:04:e7:3c:25:ac:6b:39:6a:f7:e1:a2:a0:62:eb: 19:f2:96:8b:7e:2d:58:a4:b1:8f:7a:f3:8e:b7:5a: 2e:f2:1b:5d:3d:a9:1d:09:1a:a6:41:e8:ea:7b:68: d9:6f:90:75:c0:19:58:ac:e3:3f:83:27:03:67:69: c5:d0:9f:16:7b:a2:95:9d:23:c2:26:af:37:c2:ad: bf:a4:20:cc:8d:b5:54:01:f5:b1:08:c2:0a:38:eb: 76:d6:2a:07:17:ac:9c:af:1a:3d:51:71:62:08:ac: 3d:f0:20:10:29:92:ba:d5:40:5e:fe:25:1f:fc:60: 9d:d2:09:37:2e:b6:a9:b3:4e:85:10:80:5c:0b:16: 63:a8:44:3b:ee:e6:43:82:fc:f8:81:32:b7:80:4f: 54:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:33:A3:B9:B4:9E:C1:7A:30:37:5D:48:10:BE:6D:DF:AC:3F:07:B5 X509v3 Authority Key Identifier: keyid:E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:d9:5b:c6:ea:1d:68:92:0f:8d:9e:7d:f7:70:ab:ae:05:19: 8c:9d:c6:44:63:e3:be:d0:5c:de:fa:0c:a3:39:c0:de:8d:30: 72:36:49:e1:94:e9:74:d1:1c:18:8a:61:bd:c0:f1:84:18:66: 76:a6:f9:db:cb:2f:bd:b2:77:98:27:c2:3a:93:8e:55:8e:f9: 3b:af:75:4a:4b:1b:bc:54:d3:d5:9f:e4:23:c3:8d:44:93:d5: c5:bf:bf:e5:5f:44:7d:d0:3d:e8:5b:cb:84:7d:63:94:ba:0d: 21:ff:3c:a3:b8:05:09:3a:67:67:38:29:b9:04:05:74:93:98: 2a:df:98:70:23:22:db:bd:ba:da:20:76:70:f6:63:a0:6c:3b: b6:64:62:d3:e5:d1:d3:e6:0b:c4:3f:ae:f2:e7:89:2b:4c:30: c9:96:09:2b:d7:ad:25:da:d6:4d:31:85:1b:96:70:09:73:fd: 64:92:29:21:4d:07:71:e4:e7:48:5a:33:d7:cc:0c:08:34:93: 35:a0:47:2a:fe:ba:e4:97:2c:b8:b6:2b:8f:33:f4:dd:06:4f: 4c:b4:8e:cd:43:4a:d2:5f:47:5c:00:b0:6c:0d:0a:02:38:19: 7c:f5:2c:e4:c1:d9:cb:a0:99:77:f3:db:49:b4:d3:f5:56:ba: 8e:96:02:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE0OEYxMTAvBgNVBAUTKEU1MDg3M0FGNDc1RUQ2RUVCN0NCOTYzQzY1RThEOTgw NUI4QkI1NjkwHhcNMjUwNjA1MDEyNzIyWhcNMjUwNjEyMDEyNzIyWjAYMRYwFAYD VQQDEw02ODQwZjI3YS1hMWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfwclJ1Nvp1J7GLAaqDydBk4pABY6Mw6Bv9ZwYf6sWmRMH8qkS1uTI2UHADT mfWc1/dzyCRe+5eLlveyzTBo7LMXKOhFXQckaNIvuxjFOxdwa/pbDga5Ac9pIzg1 6aVZBihadFgmgrhIBOc8JaxrOWr34aKgYusZ8paLfi1YpLGPevOOt1ou8htdPakd CRqmQejqe2jZb5B1wBlYrOM/gycDZ2nF0J8We6KVnSPCJq83wq2/pCDMjbVUAfWx CMIKOOt21ioHF6ycrxo9UXFiCKw98CAQKZK61UBe/iUf/GCd0gk3Lraps06FEIBc CxZjqEQ77uZDgvz4gTK3gE9UpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDozo7m0 nsF6MDddSBC+bd+sPwe1MB8GA1UdIwQYMBaAFOUIc69HXtbut8uWPGXo2YBbi7Vp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTQ4Ri82ODg0ODI2ODA3 NDExMUVEQUIxOUQ0NDdDNEY5QUUwMi81UWh6cjBkZTF1NjN5NVk4WmVqWmdGdUx0 V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRaHpyMGRlMXU2M3k1WThaZWpaZ0Z1THRXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTQ4Ri82ODg0ODI2ODA3NDExMUVEQUIxOUQ0NDdDNEY5QUUwMi81UWh6cjBkZTF1 NjN5NVk4WmVqWmdGdUx0V2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCE2VvG6h1okg+Nnn33cKuuBRmMncZEY+O+0Fze+gyjOcDejTByNknh lOl00RwYimG9wPGEGGZ2pvnbyy+9sneYJ8I6k45Vjvk7r3VKSxu8VNPVn+Qjw41E k9XFv7/lX0R90D3oW8uEfWOUug0h/zyjuAUJOmdnOCm5BAV0k5gq35hwIyLbvbra IHZw9mOgbDu2ZGLT5dHT5gvEP67y54krTDDJlgkr160l2tZNMYUblnAJc/1kkikh TQdx5OdIWjPXzAwINJM1oEcq/rrklyy4tiuPM/TdBk9MtI7NQ0rSX0dcALBsDQoC OBl89SzkwdnLoJl389tJtNP1VrqOlgJd -----END CERTIFICATE-----Generated at Thu Jun 5 19:56:20 2025 by rpki-client