$ rpki-client -vvf rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft File: 5iRBKkJ5WJuewvqzIiurBibTElo.mft (raw, json) Hash identifier: iItmX+q26O+OfRk/PuJnYHm13o8HpRdkxGMPtyIg8bc= Subject key identifier: 9C:3C:43:C1:98:FD:48:95:AD:6E:F0:B5:6B:2A:38:77:8D:97:C6:BF Authority key identifier: E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A Certificate issuer: /CN=A9168336/serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A Certificate serial: 0C79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft Manifest number: 0C6A Signing time: Mon 02 Jun 2025 18:29:45 +0000 Manifest this update: Mon 02 Jun 2025 18:29:44 +0000 Manifest next update: Mon 09 Jun 2025 18:29:44 +0000 Files and hashes: 1: 5iRBKkJ5WJuewvqzIiurBibTElo.crl (hash: B/q2t09rZdQfKwLQ0vjmZP7jCAu7TOOFCgI+S3JgCn8=) 2: BE4852941C2E11EE9A9A9940C4F9AE02.roa (hash: DnLi7rEERWA5qhTcgS0GPWRyD6exAMMBjfted7mhPy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 18:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3193 (0xc79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168336, serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A Validity Not Before: Jun 2 18:29:44 2025 GMT Not After : Jun 9 18:29:44 2025 GMT Subject: CN=683ded98-02f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:24:3b:fb:20:fe:49:4f:54:0d:2e:5b:5e:bc: bb:c0:85:7a:f4:8e:ec:ab:2a:ad:69:bd:7f:3f:6c: 73:1c:41:6e:41:75:2f:58:bd:09:0f:e5:fc:f0:56: 36:2b:e9:4a:49:5a:75:d3:88:81:9f:a9:74:f4:0b: 94:51:f3:32:32:b4:5f:41:d7:76:c0:c6:f2:de:98: a8:78:21:7b:2a:a0:55:90:49:5b:35:19:8d:fb:58: 9a:8a:df:bb:1b:c1:54:20:be:44:2a:87:d4:f0:50: 91:d4:6c:d5:5b:87:f9:4b:27:5e:4f:16:3b:a8:2b: 24:1f:56:2e:33:97:ee:17:a8:af:8a:a5:6b:b5:b8: ba:ec:df:1d:3b:fc:2d:b4:17:2f:48:41:02:47:c3: c3:49:3b:dc:f8:f9:05:f1:83:4b:a0:f7:c4:2a:85: cf:04:b5:d6:9f:d2:de:38:0b:cf:a2:92:02:ef:f3: 2c:d9:7b:01:35:96:62:80:0f:85:24:06:17:79:97: 1d:df:b6:74:dd:20:7e:dd:a6:37:f7:1d:2c:51:31: 51:92:08:65:ad:21:13:2a:6c:1b:98:6a:aa:06:02: 31:06:af:dc:a8:4f:3b:95:e0:44:87:3b:20:8c:5f: b2:b0:92:cb:4c:5c:2d:89:da:e3:a3:4c:be:04:35: c9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3C:43:C1:98:FD:48:95:AD:6E:F0:B5:6B:2A:38:77:8D:97:C6:BF X509v3 Authority Key Identifier: keyid:E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:1e:1d:4a:12:0e:5a:09:02:0b:f3:e3:e2:78:e0:04:f8:f7: a5:9e:5d:a7:4a:6b:8d:e2:7f:d9:39:9b:49:5b:4a:33:28:5b: 48:df:28:fc:65:ed:6f:b5:f0:09:ba:c5:30:78:b2:e1:f1:c5: 47:ce:38:69:b5:68:4a:97:34:87:79:fb:5b:da:a2:5a:12:68: b3:cb:63:55:fd:67:54:c4:e5:3f:45:b8:e8:f5:c1:9b:aa:fa: 74:f1:4a:15:f8:97:02:56:55:5b:e6:0a:94:7c:d0:b4:31:91: 57:d2:de:13:7d:53:e9:c1:f2:fe:b6:b3:48:f0:ef:07:9d:9a: 0b:be:91:30:63:99:86:91:11:6e:82:a1:14:6e:81:89:cb:62: 4b:01:35:2d:c7:0e:b9:35:f2:2b:88:0d:d0:53:b1:c4:4f:33: df:ce:8a:c6:3d:8d:ae:22:19:6a:12:74:51:35:1c:61:e5:28: c9:07:72:46:0a:1a:b0:ca:bc:8b:fa:70:cf:3c:e7:15:21:70: 0d:5d:9a:87:1d:8c:bb:32:80:2e:b8:57:51:19:b6:ae:fc:a5: d2:8c:b0:e4:7d:e2:65:d6:fe:39:56:0e:de:82:5f:f2:5b:e8: 63:6a:87:7c:e6:06:88:c9:ff:06:c6:f3:e8:6e:e4:00:09:4d: 83:a5:52:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgzMzYxMTAvBgNVBAUTKEU2MjQ0MTJBNDI3OTU4OUI5RUMyRkFCMzIyMkJBQjA2 MjZEMzEyNUEwHhcNMjUwNjAyMTgyOTQ0WhcNMjUwNjA5MTgyOTQ0WjAYMRYwFAYD VQQDEw02ODNkZWQ5OC0wMmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8yQ7+yD+SU9UDS5bXry7wIV69I7sqyqtab1/P2xzHEFuQXUvWL0JD+X88FY2 K+lKSVp104iBn6l09AuUUfMyMrRfQdd2wMby3pioeCF7KqBVkElbNRmN+1iait+7 G8FUIL5EKofU8FCR1GzVW4f5SydeTxY7qCskH1YuM5fuF6iviqVrtbi67N8dO/wt tBcvSEECR8PDSTvc+PkF8YNLoPfEKoXPBLXWn9LeOAvPopIC7/Ms2XsBNZZigA+F JAYXeZcd37Z03SB+3aY39x0sUTFRkghlrSETKmwbmGqqBgIxBq/cqE87leBEhzsg jF+ysJLLTFwtidrjo0y+BDXJqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJw8Q8GY /UiVrW7wtWsqOHeNl8a/MB8GA1UdIwQYMBaAFOYkQSpCeVibnsL6syIrqwYm0xJa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODMzNi8xOUY3NUE2NjAx Q0QxMUVBQjg2NUVBMjJDNEY5QUUwMi81aVJCS2tKNVdKdWV3dnF6SWl1ckJpYlRF bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVpUkJLa0o1V0p1ZXd2cXpJaXVyQmliVEVsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODMzNi8xOUY3NUE2NjAxQ0QxMUVBQjg2NUVBMjJDNEY5QUUwMi81aVJCS2tKNVdK dWV3dnF6SWl1ckJpYlRFbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6Hh1KEg5aCQIL8+PieOAE+Pelnl2nSmuN4n/ZOZtJW0ozKFtI3yj8 Ze1vtfAJusUweLLh8cVHzjhptWhKlzSHeftb2qJaEmizy2NV/WdUxOU/Rbjo9cGb qvp08UoV+JcCVlVb5gqUfNC0MZFX0t4TfVPpwfL+trNI8O8HnZoLvpEwY5mGkRFu gqEUboGJy2JLATUtxw65NfIriA3QU7HETzPfzorGPY2uIhlqEnRRNRxh5SjJB3JG ChqwyryL+nDPPOcVIXANXZqHHYy7MoAuuFdRGbau/KXSjLDkfeJl1v45Vg7egl/y W+hjaod85gaIyf8GxvPobuQACU2DpVK7 -----END CERTIFICATE-----Generated at Wed Jun 4 00:10:05 2025 by rpki-client