$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft File: e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft (raw, json) Hash identifier: gvLOBmc5xq8RnedsbXSUuxm0wonuO+T7BFFAEgekjpQ= Subject key identifier: 56:44:42:D4:5F:92:63:25:8F:1A:C7:92:4C:5C:1B:9D:6C:F0:66:71 Authority key identifier: 7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F Certificate issuer: /CN=A916D36A/serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft Manifest number: 012F Signing time: Mon 02 Jun 2025 16:41:49 +0000 Manifest this update: Mon 02 Jun 2025 16:41:48 +0000 Manifest next update: Mon 09 Jun 2025 16:41:48 +0000 Files and hashes: 1: e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl (hash: OKaOny7/uyombHCO8vpDXDxOivZYgoULy17FmPnSetA=) 2: 21A970BC737211EEB3112437C4F9AE02.roa (hash: aUIyfh4rOAFfQ6V1QGk9Ci9jD2H4crp4Ilb6Y+4J9lg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 05:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D36A, serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F Validity Not Before: Jun 2 16:41:48 2025 GMT Not After : Jun 9 16:41:48 2025 GMT Subject: CN=683dd44d-d394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:70:cf:2c:ea:e3:85:05:b7:8e:a5:83:67:14: d3:6f:40:26:71:c4:be:da:da:cb:6a:85:6c:f1:f0: f5:3b:74:e7:f0:e1:23:a2:68:57:56:11:ea:d5:4a: 1a:08:9b:70:d1:2a:6a:f4:7f:34:8f:ec:88:36:4d: 30:56:a0:9e:dc:00:05:48:56:46:52:7d:48:79:54: 5d:89:be:be:03:85:37:e9:14:ca:58:ae:18:6c:82: 08:d7:6c:99:6d:e6:ec:0e:7c:a8:e8:45:c1:68:da: 26:70:3e:a4:ab:83:47:fa:21:4c:3b:88:e3:75:28: 75:cc:73:d5:41:52:95:4f:a5:f8:0d:0a:48:c6:87: e0:cc:31:7d:30:a0:de:05:e9:b4:8d:aa:28:d2:83: ed:8b:9a:f1:e6:ff:db:95:d5:20:7c:5c:81:f0:da: 68:00:92:0c:92:5e:88:19:54:af:51:92:4b:ba:c4: 66:44:93:f3:0a:83:91:cd:83:46:b9:72:46:ed:7f: e4:dd:07:b2:35:90:90:c0:0e:08:44:b6:78:78:0f: 37:fc:b5:56:ed:48:5c:79:69:d8:5b:d3:fc:6a:84: 29:f0:ed:40:4c:4e:06:f8:73:32:f0:12:35:85:2e: 47:ea:04:e3:e6:c5:12:d2:ae:c1:3d:da:3f:5b:11: c4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:44:42:D4:5F:92:63:25:8F:1A:C7:92:4C:5C:1B:9D:6C:F0:66:71 X509v3 Authority Key Identifier: keyid:7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:a7:5f:4c:b1:14:a9:25:de:6f:93:92:76:8f:49:2f:2b:2d: fe:3d:76:91:10:f6:86:3f:91:b0:7a:fb:d0:ee:aa:b4:f1:d7: b1:fd:fc:91:33:77:dc:e6:ac:48:5e:cb:99:0f:cc:e4:05:77: aa:86:5d:df:29:49:56:b8:4b:89:0d:ad:6c:7d:39:e6:d0:7c: dd:51:0c:3a:d6:6c:ed:96:db:42:47:fa:98:73:32:c8:0e:9d: 65:6f:40:7f:e8:4e:67:6b:ea:bc:20:90:34:7a:2e:0f:b9:35: de:59:d6:42:6c:c3:a6:59:4d:e4:76:20:d6:84:6e:be:b9:14: e2:aa:e7:22:38:f8:27:cd:c1:2d:8b:d8:7c:d9:fa:49:49:df: 36:f7:3d:8b:0c:58:1b:9c:e6:ed:b6:ee:fe:78:ac:d6:a2:b0: 11:3c:be:47:f3:ad:31:28:89:4f:4d:b5:39:11:93:d7:35:c3: 55:07:9f:8c:c9:54:b4:2c:4e:92:9d:ef:80:08:1a:63:b2:61: 34:4e:ab:94:53:1f:e6:c8:ef:94:c1:14:a4:0b:a6:dc:0b:d8: b4:63:d6:0e:12:00:4b:3b:8c:79:4f:cb:4f:99:d3:b4:e8:b8: dc:14:3e:86:42:8c:ac:6b:f4:6c:a7:b3:23:70:04:68:63:cd: 95:9f:72:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQzNkExMTAvBgNVBAUTKDdCOUNFREM4MzI4MDI4QTc0NTZFOUM0MTRCQjc3REFG RUJDRTc2NUYwHhcNMjUwNjAyMTY0MTQ4WhcNMjUwNjA5MTY0MTQ4WjAYMRYwFAYD VQQDEw02ODNkZDQ0ZC1kMzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnDPLOrjhQW3jqWDZxTTb0AmccS+2trLaoVs8fD1O3Tn8OEjomhXVhHq1Uoa CJtw0Spq9H80j+yINk0wVqCe3AAFSFZGUn1IeVRdib6+A4U36RTKWK4YbIII12yZ bebsDnyo6EXBaNomcD6kq4NH+iFMO4jjdSh1zHPVQVKVT6X4DQpIxofgzDF9MKDe Bem0jaoo0oPti5rx5v/bldUgfFyB8NpoAJIMkl6IGVSvUZJLusRmRJPzCoORzYNG uXJG7X/k3QeyNZCQwA4IRLZ4eA83/LVW7UhceWnYW9P8aoQp8O1ATE4G+HMy8BI1 hS5H6gTj5sUS0q7BPdo/WxHEBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZEQtRf kmMljxrHkkxcG51s8GZxMB8GA1UdIwQYMBaAFHuc7cgygCinRW6cQUu3fa/rznZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDM2QS9DNkRENTFCNDcz NkYxMUVFOTE3RDAzMzRDNEY5QUUwMi9lNXp0eURLQUtLZEZicHhCUzdkOXItdk9k bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2U1enR5REtBS0tkRmJweEJTN2Q5ci12T2RsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDM2QS9DNkRENTFCNDczNkYxMUVFOTE3RDAzMzRDNEY5QUUwMi9lNXp0eURLQUtL ZEZicHhCUzdkOXItdk9kbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPp19MsRSpJd5vk5J2j0kvKy3+PXaREPaGP5GwevvQ7qq08dex/fyR M3fc5qxIXsuZD8zkBXeqhl3fKUlWuEuJDa1sfTnm0HzdUQw61mztlttCR/qYczLI Dp1lb0B/6E5na+q8IJA0ei4PuTXeWdZCbMOmWU3kdiDWhG6+uRTiquciOPgnzcEt i9h82fpJSd829z2LDFgbnObttu7+eKzWorARPL5H860xKIlPTbU5EZPXNcNVB5+M yVS0LE6Sne+ACBpjsmE0TquUUx/myO+UwRSkC6bcC9i0Y9YOEgBLO4x5T8tPmdO0 6LjcFD6GQoysa/Rsp7MjcARoY82Vn3Kh -----END CERTIFICATE-----Generated at Mon Jun 2 21:30:48 2025 by rpki-client