$ rpki-client -vvf rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft File: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft (raw, json) Hash identifier: 1WxVAN+9o6SzpGytJd2MWdBuX1cDNFsOGZ/AuiiXF2s= Subject key identifier: BC:B5:45:AD:F8:8E:45:F3:53:DB:36:04:0F:A2:39:1C:0C:AB:EB:FD Authority key identifier: E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69 Certificate issuer: /CN=A9170DD8/serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169 Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft Manifest number: 90 Signing time: Sat 31 May 2025 06:03:22 +0000 Manifest this update: Sat 31 May 2025 06:03:22 +0000 Manifest next update: Sat 07 Jun 2025 06:03:22 +0000 Files and hashes: 1: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl (hash: mufsbuHOq/hL3miEEygQxFue0RCjqPAxImbzl4fpBIA=) 2: 4D06CD2C667411EF8E723587C4F9AE02.roa (hash: 4PdtbIsL2ZotyQ7lOujn962oNOjC34OWUPtAk2nb5/I=) 3: 4CA4BE8E667411EF8E723587C4F9AE02.roa (hash: 8qwHnAzkWpQMSqbxW4gRTYW6uWniUVjWaHfJJJJlxJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170DD8, serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169 Validity Not Before: May 31 06:03:22 2025 GMT Not After : Jun 7 06:03:22 2025 GMT Subject: CN=683a9baa-bcc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:37:2e:55:d5:cd:38:fd:6f:14:c9:50:b7:63: 5e:45:28:e0:d3:62:4e:28:76:d9:bb:c5:d8:a4:1e: b2:3f:46:d4:fb:89:83:f7:d0:a8:40:eb:a7:1c:0d: 1b:c2:8c:5e:c3:db:f9:dc:cc:c3:14:74:29:07:dc: f1:a3:c2:4c:89:36:87:ad:bc:88:9d:19:ac:71:4a: 63:78:cb:3a:71:2b:cd:ab:f6:9c:4f:69:5d:17:47: 59:45:0d:71:fa:4e:97:6a:bd:b9:e9:9f:f9:6b:2e: c5:17:c3:3f:15:20:1c:b5:6d:b2:d7:a2:ff:49:35: a0:cb:28:05:7d:3d:9b:0d:48:34:c3:6c:72:fa:68: 6e:2f:dc:55:6e:e7:2d:0d:bf:70:56:fe:1f:25:76: 46:78:1a:65:85:46:ba:65:94:d2:a7:48:4a:f8:83: d8:22:71:44:b1:67:cc:d3:81:e8:7a:de:54:35:a2: e6:6a:d7:dc:10:d8:b9:cf:20:26:3c:4e:e7:4b:2c: 68:04:f6:e4:ae:b9:d9:81:e7:72:e2:cf:35:c7:7e: 4a:57:93:34:fb:77:13:17:83:a6:e8:36:a4:10:25: 7b:a6:e5:71:4d:4f:14:77:71:14:75:65:9d:6c:f6: 13:d9:93:92:13:7c:af:db:48:29:9c:fd:b9:4b:6c: df:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B5:45:AD:F8:8E:45:F3:53:DB:36:04:0F:A2:39:1C:0C:AB:EB:FD X509v3 Authority Key Identifier: keyid:E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:b9:3f:b9:fc:05:9b:91:d8:d3:7a:57:fa:04:e1:3a:0e:ea: 68:eb:b7:48:fe:a5:20:14:c7:98:21:33:bb:7d:78:da:ea:18: 76:2b:43:3a:be:42:b4:6e:0d:4a:80:9e:5e:32:3f:6d:cb:23: 96:ac:15:19:d4:4f:ec:96:a8:a6:66:0b:89:59:c6:66:00:3e: 52:13:4a:89:df:c8:ea:d8:d4:6f:db:d2:05:d7:c7:a3:b5:15: ad:09:ae:2d:56:e4:e9:af:36:93:ec:98:b7:d8:aa:de:f3:83: 70:1d:2b:5d:0a:78:eb:30:34:e4:4e:fc:92:71:9f:9b:03:ff: 98:6c:76:16:bb:bd:21:48:fa:e8:72:0a:df:f4:0e:e2:7f:fa: 45:77:ae:cc:bc:dc:7a:6b:a7:46:81:b4:19:04:8b:7f:95:ea: 04:35:fb:f9:9a:a2:71:73:c7:1d:a1:fa:79:70:ca:ca:95:fc: a5:14:3d:d4:99:ae:17:6e:83:04:cf:6c:a6:f0:9f:bf:5e:fe: c5:34:fc:a7:9e:44:e4:ed:b0:b5:9b:67:3d:43:17:c9:29:6d: a2:0a:2f:07:49:c6:dd:95:5d:1b:e8:50:a2:ec:96:6e:de:6e: 8e:73:3d:40:d4:93:8f:b1:7c:3b:4f:3a:84:48:47:07:fd:aa: c3:8a:f3:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBERDgxMTAvBgNVBAUTKEU2QjU0RDAyN0NFMzQ5OEJGMzVFNEQwNjVCQzQ3OEE5 MzZDMTYxNjkwHhcNMjUwNTMxMDYwMzIyWhcNMjUwNjA3MDYwMzIyWjAYMRYwFAYD VQQDEw02ODNhOWJhYS1iY2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDcuVdXNOP1vFMlQt2NeRSjg02JOKHbZu8XYpB6yP0bU+4mD99CoQOunHA0b woxew9v53MzDFHQpB9zxo8JMiTaHrbyInRmscUpjeMs6cSvNq/acT2ldF0dZRQ1x +k6Xar256Z/5ay7FF8M/FSActW2y16L/STWgyygFfT2bDUg0w2xy+mhuL9xVbuct Db9wVv4fJXZGeBplhUa6ZZTSp0hK+IPYInFEsWfM04Hoet5UNaLmatfcENi5zyAm PE7nSyxoBPbkrrnZgedy4s81x35KV5M0+3cTF4Om6DakECV7puVxTU8Ud3EUdWWd bPYT2ZOSE3yv20gpnP25S2zfowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLy1Ra34 jkXzU9s2BA+iORwMq+v9MB8GA1UdIwQYMBaAFOa1TQJ840mL815NBlvEeKk2wWFp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEREOC9BNjZBNzVFRTY1 QkIxMUVGQUZBMzJGODJDNEY5QUUwMi81clZOQW56alNZdnpYazBHVzhSNHFUYkJZ V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyVk5BbnpqU1l2elhrMEdXOFI0cVRiQllXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEREOC9BNjZBNzVFRTY1QkIxMUVGQUZBMzJGODJDNEY5QUUwMi81clZOQW56alNZ dnpYazBHVzhSNHFUYkJZV2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6uT+5/AWbkdjTelf6BOE6Dupo67dI/qUgFMeYITO7fXja6hh2K0M6 vkK0bg1KgJ5eMj9tyyOWrBUZ1E/slqimZguJWcZmAD5SE0qJ38jq2NRv29IF18ej tRWtCa4tVuTprzaT7Ji32Kre84NwHStdCnjrMDTkTvyScZ+bA/+YbHYWu70hSPro cgrf9A7if/pFd67MvNx6a6dGgbQZBIt/leoENfv5mqJxc8cdofp5cMrKlfylFD3U ma4XboMEz2ym8J+/Xv7FNPynnkTk7bC1m2c9QxfJKW2iCi8HScbdlV0b6FCi7JZu 3m6Ocz1A1JOPsXw7TzqESEcH/arDivNQ -----END CERTIFICATE-----Generated at Sat May 31 17:45:11 2025 by rpki-client