$ rpki-client -vvf rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft File: 5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft (raw, json) Hash identifier: YUP0ZF+zRwVNFljexnmOpyZmU1AmNAJBt9gZmTx7i8E= Subject key identifier: 6B:AF:4D:9E:96:06:AB:C1:9B:41:4E:91:8C:C0:94:9C:CB:C5:B3:E4 Authority key identifier: E6:0E:21:41:D7:1D:B9:FC:89:FA:BF:B5:FD:AD:03:72:DF:A3:37:D0 Certificate issuer: /CN=A917B633/serialNumber=E60E2141D71DB9FC89FABFB5FDAD0372DFA337D0 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft Manifest number: 78 Signing time: Sat 31 May 2025 06:18:35 +0000 Manifest this update: Sat 31 May 2025 06:18:34 +0000 Manifest next update: Sat 07 Jun 2025 06:18:34 +0000 Files and hashes: 1: 5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl (hash: qc06KjX+/UULAcgqwW79Tl15m1976ggOTwAuF96Uznk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:18:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B633, serialNumber=E60E2141D71DB9FC89FABFB5FDAD0372DFA337D0 Validity Not Before: May 31 06:18:34 2025 GMT Not After : Jun 7 06:18:34 2025 GMT Subject: CN=683a9f3a-ffae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2d:ff:48:f1:e2:1a:2c:88:d2:6c:e5:b1:1a: bb:aa:af:87:d4:6d:3a:af:0f:7e:c0:47:c2:d1:23: 84:b2:8f:6c:fa:4e:c7:a9:0e:da:9b:c5:5f:51:54: 46:f6:aa:31:10:b8:c9:10:e4:98:e0:99:b1:c4:a3: e4:84:2d:f3:c4:cf:12:07:01:c5:bb:75:02:5d:8d: ca:ac:2e:70:a0:26:64:17:2f:df:1f:8e:e5:4f:ee: c9:ba:1d:7a:cd:af:1b:3a:7d:14:cd:b8:a8:c7:f5: 60:0b:b9:ba:a0:ef:e5:27:86:05:f5:be:c5:d6:a9: 06:06:c8:e6:22:ab:cf:ae:5f:75:da:7b:81:09:a4: dc:43:a2:ad:e8:27:a4:ad:ae:3b:be:35:3c:5a:9b: 9a:a4:22:06:0c:43:f3:94:dc:10:db:11:76:2e:79: ee:05:09:9f:12:a2:3f:6f:44:dd:4e:38:40:ab:43: a0:8d:f5:e5:f1:03:20:0c:69:7e:e7:f8:5e:72:e5: e0:11:3b:23:5c:62:3f:41:27:2c:ce:06:7a:53:fb: a1:14:f5:10:65:34:b1:e9:4f:f5:08:80:f0:ba:ef: ef:97:f3:7a:9f:68:8d:cd:3c:d0:d1:74:fe:1f:cd: 36:a2:47:e1:cc:f7:88:64:af:2a:c1:b7:9a:ef:16: 64:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:AF:4D:9E:96:06:AB:C1:9B:41:4E:91:8C:C0:94:9C:CB:C5:B3:E4 X509v3 Authority Key Identifier: keyid:E6:0E:21:41:D7:1D:B9:FC:89:FA:BF:B5:FD:AD:03:72:DF:A3:37:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:65:0e:a9:5f:25:c4:c5:30:60:d7:7f:85:23:af:8c:e9:c0: 95:2c:74:6a:22:9b:8b:83:5e:54:87:3d:28:80:3b:f0:0b:47: 1f:5b:69:9f:4a:83:14:1a:7c:f1:e9:f3:aa:65:3e:41:b9:5c: 18:57:51:d6:c5:f7:d9:e7:d0:ce:e2:7a:a0:ac:93:07:81:bd: 98:8a:0a:67:48:74:2d:dd:de:17:58:f3:0a:a9:20:6a:dd:a7: e9:fb:1c:6b:50:d1:51:54:19:8d:84:71:46:61:e3:f7:db:00: 96:07:03:fa:6a:1d:9b:7b:b8:9a:79:6f:43:c4:3a:04:e1:92: 1f:e8:8c:98:8b:d6:3c:01:3f:d2:63:79:d5:18:31:b1:75:d0: 3b:a1:c1:a7:fa:b4:6b:99:8d:a2:9e:ed:65:df:05:ce:ad:14: 21:7b:5f:17:df:78:61:12:ca:48:c8:c1:d3:d2:dc:36:8e:e9: c2:26:8e:02:ba:8d:7c:13:b0:de:c9:3b:34:ed:7b:b7:db:b0: b0:e9:64:13:3f:fe:d2:bd:fa:78:e5:0b:55:b1:ec:b4:c4:14: 20:c6:9b:4a:be:62:97:f8:a4:64:ca:44:25:30:fd:9a:36:b8: 7e:a9:b4:3a:c4:9b:63:04:11:4a:a4:6b:15:72:57:4e:d4:31: 44:9d:2b:bf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QjYzMzExMC8GA1UEBRMoRTYwRTIxNDFENzFEQjlGQzg5RkFCRkI1RkRBRDAzNzJE RkEzMzdEMDAeFw0yNTA1MzEwNjE4MzRaFw0yNTA2MDcwNjE4MzRaMBgxFjAUBgNV BAMTDTY4M2E5ZjNhLWZmYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPLf9I8eIaLIjSbOWxGruqr4fUbTqvD37AR8LRI4Syj2z6TsepDtqbxV9RVEb2 qjEQuMkQ5JjgmbHEo+SELfPEzxIHAcW7dQJdjcqsLnCgJmQXL98fjuVP7sm6HXrN rxs6fRTNuKjH9WALubqg7+UnhgX1vsXWqQYGyOYiq8+uX3Xae4EJpNxDoq3oJ6St rju+NTxam5qkIgYMQ/OU3BDbEXYuee4FCZ8Soj9vRN1OOECrQ6CN9eXxAyAMaX7n +F5y5eAROyNcYj9BJyzOBnpT+6EU9RBlNLHpT/UIgPC67++X83qfaI3NPNDRdP4f zTaiR+HM94hkryrBt5rvFmThAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUa69NnpYG q8GbQU6RjMCUnMvFs+QwHwYDVR0jBBgwFoAU5g4hQdcdufyJ+r+1/a0Dct+jN9Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCNjMzL0Q5MTY1RUJBODZE OTExRUY4QjhCRUIxRkM0RjlBRTAyLzVnNGhRZGNkdWZ5Si1yLTFfYTBEY3Qtak45 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNWc0aFFkY2R1ZnlKLXItMV9hMERjdC1qTjlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC NjMzL0Q5MTY1RUJBODZEOTExRUY4QjhCRUIxRkM0RjlBRTAyLzVnNGhRZGNkdWZ5 Si1yLTFfYTBEY3Qtak45QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIJlDqlfJcTFMGDXf4Ujr4zpwJUsdGoim4uDXlSHPSiAO/ALRx9baZ9K gxQafPHp86plPkG5XBhXUdbF99nn0M7ieqCskweBvZiKCmdIdC3d3hdY8wqpIGrd p+n7HGtQ0VFUGY2EcUZh4/fbAJYHA/pqHZt7uJp5b0PEOgThkh/ojJiL1jwBP9Jj edUYMbF10Duhwaf6tGuZjaKe7WXfBc6tFCF7XxffeGESykjIwdPS3DaO6cImjgK6 jXwTsN7JOzTte7fbsLDpZBM//tK9+njlC1Wx7LTEFCDGm0q+Ypf4pGTKRCUw/Zo2 uH6ptDrEm2MEEUqkaxVyV07UMUSdK78= -----END CERTIFICATE-----Generated at Sat May 31 17:08:59 2025 by rpki-client