$ rpki-client -vvf rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft File: t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft (raw, json) Hash identifier: Po3/qdGmwXLNKrbmAbz4eYYhF53zwXPBheEaMEv91o0= Subject key identifier: 4B:0C:47:55:AC:99:2D:F6:30:6E:5F:62:17:03:18:30:07:3B:43:68 Authority key identifier: B7:91:BD:1C:9E:20:81:AA:84:F8:07:80:66:C0:C7:F6:0A:63:79:0E Certificate issuer: /CN=A917F8F2/serialNumber=B791BD1C9E2081AA84F8078066C0C7F60A63790E Certificate serial: 0837 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft Manifest number: 0828 Signing time: Fri 06 Jun 2025 20:52:27 +0000 Manifest this update: Fri 06 Jun 2025 20:52:26 +0000 Manifest next update: Fri 13 Jun 2025 20:52:26 +0000 Files and hashes: 1: t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl (hash: l5pPzlylHFJ9GuFXNdfLd9z8ghHSrxI8AkKGfMqZRww=) 2: B78B5CB6D65F11EA8B30486EC4F9AE02.roa (hash: MyNq7pYsfXRPiYwbL0q3/Dn2sx3QYfe2KkNfFn5PXS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 20:52:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2103 (0x837) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F8F2, serialNumber=B791BD1C9E2081AA84F8078066C0C7F60A63790E Validity Not Before: Jun 6 20:52:26 2025 GMT Not After : Jun 13 20:52:26 2025 GMT Subject: CN=6843550b-4bcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fd:65:b9:2f:39:00:62:87:78:f5:6a:e4:28: dc:e7:a6:0a:e7:f9:ef:65:a7:74:f9:b0:0b:f2:15: f7:29:9b:91:9e:a4:d6:66:18:e5:7c:fa:b4:e3:50: c7:c1:98:4a:af:35:b1:fe:47:59:92:9c:99:83:2c: 32:fd:a6:f5:9c:cc:7e:2c:89:8a:72:8b:5a:95:c9: 45:f5:41:88:31:36:cb:1e:8d:50:bd:fc:5a:39:82: ca:1e:2c:ed:5b:6e:6d:4f:86:45:fb:eb:76:a7:5a: fa:82:0a:73:d5:d4:cb:88:34:0b:97:31:c0:cd:79: 36:ea:97:61:5a:da:b0:dc:03:77:09:0d:ef:c4:da: 2e:c4:1a:19:94:dc:7d:aa:ed:b9:27:d0:ee:82:31: 55:8c:ac:a5:c0:e0:a6:2e:c5:da:8b:b4:59:f0:89: e9:21:88:fc:38:71:bc:ab:00:47:69:f4:b9:79:e9: df:f7:23:f6:41:79:6f:c3:c5:eb:ab:14:d7:fb:69: 48:9b:60:7c:ed:6c:5f:56:a0:d7:ba:b3:0e:3e:e3: 9b:af:a5:b5:fb:17:52:36:d4:44:e3:97:92:15:ee: 5d:ce:8f:5c:55:5e:13:4d:e0:cd:bc:ea:63:89:3a: d9:0c:eb:4f:a3:6a:8b:03:91:25:9e:b3:0f:f7:4a: ac:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:0C:47:55:AC:99:2D:F6:30:6E:5F:62:17:03:18:30:07:3B:43:68 X509v3 Authority Key Identifier: keyid:B7:91:BD:1C:9E:20:81:AA:84:F8:07:80:66:C0:C7:F6:0A:63:79:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:59:87:22:5f:97:95:02:d6:a5:10:c0:7e:a0:8e:ce:59:b9: 2c:1a:af:f9:b0:5b:06:62:51:ea:94:68:a4:7e:0a:c0:d4:56: 61:09:0f:a4:c0:7f:93:74:ca:3a:46:8a:2a:b6:99:d3:48:31: 2d:5f:3e:54:df:49:fb:37:61:64:c2:a7:cb:22:77:45:5a:07: 4f:cd:21:e7:f3:28:2a:71:0f:c2:86:38:0f:e2:dd:71:b5:8d: 59:97:8c:c0:38:2f:48:08:6b:f9:e6:70:0b:81:45:22:68:51: 0a:a5:f4:fd:39:a2:70:d3:c1:4c:c3:c5:74:1c:8b:a0:43:31: e6:d4:32:e0:7a:0d:38:2b:04:3c:8b:af:b9:c6:54:b5:08:57: b1:d2:6f:21:2f:cf:97:6c:54:53:43:10:92:6e:29:f3:1a:7c: d8:5c:f2:39:00:b0:fc:32:f4:37:e3:e8:5f:a5:14:21:e1:f4: 92:fa:a5:c4:38:c1:b9:ac:ae:18:c4:11:db:98:5d:35:d8:41: 96:3b:3a:29:87:4f:d1:52:10:f6:3b:e3:20:7b:00:d8:af:49: 60:8b:a8:53:14:92:10:09:cd:64:7a:d5:5b:02:39:8a:c6:0e: 90:91:0e:28:38:07:59:5b:a2:5d:d7:cf:50:22:a3:0e:16:d3: ac:dc:f0:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4RjIxMTAvBgNVBAUTKEI3OTFCRDFDOUUyMDgxQUE4NEY4MDc4MDY2QzBDN0Y2 MEE2Mzc5MEUwHhcNMjUwNjA2MjA1MjI2WhcNMjUwNjEzMjA1MjI2WjAYMRYwFAYD VQQDEw02ODQzNTUwYi00YmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/1luS85AGKHePVq5Cjc56YK5/nvZad0+bAL8hX3KZuRnqTWZhjlfPq041DH wZhKrzWx/kdZkpyZgywy/ab1nMx+LImKcotalclF9UGIMTbLHo1QvfxaOYLKHizt W25tT4ZF++t2p1r6ggpz1dTLiDQLlzHAzXk26pdhWtqw3AN3CQ3vxNouxBoZlNx9 qu25J9DugjFVjKylwOCmLsXai7RZ8InpIYj8OHG8qwBHafS5eenf9yP2QXlvw8Xr qxTX+2lIm2B87WxfVqDXurMOPuObr6W1+xdSNtRE45eSFe5dzo9cVV4TTeDNvOpj iTrZDOtPo2qLA5ElnrMP90qsaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEsMR1Ws mS32MG5fYhcDGDAHO0NoMB8GA1UdIwQYMBaAFLeRvRyeIIGqhPgHgGbAx/YKY3kO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjhGMi8wMjJENTcxQ0Q2 NUUxMUVBQjYwQ0EzNkJDNEY5QUUwMi90NUc5SEo0Z2dhcUUtQWVBWnNESDlncGpl UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q1RzlISjRnZ2FxRS1BZUFac0RIOWdwamVRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjhGMi8wMjJENTcxQ0Q2NUUxMUVBQjYwQ0EzNkJDNEY5QUUwMi90NUc5SEo0Z2dh cUUtQWVBWnNESDlncGplUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBWYciX5eVAtalEMB+oI7OWbksGq/5sFsGYlHqlGikfgrA1FZhCQ+k wH+TdMo6RooqtpnTSDEtXz5U30n7N2FkwqfLIndFWgdPzSHn8ygqcQ/ChjgP4t1x tY1Zl4zAOC9ICGv55nALgUUiaFEKpfT9OaJw08FMw8V0HIugQzHm1DLgeg04KwQ8 i6+5xlS1CFex0m8hL8+XbFRTQxCSbinzGnzYXPI5ALD8MvQ34+hfpRQh4fSS+qXE OMG5rK4YxBHbmF012EGWOzoph0/RUhD2O+MgewDYr0lgi6hTFJIQCc1ketVbAjmK xg6QkQ4oOAdZW6Jd189QIqMOFtOs3PA1 -----END CERTIFICATE-----Generated at Sun Jun 8 15:39:59 2025 by rpki-client