$ rpki-client -vvf rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft File: 5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft (raw, json) Hash identifier: csR+KAsEAy07ggiB5m2ZYZy834bkqlOs4JehATBT0jc= Subject key identifier: 60:C9:DF:7A:2F:DE:16:E7:97:F7:64:55:D1:5F:F4:25:A7:F4:B2:14 Authority key identifier: E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D Certificate issuer: /CN=A91801A5/serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D Certificate serial: 0679 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft Manifest number: 0671 Signing time: Fri 30 May 2025 22:34:57 +0000 Manifest this update: Fri 30 May 2025 22:34:56 +0000 Manifest next update: Fri 06 Jun 2025 22:34:56 +0000 Files and hashes: 1: 5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl (hash: r9+mAMIONPHr4VyBFGo6l2M0pPNraVeSyzDvHSP3ezc=) 2: 54F537EC32CD11EFA6C5320EC4F9AE02.roa (hash: S55fbog5DZrTL6CQ8gLDN4CUVpPp3b9gzfe68beFEQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:34:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1657 (0x679) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91801A5, serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D Validity Not Before: May 30 22:34:56 2025 GMT Not After : Jun 6 22:34:56 2025 GMT Subject: CN=683a3290-87c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:0c:6a:c2:3f:80:a7:3b:b8:ce:03:e0:fa:04: 79:7b:99:a5:91:12:f2:66:03:2c:d7:aa:ee:27:a7: 20:39:c4:7d:12:65:e1:eb:1b:a0:24:38:52:3b:f0: 64:d5:ce:ec:35:92:ed:f4:79:3e:6a:0c:2b:7b:7e: 44:a5:fe:22:66:12:6a:42:08:4a:ca:a5:4d:27:00: b4:2d:49:91:02:9e:1d:0e:39:9e:2e:e7:1e:cc:81: 8d:fb:f3:8b:22:35:62:80:47:10:e8:c8:6c:93:60: 42:b0:c3:c6:b0:93:c5:a7:cf:69:1c:04:45:e3:f6: 89:1a:f4:41:ba:dd:19:cf:4e:9f:e8:f6:78:63:08: 13:e1:ad:d7:73:34:9d:96:3f:95:2f:23:aa:80:18: e9:92:d6:d3:4a:6c:0b:9b:14:cd:a4:b3:b4:04:85: af:0d:93:12:44:23:0a:10:be:bf:76:54:68:50:c9: d1:d8:a7:d0:d7:d7:68:2f:57:50:ff:24:dd:a0:ad: eb:b8:7d:e0:3a:3d:f8:97:18:21:1d:5d:75:fc:a1: 45:81:34:a0:99:54:9c:07:49:e3:62:a9:3a:62:18: ed:d7:8c:33:03:39:7d:cf:21:92:ee:17:f2:f9:4f: b3:1a:f8:3c:c9:ce:85:b6:cd:b9:4d:9d:f5:a7:a1: 4a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C9:DF:7A:2F:DE:16:E7:97:F7:64:55:D1:5F:F4:25:A7:F4:B2:14 X509v3 Authority Key Identifier: keyid:E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:9b:97:fb:68:59:0f:d1:84:c3:ce:4b:63:f9:15:81:5e:70: ce:12:b7:d4:72:2c:0d:4d:29:54:8a:0a:a9:cf:ab:88:ec:b1: cd:9b:9b:88:d6:e6:45:2b:be:73:cd:02:fa:4f:cc:e2:d6:61: 49:96:0c:5e:85:e4:49:9e:57:21:9f:e8:4f:cc:a0:e5:03:67: 31:14:3f:80:c6:68:fa:c0:7a:bc:ef:13:f3:2b:80:1f:62:a5: fe:40:48:bc:e4:3f:dd:42:c1:db:50:5f:0d:65:d0:1f:d8:c5: 38:a5:8a:b9:e2:7b:52:b8:87:e3:31:56:30:e7:ba:ca:6f:a9: f9:86:d2:f8:53:93:69:88:66:ee:bd:a6:f5:85:08:9e:0d:4c: e8:6f:90:dc:26:25:8f:9a:d9:cd:af:3a:a9:63:7c:63:8b:c1: 7f:d1:75:05:ed:ed:64:f0:96:12:11:d2:d2:bd:15:63:f3:2f: b6:19:38:5f:c0:50:dd:6d:ac:ca:77:d1:97:1d:d4:36:cb:48: 89:f1:47:4a:53:96:43:a8:43:35:7c:7c:0d:f5:50:a7:fd:b7: b9:7f:3c:99:68:d8:cd:64:7a:3d:fe:f6:ce:00:e6:65:60:36: a1:74:c1:3f:cc:d6:7f:b7:bb:8d:6f:74:29:8c:58:84:6e:c1: 08:af:f1:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAxQTUxMTAvBgNVBAUTKEU1RTFDRkNBRTFGOUU2RjEyMUNBMTM1NTFCNDBGNjk4 OTg0QjlEOUQwHhcNMjUwNTMwMjIzNDU2WhcNMjUwNjA2MjIzNDU2WjAYMRYwFAYD VQQDEw02ODNhMzI5MC04N2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Axqwj+Apzu4zgPg+gR5e5mlkRLyZgMs16ruJ6cgOcR9EmXh6xugJDhSO/Bk 1c7sNZLt9Hk+agwre35Epf4iZhJqQghKyqVNJwC0LUmRAp4dDjmeLucezIGN+/OL IjVigEcQ6Mhsk2BCsMPGsJPFp89pHARF4/aJGvRBut0Zz06f6PZ4YwgT4a3XczSd lj+VLyOqgBjpktbTSmwLmxTNpLO0BIWvDZMSRCMKEL6/dlRoUMnR2KfQ19doL1dQ /yTdoK3ruH3gOj34lxghHV11/KFFgTSgmVScB0njYqk6Yhjt14wzAzl9zyGS7hfy +U+zGvg8yc6Fts25TZ31p6FKrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGDJ33ov 3hbnl/dkVdFf9CWn9LIUMB8GA1UdIwQYMBaAFOXhz8rh+ebxIcoTVRtA9piYS52d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDFBNS84NEI1RDYxQzdE NkQxMUVCQTZBNEE4MTdDNEY5QUUwMi81ZUhQeXVINTV2RWh5aE5WRzBEMm1KaExu WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVlSFB5dUg1NXZFaHloTlZHMEQybUpoTG5aMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDFBNS84NEI1RDYxQzdENkQxMUVCQTZBNEE4MTdDNEY5QUUwMi81ZUhQeXVINTV2 RWh5aE5WRzBEMm1KaExuWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAum5f7aFkP0YTDzktj+RWBXnDOErfUciwNTSlUigqpz6uI7LHNm5uI 1uZFK75zzQL6T8zi1mFJlgxeheRJnlchn+hPzKDlA2cxFD+Axmj6wHq87xPzK4Af YqX+QEi85D/dQsHbUF8NZdAf2MU4pYq54ntSuIfjMVYw57rKb6n5htL4U5NpiGbu vab1hQieDUzob5DcJiWPmtnNrzqpY3xji8F/0XUF7e1k8JYSEdLSvRVj8y+2GThf wFDdbazKd9GXHdQ2y0iJ8UdKU5ZDqEM1fHwN9VCn/be5fzyZaNjNZHo9/vbOAOZl YDahdME/zNZ/t7uNb3QpjFiEbsEIr/FK -----END CERTIFICATE-----Generated at Sat May 31 17:11:18 2025 by rpki-client