$ rpki-client -vvf rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.mft File: s5MbVo8uudLtLKTWS-vAhvuduJo.mft (raw, json) Hash identifier: b+HKi1DaJsDFQeIurxlnCI6MjOG/ACcen6M8dmwxyeY= Subject key identifier: 34:B6:41:86:64:44:29:8B:F3:0E:5A:00:4A:DA:AB:31:29:05:10:63 Authority key identifier: B3:93:1B:56:8F:2E:B9:D2:ED:2C:A4:D6:4B:EB:C0:86:FB:9D:B8:9A Certificate issuer: /CN=A91867F1/serialNumber=B3931B568F2EB9D2ED2CA4D64BEBC086FB9DB89A Certificate serial: 0A9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5MbVo8uudLtLKTWS-vAhvuduJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.mft Manifest number: 0A94 Signing time: Fri 06 Jun 2025 19:37:39 +0000 Manifest this update: Fri 06 Jun 2025 19:37:39 +0000 Manifest next update: Fri 13 Jun 2025 19:37:39 +0000 Files and hashes: 1: s5MbVo8uudLtLKTWS-vAhvuduJo.crl (hash: MSys8b0CG1Vt2Y4lwTVV937eiKQGImIMkyWai/RXL2w=) 2: 6FEF33E05C2B11EAAE63403FC4F9AE02.roa (hash: OjmKjbirK1HOaPuAuxNpB1VjEustiEgzLqIxeeZ+0sM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.crl rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5MbVo8uudLtLKTWS-vAhvuduJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 19:37:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2715 (0xa9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91867F1, serialNumber=B3931B568F2EB9D2ED2CA4D64BEBC086FB9DB89A Validity Not Before: Jun 6 19:37:39 2025 GMT Not After : Jun 13 19:37:39 2025 GMT Subject: CN=68434383-9452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d2:00:9d:d5:9e:d5:48:22:13:d5:97:11:b6: 99:ff:52:e0:af:8e:82:a3:3f:1b:32:07:28:7a:be: e5:41:28:23:01:b6:e0:e6:5d:e6:28:03:d2:1f:7b: 9a:cc:42:84:b4:12:b5:27:5d:df:15:2c:3c:6b:85: 5c:20:dc:76:c3:83:6b:26:39:34:5d:26:10:09:ac: 06:cb:c3:27:e7:be:10:55:e9:b6:7f:96:ed:be:81: 40:a3:31:2e:ff:cd:62:4b:8a:1f:d3:f5:78:f3:d7: 0e:84:bc:14:e2:d9:07:c5:cb:4b:a9:d5:fc:59:23: c2:c5:6d:09:0b:05:ae:af:c0:52:3b:76:98:5f:5d: 45:d8:b5:46:57:4e:86:05:e5:06:9a:55:6c:54:d8: 30:51:b9:fb:3a:d5:20:7d:fb:4a:d6:b0:d6:b5:8c: 07:04:af:3d:f8:51:f8:3a:f9:1e:0a:72:03:ff:c4: 7e:7d:22:73:bc:7d:92:6b:25:d7:79:b5:5f:1f:2b: 55:14:a0:47:50:a9:83:f2:1c:f8:17:51:bb:7d:f7: 12:15:e1:00:18:92:9f:52:2d:e2:ad:01:87:67:47: a8:ee:f5:10:0e:5b:f6:8f:aa:01:5f:90:bd:55:ae: 0b:40:95:fc:1f:2c:a5:ca:40:69:f3:1a:57:07:21: 58:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:B6:41:86:64:44:29:8B:F3:0E:5A:00:4A:DA:AB:31:29:05:10:63 X509v3 Authority Key Identifier: keyid:B3:93:1B:56:8F:2E:B9:D2:ED:2C:A4:D6:4B:EB:C0:86:FB:9D:B8:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5MbVo8uudLtLKTWS-vAhvuduJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:ba:1b:16:94:8c:9e:e8:78:5b:59:3d:84:3c:01:2b:b6:76: ea:1c:e7:ee:41:81:5c:6c:c8:db:49:fc:5d:74:c8:00:9c:64: 6f:ac:5b:06:f7:c6:d6:16:5f:0f:b6:e7:36:6f:9b:a9:c2:ab: 5e:3e:f0:70:a6:0e:d3:a6:b7:5a:57:e1:ba:d9:65:b3:8a:37: 43:27:25:7e:44:b7:2d:0c:68:29:7b:d9:3d:fb:4c:bc:41:d1: ee:c3:f2:75:aa:27:40:f7:c2:ef:d8:e9:9b:cd:80:1d:2a:77: 4f:7a:43:18:31:1b:0f:ed:c1:ec:4c:5b:ec:37:4b:17:07:6d: d8:92:3f:f3:0e:23:db:86:cf:79:85:10:35:6b:e1:f8:42:d1: 93:cb:0c:88:61:09:db:9b:23:a9:c3:15:f8:75:73:0f:00:9b: b5:55:80:0a:ee:5e:2f:1f:d4:a9:aa:6b:a9:d2:d4:28:2a:9b: 87:85:df:ca:46:52:b0:86:1b:84:10:3e:d1:8e:64:3d:db:aa: c3:e1:13:a0:5d:8e:b1:54:2a:9b:30:b1:69:10:7f:d1:00:60: 72:3c:25:da:c6:bf:4a:c5:f3:e1:1c:eb:8c:ca:8f:3a:18:29: 69:06:62:ce:1b:6c:e7:1d:fd:f9:1e:eb:27:1e:2c:7d:b3:f7: 5b:90:32:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY3RjExMTAvBgNVBAUTKEIzOTMxQjU2OEYyRUI5RDJFRDJDQTRENjRCRUJDMDg2 RkI5REI4OUEwHhcNMjUwNjA2MTkzNzM5WhcNMjUwNjEzMTkzNzM5WjAYMRYwFAYD VQQDEw02ODQzNDM4My05NDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9IAndWe1UgiE9WXEbaZ/1Lgr46Coz8bMgcoer7lQSgjAbbg5l3mKAPSH3ua zEKEtBK1J13fFSw8a4VcINx2w4NrJjk0XSYQCawGy8Mn574QVem2f5btvoFAozEu /81iS4of0/V489cOhLwU4tkHxctLqdX8WSPCxW0JCwWur8BSO3aYX11F2LVGV06G BeUGmlVsVNgwUbn7OtUgfftK1rDWtYwHBK89+FH4OvkeCnID/8R+fSJzvH2SayXX ebVfHytVFKBHUKmD8hz4F1G7ffcSFeEAGJKfUi3irQGHZ0eo7vUQDlv2j6oBX5C9 Va4LQJX8HyylykBp8xpXByFYgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDS2QYZk RCmL8w5aAEraqzEpBRBjMB8GA1UdIwQYMBaAFLOTG1aPLrnS7Syk1kvrwIb7nbia MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjdGMS84MDlENzE1QzU5 MUExMUVBOTY5MkFBM0NDNEY5QUUwMi9zNU1iVm84dXVkTHRMS1RXUy12QWh2dWR1 Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M1TWJWbzh1dWRMdExLVFdTLXZBaHZ1ZHVKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjdGMS84MDlENzE1QzU5MUExMUVBOTY5MkFBM0NDNEY5QUUwMi9zNU1iVm84dXVk THRMS1RXUy12QWh2dWR1Sm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByuhsWlIye6HhbWT2EPAErtnbqHOfuQYFcbMjbSfxddMgAnGRvrFsG 98bWFl8Ptuc2b5upwqtePvBwpg7TprdaV+G62WWzijdDJyV+RLctDGgpe9k9+0y8 QdHuw/J1qidA98Lv2OmbzYAdKndPekMYMRsP7cHsTFvsN0sXB23Ykj/zDiPbhs95 hRA1a+H4QtGTywyIYQnbmyOpwxX4dXMPAJu1VYAK7l4vH9Spqmup0tQoKpuHhd/K RlKwhhuEED7RjmQ926rD4ROgXY6xVCqbMLFpEH/RAGByPCXaxr9KxfPhHOuMyo86 GClpBmLOG2znHf35HusnHix9s/dbkDKA -----END CERTIFICATE-----Generated at Sat Jun 7 06:45:44 2025 by rpki-client