$ rpki-client -vvf rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft File: 5wLFqnTYyWzI7vVhjk_-79UdN_k.mft (raw, json) Hash identifier: awPtX7uDNYamNKV8uLRI4GJWmyFGig7O9SaKGDQF6QQ= Subject key identifier: B4:2C:09:79:2D:B2:67:76:D4:C2:53:B9:92:02:A3:AB:ED:8F:28:3A Authority key identifier: E7:02:C5:AA:74:D8:C9:6C:C8:EE:F5:61:8E:4F:FE:EF:D5:1D:37:F9 Certificate issuer: /CN=A918CA0E/serialNumber=E702C5AA74D8C96CC8EEF5618E4FFEEFD51D37F9 Certificate serial: 066C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft Manifest number: 0666 Signing time: Fri 30 May 2025 22:37:32 +0000 Manifest this update: Fri 30 May 2025 22:37:31 +0000 Manifest next update: Fri 06 Jun 2025 22:37:31 +0000 Files and hashes: 1: 5wLFqnTYyWzI7vVhjk_-79UdN_k.crl (hash: swJ42imPqOyjg7MxUbyHXSYaM0AEN6SRK8zhvxpAIps=) 2: 98C0AE7E808411EBA15C9251C4F9AE02.roa (hash: zc3Pnw0/OkkjpSp764b1FQtIhHt1L5fn5FeWiUPa5I4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.crl rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1644 (0x66c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CA0E, serialNumber=E702C5AA74D8C96CC8EEF5618E4FFEEFD51D37F9 Validity Not Before: May 30 22:37:31 2025 GMT Not After : Jun 6 22:37:31 2025 GMT Subject: CN=683a332c-8acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4c:c6:74:2d:0e:77:b7:e3:e7:8b:10:f2:26: 6f:db:d9:a2:98:df:c8:60:a2:6c:bf:08:21:39:b1: 90:d9:f0:93:66:32:2a:5d:a8:9a:b2:91:ea:f1:90: ad:4b:a0:d2:27:71:9c:76:1d:89:f2:89:c3:e5:f9: 6d:7a:1c:41:20:bf:94:00:44:34:51:86:56:ff:52: aa:09:72:d4:e4:9a:e3:1d:fd:65:43:7f:05:91:17: da:e9:61:91:fe:41:67:22:2f:c8:02:4c:de:63:c3: 52:f6:ff:53:d3:c2:49:4c:5a:2a:ad:b4:aa:c8:b5: 5f:61:a9:06:f0:69:61:ac:79:6e:b9:52:23:90:ab: f6:c3:d1:ca:1a:25:ad:99:c1:18:ea:7c:64:32:b4: c7:5c:9f:9f:d4:15:2c:62:bf:eb:01:c7:71:e7:b1: fa:c4:dc:f2:42:cb:b6:82:88:a3:7f:66:c3:64:eb: 39:df:dc:32:f1:2f:2c:8b:38:45:66:39:6e:83:c1: 5c:25:31:b2:41:79:99:bd:af:ae:f9:9e:89:e1:e0: 21:0f:88:d1:07:c5:2c:eb:5e:89:07:5a:40:59:d1: 6d:16:04:2f:9f:70:59:c9:d3:7f:c3:f8:77:eb:35: fe:47:6d:90:be:93:fc:0e:23:74:98:08:64:6c:de: 45:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:2C:09:79:2D:B2:67:76:D4:C2:53:B9:92:02:A3:AB:ED:8F:28:3A X509v3 Authority Key Identifier: keyid:E7:02:C5:AA:74:D8:C9:6C:C8:EE:F5:61:8E:4F:FE:EF:D5:1D:37:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:9d:16:c4:5d:bf:02:5e:14:bb:e3:eb:71:bc:28:61:e6:26: b9:5e:43:9c:24:bf:80:e5:bd:d9:14:31:f0:b3:e0:b5:93:f2: e3:06:6d:14:ae:55:0b:7e:4d:51:18:f0:2e:9d:e8:5b:86:2e: df:e7:55:25:78:90:57:af:66:9f:83:ed:ca:e5:24:22:db:5b: 71:a6:3b:5e:16:c4:06:2d:db:38:37:fd:23:69:d9:d7:27:f1: f2:02:ec:9e:65:dd:3a:a6:31:0a:92:50:54:04:5f:07:29:47: 37:94:49:b2:da:c9:74:2f:59:25:97:0c:50:af:c7:55:20:2a: 34:0f:a0:a8:fc:93:0a:93:f4:ee:2a:c4:36:0b:f5:bb:8e:76: 49:a4:49:70:ea:89:ff:b8:6f:e2:63:f0:fc:b1:5d:27:de:0f: 1c:93:6f:1f:ca:01:03:4f:cb:a1:5b:d4:ce:89:78:7e:dd:0f: 44:d9:ba:fb:59:03:95:04:7c:c6:80:cd:46:24:64:7e:eb:04: 89:c7:50:01:15:38:e1:76:3c:33:6a:1c:de:ec:4e:6d:dd:77: 5d:39:db:c1:c9:ba:85:36:51:70:1f:f9:ad:79:12:20:e8:fd: 94:ce:35:34:48:f4:95:c2:ad:5d:f3:f0:14:c2:33:8c:c0:f4: 9d:67:db:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBMEUxMTAvBgNVBAUTKEU3MDJDNUFBNzREOEM5NkNDOEVFRjU2MThFNEZGRUVG RDUxRDM3RjkwHhcNMjUwNTMwMjIzNzMxWhcNMjUwNjA2MjIzNzMxWjAYMRYwFAYD VQQDEw02ODNhMzMyYy04YWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUzGdC0Od7fj54sQ8iZv29mimN/IYKJsvwghObGQ2fCTZjIqXaiaspHq8ZCt S6DSJ3Gcdh2J8onD5fltehxBIL+UAEQ0UYZW/1KqCXLU5JrjHf1lQ38FkRfa6WGR /kFnIi/IAkzeY8NS9v9T08JJTFoqrbSqyLVfYakG8GlhrHluuVIjkKv2w9HKGiWt mcEY6nxkMrTHXJ+f1BUsYr/rAcdx57H6xNzyQsu2goijf2bDZOs539wy8S8sizhF Zjlug8FcJTGyQXmZva+u+Z6J4eAhD4jRB8Us616JB1pAWdFtFgQvn3BZydN/w/h3 6zX+R22QvpP8DiN0mAhkbN5FAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQsCXkt smd21MJTuZICo6vtjyg6MB8GA1UdIwQYMBaAFOcCxap02MlsyO71YY5P/u/VHTf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0EwRS84QTExNjRDQTgw NzcxMUVCOTdEOTQwNTRDNEY5QUUwMi81d0xGcW5UWXlXekk3dlZoamtfLTc5VWRO X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV3TEZxblRZeVd6STd2Vmhqa18tNzlVZE5fay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0EwRS84QTExNjRDQTgwNzcxMUVCOTdEOTQwNTRDNEY5QUUwMi81d0xGcW5UWXlX ekk3dlZoamtfLTc5VWROX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZnRbEXb8CXhS74+txvChh5ia5XkOcJL+A5b3ZFDHws+C1k/LjBm0U rlULfk1RGPAunehbhi7f51UleJBXr2afg+3K5SQi21txpjteFsQGLds4N/0jadnX J/HyAuyeZd06pjEKklBUBF8HKUc3lEmy2sl0L1kllwxQr8dVICo0D6Co/JMKk/Tu KsQ2C/W7jnZJpElw6on/uG/iY/D8sV0n3g8ck28fygEDT8uhW9TOiXh+3Q9E2br7 WQOVBHzGgM1GJGR+6wSJx1ABFTjhdjwzahze7E5t3XddOdvBybqFNlFwH/mteRIg 6P2UzjU0SPSVwq1d8/AUwjOMwPSdZ9tW -----END CERTIFICATE-----Generated at Sat May 31 17:10:19 2025 by rpki-client