$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft File: C5sr_BxrLAlndq91fTrxRUfkPnI.mft (raw, json) Hash identifier: iNo5sG9fRZP47FpIZcxu38vyFZ0o1mA0ErfyWsexW34= Subject key identifier: AF:F6:D8:88:66:D7:CD:03:FA:81:80:41:00:CE:3F:5C:47:20:90:D5 Authority key identifier: 0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72 Certificate issuer: /CN=A918F646/serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72 Certificate serial: 11CF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft Manifest number: 11BA Signing time: Mon 02 Jun 2025 17:22:52 +0000 Manifest this update: Mon 02 Jun 2025 17:22:52 +0000 Manifest next update: Mon 09 Jun 2025 17:22:52 +0000 Files and hashes: 1: C5sr_BxrLAlndq91fTrxRUfkPnI.crl (hash: 357QCW+RjCDv7WA0aCPWGGQAZoUOKyqHdPZAdfEc77A=) 2: 60FCDED2F48F11E89651151FC4F9AE02.roa (hash: TiqURCOWDtFV1lphAi7QXXgszXNq/kYQUGQ1WC3OpiM=) 3: DA0E6EFEE86411ECA54EC03BC4F9AE02.roa (hash: mYkKjSQQ/omFBmjS3V6LuAFr1BpNALu/wvYuWXKZHNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 05:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4559 (0x11cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F646, serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72 Validity Not Before: Jun 2 17:22:52 2025 GMT Not After : Jun 9 17:22:52 2025 GMT Subject: CN=683dddec-fa91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:20:c6:0c:e1:59:34:eb:e8:6b:24:1a:01:3c: e7:92:dd:2c:0e:b5:7d:59:55:c5:8e:80:88:78:2b: 29:87:a5:0a:6a:d4:ac:18:8e:3e:bf:30:16:0c:56: 63:ed:d0:64:8d:68:6e:34:9f:b9:58:0c:56:b3:9b: ce:0c:b9:ce:88:5f:50:80:e2:7b:81:2d:0c:d1:c6: 30:d4:b7:55:71:53:f5:46:68:61:7a:dc:7f:b7:50: 3e:11:25:3e:ac:e5:86:c8:51:1b:09:63:98:ea:6d: 7c:13:81:29:7b:36:1b:da:33:4a:a4:a3:82:2b:2f: 84:aa:39:fe:45:a6:3e:c2:e8:6f:31:c9:1c:0e:bb: 2d:32:98:25:59:c2:ed:53:69:44:fc:37:06:f5:6d: 1b:86:18:3f:48:72:e0:f8:a5:f8:f0:55:be:f3:51: bf:c6:53:10:61:e0:aa:65:6f:d5:62:88:13:9e:0a: 06:81:62:2b:8f:21:4c:d5:c5:f1:dd:8f:65:5e:6a: 2c:39:ec:73:3c:b0:c3:f4:88:0f:36:82:df:2a:81: cf:7d:51:3b:1e:e6:28:55:aa:70:f1:37:4a:81:2f: a9:6f:02:50:f5:85:da:df:07:c3:bc:78:f1:9d:a4: af:32:5f:7d:27:e3:51:66:e4:1a:12:d6:7d:b0:1a: 26:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F6:D8:88:66:D7:CD:03:FA:81:80:41:00:CE:3F:5C:47:20:90:D5 X509v3 Authority Key Identifier: keyid:0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:96:38:d3:44:6f:2e:ff:e3:d9:0f:17:b4:ce:ff:f8:ab:93: 38:92:24:5d:60:f3:e4:d2:f8:56:87:78:f9:d2:73:23:75:4d: a8:30:ef:0c:b6:a6:3b:54:86:ae:e2:17:2d:58:f2:59:7c:8b: 35:cf:30:fd:4d:87:a4:0e:24:cf:46:fc:b0:56:61:fd:75:2c: b3:20:96:f5:53:65:a0:34:3f:33:e3:db:ad:43:2b:58:b2:ab: fb:e4:fe:b1:11:4f:a5:2a:03:f9:eb:14:d4:c1:30:34:6c:07: f3:19:1e:bf:59:9c:46:05:3b:35:20:61:dd:70:21:5e:36:2b: 37:de:59:91:a3:bd:e0:9a:5c:10:2b:55:a8:e3:f4:31:d1:fd: 3f:f1:75:9b:a6:d7:f7:20:2b:dc:f7:c0:db:2b:48:a0:4c:d4: df:75:34:1d:c0:ce:9d:f3:63:0f:ac:15:da:9a:8e:09:b4:ca: 48:29:54:85:10:eb:ae:c3:40:87:81:71:d5:64:4e:8d:85:b9: e5:2c:b9:a9:92:38:3e:70:24:ca:dd:0a:99:4b:d4:1f:e3:15: b7:58:d9:34:1e:42:59:a8:ff:c9:cc:af:18:1c:b5:52:d7:81: 27:96:e3:0c:06:15:b8:81:46:07:1b:4d:71:da:e7:0e:f2:ac: db:75:38:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY2NDYxMTAvBgNVBAUTKDBCOUIyQkZDMUM2QjJDMDk2Nzc2QUY3NTdEM0FGMTQ1 NDdFNDNFNzIwHhcNMjUwNjAyMTcyMjUyWhcNMjUwNjA5MTcyMjUyWjAYMRYwFAYD VQQDEw02ODNkZGRlYy1mYTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtiDGDOFZNOvoayQaATznkt0sDrV9WVXFjoCIeCsph6UKatSsGI4+vzAWDFZj 7dBkjWhuNJ+5WAxWs5vODLnOiF9QgOJ7gS0M0cYw1LdVcVP1Rmhhetx/t1A+ESU+ rOWGyFEbCWOY6m18E4EpezYb2jNKpKOCKy+Eqjn+RaY+wuhvMckcDrstMpglWcLt U2lE/DcG9W0bhhg/SHLg+KX48FW+81G/xlMQYeCqZW/VYogTngoGgWIrjyFM1cXx 3Y9lXmosOexzPLDD9IgPNoLfKoHPfVE7HuYoVapw8TdKgS+pbwJQ9YXa3wfDvHjx naSvMl99J+NRZuQaEtZ9sBomVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/22Ihm 180D+oGAQQDOP1xHIJDVMB8GA1UdIwQYMBaAFAubK/wcaywJZ3avdX068UVH5D5y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjY0Ni9DRUNFOEM5QUY0 OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9DNXNyX0J4ckxBbG5kcTkxZlRyeFJVZmtQ bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0M1c3JfQnhyTEFsbmRxOTFmVHJ4UlVma1BuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjY0Ni9DRUNFOEM5QUY0OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9DNXNyX0J4ckxB bG5kcTkxZlRyeFJVZmtQbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwljjTRG8u/+PZDxe0zv/4q5M4kiRdYPPk0vhWh3j50nMjdU2oMO8M tqY7VIau4hctWPJZfIs1zzD9TYekDiTPRvywVmH9dSyzIJb1U2WgND8z49utQytY sqv75P6xEU+lKgP56xTUwTA0bAfzGR6/WZxGBTs1IGHdcCFeNis33lmRo73gmlwQ K1Wo4/Qx0f0/8XWbptf3ICvc98DbK0igTNTfdTQdwM6d82MPrBXamo4JtMpIKVSF EOuuw0CHgXHVZE6NhbnlLLmpkjg+cCTK3QqZS9Qf4xW3WNk0HkJZqP/JzK8YHLVS 14EnluMMBhW4gUYHG01x2ucO8qzbdTgC -----END CERTIFICATE-----Generated at Mon Jun 2 19:36:30 2025 by rpki-client