$ rpki-client -vvf rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft File: _5I0f11UaIEf0lOki_xp_lcKpFA.mft (raw, json) Hash identifier: 2tbFJvChq7o7nf8iPsMwmajqMeV4ET0EdI90IP9mgdY= Subject key identifier: 83:FE:6C:95:C5:CD:6C:F0:FC:14:92:AF:A1:50:B8:24:F6:5D:69:72 Authority key identifier: FF:92:34:7F:5D:54:68:81:1F:D2:53:A4:8B:FC:69:FE:57:0A:A4:50 Certificate issuer: /CN=A9191769/serialNumber=FF92347F5D5468811FD253A48BFC69FE570AA450 Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft Manifest number: 84 Signing time: Sat 31 May 2025 06:58:01 +0000 Manifest this update: Sat 31 May 2025 06:58:00 +0000 Manifest next update: Sat 07 Jun 2025 06:58:00 +0000 Files and hashes: 1: _5I0f11UaIEf0lOki_xp_lcKpFA.crl (hash: HF/2cH7hV0u45jUaE5PEU5lmIXjUg4xB7XhtaF2D2cs=) 2: 4D36C07677C311EF84D38A3BC4F9AE02.roa (hash: JXSolNPYFIreOexnYnb4A7e51oAbg28HPMtSTeakZI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.crl rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:57:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191769, serialNumber=FF92347F5D5468811FD253A48BFC69FE570AA450 Validity Not Before: May 31 06:58:00 2025 GMT Not After : Jun 7 06:58:00 2025 GMT Subject: CN=683aa878-e187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:54:a6:d1:06:e9:06:ad:c0:35:d7:de:0b:7a: e9:0b:1d:ac:ee:44:5b:c3:a1:df:b7:2a:5a:e3:50: 4b:5b:c0:65:d8:8c:9b:ff:11:c3:ec:52:ff:2b:fc: f7:7f:74:ed:15:f3:ea:66:9b:72:a5:c5:a4:a0:d0: 6f:37:7c:a5:86:0d:1d:95:76:93:7c:03:07:ff:d2: a4:d4:c9:cc:30:c3:b0:57:61:b9:1b:0b:75:e2:5d: 88:3f:4b:92:ae:98:95:e5:37:37:2b:48:83:4b:78: 20:fa:3a:49:01:25:ef:ea:88:28:08:ed:3a:2a:54: ba:26:59:df:cf:f4:87:f1:fc:2d:96:d7:bd:7d:87: 42:95:11:29:cf:7a:53:6f:69:96:fa:70:d6:13:25: 99:cc:27:f8:bd:f9:ac:8b:0a:1c:41:61:2c:2e:9e: cd:32:35:38:88:1b:77:8b:e3:9a:79:de:ea:11:90: ba:4a:3c:63:0b:5f:ea:5d:00:ed:4f:c6:2b:d6:33: 2b:4e:ca:a7:f0:32:12:40:b8:2f:d9:ab:4c:1a:42: 89:29:e5:43:ea:a4:91:97:0b:cc:86:d5:57:b9:73: f1:5c:33:43:1c:c7:80:dc:40:1f:44:cb:8e:b0:37: 55:19:6f:af:77:f9:9e:d6:eb:0a:c0:c9:60:b4:76: 0c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FE:6C:95:C5:CD:6C:F0:FC:14:92:AF:A1:50:B8:24:F6:5D:69:72 X509v3 Authority Key Identifier: keyid:FF:92:34:7F:5D:54:68:81:1F:D2:53:A4:8B:FC:69:FE:57:0A:A4:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:9b:d7:2d:01:62:5d:db:2d:35:9a:17:9b:6b:b0:f9:a4:4e: 77:3d:b9:e3:42:9e:d8:f2:d6:9d:b9:dc:e5:c4:1a:fc:3f:2e: db:72:48:b7:ba:5f:33:77:16:3d:18:c4:ad:b3:68:e0:68:b5: fb:38:91:c1:5c:72:3f:b2:f2:fa:a6:90:6e:5b:9a:71:31:83: d4:98:b2:05:74:3f:07:35:a9:b6:37:00:d0:8e:41:f5:90:5f: d7:e6:b4:0e:75:c7:c9:b9:e0:ef:93:d6:63:ba:3d:f1:4a:4a: a9:14:06:c4:a5:5b:f9:fc:ea:f5:25:66:7b:cc:43:9b:b0:46: 4c:65:cd:d5:85:08:c6:ed:ab:35:f5:f0:bd:9c:91:98:9e:1d: 80:d7:38:9c:d4:4e:11:78:66:a4:c5:2d:8c:e0:e8:5c:8a:2c: 23:d9:33:61:80:65:d2:13:d0:7c:c8:72:b4:dc:48:85:39:96: 10:8e:ed:91:60:cd:61:0e:be:5c:6a:ad:7c:ab:11:db:65:7c: 1c:7f:57:3a:51:60:c6:a3:3e:df:30:68:50:e6:c3:29:e0:18: a8:b4:39:5a:9c:32:32:65:ad:93:32:96:8d:2e:78:75:9a:76: 23:55:3b:75:f3:10:60:d7:bb:a7:13:70:e4:cd:8b:67:f5:06: a8:52:9c:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE3NjkxMTAvBgNVBAUTKEZGOTIzNDdGNUQ1NDY4ODExRkQyNTNBNDhCRkM2OUZF NTcwQUE0NTAwHhcNMjUwNTMxMDY1ODAwWhcNMjUwNjA3MDY1ODAwWjAYMRYwFAYD VQQDEw02ODNhYTg3OC1lMTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1Sm0QbpBq3ANdfeC3rpCx2s7kRbw6Hftypa41BLW8Bl2Iyb/xHD7FL/K/z3 f3TtFfPqZptypcWkoNBvN3ylhg0dlXaTfAMH/9Kk1MnMMMOwV2G5Gwt14l2IP0uS rpiV5Tc3K0iDS3gg+jpJASXv6ogoCO06KlS6Jlnfz/SH8fwtlte9fYdClREpz3pT b2mW+nDWEyWZzCf4vfmsiwocQWEsLp7NMjU4iBt3i+Oaed7qEZC6SjxjC1/qXQDt T8Yr1jMrTsqn8DISQLgv2atMGkKJKeVD6qSRlwvMhtVXuXPxXDNDHMeA3EAfRMuO sDdVGW+vd/me1usKwMlgtHYMRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIP+bJXF zWzw/BSSr6FQuCT2XWlyMB8GA1UdIwQYMBaAFP+SNH9dVGiBH9JTpIv8af5XCqRQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTc2OS9EMjZERERCMDc3 QkUxMUVGOUYyQTQ1NDdDNEY5QUUwMi9fNUkwZjExVWFJRWYwbE9raV94cF9sY0tw RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL181STBmMTFVYUlFZjBsT2tpX3hwX2xjS3BGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTc2OS9EMjZERERCMDc3QkUxMUVGOUYyQTQ1NDdDNEY5QUUwMi9fNUkwZjExVWFJ RWYwbE9raV94cF9sY0twRkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1m9ctAWJd2y01mheba7D5pE53PbnjQp7Y8tadudzlxBr8Py7bcki3 ul8zdxY9GMSts2jgaLX7OJHBXHI/svL6ppBuW5pxMYPUmLIFdD8HNam2NwDQjkH1 kF/X5rQOdcfJueDvk9Zjuj3xSkqpFAbEpVv5/Or1JWZ7zEObsEZMZc3VhQjG7as1 9fC9nJGYnh2A1zic1E4ReGakxS2M4Ohciiwj2TNhgGXSE9B8yHK03EiFOZYQju2R YM1hDr5caq18qxHbZXwcf1c6UWDGoz7fMGhQ5sMp4BiotDlanDIyZa2TMpaNLnh1 mnYjVTt18xBg17unE3DkzYtn9QaoUpxx -----END CERTIFICATE-----Generated at Sat May 31 16:56:14 2025 by rpki-client