$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft File: s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft (raw, json) Hash identifier: mxJIv/W964XLVoI6BmpSKQER2sYlYV3VBcCuMiRxOEE= Subject key identifier: 9A:60:2F:02:D0:37:4D:5F:14:AA:2D:9E:7C:29:2E:CD:A3:FF:03:C5 Authority key identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25 Certificate issuer: /CN=A91964B3/serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625 Certificate serial: 365D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft Manifest number: 3586 Signing time: Sat 31 May 2025 14:24:41 +0000 Manifest this update: Sat 31 May 2025 14:24:40 +0000 Manifest next update: Sat 07 Jun 2025 14:24:40 +0000 Files and hashes: 1: s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl (hash: TO23vGF+bipweJNAkTSQfr6Ue0SD+vGJ8QhUhvwvIsQ=) 2: B36EA83C70B111E98CFFF710C4F9AE02.roa (hash: YPxJgAFP2pm+e64iG82yJRkFHNHfja4F2rH7VSVuFpA=) 3: 4BE40306048011F0B0453C78C4F9AE02.roa (hash: 4Ci6FoNbx8kqHd/zZHmZQlAITm4Fel6LtjAZ7twKUas=) 4: 160B219870BA11E99E0F6D2DC4F9AE02.roa (hash: 3QqIb/PpEMe7CSOMb9cfzIUcXW1tet3HABkiD8A3zkU=) 5: 26A143C291EB11EF8A024083C4F9AE02.roa (hash: apyNb0gzlP7QIPlzF+1SGVtUOjpAimi2EUrocnrYZRM=) 6: 18F4FD76918111EC93DCA42AC4F9AE02.roa (hash: 8JKaEfgtThOrevd/FI1wUsWQCsjDZCsWDfH4rtPvYOM=) 7: B0EB27B470B811E9B32F6726C4F9AE02.roa (hash: Yn6iyp3sOHzht7NrUVV1K95CTLrIyR+zeCU6DhPlbi0=) 8: 9538F912A09511EE9616A86EC4F9AE02.roa (hash: UIhH1UdXX1/WldxbBw/5eFdUsW8H5rv3xowCVi4x/js=) 9: 9AF37E96D71B11EA9532F30CC4F9AE02.roa (hash: UB9M+LLNN3sS8I2EFsp8N9BHGeanS2Z+lbFEvYsOTeM=) 10: 71D60BC2F6BA11EB865C4246C4F9AE02.roa (hash: E9Q0DLQxOx2PNLNxJzUPOmEekE0nfR8RNH8+NziMkYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13917 (0x365d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91964B3, serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625 Validity Not Before: May 31 14:24:40 2025 GMT Not After : Jun 7 14:24:40 2025 GMT Subject: CN=683b1129-5c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6a:84:69:2c:33:90:d8:d1:51:9d:07:81:f8: 85:27:84:a6:00:db:ea:13:9b:f7:3f:f6:0c:5e:e9: a3:cb:88:f2:89:b4:41:3d:ed:84:ac:5b:72:32:28: dc:62:a0:7b:23:eb:ec:ed:b9:65:27:3f:3b:b0:e3: 0d:d0:22:10:4a:51:bb:b2:cc:47:30:f8:8d:06:43: cd:22:d6:7e:4e:53:eb:d6:fc:ab:8a:7e:7a:d8:a7: 48:6c:96:61:b1:7b:f5:cc:fb:ff:7f:63:d0:74:eb: f0:e2:2a:99:32:14:78:1e:5e:a8:69:fd:03:88:a4: 6d:14:e6:cd:46:6a:24:3a:c1:9a:0a:bc:bd:94:de: ad:fc:e8:cc:4a:02:70:bc:86:d0:7f:1b:f4:22:82: f3:bd:3e:e9:7c:fb:d6:09:7f:04:31:62:b2:d7:43: c2:ad:cf:7a:52:8f:83:fe:5e:5b:07:2a:c7:b3:cd: 4d:66:8b:8e:10:19:ef:e0:30:e6:e6:fd:24:7e:b4: f5:79:5d:3c:e8:0f:5d:a9:99:62:ff:61:83:f8:79: 72:2d:8e:30:93:84:77:04:40:82:2c:69:d1:9a:67: 44:51:f3:74:03:f7:9f:7a:d2:a5:be:14:76:0d:70: 4b:c8:7d:aa:ff:4f:17:0a:53:7e:08:bb:33:c0:77: 70:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:60:2F:02:D0:37:4D:5F:14:AA:2D:9E:7C:29:2E:CD:A3:FF:03:C5 X509v3 Authority Key Identifier: keyid:B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:de:c8:2c:a3:db:9f:16:dc:08:af:ec:59:8e:48:a2:f9:00: 09:00:f3:9f:9e:df:cf:2c:e5:8a:6e:79:5c:a3:09:6a:7d:31: f3:df:4e:7d:b8:bb:7e:8e:88:58:c2:9f:90:58:cf:49:b5:bf: 58:42:cd:15:c2:4d:b5:58:9f:9a:f8:0c:9d:c5:07:70:e6:7a: ba:7a:a1:0d:e2:1a:d6:8f:94:61:16:0d:80:ce:ea:27:70:fc: 75:f2:0e:29:59:5f:c3:27:e5:c3:e1:3c:76:f4:a1:93:da:34: 66:40:20:79:ef:87:82:1b:71:6d:40:d9:cf:28:ae:ce:97:c5: eb:d1:4c:c1:07:a2:20:47:b6:6f:69:cb:a4:64:a3:5d:f1:db: e1:b4:a6:bb:a7:bf:27:ab:51:e8:75:c5:72:29:cb:44:50:29: 53:77:a4:49:4d:dd:5f:a3:c2:15:e6:ee:aa:69:0a:1f:81:69: 21:98:6d:b3:01:d0:cb:3b:5b:a4:01:7e:68:da:33:0e:1b:9c: d9:b1:b4:8a:e7:94:74:bd:f1:2a:78:1f:a2:20:d7:48:5b:9b: 85:33:dc:42:7f:0e:24:ee:87:ff:2e:2b:58:c5:ec:f8:c8:e0: 65:88:26:83:51:b1:17:57:7f:76:81:6a:16:72:c4:f0:84:f1: 78:2b:e6:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0QjMxMTAvBgNVBAUTKEIzOTg2NkE5OUQxQ0Q5RjRFN0U4RjUzQzg4QUQxNERB ODlBMTg2MjUwHhcNMjUwNTMxMTQyNDQwWhcNMjUwNjA3MTQyNDQwWjAYMRYwFAYD VQQDEw02ODNiMTEyOS01YzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGqEaSwzkNjRUZ0HgfiFJ4SmANvqE5v3P/YMXumjy4jyibRBPe2ErFtyMijc YqB7I+vs7bllJz87sOMN0CIQSlG7ssxHMPiNBkPNItZ+TlPr1vyrin562KdIbJZh sXv1zPv/f2PQdOvw4iqZMhR4Hl6oaf0DiKRtFObNRmokOsGaCry9lN6t/OjMSgJw vIbQfxv0IoLzvT7pfPvWCX8EMWKy10PCrc96Uo+D/l5bByrHs81NZouOEBnv4DDm 5v0kfrT1eV086A9dqZli/2GD+HlyLY4wk4R3BECCLGnRmmdEUfN0A/efetKlvhR2 DXBLyH2q/08XClN+CLszwHdwiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJpgLwLQ N01fFKotnnwpLs2j/wPFMB8GA1UdIwQYMBaAFLOYZqmdHNn05+j1PIitFNqJoYYl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjRCMy9FNjU4NTExMjFE ODQxMUUyQTFCQTMwREIwOEIwMkNEMi9zNWhtcVowYzJmVG42UFU4aUswVTJvbWho aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M1aG1xWjBjMmZUbjZQVThpSzBVMm9taGhpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjRCMy9FNjU4NTExMjFEODQxMUUyQTFCQTMwREIwOEIwMkNEMi9zNWhtcVowYzJm VG42UFU4aUswVTJvbWhoaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO3sgso9ufFtwIr+xZjkii+QAJAPOfnt/PLOWKbnlcowlqfTHz3059 uLt+johYwp+QWM9Jtb9YQs0Vwk21WJ+a+AydxQdw5nq6eqEN4hrWj5RhFg2Azuon cPx18g4pWV/DJ+XD4Tx29KGT2jRmQCB574eCG3FtQNnPKK7Ol8Xr0UzBB6IgR7Zv acukZKNd8dvhtKa7p78nq1HodcVyKctEUClTd6RJTd1fo8IV5u6qaQofgWkhmG2z AdDLO1ukAX5o2jMOG5zZsbSK55R0vfEqeB+iINdIW5uFM9xCfw4k7of/LitYxez4 yOBliCaDUbEXV392gWoWcsTwhPF4K+ZK -----END CERTIFICATE-----Generated at Sat May 31 17:53:07 2025 by rpki-client