$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft File: 556bUhJjfjPKXcthdpCc4ZYhumQ.mft (raw, json) Hash identifier: gz2sc0dQbK5p5T6HBRdSRJqW2ONlgmGOUBADuf7AmQo= Subject key identifier: EB:39:5B:64:78:4C:29:7F:D0:8D:C1:F8:14:58:44:2E:EA:6D:DE:14 Authority key identifier: E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64 Certificate issuer: /CN=A919C47E/serialNumber=E79E9B5212637E33CA5DCB6176909CE19621BA64 Certificate serial: 0458 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft Manifest number: 0452 Signing time: Mon 02 Jun 2025 17:13:57 +0000 Manifest this update: Mon 02 Jun 2025 17:13:56 +0000 Manifest next update: Mon 09 Jun 2025 17:13:56 +0000 Files and hashes: 1: 556bUhJjfjPKXcthdpCc4ZYhumQ.crl (hash: fXMSgFTkdghkCVoBYy+C658Jp+kJTdjq75D31afHNi0=) 2: B7E86B40595311EC9ECF510BC4F9AE02.roa (hash: I3AqCAvryjVR50FDwOB2eOkU4GLBFJs3HZ3gb9KEimo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.crl rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 17:13:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1112 (0x458) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C47E, serialNumber=E79E9B5212637E33CA5DCB6176909CE19621BA64 Validity Not Before: Jun 2 17:13:56 2025 GMT Not After : Jun 9 17:13:56 2025 GMT Subject: CN=683ddbd5-f8a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1c:b5:b9:55:0d:1c:2e:15:43:9b:8f:a7:6c: 33:9e:f1:f9:73:dc:c1:9e:33:b4:9d:97:fa:9f:ce: ff:ff:e9:ac:95:a7:16:7f:5a:42:f6:96:be:34:3b: ff:67:58:7d:9f:16:ce:5b:08:51:97:eb:fc:de:bc: 51:2e:e2:a6:0c:5f:c9:24:67:7e:e9:66:0f:f6:00: 17:27:50:e7:00:d1:7c:b4:04:34:d9:ac:83:95:1c: 72:5a:df:71:51:e3:90:54:84:e2:fc:4a:72:9b:7e: e5:d2:a4:c5:0d:e0:fd:4e:af:2e:81:10:e8:2c:f2: 78:77:86:e8:24:e7:94:e6:88:a7:88:c7:95:d4:a7: 9c:f2:9a:a6:84:64:2c:6d:f9:b2:8b:db:c8:e2:8d: b2:a8:f8:4f:65:ce:86:29:e8:fb:2c:57:0c:1f:07: bd:2e:1b:36:a1:26:9a:a3:0e:06:5e:9f:f0:69:20: 80:e5:1a:ff:49:34:3f:f8:87:72:60:2f:29:a9:84: c3:f8:b6:59:aa:1b:ae:13:69:c7:9f:8d:df:fc:d1: c2:4a:46:55:18:58:21:63:a5:71:c4:28:e7:8f:27: 9b:1a:d1:ce:8b:5d:e3:47:b5:84:9d:27:ba:e2:c0: 64:61:2f:ae:d8:8e:23:f9:c9:a9:8f:97:c9:a4:12: e3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:39:5B:64:78:4C:29:7F:D0:8D:C1:F8:14:58:44:2E:EA:6D:DE:14 X509v3 Authority Key Identifier: keyid:E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:54:4c:05:3c:8f:b7:97:27:c9:7f:75:ab:79:8b:02:17:a3: 1e:85:52:2c:73:26:37:27:5c:0d:e7:b8:72:73:29:ff:60:75: 2a:9c:5c:03:37:45:76:3f:1b:9c:3c:70:01:27:5b:8d:d4:f3: 78:08:2f:8e:87:12:44:e0:1e:eb:7e:5c:3d:70:5c:94:c0:f4: e6:23:b5:aa:80:d1:2c:be:01:6b:7a:23:95:fe:98:2b:49:91: 13:15:78:59:20:84:30:74:f8:9b:98:83:a8:88:a2:63:e0:b4: 76:7a:8e:09:56:b5:a3:e3:05:49:e9:48:0b:f5:9c:7e:c0:5c: 7b:e2:04:07:4f:5f:b7:a6:e5:31:5a:11:02:90:b0:12:09:f2: ef:c3:6c:5c:92:61:85:dc:5e:f8:0a:2a:5b:70:78:ca:58:02: c4:da:69:b5:57:d1:11:5a:a1:81:c7:98:0e:1d:7d:d4:e1:f6: 37:c6:44:5b:16:3c:c0:29:da:4a:92:27:b4:7e:7e:fa:6a:57: aa:be:d4:98:2a:08:89:55:6f:d0:8d:d1:46:b0:1b:e6:fa:a6: 8c:58:f2:41:a4:ce:77:c8:49:3d:7f:b9:a3:5b:31:bf:3a:73: 4a:d3:4e:3a:0b:8f:12:f9:58:5b:fb:df:a3:14:11:db:6e:61: d1:99:34:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM0N0UxMTAvBgNVBAUTKEU3OUU5QjUyMTI2MzdFMzNDQTVEQ0I2MTc2OTA5Q0Ux OTYyMUJBNjQwHhcNMjUwNjAyMTcxMzU2WhcNMjUwNjA5MTcxMzU2WjAYMRYwFAYD VQQDEw02ODNkZGJkNS1mOGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqhy1uVUNHC4VQ5uPp2wznvH5c9zBnjO0nZf6n87//+mslacWf1pC9pa+NDv/ Z1h9nxbOWwhRl+v83rxRLuKmDF/JJGd+6WYP9gAXJ1DnANF8tAQ02ayDlRxyWt9x UeOQVITi/Epym37l0qTFDeD9Tq8ugRDoLPJ4d4boJOeU5oiniMeV1Kec8pqmhGQs bfmyi9vI4o2yqPhPZc6GKej7LFcMHwe9Lhs2oSaaow4GXp/waSCA5Rr/STQ/+Idy YC8pqYTD+LZZqhuuE2nHn43f/NHCSkZVGFghY6VxxCjnjyebGtHOi13jR7WEnSe6 4sBkYS+u2I4j+cmpj5fJpBLj9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOs5W2R4 TCl/0I3B+BRYRC7qbd4UMB8GA1UdIwQYMBaAFOeem1ISY34zyl3LYXaQnOGWIbpk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzQ3RS8xRTc1MzY1MDU5 NEUxMUVDQTA2MjkyNTZDNEY5QUUwMi81NTZiVWhKamZqUEtYY3RoZHBDYzRaWWh1 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzU1NmJVaEpqZmpQS1hjdGhkcENjNFpZaHVtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzQ3RS8xRTc1MzY1MDU5NEUxMUVDQTA2MjkyNTZDNEY5QUUwMi81NTZiVWhKamZq UEtYY3RoZHBDYzRaWWh1bVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhVEwFPI+3lyfJf3WreYsCF6MehVIscyY3J1wN57hycyn/YHUqnFwD N0V2PxucPHABJ1uN1PN4CC+OhxJE4B7rflw9cFyUwPTmI7WqgNEsvgFreiOV/pgr SZETFXhZIIQwdPibmIOoiKJj4LR2eo4JVrWj4wVJ6UgL9Zx+wFx74gQHT1+3puUx WhECkLASCfLvw2xckmGF3F74CipbcHjKWALE2mm1V9ERWqGBx5gOHX3U4fY3xkRb FjzAKdpKkie0fn76aleqvtSYKgiJVW/QjdFGsBvm+qaMWPJBpM53yEk9f7mjWzG/ OnNK0046C48S+Vhb+9+jFBHbbmHRmTTd -----END CERTIFICATE-----Generated at Wed Jun 4 00:57:00 2025 by rpki-client