$ rpki-client -vvf rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft File: 5wYdsiKDjeaKk84h7ykbBVQthyY.mft (raw, json) Hash identifier: SlLDzbY+tSrER+ztsURyWgig272/dCJnaPbQVOvDonw= Subject key identifier: 10:6C:4A:98:82:BA:B5:D0:6B:DD:C7:3D:60:79:3A:E7:A2:FF:BE:D8 Authority key identifier: E7:06:1D:B2:22:83:8D:E6:8A:93:CE:21:EF:29:1B:05:54:2D:87:26 Certificate issuer: /CN=A919D3C2/serialNumber=E7061DB222838DE68A93CE21EF291B05542D8726 Certificate serial: 1AFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wYdsiKDjeaKk84h7ykbBVQthyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft Manifest number: 1AF1 Signing time: Fri 30 May 2025 16:29:13 +0000 Manifest this update: Fri 30 May 2025 16:29:13 +0000 Manifest next update: Fri 06 Jun 2025 16:29:13 +0000 Files and hashes: 1: 5wYdsiKDjeaKk84h7ykbBVQthyY.crl (hash: xG4bHEZ/WEef47I3uTo+f7KtbSQXM6uDhSHx8SkSNxk=) 2: A6B5F55C23F911E79BE44454C4F9AE02.roa (hash: F2ak73nonVZ20QRrcSfPPZHYy8EZQeLDHTDgpyvlwUk=) 3: EE4AB71024A211F085E5B916C4F9AE02.roa (hash: J7B5RwF0Uei6GB3vuCg/6lhHS2a4ATOJhVhMlxzGnKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.crl rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wYdsiKDjeaKk84h7ykbBVQthyY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:29:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6908 (0x1afc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D3C2, serialNumber=E7061DB222838DE68A93CE21EF291B05542D8726 Validity Not Before: May 30 16:29:13 2025 GMT Not After : Jun 6 16:29:13 2025 GMT Subject: CN=6839dcd9-1b54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d2:ae:77:60:a7:37:3e:09:d1:a4:66:04:38: ca:f6:f5:88:3a:77:21:92:00:f2:55:f6:98:11:0e: 11:b2:0f:97:e9:ea:a6:4f:3b:52:dd:5c:51:46:43: ce:e5:de:7c:3c:5b:1d:f9:69:00:62:02:7b:94:63: e7:00:8a:2e:d9:7f:b0:77:2f:f7:68:74:92:b6:54: cf:9c:d0:a1:e2:85:26:1f:86:94:4c:e5:7f:7e:39: 3f:95:6d:88:61:fc:f4:88:45:5d:03:82:81:2b:a7: 99:19:c5:55:91:05:d6:74:7f:3d:6b:8d:dd:32:be: f8:15:ce:28:e3:c6:03:51:49:f8:94:63:f3:75:e9: 34:4f:39:e0:f4:a6:f5:bc:88:71:48:02:3f:2c:18: cd:37:dc:04:2f:59:a9:f8:ac:b2:41:44:ca:c1:44: ac:cb:30:d2:fb:52:08:e4:13:be:5f:f4:dd:09:a9: bd:09:3e:aa:9e:a4:1e:b8:01:44:e2:6e:e3:78:7d: c5:9e:f6:b3:e1:64:13:eb:b5:6c:66:9e:4a:cd:74: 00:d8:e0:fc:5b:6b:d5:13:70:f1:ea:95:e5:46:a9: 18:00:b0:5b:b5:1f:b4:50:e6:98:fe:32:71:e3:84: 4f:e5:62:92:0f:83:58:03:d7:cb:7b:70:2f:45:61: d1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6C:4A:98:82:BA:B5:D0:6B:DD:C7:3D:60:79:3A:E7:A2:FF:BE:D8 X509v3 Authority Key Identifier: keyid:E7:06:1D:B2:22:83:8D:E6:8A:93:CE:21:EF:29:1B:05:54:2D:87:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wYdsiKDjeaKk84h7ykbBVQthyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:05:20:01:66:3f:7f:32:e7:8b:e7:ac:b6:8c:9e:6f:c6:85: 90:58:20:c6:9e:4b:cd:d4:20:1b:7c:be:0c:03:e4:b1:64:3b: 7f:4e:59:5f:4b:17:41:84:98:b9:2e:72:b2:f4:51:35:81:bf: 4f:d6:93:08:3c:4b:41:da:d7:99:ea:cf:0c:e7:4c:bd:08:6d: 46:38:7e:71:37:70:8b:ab:32:72:ba:7f:7e:3a:61:1e:51:f5: 19:74:38:59:69:92:12:5d:c0:f3:5d:54:b6:00:9b:e0:28:73: da:3c:f7:db:56:87:a6:d5:bd:52:8d:2b:96:3d:3d:ec:7d:63: 92:26:8e:7d:38:b0:08:f2:0e:8b:55:87:52:77:cb:f7:03:16: 59:b7:1b:fc:f5:bd:56:89:85:75:bd:55:a5:a6:5a:6c:cd:a6: 34:5c:93:dd:5e:b9:be:f4:d6:55:f0:88:02:98:79:b1:2b:a8: b6:25:54:11:a6:78:ab:c2:0d:79:8b:ac:f7:86:87:df:87:74: b0:b5:e8:64:78:76:70:76:cb:54:f0:4a:f8:a0:11:61:6c:bd: e3:24:cc:6d:fb:7f:63:ed:01:d3:50:4d:85:1b:66:4b:6e:06: e3:9f:61:2e:8b:27:c5:b9:aa:40:23:c9:40:9a:21:24:8d:f2: bd:4c:ef:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQzQzIxMTAvBgNVBAUTKEU3MDYxREIyMjI4MzhERTY4QTkzQ0UyMUVGMjkxQjA1 NTQyRDg3MjYwHhcNMjUwNTMwMTYyOTEzWhcNMjUwNjA2MTYyOTEzWjAYMRYwFAYD VQQDEw02ODM5ZGNkOS0xYjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutKud2CnNz4J0aRmBDjK9vWIOnchkgDyVfaYEQ4Rsg+X6eqmTztS3VxRRkPO 5d58PFsd+WkAYgJ7lGPnAIou2X+wdy/3aHSStlTPnNCh4oUmH4aUTOV/fjk/lW2I Yfz0iEVdA4KBK6eZGcVVkQXWdH89a43dMr74Fc4o48YDUUn4lGPzdek0Tzng9Kb1 vIhxSAI/LBjNN9wEL1mp+KyyQUTKwUSsyzDS+1II5BO+X/TdCam9CT6qnqQeuAFE 4m7jeH3Fnvaz4WQT67VsZp5KzXQA2OD8W2vVE3Dx6pXlRqkYALBbtR+0UOaY/jJx 44RP5WKSD4NYA9fLe3AvRWHRSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBsSpiC urXQa93HPWB5Ouei/77YMB8GA1UdIwQYMBaAFOcGHbIig43mipPOIe8pGwVULYcm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDNDMi83MkQ3Q0ZENjIz RjgxMUU3OTU4OUQ3NTJDNEY5QUUwMi81d1lkc2lLRGplYUtrODRoN3lrYkJWUXRo eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV3WWRzaUtEamVhS2s4NGg3eWtiQlZRdGh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDNDMi83MkQ3Q0ZENjIzRjgxMUU3OTU4OUQ3NTJDNEY5QUUwMi81d1lkc2lLRGpl YUtrODRoN3lrYkJWUXRoeVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdBSABZj9/MueL56y2jJ5vxoWQWCDGnkvN1CAbfL4MA+SxZDt/Tllf SxdBhJi5LnKy9FE1gb9P1pMIPEtB2teZ6s8M50y9CG1GOH5xN3CLqzJyun9+OmEe UfUZdDhZaZISXcDzXVS2AJvgKHPaPPfbVoem1b1SjSuWPT3sfWOSJo59OLAI8g6L VYdSd8v3AxZZtxv89b1WiYV1vVWlplpszaY0XJPdXrm+9NZV8IgCmHmxK6i2JVQR pnirwg15i6z3hoffh3SwtehkeHZwdstU8Er4oBFhbL3jJMxt+39j7QHTUE2FG2ZL bgbjn2EuiyfFuapAI8lAmiEkjfK9TO9x -----END CERTIFICATE-----Generated at Sat May 31 17:45:04 2025 by rpki-client