$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft File: 5fjJ4D7R71BndlYU2mtRJq1vyz4.mft (raw, json) Hash identifier: b4Gtj1kOy/BRMKoaANgf6f+QXa67qgj7t8bWUT7rphw= Subject key identifier: B2:F4:0D:9E:4C:35:28:AD:4A:45:05:86:D6:7B:67:31:F4:1F:D6:A4 Authority key identifier: E5:F8:C9:E0:3E:D1:EF:50:67:76:56:14:DA:6B:51:26:AD:6F:CB:3E Certificate issuer: /CN=A91A6548/serialNumber=E5F8C9E03ED1EF5067765614DA6B5126AD6FCB3E Certificate serial: 0505 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5fjJ4D7R71BndlYU2mtRJq1vyz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft Manifest number: 0501 Signing time: Fri 30 May 2025 23:52:21 +0000 Manifest this update: Fri 30 May 2025 23:52:21 +0000 Manifest next update: Fri 06 Jun 2025 23:52:21 +0000 Files and hashes: 1: 5fjJ4D7R71BndlYU2mtRJq1vyz4.crl (hash: 900vfoSG6cioTrmfpeL+RXS6Mq9GpsvwQ5wEvQC1C5I=) 2: E6EC55EE0D7E11EC94917272C4F9AE02.roa (hash: ZFPLjWKhXylD4Z8vt5rlOjVNLoBd2B0qS7n8g9uJPA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.crl rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5fjJ4D7R71BndlYU2mtRJq1vyz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:52:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1285 (0x505) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6548, serialNumber=E5F8C9E03ED1EF5067765614DA6B5126AD6FCB3E Validity Not Before: May 30 23:52:21 2025 GMT Not After : Jun 6 23:52:21 2025 GMT Subject: CN=683a44b5-fc9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2c:2f:34:bf:a9:4d:bf:19:b2:f6:e0:64:f0: dc:1f:98:f4:33:15:2f:7d:dd:a1:af:c7:67:3e:e1: 1f:2c:44:37:bf:c0:d4:0e:c0:e4:b8:48:bd:f0:62: 73:63:45:9e:67:5b:ca:83:95:6b:7a:c3:03:cd:0c: c8:79:bf:98:99:d3:5b:75:f2:4d:28:85:b8:96:cc: 66:52:0a:51:d2:90:e0:88:d7:a3:b8:d8:dc:83:d0: ac:40:7e:a5:2e:15:ea:ac:66:05:47:ba:4d:21:e1: bc:c3:3b:37:ad:d6:5d:d3:a1:52:89:e8:e0:ae:b8: 9a:d7:4d:ab:20:ad:ea:89:60:93:16:db:5c:f4:f2: 11:5b:e2:77:b2:40:2c:7e:48:23:60:41:09:47:99: cd:d1:da:78:ed:59:41:31:34:7d:2c:77:75:c7:d6: 37:85:8e:4d:83:91:1e:76:74:65:90:7e:38:ca:6a: 37:2b:2b:24:57:0f:14:96:7f:c8:12:6c:25:bd:2a: 6c:f3:50:61:57:b5:1d:7a:59:0d:da:63:c3:82:7b: d5:09:3f:97:5e:17:5f:c7:61:f6:da:a8:a5:1b:07: 21:83:b5:8e:dd:64:23:db:22:a6:df:2c:6f:21:75: 12:b6:b5:bc:75:16:9c:a9:26:c7:cb:b5:1e:50:f8: 3c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F4:0D:9E:4C:35:28:AD:4A:45:05:86:D6:7B:67:31:F4:1F:D6:A4 X509v3 Authority Key Identifier: keyid:E5:F8:C9:E0:3E:D1:EF:50:67:76:56:14:DA:6B:51:26:AD:6F:CB:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5fjJ4D7R71BndlYU2mtRJq1vyz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:6e:52:ea:af:56:12:58:de:70:f8:6b:fe:66:c1:7d:e4:57: 13:f3:2d:be:3e:30:b9:1c:f1:33:b1:0f:ed:5b:b0:ef:51:44: 87:80:18:75:24:4d:0f:0a:c4:7c:78:36:77:49:b8:bd:ab:79: 49:96:67:82:04:02:b2:19:37:4c:ba:2d:57:91:8a:97:e3:0b: a7:46:44:e9:a8:1d:8b:92:c0:9c:48:b4:af:c7:90:7b:2a:ce: ae:60:cb:3a:10:6b:f2:e3:3a:ee:5c:99:69:33:11:f8:27:2a: 2b:8d:76:01:93:a6:7b:59:c8:15:96:90:d9:5d:b6:33:a5:6e: aa:9a:fa:cc:6d:f4:83:43:71:b6:33:7e:78:a6:4c:2e:0c:1e: f8:21:47:f2:92:c5:2c:12:d5:60:d6:6a:fe:6b:d3:1d:51:e0: a5:35:cb:28:85:1f:94:62:2f:ff:6b:0b:ad:67:d6:cb:71:29: 5b:ec:b3:5a:b1:cc:65:f6:b2:4e:5d:37:30:3b:84:3d:5b:d4: d1:41:74:62:15:79:1f:f3:7c:e6:45:44:ac:29:13:01:ed:1b: 30:08:1e:f5:fd:2f:88:28:18:21:53:bb:1c:e9:5a:b7:37:a9: 17:0e:b0:df:da:6a:d1:56:9a:28:9a:5a:28:9c:0d:e2:12:9b: b3:37:81:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY1NDgxMTAvBgNVBAUTKEU1RjhDOUUwM0VEMUVGNTA2Nzc2NTYxNERBNkI1MTI2 QUQ2RkNCM0UwHhcNMjUwNTMwMjM1MjIxWhcNMjUwNjA2MjM1MjIxWjAYMRYwFAYD VQQDEw02ODNhNDRiNS1mYzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmywvNL+pTb8ZsvbgZPDcH5j0MxUvfd2hr8dnPuEfLEQ3v8DUDsDkuEi98GJz Y0WeZ1vKg5VresMDzQzIeb+YmdNbdfJNKIW4lsxmUgpR0pDgiNejuNjcg9CsQH6l LhXqrGYFR7pNIeG8wzs3rdZd06FSiejgrria102rIK3qiWCTFttc9PIRW+J3skAs fkgjYEEJR5nN0dp47VlBMTR9LHd1x9Y3hY5Ng5EednRlkH44ymo3KyskVw8Uln/I EmwlvSps81BhV7UdelkN2mPDgnvVCT+XXhdfx2H22qilGwchg7WO3WQj2yKm3yxv IXUStrW8dRacqSbHy7UeUPg8NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLL0DZ5M NSitSkUFhtZ7ZzH0H9akMB8GA1UdIwQYMBaAFOX4yeA+0e9QZ3ZWFNprUSatb8s+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjU0OC83RENGMjQ4QTBE N0MxMUVDQkFCREQ1NkRDNEY5QUUwMi81ZmpKNEQ3UjcxQm5kbFlVMm10UkpxMXZ5 ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVmako0RDdSNzFCbmRsWVUybXRSSnExdnl6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjU0OC83RENGMjQ4QTBEN0MxMUVDQkFCREQ1NkRDNEY5QUUwMi81ZmpKNEQ3Ujcx Qm5kbFlVMm10UkpxMXZ5ejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKblLqr1YSWN5w+Gv+ZsF95FcT8y2+PjC5HPEzsQ/tW7DvUUSHgBh1 JE0PCsR8eDZ3Sbi9q3lJlmeCBAKyGTdMui1XkYqX4wunRkTpqB2LksCcSLSvx5B7 Ks6uYMs6EGvy4zruXJlpMxH4JyorjXYBk6Z7WcgVlpDZXbYzpW6qmvrMbfSDQ3G2 M354pkwuDB74IUfyksUsEtVg1mr+a9MdUeClNcsohR+UYi//awutZ9bLcSlb7LNa scxl9rJOXTcwO4Q9W9TRQXRiFXkf83zmRUSsKRMB7RswCB71/S+IKBghU7sc6Vq3 N6kXDrDf2mrRVpoomloonA3iEpuzN4HO -----END CERTIFICATE-----Generated at Sat May 31 16:57:51 2025 by rpki-client