$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft File: 5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft (raw, json) Hash identifier: 76inlWwNd4dVdIVqANBdyMaTXuIqlh2pbq/03SbO7CA= Subject key identifier: C8:A6:EA:2A:24:56:36:AF:7F:B7:F2:E5:74:7F:E9:96:CA:2A:A9:E2 Authority key identifier: E6:AC:F4:F5:94:A4:43:8F:89:7A:ED:AA:B4:A3:D3:8C:86:5C:CE:22 Certificate issuer: /CN=A91B6395/serialNumber=E6ACF4F594A4438F897AEDAAB4A3D38C865CCE22 Certificate serial: 0782 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft Manifest number: 0778 Signing time: Fri 30 May 2025 21:42:04 +0000 Manifest this update: Fri 30 May 2025 21:42:04 +0000 Manifest next update: Fri 06 Jun 2025 21:42:04 +0000 Files and hashes: 1: 5qz09ZSkQ4-Jeu2qtKPTjIZcziI.crl (hash: QLTF2SWpvOt14T/F/ojYjV6QN1XBr0V+tgqEp1voCRc=) 2: 09664BCE144D11EBA0AF3555C4F9AE02.roa (hash: rdUSXytbXM84CWenGOGoRob5nCuOJZnNVIkvDgmUqS4=) 3: 08CE75A6144D11EBA0AF3555C4F9AE02.roa (hash: Ey+1oSHacaQI23omTKC4i8oGovoWsEThpx7tq0kzMuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.crl rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1922 (0x782) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6395, serialNumber=E6ACF4F594A4438F897AEDAAB4A3D38C865CCE22 Validity Not Before: May 30 21:42:04 2025 GMT Not After : Jun 6 21:42:04 2025 GMT Subject: CN=683a262c-0e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:46:68:54:6e:ff:46:14:12:b1:3f:56:6b:0e: 77:e4:c1:17:dc:49:89:50:33:e9:86:f0:15:7a:85: 43:e3:3e:ba:99:78:5e:6d:d7:6e:30:8a:e9:8c:3b: 64:e0:b2:ca:d4:23:1c:cc:53:70:d3:23:ba:41:9a: bb:f1:91:b1:cd:ff:34:94:45:90:6a:87:d8:e6:03: 70:b1:14:74:8a:62:48:24:3d:2b:5f:83:b1:ce:71: a5:32:33:ba:cc:3e:75:fe:3e:da:21:5f:f6:49:4c: 68:f6:b2:06:e2:9b:e7:db:b6:45:e7:03:7f:e4:df: 38:ce:2d:77:03:70:4b:56:f0:87:56:61:b7:d0:51: 43:6d:aa:e6:39:03:aa:c1:0c:b6:60:21:fd:0d:8a: 66:9f:48:6f:d5:36:27:08:b9:39:a5:dd:6e:01:f3: 7d:4a:e4:16:7c:8a:24:f7:71:7d:0b:e4:c9:d6:44: 6a:bc:83:0f:f4:1e:71:9d:98:84:b8:6c:22:74:c2: d3:67:72:df:a0:67:22:26:29:c2:6b:dc:d7:cb:99: 78:e0:44:23:a1:81:e7:c8:3e:da:ec:42:e5:19:21: 74:d7:79:63:27:4e:35:29:3e:6f:f6:f4:ae:a3:0b: 92:34:07:50:a4:e6:ca:c7:dc:af:bd:b1:15:b7:f3: 6d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A6:EA:2A:24:56:36:AF:7F:B7:F2:E5:74:7F:E9:96:CA:2A:A9:E2 X509v3 Authority Key Identifier: keyid:E6:AC:F4:F5:94:A4:43:8F:89:7A:ED:AA:B4:A3:D3:8C:86:5C:CE:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:ba:71:5b:af:9d:05:c2:bd:68:25:c5:5b:7f:9e:34:f5:0b: c3:7a:70:c1:7b:b5:f7:79:e8:d3:ba:1e:1c:48:00:33:9f:4b: 12:6e:31:16:24:e8:9d:fc:ee:c8:aa:14:82:a2:23:80:06:8d: 01:3e:8f:11:04:b7:51:1a:93:cb:00:c5:c6:0d:d8:6a:ce:48: c1:b7:74:dd:56:ed:35:0e:1f:17:e4:92:4e:f4:ca:55:17:ed: 54:d0:bc:80:5b:a3:0d:ce:73:18:cc:28:71:98:7a:fe:66:3a: 10:89:04:8e:c6:32:aa:2c:25:8d:73:70:2c:7e:9e:32:2f:5b: 15:f2:c1:58:ec:e2:7c:35:4a:93:d0:b2:58:80:71:23:b0:ff: 9e:ed:06:e0:a0:0c:a0:12:ea:73:ee:23:2e:c9:42:00:76:2d: e8:44:5d:9b:22:1a:cc:be:b0:30:55:25:a2:d7:62:ce:30:5d: 20:4c:b8:1d:73:9d:30:94:49:d3:66:06:70:f4:97:ec:a6:ba: 05:40:a7:41:62:9b:2d:39:26:f5:76:50:46:fd:33:d0:25:db: 00:af:77:81:b2:23:7e:7b:85:d9:13:04:10:79:6c:9a:7d:97: cf:b5:32:38:d8:9e:4b:e8:ff:17:7a:40:24:8b:d0:96:55:98: a6:a0:09:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYzOTUxMTAvBgNVBAUTKEU2QUNGNEY1OTRBNDQzOEY4OTdBRURBQUI0QTNEMzhD ODY1Q0NFMjIwHhcNMjUwNTMwMjE0MjA0WhcNMjUwNjA2MjE0MjA0WjAYMRYwFAYD VQQDEw02ODNhMjYyYy0wZTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0ZoVG7/RhQSsT9Waw535MEX3EmJUDPphvAVeoVD4z66mXhebdduMIrpjDtk 4LLK1CMczFNw0yO6QZq78ZGxzf80lEWQaofY5gNwsRR0imJIJD0rX4OxznGlMjO6 zD51/j7aIV/2SUxo9rIG4pvn27ZF5wN/5N84zi13A3BLVvCHVmG30FFDbarmOQOq wQy2YCH9DYpmn0hv1TYnCLk5pd1uAfN9SuQWfIok93F9C+TJ1kRqvIMP9B5xnZiE uGwidMLTZ3LfoGciJinCa9zXy5l44EQjoYHnyD7a7ELlGSF013ljJ041KT5v9vSu owuSNAdQpObKx9yvvbEVt/NtrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMim6iok Vjavf7fy5XR/6ZbKKqniMB8GA1UdIwQYMBaAFOas9PWUpEOPiXrtqrSj04yGXM4i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjM5NS9EQzQ1NjU3ODE0 NEExMUVCOTQwNzY2NTJDNEY5QUUwMi81cXowOVpTa1E0LUpldTJxdEtQVGpJWmN6 aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVxejA5WlNrUTQtSmV1MnF0S1BUaklaY3ppSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjM5NS9EQzQ1NjU3ODE0NEExMUVCOTQwNzY2NTJDNEY5QUUwMi81cXowOVpTa1E0 LUpldTJxdEtQVGpJWmN6aUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhunFbr50Fwr1oJcVbf5409QvDenDBe7X3eejTuh4cSAAzn0sSbjEW JOid/O7IqhSCoiOABo0BPo8RBLdRGpPLAMXGDdhqzkjBt3TdVu01Dh8X5JJO9MpV F+1U0LyAW6MNznMYzChxmHr+ZjoQiQSOxjKqLCWNc3Asfp4yL1sV8sFY7OJ8NUqT 0LJYgHEjsP+e7QbgoAygEupz7iMuyUIAdi3oRF2bIhrMvrAwVSWi12LOMF0gTLgd c50wlEnTZgZw9JfsproFQKdBYpstOSb1dlBG/TPQJdsAr3eBsiN+e4XZEwQQeWya fZfPtTI42J5L6P8XekAki9CWVZimoAm9 -----END CERTIFICATE-----Generated at Sat May 31 17:22:11 2025 by rpki-client