$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft File: 5MWJuJPSconPhG3wWt-1lgNkKP0.mft (raw, json) Hash identifier: +yH6cKfE9i0UFytB5v5QrELUFnT+gWe2rJm6UWGsXaQ= Subject key identifier: 47:B0:34:A3:D7:E0:7E:C5:11:34:9B:A4:B4:51:37:65:80:CE:E1:21 Authority key identifier: E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD Certificate issuer: /CN=A91B8AC8/serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft Manifest number: 62 Signing time: Sun 01 Jun 2025 06:51:19 +0000 Manifest this update: Sun 01 Jun 2025 06:51:18 +0000 Manifest next update: Sun 08 Jun 2025 06:51:18 +0000 Files and hashes: 1: 5MWJuJPSconPhG3wWt-1lgNkKP0.crl (hash: QL8JczDUqd4TwGR5BffhX59IZq5AQPG8tNVS1WpQhOo=) 2: 8FFA61D4B13D11EF9EFDE433C4F9AE02.roa (hash: EhNDnWOJJGSPSxGl0lercQlAl3yvPmyKkzL2DPkH1sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:51:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8AC8, serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD Validity Not Before: Jun 1 06:51:18 2025 GMT Not After : Jun 8 06:51:18 2025 GMT Subject: CN=683bf867-64c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:58:fd:c0:39:97:87:3a:26:91:0a:b9:0b:85: e7:8e:d9:83:79:60:15:77:d9:74:5c:dd:18:6b:48: 82:aa:01:40:40:15:6d:ca:58:34:95:f3:27:ca:8b: 04:65:54:be:30:76:d7:62:85:9c:ad:2a:86:58:76: 07:2f:00:d7:5b:c9:6a:fe:af:27:79:cd:6b:bf:15: d2:59:61:a8:cf:fd:ca:ac:05:11:4c:1f:c6:d5:dc: 51:49:47:b9:b3:0f:19:fe:29:8a:c5:36:4c:93:1d: 2a:81:eb:b0:93:8f:5e:f0:67:49:ee:8f:c7:1a:df: 02:f5:27:1d:5f:19:c6:22:35:22:84:71:7f:04:ea: 23:e8:90:eb:cc:94:02:b3:4c:fd:4a:0f:d9:8a:83: 4c:31:3b:2b:82:3d:fc:54:b9:50:3e:72:f2:74:70: 98:4f:0d:84:ee:b1:29:b8:80:bf:b3:47:97:f4:5d: 45:26:67:1a:31:4e:c0:42:52:0f:1a:a9:26:ea:7b: 02:10:14:18:c2:3f:e3:f5:b4:6a:56:60:67:60:04: ac:f7:f9:90:fe:cf:d9:66:5e:f6:60:99:28:a3:9c: 35:e0:c8:00:19:ad:8d:0d:7b:7a:50:90:eb:85:26: 16:cf:14:cf:fb:ae:60:48:92:21:64:b6:ea:b6:63: 05:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B0:34:A3:D7:E0:7E:C5:11:34:9B:A4:B4:51:37:65:80:CE:E1:21 X509v3 Authority Key Identifier: keyid:E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:3a:c2:a8:00:2b:38:52:16:da:20:2e:db:4f:a1:d3:70:6f: 63:b5:df:ed:ca:db:c3:7b:20:d8:2b:17:02:c0:00:73:12:eb: a8:4e:69:9c:f0:dc:4b:35:65:df:1d:6a:86:64:e2:f8:17:19: c9:fe:79:7a:c6:f2:49:d3:6b:1a:66:6c:46:c2:fb:8f:1a:b7: c1:32:7e:6f:fb:c1:a7:c3:66:7b:f9:b6:8f:41:68:90:5c:4d: a8:40:30:cb:9b:8e:b3:b8:5e:53:f2:d1:5f:89:2d:43:10:96: 42:5e:d3:84:75:17:92:80:32:b5:c1:23:2a:52:1e:fe:13:b1: 9b:0d:b9:29:45:bd:12:75:27:85:9d:80:b4:7c:cd:62:8d:90: 9a:a9:d6:75:c8:18:94:6f:79:18:3b:cc:ab:39:1c:53:f1:92: 53:c1:37:58:61:53:17:46:50:e9:84:25:9e:a7:74:cc:06:94: 1f:43:48:ff:06:c2:77:2f:c9:fd:b5:1f:64:00:e0:d8:b4:23: 63:aa:06:d4:5b:a5:4e:8c:ea:74:aa:a2:c7:73:bc:8f:4f:74: 2d:31:ff:72:bc:ac:32:2d:19:b0:1f:83:2e:59:63:4e:7f:1c: c4:3d:8e:5c:a4:01:2a:31:49:6d:0e:f8:fa:c8:7e:dc:c5:c7: 8c:41:c9:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEFDODExMC8GA1UEBRMoRTRDNTg5Qjg5M0QyNzI4OUNGODQ2REYwNUFERkI1OTYw MzY0MjhGRDAeFw0yNTA2MDEwNjUxMThaFw0yNTA2MDgwNjUxMThaMBgxFjAUBgNV BAMTDTY4M2JmODY3LTY0YzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFWP3AOZeHOiaRCrkLheeO2YN5YBV32XRc3RhrSIKqAUBAFW3KWDSV8yfKiwRl VL4wdtdihZytKoZYdgcvANdbyWr+ryd5zWu/FdJZYajP/cqsBRFMH8bV3FFJR7mz Dxn+KYrFNkyTHSqB67CTj17wZ0nuj8ca3wL1Jx1fGcYiNSKEcX8E6iPokOvMlAKz TP1KD9mKg0wxOyuCPfxUuVA+cvJ0cJhPDYTusSm4gL+zR5f0XUUmZxoxTsBCUg8a qSbqewIQFBjCP+P1tGpWYGdgBKz3+ZD+z9lmXvZgmSijnDXgyAAZrY0Ne3pQkOuF JhbPFM/7rmBIkiFktuq2YwVRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUR7A0o9fg fsURNJuktFE3ZYDO4SEwHwYDVR0jBBgwFoAU5MWJuJPSconPhG3wWt+1lgNkKP0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4QUM4L0UxMkQxMDUyQjEz QzExRUZBQUY5RDczMUM0RjlBRTAyLzVNV0p1SlBTY29uUGhHM3dXdC0xbGdOa0tQ MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNU1XSnVKUFNjb25QaEczd1d0LTFsZ05rS1AwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 QUM4L0UxMkQxMDUyQjEzQzExRUZBQUY5RDczMUM0RjlBRTAyLzVNV0p1SlBTY29u UGhHM3dXdC0xbGdOa0tQMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACE6wqgAKzhSFtogLttPodNwb2O13+3K28N7INgrFwLAAHMS66hOaZzw 3Es1Zd8daoZk4vgXGcn+eXrG8knTaxpmbEbC+48at8Eyfm/7wafDZnv5to9BaJBc TahAMMubjrO4XlPy0V+JLUMQlkJe04R1F5KAMrXBIypSHv4TsZsNuSlFvRJ1J4Wd gLR8zWKNkJqp1nXIGJRveRg7zKs5HFPxklPBN1hhUxdGUOmEJZ6ndMwGlB9DSP8G wncvyf21H2QA4Ni0I2OqBtRbpU6M6nSqosdzvI9PdC0x/3K8rDItGbAfgy5ZY05/ HMQ9jlykASoxSW0O+PrIftzFx4xByWw= -----END CERTIFICATE-----Generated at Mon Jun 2 22:05:59 2025 by rpki-client