$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft File: 5CANRK2dbstocvZTqVhD-yfYR6Q.mft (raw, json) Hash identifier: AK85yKFh4dhjMcxcgz4lDCG4Al1AdyBqCe8VR1EBijY= Subject key identifier: 6B:06:8C:EB:C6:BA:4C:A7:41:A9:84:E2:68:A5:0A:C0:E5:19:83:D1 Authority key identifier: E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 Certificate issuer: /CN=A91C0D37/serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft Manifest number: 0145 Signing time: Sat 07 Jun 2025 03:51:57 +0000 Manifest this update: Sat 07 Jun 2025 03:51:57 +0000 Manifest next update: Sat 14 Jun 2025 03:51:57 +0000 Files and hashes: 1: 5CANRK2dbstocvZTqVhD-yfYR6Q.crl (hash: CUay3AOMg53bVcHIL9F1wT2TWPEC7MFaQ3Tnainhk+M=) 2: 0099AE56536911EE8594503BC4F9AE02.roa (hash: AOPC9WbNcZUf3rw4IBXy2gFnwozs8jTrPTS3eOn6dJw=) 3: C7C45DD643F611EF84151D6FC4F9AE02.roa (hash: SfS9ZnMJ4K7BL+m5tPbXXtGeAg5+tE+/js3vJ/6kex8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 03:51:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37, serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Validity Not Before: Jun 7 03:51:57 2025 GMT Not After : Jun 14 03:51:57 2025 GMT Subject: CN=6843b75d-3722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:08:02:61:cb:ea:de:21:9c:f4:7f:10:44:70: 4b:0b:de:3d:3b:b6:d9:aa:01:93:21:e6:ba:ac:71: b1:09:2e:db:a0:b5:61:8c:e2:b1:09:f7:37:c4:55: 99:1d:87:1a:0d:0a:51:70:d0:79:a0:23:37:a4:6b: 58:bb:6b:69:bf:aa:b1:33:16:84:d6:67:b5:7b:45: e6:ff:82:dd:3f:c9:1a:46:d7:be:f8:52:3a:b2:9a: 67:2d:7d:a7:18:c4:10:89:57:5d:56:80:b1:48:c3: 56:e6:71:47:69:a2:b4:40:87:e4:37:42:70:d0:54: cd:0c:20:da:e9:af:66:c6:a9:42:96:c9:41:31:53: 90:e0:33:ea:0c:d3:f2:e4:37:99:d6:ff:7e:5b:17: 0d:cb:00:e8:03:27:2b:cf:79:62:a9:3e:97:e5:2a: bc:8f:67:48:6e:32:2a:f9:85:72:72:b4:3b:6f:0c: 42:64:0d:38:7c:99:a3:02:92:32:d3:ed:10:7e:33: c3:2c:47:7d:c1:8d:bd:43:53:82:f2:0c:b6:02:9b: 8c:31:96:9e:84:fc:b7:9a:5e:e1:71:21:20:08:77: ca:ef:83:ac:f4:e7:8b:f8:f1:a3:65:b3:e1:1b:8c: 39:6b:6b:6c:90:45:dd:48:81:da:33:25:6f:05:0c: 1e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:06:8C:EB:C6:BA:4C:A7:41:A9:84:E2:68:A5:0A:C0:E5:19:83:D1 X509v3 Authority Key Identifier: keyid:E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ad:28:2a:f2:10:03:8d:0f:49:97:d0:49:64:1c:bc:c9:7c: 5a:69:48:f6:33:62:f3:af:fa:d3:42:6e:4f:8a:f9:e8:73:f9: 75:30:47:e3:8c:c6:ca:02:d1:5c:ff:82:73:05:17:34:be:12: 78:76:a5:29:98:6a:ee:4b:0a:17:09:4d:80:42:2c:e2:c9:2a: cd:ec:9d:81:9c:c2:a9:2f:f4:81:ef:87:39:ca:5d:37:0c:2f: 13:6b:a7:9d:f2:9b:c1:7e:18:18:30:4a:84:dd:a2:0b:b6:b2: 76:42:71:9e:62:38:71:c6:31:40:09:03:95:4a:49:f6:04:7a: 63:a7:9c:f7:e1:17:e7:f0:d1:b7:69:5e:2a:91:f5:f6:94:4d: 61:4e:28:7e:3d:31:90:e6:20:cf:91:5f:6e:1d:97:75:63:7a: 11:4c:6d:3d:9f:15:ed:e7:b4:e3:48:6c:02:f3:57:63:11:bd: f3:8f:d5:ad:6f:f6:d9:ff:fe:2f:0a:c7:6e:c5:7b:d2:a0:4f: 2a:e4:4a:d1:4d:ff:8e:bf:77:a3:1f:73:e3:60:9f:62:c9:d1: fb:47:7e:d2:41:06:68:88:de:c3:9e:b7:d5:f6:01:1c:f5:d1: 95:14:ed:5b:07:9e:4b:d9:fe:17:25:9d:dd:aa:2a:f6:ab:3c: c2:53:2b:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKEU0MjAwRDQ0QUQ5RDZFQ0I2ODcyRjY1M0E5NTg0M0ZC MjdEODQ3QTQwHhcNMjUwNjA3MDM1MTU3WhcNMjUwNjE0MDM1MTU3WjAYMRYwFAYD VQQDEw02ODQzYjc1ZC0zNzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0QgCYcvq3iGc9H8QRHBLC949O7bZqgGTIea6rHGxCS7boLVhjOKxCfc3xFWZ HYcaDQpRcNB5oCM3pGtYu2tpv6qxMxaE1me1e0Xm/4LdP8kaRte++FI6sppnLX2n GMQQiVddVoCxSMNW5nFHaaK0QIfkN0Jw0FTNDCDa6a9mxqlClslBMVOQ4DPqDNPy 5DeZ1v9+WxcNywDoAycrz3liqT6X5Sq8j2dIbjIq+YVycrQ7bwxCZA04fJmjApIy 0+0QfjPDLEd9wY29Q1OC8gy2ApuMMZaehPy3ml7hcSEgCHfK74Os9OeL+PGjZbPh G4w5a2tskEXdSIHaMyVvBQweNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGsGjOvG ukynQamE4milCsDlGYPRMB8GA1UdIwQYMBaAFOQgDUStnW7LaHL2U6lYQ/sn2Eek MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wNUVFQ0Q4NjUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJzdG9jdlpUcVZoRC15ZllS NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVDQU5SSzJkYnN0b2N2WlRxVmhELXlmWVI2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wNUVFQ0Q4NjUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJz dG9jdlpUcVZoRC15ZllSNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqrSgq8hADjQ9Jl9BJZBy8yXxaaUj2M2Lzr/rTQm5Pivnoc/l1MEfj jMbKAtFc/4JzBRc0vhJ4dqUpmGruSwoXCU2AQiziySrN7J2BnMKpL/SB74c5yl03 DC8Ta6ed8pvBfhgYMEqE3aILtrJ2QnGeYjhxxjFACQOVSkn2BHpjp5z34Rfn8NG3 aV4qkfX2lE1hTih+PTGQ5iDPkV9uHZd1Y3oRTG09nxXt57TjSGwC81djEb3zj9Wt b/bZ//4vCsduxXvSoE8q5ErRTf+Ov3ejH3PjYJ9iydH7R37SQQZoiN7DnrfV9gEc 9dGVFO1bB55L2f4XJZ3dqir2qzzCUytU -----END CERTIFICATE-----Generated at Sun Jun 8 19:15:31 2025 by rpki-client