$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft File: 5CK_AmFA0gPv1r_eruJoqosEZtU.mft (raw, json) Hash identifier: xZjbl1OaJnfs5J6J36Yz1UwFlw3sTTA/QRR1iBGYU4I= Subject key identifier: 4C:87:B7:4F:12:C2:28:5C:D0:CF:58:5D:83:E9:A9:3A:E9:9E:B5:33 Authority key identifier: E4:22:BF:02:61:40:D2:03:EF:D6:BF:DE:AE:E2:68:AA:8B:04:66:D5 Certificate issuer: /CN=A91C3174/serialNumber=E422BF026140D203EFD6BFDEAEE268AA8B0466D5 Certificate serial: 02CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft Manifest number: 02CB Signing time: Sat 07 Jun 2025 01:25:54 +0000 Manifest this update: Sat 07 Jun 2025 01:25:54 +0000 Manifest next update: Sat 14 Jun 2025 01:25:54 +0000 Files and hashes: 1: 5CK_AmFA0gPv1r_eruJoqosEZtU.crl (hash: ayBpCCBLfF32WeG915wLrFxHnuZ0PznbIcYPjqOVhd8=) 2: 9A4B6146EED111EC9BDD4C49C4F9AE02.roa (hash: 5l/0i4Mj7CkFahUXGxLru5zWwX7qpr1hA77tgI5t7fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.crl rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 01:25:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 719 (0x2cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3174, serialNumber=E422BF026140D203EFD6BFDEAEE268AA8B0466D5 Validity Not Before: Jun 7 01:25:54 2025 GMT Not After : Jun 14 01:25:54 2025 GMT Subject: CN=68439522-bd38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ea:f6:2b:3b:ae:74:71:60:f8:a1:1c:16:17: 14:c9:f9:e4:46:89:20:17:fe:79:ef:6c:c6:24:e2: 8a:20:6f:42:58:d4:e6:ac:a9:0b:a4:61:b1:0d:ae: a4:b7:5a:73:e7:ea:1a:8a:fd:56:59:0f:ac:2a:0f: 56:1f:a6:81:60:0f:f1:0a:55:a8:50:85:41:99:e5: 96:85:fa:4f:9c:d3:8d:ea:de:b2:88:9b:b5:5e:5a: 82:be:ee:e0:cd:6d:6f:9f:1c:d1:fe:eb:19:cb:17: 49:dc:d0:bb:5c:93:7b:01:ca:57:ea:02:38:44:ba: bb:db:22:1a:69:ef:cf:45:14:02:59:ba:4d:66:ee: c7:d0:c0:a4:47:75:ab:21:fa:c0:ed:36:ee:de:d5: 71:d5:5d:02:60:a5:c5:a8:bf:a9:80:43:bb:c2:31: c2:51:d8:0e:7d:36:ee:df:d8:ba:43:08:e5:03:16: 40:34:98:d0:b0:6c:81:7a:e4:cc:85:4f:8a:e9:ef: f3:bc:2c:f9:ab:fb:7d:c6:d9:b6:2e:15:7c:46:05: a0:2f:0d:83:dc:63:87:39:8b:99:f9:61:a2:19:d3: cf:52:5e:c5:b0:dc:64:27:2b:6b:d2:58:12:e9:0e: 53:43:98:ae:ab:45:fb:d2:4d:a3:d4:31:2a:80:49: 48:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:87:B7:4F:12:C2:28:5C:D0:CF:58:5D:83:E9:A9:3A:E9:9E:B5:33 X509v3 Authority Key Identifier: keyid:E4:22:BF:02:61:40:D2:03:EF:D6:BF:DE:AE:E2:68:AA:8B:04:66:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:7b:d4:c5:cc:8b:b7:62:83:95:05:54:9a:0f:b8:06:c1:61: 8b:95:34:4a:b8:9b:a2:8e:f2:7c:38:6a:6e:65:01:20:9c:42: 5b:37:dd:d4:56:44:6c:ec:e9:8b:62:7a:60:5a:37:df:5d:67: 87:ad:e0:42:75:10:d4:08:c7:bd:93:8c:44:fd:80:4f:d7:48: 96:19:9c:07:63:b6:cd:46:0e:6f:a2:14:67:74:e9:3c:42:ff: 2f:91:5c:fa:ad:a5:ed:72:06:5b:ac:c3:50:97:df:e6:90:8f: d4:4b:08:53:61:1d:e3:c5:3b:00:78:0c:95:d7:78:39:f1:b9: 4b:59:f5:bb:f9:b7:e9:f3:22:de:8c:7d:c2:0f:c9:e9:43:e0: 80:62:b9:4c:d4:b8:43:c1:ed:cd:4e:33:0e:ce:6d:84:48:42: 49:82:f6:a2:1a:8b:1c:af:66:58:73:46:46:dc:b4:ce:f5:e6: b4:4a:30:ff:4b:33:f3:b5:f2:fd:1d:89:0f:fb:18:96:73:09: 13:b6:45:82:98:a2:51:6f:1e:86:78:fa:e7:a4:50:d4:d5:8e: 24:21:6b:97:88:50:47:a6:c6:16:d6:f0:84:55:8b:4e:90:93: f6:bb:4c:bd:ba:c5:af:2c:36:d5:2e:be:eb:72:e4:b1:34:b9: 93:0c:df:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxNzQxMTAvBgNVBAUTKEU0MjJCRjAyNjE0MEQyMDNFRkQ2QkZERUFFRTI2OEFB OEIwNDY2RDUwHhcNMjUwNjA3MDEyNTU0WhcNMjUwNjE0MDEyNTU0WjAYMRYwFAYD VQQDEw02ODQzOTUyMi1iZDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+r2KzuudHFg+KEcFhcUyfnkRokgF/5572zGJOKKIG9CWNTmrKkLpGGxDa6k t1pz5+oaiv1WWQ+sKg9WH6aBYA/xClWoUIVBmeWWhfpPnNON6t6yiJu1XlqCvu7g zW1vnxzR/usZyxdJ3NC7XJN7AcpX6gI4RLq72yIaae/PRRQCWbpNZu7H0MCkR3Wr IfrA7Tbu3tVx1V0CYKXFqL+pgEO7wjHCUdgOfTbu39i6QwjlAxZANJjQsGyBeuTM hU+K6e/zvCz5q/t9xtm2LhV8RgWgLw2D3GOHOYuZ+WGiGdPPUl7FsNxkJytr0lgS 6Q5TQ5iuq0X70k2j1DEqgElIhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEyHt08S wihc0M9YXYPpqTrpnrUzMB8GA1UdIwQYMBaAFOQivwJhQNID79a/3q7iaKqLBGbV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzE3NC9CMTMxRjg5Q0VF Q0QxMUVDOENGNDQ3MUVDNEY5QUUwMi81Q0tfQW1GQTBnUHYxcl9lcnVKb3Fvc0Va dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDS19BbUZBMGdQdjFyX2VydUpvcW9zRVp0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzE3NC9CMTMxRjg5Q0VFQ0QxMUVDOENGNDQ3MUVDNEY5QUUwMi81Q0tfQW1GQTBn UHYxcl9lcnVKb3Fvc0VadFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGe9TFzIu3YoOVBVSaD7gGwWGLlTRKuJuijvJ8OGpuZQEgnEJbN93U VkRs7OmLYnpgWjffXWeHreBCdRDUCMe9k4xE/YBP10iWGZwHY7bNRg5vohRndOk8 Qv8vkVz6raXtcgZbrMNQl9/mkI/USwhTYR3jxTsAeAyV13g58blLWfW7+bfp8yLe jH3CD8npQ+CAYrlM1LhDwe3NTjMOzm2ESEJJgvaiGoscr2ZYc0ZG3LTO9ea0SjD/ SzPztfL9HYkP+xiWcwkTtkWCmKJRbx6GePrnpFDU1Y4kIWuXiFBHpsYW1vCEVYtO kJP2u0y9usWvLDbVLr7rcuSxNLmTDN9k -----END CERTIFICATE-----Generated at Sat Jun 7 19:49:30 2025 by rpki-client