$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft File: r5ACm-EBySLPz0vRRdevHcZA5eA.mft (raw, json) Hash identifier: xKdGLdEJBosPkI28YBjzwThNJUwklytmJyCU4SN1Bew= Subject key identifier: 3D:4A:87:8C:AC:3E:01:A9:55:63:57:70:91:E9:08:24:E8:E4:35:09 Authority key identifier: AF:90:02:9B:E1:01:C9:22:CF:CF:4B:D1:45:D7:AF:1D:C6:40:E5:E0 Certificate issuer: /CN=A91D2646/serialNumber=AF90029BE101C922CFCF4BD145D7AF1DC640E5E0 Certificate serial: 09EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft Manifest number: 09E5 Signing time: Fri 30 May 2025 20:06:16 +0000 Manifest this update: Fri 30 May 2025 20:06:16 +0000 Manifest next update: Fri 06 Jun 2025 20:06:16 +0000 Files and hashes: 1: r5ACm-EBySLPz0vRRdevHcZA5eA.crl (hash: JxLZ8eZFAW/nBbhmOK6tsiwpkIjf9zqecQ2hM10O190=) 2: EE675FC27BED11EABD4A3A27C4F9AE02.roa (hash: AgjaL53ax01ov0J7/NtNC0271FAg3f2kxQ+XWNRqNo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.crl rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:06:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2542 (0x9ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2646, serialNumber=AF90029BE101C922CFCF4BD145D7AF1DC640E5E0 Validity Not Before: May 30 20:06:16 2025 GMT Not After : Jun 6 20:06:16 2025 GMT Subject: CN=683a0fb8-c54d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:5b:61:cf:05:ae:45:c9:f5:e7:64:34:64:4f: 33:c6:f2:7d:fa:d5:43:5c:3b:2c:2d:f3:66:2f:2a: b7:c5:99:46:80:fe:88:2c:fa:4e:55:9a:d2:4e:dc: a7:31:89:d1:de:be:a6:67:9f:18:1c:38:4e:ab:fe: 47:01:c1:1e:b8:4e:1b:2e:46:fc:35:86:4a:88:f7: 18:a3:c3:6d:27:5c:83:47:74:e5:ca:f4:30:31:7a: 1a:59:1e:dd:74:48:9d:3d:ba:50:a2:93:7a:28:d6: 04:8b:5b:31:c3:e9:21:49:e2:c7:93:31:7e:96:b7: 77:1b:f0:0c:8e:1d:ad:01:ee:8c:c9:88:e0:f1:7d: 4a:8b:e3:f1:90:70:8c:03:a3:88:7d:ee:00:bd:d4: 49:a5:8d:8a:cb:a1:d0:91:1a:5b:b1:bc:99:80:10: 58:fa:ac:05:38:a8:04:42:22:31:92:ed:71:e1:7e: fb:71:f5:2e:4b:04:3a:a5:25:15:9e:51:e5:a1:03: e4:45:5a:a7:77:a3:37:64:c5:1b:ec:4d:3b:57:89: 87:4f:00:4a:c8:9c:bd:29:3a:3d:b4:35:56:34:c8: 1c:51:46:0f:f4:d2:5d:95:0e:4f:fb:7f:48:3c:2f: cc:82:be:32:79:da:5c:9c:79:72:33:a4:e1:cb:b8: ba:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:4A:87:8C:AC:3E:01:A9:55:63:57:70:91:E9:08:24:E8:E4:35:09 X509v3 Authority Key Identifier: keyid:AF:90:02:9B:E1:01:C9:22:CF:CF:4B:D1:45:D7:AF:1D:C6:40:E5:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:ac:cf:95:88:31:e7:c7:64:70:ea:1c:7c:23:c9:71:0e:fd: d2:71:84:57:19:34:b4:96:12:55:a0:97:4a:64:cc:98:25:fb: df:24:a7:fe:c7:ed:b0:bd:0f:6b:78:11:78:64:04:45:67:4b: 05:d4:75:10:cc:50:8c:1b:aa:fe:81:60:19:ed:9d:01:f3:95: cf:37:8d:ab:e4:c8:e7:9b:23:e6:9d:5b:21:3e:ac:e8:44:2c: 2e:23:2a:9c:06:64:47:c7:4b:ed:13:9e:db:5d:ec:58:db:f6: c3:4b:eb:7c:98:40:f0:40:de:38:59:db:27:d4:04:17:81:76: 99:c1:dd:a1:25:59:99:1a:fc:d7:d1:07:a9:fb:4e:6d:3f:73: d1:67:d8:6c:8b:54:d4:f2:b0:52:2a:d5:23:a6:c7:83:55:20: 15:92:3c:af:89:08:1c:8e:91:68:5c:26:5b:85:6f:91:e1:0f: cf:f9:05:b8:8b:a5:75:b7:ec:56:38:dc:32:de:30:04:91:37: c4:86:28:57:ec:83:96:e6:d5:d9:a7:64:0e:7b:ec:76:a0:9e: e1:0e:77:78:ae:ea:12:36:ff:57:50:30:67:45:59:d0:54:a0: 19:d7:8a:0f:4c:fb:f1:d5:cc:ca:cc:4e:f5:f7:60:dc:b4:b5: 01:9d:ce:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2NDYxMTAvBgNVBAUTKEFGOTAwMjlCRTEwMUM5MjJDRkNGNEJEMTQ1RDdBRjFE QzY0MEU1RTAwHhcNMjUwNTMwMjAwNjE2WhcNMjUwNjA2MjAwNjE2WjAYMRYwFAYD VQQDEw02ODNhMGZiOC1jNTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8FthzwWuRcn152Q0ZE8zxvJ9+tVDXDssLfNmLyq3xZlGgP6ILPpOVZrSTtyn MYnR3r6mZ58YHDhOq/5HAcEeuE4bLkb8NYZKiPcYo8NtJ1yDR3TlyvQwMXoaWR7d dEidPbpQopN6KNYEi1sxw+khSeLHkzF+lrd3G/AMjh2tAe6MyYjg8X1Ki+PxkHCM A6OIfe4AvdRJpY2Ky6HQkRpbsbyZgBBY+qwFOKgEQiIxku1x4X77cfUuSwQ6pSUV nlHloQPkRVqnd6M3ZMUb7E07V4mHTwBKyJy9KTo9tDVWNMgcUUYP9NJdlQ5P+39I PC/Mgr4yedpcnHlyM6Thy7i6jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1Kh4ys PgGpVWNXcJHpCCTo5DUJMB8GA1UdIwQYMBaAFK+QApvhAckiz89L0UXXrx3GQOXg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjY0Ni9EMjAzN0QxMjdC RUMxMUVBQTlBNkM3MjVDNEY5QUUwMi9yNUFDbS1FQnlTTFB6MHZSUmRldkhjWkE1 ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I1QUNtLUVCeVNMUHowdlJSZGV2SGNaQTVlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjY0Ni9EMjAzN0QxMjdCRUMxMUVBQTlBNkM3MjVDNEY5QUUwMi9yNUFDbS1FQnlT TFB6MHZSUmRldkhjWkE1ZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxrM+ViDHnx2Rw6hx8I8lxDv3ScYRXGTS0lhJVoJdKZMyYJfvfJKf+ x+2wvQ9reBF4ZARFZ0sF1HUQzFCMG6r+gWAZ7Z0B85XPN42r5MjnmyPmnVshPqzo RCwuIyqcBmRHx0vtE57bXexY2/bDS+t8mEDwQN44Wdsn1AQXgXaZwd2hJVmZGvzX 0Qep+05tP3PRZ9hsi1TU8rBSKtUjpseDVSAVkjyviQgcjpFoXCZbhW+R4Q/P+QW4 i6V1t+xWONwy3jAEkTfEhihX7IOW5tXZp2QOe+x2oJ7hDnd4ruoSNv9XUDBnRVnQ VKAZ14oPTPvx1czKzE7192DctLUBnc70 -----END CERTIFICATE-----Generated at Sat May 31 16:38:54 2025 by rpki-client