$ rpki-client -vvf rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft File: 5NzsWVobtnOJciNlasY5uVNS3XM.mft (raw, json) Hash identifier: gatlLUrn3+zUkcIGpopZul8sIf0OINNuZbn7VsKl+oE= Subject key identifier: 9C:AF:A7:71:08:05:AD:CE:68:5C:62:9B:8D:10:57:0F:8F:3F:EA:7B Authority key identifier: E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73 Certificate issuer: /CN=A91D604E/serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73 Certificate serial: 0CB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft Manifest number: 0CA5 Signing time: Wed 04 Jun 2025 18:11:10 +0000 Manifest this update: Wed 04 Jun 2025 18:11:09 +0000 Manifest next update: Wed 11 Jun 2025 18:11:09 +0000 Files and hashes: 1: 5NzsWVobtnOJciNlasY5uVNS3XM.crl (hash: spp4RoahBjApD+9k5WCFIl3/lmpORQK/gLU8VDW3h80=) 2: D1C40E28183411EF99FD8776C4F9AE02.roa (hash: chBs/iSmoBtAd9EtvA3mnCGyh8XU8yYYJZGBD7EHNow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 18:11:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3250 (0xcb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D604E, serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73 Validity Not Before: Jun 4 18:11:09 2025 GMT Not After : Jun 11 18:11:09 2025 GMT Subject: CN=68408c3e-e47c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:25:ba:23:29:d3:4a:d7:f3:f9:f1:64:4c:f9: 84:80:59:a3:eb:f3:ad:3d:b4:03:72:2a:87:0c:01: ec:dd:38:d8:0c:ca:c5:c8:1c:09:4d:16:c9:b3:2b: ce:d2:7b:24:87:a4:8a:1f:60:a2:65:f8:72:51:df: 1f:93:bb:34:63:47:4f:ec:7f:5b:44:50:f0:3e:a2: 1a:8e:df:35:e4:b5:a7:b9:76:c2:e8:01:67:d8:56: f7:9a:56:f8:81:dd:72:c3:6b:8b:ba:b7:7b:ea:7b: e8:be:5a:a4:7e:95:40:8f:88:00:86:da:88:cb:dd: 15:9e:af:cb:5c:79:ec:a4:6d:83:ca:d3:bb:9c:cd: 09:64:77:f4:99:24:46:d9:01:32:a4:fa:f3:fd:e0: 98:22:19:de:d6:e5:d3:4a:49:4a:9d:1b:6c:e0:e4: b2:b5:1b:82:80:9c:a1:34:7c:ed:fa:bf:3b:5d:dc: 13:61:ac:6b:d5:35:0d:de:8e:24:ad:3e:be:cd:c2: 7d:2c:8f:9b:eb:c3:51:24:4d:3a:3b:0c:47:22:60: a4:74:df:57:17:0e:d2:87:f0:29:6e:8c:24:2f:5f: dd:f3:be:23:0a:dc:ea:9c:10:9c:36:6c:4f:f0:cf: 1a:1f:06:38:c9:71:e1:76:6b:11:83:b6:c3:40:82: 69:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:AF:A7:71:08:05:AD:CE:68:5C:62:9B:8D:10:57:0F:8F:3F:EA:7B X509v3 Authority Key Identifier: keyid:E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:14:9d:1b:ac:98:bf:dd:7a:43:7b:b2:3a:8b:72:29:2e:54: 09:30:3f:d7:d4:0e:35:4d:3b:6a:25:2a:57:56:9a:51:8e:5d: d4:57:b0:0d:13:c6:aa:51:33:cd:ad:7e:be:2d:8e:71:b1:c0: b9:e4:9c:12:09:19:9a:b6:df:99:3f:26:78:78:92:85:c5:e9: 60:22:d4:09:1b:bf:9d:21:1b:2a:e4:54:1d:03:45:2b:61:f7: 70:b1:09:cd:86:c7:db:e3:18:64:21:04:95:cc:26:94:c0:3a: 08:62:92:fa:a5:78:c0:59:11:af:a5:13:03:91:53:b6:c1:b9: ce:ee:93:c1:be:52:cd:21:49:97:66:f7:c2:88:cd:cd:ca:b7: 9a:00:a7:a5:a3:07:1a:8c:e7:51:1a:1e:bc:ee:32:64:59:fe: c5:f9:e6:14:8c:35:25:ad:bd:19:78:a1:78:cf:ad:e8:ec:f8: 21:e8:dd:3e:96:b6:65:d4:2d:99:0a:98:a6:10:1c:24:56:72: b3:3a:ec:74:59:ef:5c:5d:71:16:b2:2f:c5:6d:fd:0a:27:25: 9d:c2:4d:5a:ba:12:98:0c:03:61:1b:15:12:60:44:9a:59:ba: da:b5:09:b2:96:ad:f7:c3:61:b9:e6:2c:ed:22:f1:1a:04:98: 48:50:9a:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwNEUxMTAvBgNVBAUTKEU0RENFQzU5NUExQkI2NzM4OTcyMjM2NTZBQzYzOUI5 NTM1MkRENzMwHhcNMjUwNjA0MTgxMTA5WhcNMjUwNjExMTgxMTA5WjAYMRYwFAYD VQQDEw02ODQwOGMzZS1lNDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyW6IynTStfz+fFkTPmEgFmj6/OtPbQDciqHDAHs3TjYDMrFyBwJTRbJsyvO 0nskh6SKH2CiZfhyUd8fk7s0Y0dP7H9bRFDwPqIajt815LWnuXbC6AFn2Fb3mlb4 gd1yw2uLurd76nvovlqkfpVAj4gAhtqIy90Vnq/LXHnspG2DytO7nM0JZHf0mSRG 2QEypPrz/eCYIhne1uXTSklKnRts4OSytRuCgJyhNHzt+r87XdwTYaxr1TUN3o4k rT6+zcJ9LI+b68NRJE06OwxHImCkdN9XFw7Sh/ApbowkL1/d874jCtzqnBCcNmxP 8M8aHwY4yXHhdmsRg7bDQIJpuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyvp3EI Ba3OaFxim40QVw+PP+p7MB8GA1UdIwQYMBaAFOTc7FlaG7ZziXIjZWrGOblTUt1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjA0RS85MUI1QzBDMEY0 RUQxMUU5OENCRkEwMTNDNEY5QUUwMi81TnpzV1ZvYnRuT0pjaU5sYXNZNXVWTlMz WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVOenNXVm9idG5PSmNpTmxhc1k1dVZOUzNYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjA0RS85MUI1QzBDMEY0RUQxMUU5OENCRkEwMTNDNEY5QUUwMi81TnpzV1ZvYnRu T0pjaU5sYXNZNXVWTlMzWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmFJ0brJi/3XpDe7I6i3IpLlQJMD/X1A41TTtqJSpXVppRjl3UV7AN E8aqUTPNrX6+LY5xscC55JwSCRmatt+ZPyZ4eJKFxelgItQJG7+dIRsq5FQdA0Ur YfdwsQnNhsfb4xhkIQSVzCaUwDoIYpL6pXjAWRGvpRMDkVO2wbnO7pPBvlLNIUmX ZvfCiM3NyreaAKelowcajOdRGh687jJkWf7F+eYUjDUlrb0ZeKF4z63o7Pgh6N0+ lrZl1C2ZCpimEBwkVnKzOux0We9cXXEWsi/Fbf0KJyWdwk1auhKYDANhGxUSYESa WbratQmylq33w2G55iztIvEaBJhIUJqZ -----END CERTIFICATE-----Generated at Fri Jun 6 17:18:01 2025 by rpki-client