$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft File: 5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft (raw, json) Hash identifier: OUd7SoGb1ff4Kvkvj5zhZuHF38yVss1EzpXExrfHZks= Subject key identifier: D9:E7:73:FB:47:40:90:5E:FA:5A:EF:DB:EB:1C:20:DA:EF:86:10:3D Authority key identifier: E4:6B:BF:01:76:89:56:E8:66:AE:C4:43:F2:BB:13:50:1F:2E:73:79 Certificate issuer: /CN=A91D9F0A/serialNumber=E46BBF01768956E866AEC443F2BB13501F2E7379 Certificate serial: 13AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft Manifest number: 1388 Signing time: Fri 30 May 2025 17:10:56 +0000 Manifest this update: Fri 30 May 2025 17:10:55 +0000 Manifest next update: Fri 06 Jun 2025 17:10:55 +0000 Files and hashes: 1: 5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl (hash: LWs2ZogOaf2lUel9b+vXW4dM8AyqjblGsGPFRGojKi4=) 2: 3F6E94ACF5CF11EF90104A57C4F9AE02.roa (hash: 7uQFFcgxthASWlrUTTAafSbuld5eAvVIoBe4dcMvHgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5039 (0x13af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9F0A, serialNumber=E46BBF01768956E866AEC443F2BB13501F2E7379 Validity Not Before: May 30 17:10:55 2025 GMT Not After : Jun 6 17:10:55 2025 GMT Subject: CN=6839e69f-c8e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2c:5a:5d:f9:99:e1:5a:95:ec:04:c0:cc:a3: 8f:5d:1d:96:2f:9e:93:b6:3c:94:db:73:a7:be:25: 4e:24:21:d1:45:84:19:c8:26:51:7d:b7:13:54:eb: 33:ea:ff:22:f4:33:ae:b6:1a:6d:34:1f:7b:b7:19: b6:66:4a:43:c9:c8:65:e8:a2:b0:51:0c:0a:ed:ea: 20:02:3f:5d:15:5e:42:0a:b0:aa:01:0a:13:5d:2e: 7a:e0:1f:b2:de:1a:a4:53:35:8d:7f:ec:75:56:68: 7d:ad:bf:0d:b3:78:4a:fd:c2:2d:12:90:5c:d2:1d: 78:92:e5:04:40:11:d6:67:4a:0b:94:a0:4e:ac:c5: f0:f6:6e:f3:f2:e5:b3:48:85:8f:19:01:42:0a:09: e6:b1:12:d3:a5:25:60:73:2e:8c:88:ad:cb:e9:95: db:a0:08:bc:b9:59:c3:af:55:c7:ef:b4:f5:4b:a3: e2:1e:5c:64:dc:50:94:ef:29:04:41:68:56:5c:20: 19:24:01:53:1b:0c:19:fc:db:21:10:4d:90:e9:00: ba:fc:96:c7:1e:f2:c8:7f:51:43:fd:33:76:c4:da: 67:0a:ef:2d:d3:e8:60:cb:4d:ba:21:98:a1:81:89: ce:d3:ea:0d:70:65:c1:38:4b:ea:17:b4:e7:b6:3f: e1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E7:73:FB:47:40:90:5E:FA:5A:EF:DB:EB:1C:20:DA:EF:86:10:3D X509v3 Authority Key Identifier: keyid:E4:6B:BF:01:76:89:56:E8:66:AE:C4:43:F2:BB:13:50:1F:2E:73:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:5a:ab:d6:c9:9e:6a:e6:7a:b4:9a:15:63:43:ad:45:6f:28: d5:57:3c:c0:1e:74:d3:d8:cf:68:4a:e1:89:70:07:37:ab:f6: fa:59:a2:81:34:f2:d0:cd:ed:29:62:93:91:d4:3e:eb:5b:69: 15:48:59:70:f2:b6:4b:46:94:4f:c5:21:a7:12:f9:33:b5:8b: 71:41:08:a2:26:71:9e:d4:d9:8a:70:20:07:6c:39:fc:51:c7: fa:70:2c:4a:9f:d6:e3:67:1b:e6:fb:eb:07:ab:48:b7:40:73: 7f:1d:2a:0d:4b:34:c8:59:37:36:b2:ff:4e:18:e8:29:db:d0: 4f:a9:d5:ac:95:cb:f7:68:56:86:1c:a9:ce:ce:b1:47:61:60: eb:fe:a1:cc:bf:ed:d1:df:96:cc:80:1e:a4:ed:17:2c:be:70: 00:d7:21:a8:32:65:25:1b:0a:da:a2:d6:e4:6a:e3:89:62:ae: a2:c9:5e:6a:4a:8b:d7:60:92:53:18:71:ef:e6:02:75:97:2d: f7:9a:ed:7a:7f:7b:f2:c8:94:5c:11:52:86:38:cb:50:b3:2f: a1:7c:be:b8:27:4a:61:1e:74:bc:fe:f3:82:71:ad:43:d9:6d: 1d:cf:02:49:6f:41:b7:8b:e4:e2:d9:97:4b:ae:0d:2c:d2:fa: b7:e6:21:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGMEExMTAvBgNVBAUTKEU0NkJCRjAxNzY4OTU2RTg2NkFFQzQ0M0YyQkIxMzUw MUYyRTczNzkwHhcNMjUwNTMwMTcxMDU1WhcNMjUwNjA2MTcxMDU1WjAYMRYwFAYD VQQDEw02ODM5ZTY5Zi1jOGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxixaXfmZ4VqV7ATAzKOPXR2WL56TtjyU23OnviVOJCHRRYQZyCZRfbcTVOsz 6v8i9DOuthptNB97txm2ZkpDychl6KKwUQwK7eogAj9dFV5CCrCqAQoTXS564B+y 3hqkUzWNf+x1Vmh9rb8Ns3hK/cItEpBc0h14kuUEQBHWZ0oLlKBOrMXw9m7z8uWz SIWPGQFCCgnmsRLTpSVgcy6MiK3L6ZXboAi8uVnDr1XH77T1S6PiHlxk3FCU7ykE QWhWXCAZJAFTGwwZ/NshEE2Q6QC6/JbHHvLIf1FD/TN2xNpnCu8t0+hgy026IZih gYnO0+oNcGXBOEvqF7Tntj/hoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnnc/tH QJBe+lrv2+scINrvhhA9MB8GA1UdIwQYMBaAFORrvwF2iVboZq7EQ/K7E1AfLnN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUYwQS9FODYwMjFENkEy M0MxMUU4OEE2RkU2NkNDNEY5QUUwMi81R3VfQVhhSlZ1aG1yc1JEOHJzVFVCOHVj M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVHdV9BWGFKVnVobXJzUkQ4cnNUVUI4dWMzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUYwQS9FODYwMjFENkEyM0MxMUU4OEE2RkU2NkNDNEY5QUUwMi81R3VfQVhhSlZ1 aG1yc1JEOHJzVFVCOHVjM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6WqvWyZ5q5nq0mhVjQ61FbyjVVzzAHnTT2M9oSuGJcAc3q/b6WaKB NPLQze0pYpOR1D7rW2kVSFlw8rZLRpRPxSGnEvkztYtxQQiiJnGe1NmKcCAHbDn8 Ucf6cCxKn9bjZxvm++sHq0i3QHN/HSoNSzTIWTc2sv9OGOgp29BPqdWslcv3aFaG HKnOzrFHYWDr/qHMv+3R35bMgB6k7RcsvnAA1yGoMmUlGwraotbkauOJYq6iyV5q SovXYJJTGHHv5gJ1ly33mu16f3vyyJRcEVKGOMtQsy+hfL64J0phHnS8/vOCca1D 2W0dzwJJb0G3i+Ti2ZdLrg0s0vq35iHe -----END CERTIFICATE-----Generated at Sat May 31 16:41:56 2025 by rpki-client