$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft File: P5liYas9HvBBZhs6732JMrVwJjc.mft (raw, json) Hash identifier: wesYGLb5AXHfq0XsC6BlBXv1Ad1oC5+MMGKebI6dON0= Subject key identifier: 60:AA:41:CB:81:00:85:A6:70:4B:D8:E9:7B:D7:33:84:5C:53:63:6C Authority key identifier: 3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37 Certificate issuer: /CN=A91DC2A9/serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft Manifest number: 015F Signing time: Sat 31 May 2025 03:47:22 +0000 Manifest this update: Sat 31 May 2025 03:47:22 +0000 Manifest next update: Sat 07 Jun 2025 03:47:22 +0000 Files and hashes: 1: P5liYas9HvBBZhs6732JMrVwJjc.crl (hash: +8ovE+Qtcc+U8J6rIiMneZAo/A+f0nWnmViD1Op2Lmo=) 2: 9908BDDE1CAA11EF80E3BB87C4F9AE02.roa (hash: 0UTp5Ayv/ftDBInci/moVW1XbBA3xfvlEMb4Bw4foQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:47:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC2A9, serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637 Validity Not Before: May 31 03:47:22 2025 GMT Not After : Jun 7 03:47:22 2025 GMT Subject: CN=683a7bca-7768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f3:83:8b:75:be:6e:bd:50:32:99:b6:f9:64: cc:e8:1e:32:92:2d:34:ec:bc:c7:ac:bb:ef:96:3c: 5a:11:ed:08:91:6b:52:c4:af:0e:6d:20:07:e5:2b: 0a:6d:03:04:22:aa:19:28:d0:91:39:c7:65:bd:12: 50:7e:9c:4d:1f:d5:0a:04:28:52:33:3e:e8:1e:5d: e5:cc:27:7b:6b:32:44:a6:aa:b9:99:76:31:78:35: 0b:01:90:6f:b7:c4:f2:b1:26:ec:68:6d:75:d2:6c: ee:63:42:37:bd:88:c3:5b:5a:9a:22:53:78:3c:02: 8c:8f:8f:5a:23:54:eb:90:f1:41:e2:33:89:bd:d7: 3b:51:96:ee:74:3a:5c:73:f1:8f:59:18:e1:26:6c: 92:b1:51:0e:cb:aa:3c:87:9d:54:c4:e0:46:c5:de: 10:d8:ff:88:f6:dd:cb:80:e8:97:1f:62:d0:5d:9a: 4a:23:7b:8a:3f:29:f6:42:1e:34:1c:0e:fe:d9:b2: a8:ae:94:ec:17:d7:d1:62:8a:af:83:37:c8:06:71: 0e:45:e6:5e:f1:e5:44:c9:fa:e0:95:1f:34:ee:dd: ae:27:6f:7e:91:40:cf:b5:8a:ee:8f:a7:9f:41:66: 1c:d2:e8:86:bf:e1:cf:9e:51:1f:d5:5b:ef:ae:f0: 2a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:AA:41:CB:81:00:85:A6:70:4B:D8:E9:7B:D7:33:84:5C:53:63:6C X509v3 Authority Key Identifier: keyid:3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:96:09:77:6b:cb:de:b9:43:27:af:dc:d8:48:61:77:86:2a: 26:2a:31:64:11:fa:71:0a:2c:9d:16:72:d3:b4:d7:63:4d:24: bd:74:1e:b3:e0:8f:9d:73:02:1f:f0:2b:71:58:fa:e3:16:30: 21:0d:51:04:6c:c2:2b:ed:61:29:d0:f9:3e:37:ee:a4:89:d5: b4:d0:f9:2f:3f:1e:f3:d0:bf:71:8f:93:3e:6e:d1:6e:fd:ac: 30:8b:85:75:86:a3:50:1b:90:f4:48:db:a4:c2:a5:1e:d4:c8: 49:8a:da:60:03:99:8b:ad:f0:43:3f:e9:02:97:a7:3f:02:f3: 46:a1:91:8d:33:88:bb:0e:b2:15:a1:fb:b4:b4:3a:9b:cf:97: 80:a0:1b:3b:48:a1:70:86:cb:c0:2c:df:f0:f5:46:eb:ba:44: e6:48:4b:a5:1f:b8:b8:2e:46:b4:93:f5:af:a8:cc:0f:e8:a9: 96:f5:23:21:a5:00:76:e1:c6:33:c2:28:cc:df:2e:f7:61:b9: e5:46:14:62:a5:5e:3c:6c:42:b4:1a:57:6e:7c:3f:21:84:37: 79:17:a9:c3:35:92:c8:02:73:f6:2d:43:56:a1:2d:d0:b5:27: 49:32:0a:43:84:76:50:4e:56:ef:86:9e:4a:95:98:73:43:74: 82:ab:6c:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMyQTkxMTAvBgNVBAUTKDNGOTk2MjYxQUIzRDFFRjA0MTY2MUIzQUVGN0Q4OTMy QjU3MDI2MzcwHhcNMjUwNTMxMDM0NzIyWhcNMjUwNjA3MDM0NzIyWjAYMRYwFAYD VQQDEw02ODNhN2JjYS03NzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvODi3W+br1QMpm2+WTM6B4yki007LzHrLvvljxaEe0IkWtSxK8ObSAH5SsK bQMEIqoZKNCROcdlvRJQfpxNH9UKBChSMz7oHl3lzCd7azJEpqq5mXYxeDULAZBv t8TysSbsaG110mzuY0I3vYjDW1qaIlN4PAKMj49aI1TrkPFB4jOJvdc7UZbudDpc c/GPWRjhJmySsVEOy6o8h51UxOBGxd4Q2P+I9t3LgOiXH2LQXZpKI3uKPyn2Qh40 HA7+2bKorpTsF9fRYoqvgzfIBnEOReZe8eVEyfrglR807t2uJ29+kUDPtYruj6ef QWYc0uiGv+HPnlEf1VvvrvAqEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGCqQcuB AIWmcEvY6XvXM4RcU2NsMB8GA1UdIwQYMBaAFD+ZYmGrPR7wQWYbOu99iTK1cCY3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzJBOS9EOEREQzFBNjM0 QzYxMUVFQjRFQkIwNzBDNEY5QUUwMi9QNWxpWWFzOUh2QkJaaHM2NzMySk1yVndK amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A1bGlZYXM5SHZCQlpoczY3MzJKTXJWd0pqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzJBOS9EOEREQzFBNjM0QzYxMUVFQjRFQkIwNzBDNEY5QUUwMi9QNWxpWWFzOUh2 QkJaaHM2NzMySk1yVndKamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQlgl3a8veuUMnr9zYSGF3hiomKjFkEfpxCiydFnLTtNdjTSS9dB6z 4I+dcwIf8CtxWPrjFjAhDVEEbMIr7WEp0Pk+N+6kidW00PkvPx7z0L9xj5M+btFu /awwi4V1hqNQG5D0SNukwqUe1MhJitpgA5mLrfBDP+kCl6c/AvNGoZGNM4i7DrIV ofu0tDqbz5eAoBs7SKFwhsvALN/w9UbrukTmSEulH7i4Lka0k/WvqMwP6KmW9SMh pQB24cYzwijM3y73YbnlRhRipV48bEK0GldufD8hhDd5F6nDNZLIAnP2LUNWoS3Q tSdJMgpDhHZQTlbvhp5KlZhzQ3SCq2xu -----END CERTIFICATE-----Generated at Sat May 31 17:24:49 2025 by rpki-client