$ rpki-client -vvf rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft File: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft (raw, json) Hash identifier: 735cj1M0FrC52Y4ZK3jfAM7R4O+xWugznUr+HQWZnb0= Subject key identifier: 73:5F:D2:F7:F9:DA:A7:90:C6:0E:06:FF:D1:A8:6D:0D:2E:88:60:5E Authority key identifier: E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80 Certificate issuer: /CN=A91E554A/serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft Manifest number: 72 Signing time: Sat 31 May 2025 06:25:43 +0000 Manifest this update: Sat 31 May 2025 06:25:42 +0000 Manifest next update: Sat 07 Jun 2025 06:25:42 +0000 Files and hashes: 1: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl (hash: Un4FQH9u/wpkn6pxD5a4rd9mJziEz651UCL6j0q4Wy4=) 2: 388A91E0985A11EFA6912B0EC4F9AE02.roa (hash: JjgqoANmsusAqQnFWaBmauCJuNgw+HQl/ZcBjvaDkfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E554A, serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680 Validity Not Before: May 31 06:25:42 2025 GMT Not After : Jun 7 06:25:42 2025 GMT Subject: CN=683aa0e7-e20e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:70:d1:26:13:aa:65:b5:c1:38:3b:eb:d8:47: cf:db:aa:ea:87:bb:70:26:60:5d:ea:76:5f:6b:e4: 90:3a:60:06:10:68:6f:e7:4c:ff:0f:a5:84:55:2e: d5:b1:f7:4e:7b:8e:50:75:ef:47:f9:76:d9:98:a4: 2e:ac:70:0f:d8:be:56:dc:0f:95:a0:2f:81:fc:8d: 65:1f:0d:c0:28:1a:4a:fa:63:e2:15:8a:24:57:a9: 83:2f:fb:c4:44:7b:26:54:67:62:15:38:3a:0f:f6: 34:79:0c:4a:77:d1:c8:9a:24:61:e7:27:f4:a4:ba: 8f:1e:f1:05:02:aa:ef:5b:0c:b0:ee:b5:81:dd:27: 77:c6:36:23:88:47:95:56:70:2b:f8:b8:d7:00:3c: e6:69:d6:85:9b:18:03:18:92:f8:ee:02:df:5d:06: dd:b1:e6:69:fc:0a:37:7b:62:a7:c5:c3:0d:ee:ab: 23:10:c9:b9:d8:a8:72:e6:ab:ca:96:55:2a:a7:cd: cf:68:2e:36:5f:de:c7:70:92:ca:fa:74:a0:17:2b: 13:8c:96:b8:8d:42:ec:7e:4a:47:9d:43:b8:78:bb: 2a:6c:87:85:0e:e0:bd:58:aa:49:dc:3e:87:de:58: 7f:d0:55:ea:01:38:fb:df:70:65:2e:c0:b3:68:a3: c8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:5F:D2:F7:F9:DA:A7:90:C6:0E:06:FF:D1:A8:6D:0D:2E:88:60:5E X509v3 Authority Key Identifier: keyid:E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:7e:71:17:87:ad:3d:2b:80:e5:5b:da:80:7c:5b:13:a8:a1: 9e:fb:7f:62:28:45:14:3a:7d:6c:72:e9:88:c7:cc:45:84:1e: 41:5e:91:88:6f:10:61:76:20:28:8e:65:a8:41:d4:60:73:d6: 1c:67:61:06:f4:ea:74:1b:85:61:ad:cb:da:d0:2a:d9:3b:e6: 0a:1d:0d:14:87:c7:b6:52:a3:f2:b1:5e:1d:bf:e3:57:8c:ab: ec:a4:59:cf:2e:9f:a8:7a:28:b8:19:5f:39:fb:82:b3:02:7d: f5:53:8a:7b:ba:46:64:59:dd:0f:c1:2e:20:73:22:37:4a:b6: 87:7e:a1:93:ba:05:a0:5c:8d:cc:0c:19:40:db:8e:e5:3c:f0: 7d:e6:1e:2f:9e:f8:8d:9b:2b:7e:6c:99:41:0b:ec:03:7b:90: 19:69:dc:bd:eb:9d:ad:cc:eb:c1:aa:e4:62:b2:f2:9f:c6:28: 1e:20:96:6e:5c:6b:4d:5b:21:96:7a:e4:c6:1e:cc:93:09:b5: ac:a5:48:39:77:be:ba:a8:69:c5:21:b1:b4:3d:a1:31:97:40: 48:1f:bb:7a:4b:28:45:2c:33:03:e6:75:6b:d2:31:75:7b:ee: 8f:cc:26:e1:f0:e3:34:35:e1:e0:cb:5a:3b:04:b4:35:b3:23: 18:1c:5a:d3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NTU0QTExMC8GA1UEBRMoRTY3NThCOUEzNzU5ODJDMkM0RDFDNzY0OUEzMUU0Q0Yy N0Q1QTY4MDAeFw0yNTA1MzEwNjI1NDJaFw0yNTA2MDcwNjI1NDJaMBgxFjAUBgNV BAMTDTY4M2FhMGU3LWUyMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCncNEmE6pltcE4O+vYR8/bquqHu3AmYF3qdl9r5JA6YAYQaG/nTP8PpYRVLtWx 9057jlB170f5dtmYpC6scA/YvlbcD5WgL4H8jWUfDcAoGkr6Y+IViiRXqYMv+8RE eyZUZ2IVODoP9jR5DEp30ciaJGHnJ/Skuo8e8QUCqu9bDLDutYHdJ3fGNiOIR5VW cCv4uNcAPOZp1oWbGAMYkvjuAt9dBt2x5mn8Cjd7YqfFww3uqyMQybnYqHLmq8qW VSqnzc9oLjZf3sdwksr6dKAXKxOMlriNQux+SkedQ7h4uypsh4UO4L1YqkncPofe WH/QVeoBOPvfcGUuwLNoo8grAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUc1/S9/na p5DGDgb/0ahtDS6IYF4wHwYDVR0jBBgwFoAU5nWLmjdZgsLE0cdkmjHkzyfVpoAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1NTRBLzgyMkZDMjIwOTFG NzExRUZBREUxMTI2NkM0RjlBRTAyLzVuV0xtamRaZ3NMRTBjZGttakhrenlmVnBv QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNW5XTG1qZFpnc0xFMGNka21qSGt6eWZWcG9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 NTRBLzgyMkZDMjIwOTFGNzExRUZBREUxMTI2NkM0RjlBRTAyLzVuV0xtamRaZ3NM RTBjZGttakhrenlmVnBvQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAR+cReHrT0rgOVb2oB8WxOooZ77f2IoRRQ6fWxy6YjHzEWEHkFekYhv EGF2ICiOZahB1GBz1hxnYQb06nQbhWGty9rQKtk75godDRSHx7ZSo/KxXh2/41eM q+ykWc8un6h6KLgZXzn7grMCffVTinu6RmRZ3Q/BLiBzIjdKtod+oZO6BaBcjcwM GUDbjuU88H3mHi+e+I2bK35smUEL7AN7kBlp3L3rna3M68Gq5GKy8p/GKB4glm5c a01bIZZ65MYezJMJtaylSDl3vrqoacUhsbQ9oTGXQEgfu3pLKEUsMwPmdWvSMXV7 7o/MJuHw4zQ14eDLWjsEtDWzIxgcWtM= -----END CERTIFICATE-----Generated at Sat May 31 17:06:22 2025 by rpki-client