$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft File: 5OTCQkd4XDQv81kH9-EcSrs5i4M.mft (raw, json) Hash identifier: YNgt7VM7cXk73xl92Q6OxHjZ+e7uab39ZQ/6uzqcA6U= Subject key identifier: 4D:FC:72:43:9D:1E:BE:52:B2:DD:45:1D:B1:6E:A9:07:18:EB:93:11 Authority key identifier: E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83 Certificate issuer: /CN=A91E85F1/serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft Manifest number: 24 Signing time: Sun 01 Jun 2025 07:35:07 +0000 Manifest this update: Sun 01 Jun 2025 07:35:06 +0000 Manifest next update: Sun 08 Jun 2025 07:35:06 +0000 Files and hashes: 1: 5OTCQkd4XDQv81kH9-EcSrs5i4M.crl (hash: X8MCqIXKk6o2KCi5E/yqFxvmQEMF6Pj+oeb7I1udlDc=) 2: 212E0B520DFE11F0B266963AC4F9AE02.roa (hash: 44vHU0H/9/bs4kOPReZOgC2D0Y7H1F8Nu3vr76cFkxs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:35:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E85F1, serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83 Validity Not Before: Jun 1 07:35:06 2025 GMT Not After : Jun 8 07:35:06 2025 GMT Subject: CN=683c02aa-e745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:31:4b:2a:8a:96:34:aa:7c:67:c6:6e:5b:f4: 28:2f:78:68:b8:ec:51:af:99:b7:f1:73:6d:64:7b: 46:bf:df:98:60:12:cc:36:27:0c:fd:f9:f5:98:fd: 12:bf:44:7a:af:4f:cf:1e:cb:47:95:37:98:51:13: 3e:e0:48:23:cb:f6:c8:3b:32:1b:9c:fb:3d:73:4e: a1:62:12:dc:5e:32:f3:9c:da:28:93:34:54:43:7b: 82:63:ce:3f:6c:12:ed:4d:c2:bc:d8:72:6e:91:e4: ce:e2:13:f1:8b:9f:78:03:24:e3:b2:aa:d6:2c:b9: 9f:9a:94:9c:3c:5a:36:b7:3e:92:85:c6:6c:aa:b5: 95:d6:ca:cb:a3:53:68:f8:de:66:bd:ff:c8:cf:ef: 7b:9b:04:25:c6:35:28:55:23:53:94:c4:65:a1:3e: 64:d4:31:66:80:6c:b1:8d:18:42:39:93:6c:c6:f3: ad:19:10:cc:ac:e1:16:d5:ec:cd:70:b9:31:e3:66: ea:95:85:c9:68:84:4f:8c:79:55:18:48:e2:83:25: 22:7a:04:4a:be:50:b3:00:10:38:36:0c:69:ae:0a: 4c:51:ef:4d:6c:76:34:30:7c:19:26:13:fb:e9:3f: 0e:1d:2e:5a:5d:3a:0a:5e:cb:c6:da:47:6f:95:0d: 7e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:FC:72:43:9D:1E:BE:52:B2:DD:45:1D:B1:6E:A9:07:18:EB:93:11 X509v3 Authority Key Identifier: keyid:E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:54:b1:32:55:e2:3d:70:87:f0:89:fc:fc:d9:a8:fd:a1:d7: 77:5d:c3:6a:67:f6:5a:d7:b2:32:9b:88:68:12:ea:a3:a9:0d: f2:60:56:32:62:41:c6:3a:9e:a6:e1:35:29:a7:54:75:01:bf: 54:24:52:f2:6e:ad:ca:21:e8:ea:92:a7:a8:f0:62:fe:c8:2a: 5f:b7:56:c0:72:71:91:b4:3d:12:73:75:11:99:e4:bc:01:62: f0:55:2f:78:3f:6b:1c:26:00:49:61:c0:56:07:82:11:b6:e1: 97:4b:87:b1:77:5a:31:e1:08:6a:1d:9a:3e:75:92:4c:20:65: f5:55:d4:f4:f8:f1:da:fa:0c:5d:50:87:51:6f:0e:d7:c0:66: 19:eb:e4:b1:4f:ba:b5:82:99:0d:e3:56:be:ad:4e:9b:eb:ce: 7b:01:f7:e3:8d:87:e6:b5:b7:77:99:30:cf:71:19:b0:b3:a6: b7:80:3c:6c:25:ef:58:2c:af:fd:bc:3b:a5:eb:5b:c0:eb:12: 90:15:99:fd:61:1e:6d:92:12:34:84:e9:fd:88:d1:5f:97:28: 51:39:71:9f:08:63:47:bd:51:4e:b6:8b:fa:71:3f:fb:eb:a8: 62:3d:29:2a:b7:ce:d5:6b:02:ad:b7:02:05:13:61:e2:7a:1a: 66:d5:08:ba -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODVGMTExMC8GA1UEBRMoRTRFNEMyNDI0Nzc4NUMzNDJGRjM1OTA3RjdFMTFDNEFC QjM5OEI4MzAeFw0yNTA2MDEwNzM1MDZaFw0yNTA2MDgwNzM1MDZaMBgxFjAUBgNV BAMTDTY4M2MwMmFhLWU3NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNMUsqipY0qnxnxm5b9CgveGi47FGvmbfxc21ke0a/35hgEsw2Jwz9+fWY/RK/ RHqvT88ey0eVN5hREz7gSCPL9sg7Mhuc+z1zTqFiEtxeMvOc2iiTNFRDe4Jjzj9s Eu1NwrzYcm6R5M7iE/GLn3gDJOOyqtYsuZ+alJw8Wja3PpKFxmyqtZXWysujU2j4 3ma9/8jP73ubBCXGNShVI1OUxGWhPmTUMWaAbLGNGEI5k2zG860ZEMys4RbV7M1w uTHjZuqVhclohE+MeVUYSOKDJSJ6BEq+ULMAEDg2DGmuCkxR701sdjQwfBkmE/vp Pw4dLlpdOgpey8baR2+VDX5DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTfxyQ50e vlKy3UUdsW6pBxjrkxEwHwYDVR0jBBgwFoAU5OTCQkd4XDQv81kH9+EcSrs5i4Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4NUYxLzYyMjA2MzNDMERG QzExRjBBMUQ5ODA1M0M0RjlBRTAyLzVPVENRa2Q0WERRdjgxa0g5LUVjU3JzNWk0 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNU9UQ1FrZDRYRFF2ODFrSDktRWNTcnM1aTRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 NUYxLzYyMjA2MzNDMERGQzExRjBBMUQ5ODA1M0M0RjlBRTAyLzVPVENRa2Q0WERR djgxa0g5LUVjU3JzNWk0TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHdUsTJV4j1wh/CJ/PzZqP2h13ddw2pn9lrXsjKbiGgS6qOpDfJgVjJi QcY6nqbhNSmnVHUBv1QkUvJurcoh6OqSp6jwYv7IKl+3VsBycZG0PRJzdRGZ5LwB YvBVL3g/axwmAElhwFYHghG24ZdLh7F3WjHhCGodmj51kkwgZfVV1PT48dr6DF1Q h1FvDtfAZhnr5LFPurWCmQ3jVr6tTpvrznsB9+ONh+a1t3eZMM9xGbCzpreAPGwl 71gsr/28O6XrW8DrEpAVmf1hHm2SEjSE6f2I0V+XKFE5cZ8IY0e9UU62i/pxP/vr qGI9KSq3ztVrAq23AgUTYeJ6GmbVCLo= -----END CERTIFICATE-----Generated at Mon Jun 2 20:34:42 2025 by rpki-client