$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft File: 5P3k1jhc-jqHPsReepFHztMJvAI.mft (raw, json) Hash identifier: 7uAez1ORapIRoNvykgkPSFAjqMj98TZQVJJU5YoWxuE= Subject key identifier: 8D:AE:D5:36:9B:20:1F:DF:FF:9A:65:18:89:12:39:EA:96:03:E6:01 Authority key identifier: E4:FD:E4:D6:38:5C:FA:3A:87:3E:C4:5E:7A:91:47:CE:D3:09:BC:02 Certificate issuer: /CN=A91EC46B/serialNumber=E4FDE4D6385CFA3A873EC45E7A9147CED309BC02 Certificate serial: 0672 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5P3k1jhc-jqHPsReepFHztMJvAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft Manifest number: 066A Signing time: Fri 30 May 2025 22:36:45 +0000 Manifest this update: Fri 30 May 2025 22:36:44 +0000 Manifest next update: Fri 06 Jun 2025 22:36:44 +0000 Files and hashes: 1: 5P3k1jhc-jqHPsReepFHztMJvAI.crl (hash: q6Jb/4Am/HjXnWTWnzWvoEaY23NOwv0JHawnaPURZMg=) 2: 18ED6F18862211EB99005123C4F9AE02.roa (hash: rr8gNUqLqDSNabGr8QuJud25OZUwhJk+lADOj5yViNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.crl rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5P3k1jhc-jqHPsReepFHztMJvAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1650 (0x672) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC46B, serialNumber=E4FDE4D6385CFA3A873EC45E7A9147CED309BC02 Validity Not Before: May 30 22:36:44 2025 GMT Not After : Jun 6 22:36:44 2025 GMT Subject: CN=683a32fc-0248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:28:02:55:43:7f:10:63:ee:5c:0a:2f:0a:36: b8:cd:db:8f:e8:28:13:10:4e:67:e9:c6:a6:38:47: 7b:6c:24:43:da:bd:94:6c:2d:e3:b3:ae:26:20:1e: 2d:81:2e:8c:57:92:bf:d6:fc:72:5d:63:db:5c:4f: dc:6e:e2:9c:b3:14:a0:d3:7e:43:f1:aa:71:93:75: 8a:9b:a7:c7:3a:37:63:22:2b:ef:79:3d:9b:34:97: f2:e4:ad:40:4e:56:fd:84:c6:ad:6b:dc:c4:d3:c9: d8:c4:d3:99:c5:e2:1a:4b:d2:38:4c:88:b4:7c:c8: bd:b4:30:2c:0b:09:c0:2d:39:bb:f1:9f:cf:0c:ed: 22:6c:80:04:20:04:90:66:94:11:e2:b6:a6:46:eb: 27:46:29:c6:eb:cb:c3:32:db:2e:d8:bd:2a:65:f9: 5e:d2:59:4d:e3:18:f2:42:d2:9d:c5:9e:39:42:fe: 6b:e7:ef:75:f3:61:f3:fd:8f:15:18:b1:df:88:38: 4b:ba:47:6f:d0:74:10:af:89:d9:f1:2f:f2:eb:8d: 54:48:0c:ff:0b:70:7d:6d:68:72:79:7a:78:5d:91: 74:7d:87:c1:ad:d4:b3:4f:db:9c:04:c9:37:ce:a2: 37:12:1c:5f:9d:5a:57:ab:26:6b:9e:ec:3c:63:07: 12:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AE:D5:36:9B:20:1F:DF:FF:9A:65:18:89:12:39:EA:96:03:E6:01 X509v3 Authority Key Identifier: keyid:E4:FD:E4:D6:38:5C:FA:3A:87:3E:C4:5E:7A:91:47:CE:D3:09:BC:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5P3k1jhc-jqHPsReepFHztMJvAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:27:ef:63:5b:13:27:80:a2:4e:d2:10:63:9a:b5:bd:e3:36: ad:3a:1f:45:e0:b8:17:0f:a0:fd:62:ee:27:57:45:0f:e2:a3: b1:73:99:95:de:ed:57:40:d8:0a:33:b6:08:a4:b0:be:44:9a: e9:39:66:6a:38:1d:86:62:38:0d:41:fc:1e:58:f5:64:ca:b6: ab:79:57:17:28:f8:52:e4:95:e8:81:82:5d:cf:9f:30:29:50: 44:99:5b:d6:a5:af:47:ea:f4:89:a0:bb:c5:91:76:6c:42:af: 59:2c:fe:fa:52:d2:f4:ec:9c:7f:5a:e7:16:66:78:f4:ce:70: 3b:6a:10:5c:9b:b4:29:68:b3:8b:08:7c:29:96:b5:5a:0e:c4: 2e:ad:13:c9:57:5f:dd:35:08:ef:dc:31:00:76:92:f0:ca:34: 00:e3:dd:e7:6c:5b:fc:04:54:a0:d3:1f:63:35:8f:28:17:dc: e5:ff:1b:20:6d:1d:4e:c2:bc:06:b8:55:85:44:16:5f:d0:71: 36:e4:41:13:cd:b6:5d:f8:19:cd:90:b2:9a:d8:3f:1a:1d:ef: 5d:60:c3:63:2f:21:88:ca:de:32:1b:55:67:65:a6:c6:33:48: 8f:3f:a7:fe:00:80:cd:00:16:23:40:3f:1a:ac:80:f3:c7:0b: b4:eb:b7:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM0NkIxMTAvBgNVBAUTKEU0RkRFNEQ2Mzg1Q0ZBM0E4NzNFQzQ1RTdBOTE0N0NF RDMwOUJDMDIwHhcNMjUwNTMwMjIzNjQ0WhcNMjUwNjA2MjIzNjQ0WjAYMRYwFAYD VQQDEw02ODNhMzJmYy0wMjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ygCVUN/EGPuXAovCja4zduP6CgTEE5n6camOEd7bCRD2r2UbC3js64mIB4t gS6MV5K/1vxyXWPbXE/cbuKcsxSg035D8apxk3WKm6fHOjdjIivveT2bNJfy5K1A Tlb9hMata9zE08nYxNOZxeIaS9I4TIi0fMi9tDAsCwnALTm78Z/PDO0ibIAEIASQ ZpQR4ramRusnRinG68vDMtsu2L0qZfle0llN4xjyQtKdxZ45Qv5r5+9182Hz/Y8V GLHfiDhLukdv0HQQr4nZ8S/y641USAz/C3B9bWhyeXp4XZF0fYfBrdSzT9ucBMk3 zqI3EhxfnVpXqyZrnuw8YwcSjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2u1Tab IB/f/5plGIkSOeqWA+YBMB8GA1UdIwQYMBaAFOT95NY4XPo6hz7EXnqRR87TCbwC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzQ2Qi9GNjg1QkM5QzdG QzIxMUVCQTcxNDU0MkFDNEY5QUUwMi81UDNrMWpoYy1qcUhQc1JlZXBGSHp0TUp2 QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVQM2sxamhjLWpxSFBzUmVlcEZIenRNSnZBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzQ2Qi9GNjg1QkM5QzdGQzIxMUVCQTcxNDU0MkFDNEY5QUUwMi81UDNrMWpoYy1q cUhQc1JlZXBGSHp0TUp2QUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCJ+9jWxMngKJO0hBjmrW94zatOh9F4LgXD6D9Yu4nV0UP4qOxc5mV 3u1XQNgKM7YIpLC+RJrpOWZqOB2GYjgNQfweWPVkyrareVcXKPhS5JXogYJdz58w KVBEmVvWpa9H6vSJoLvFkXZsQq9ZLP76UtL07Jx/WucWZnj0znA7ahBcm7QpaLOL CHwplrVaDsQurRPJV1/dNQjv3DEAdpLwyjQA493nbFv8BFSg0x9jNY8oF9zl/xsg bR1OwrwGuFWFRBZf0HE25EETzbZd+BnNkLKa2D8aHe9dYMNjLyGIyt4yG1VnZabG M0iPP6f+AIDNABYjQD8arIDzxwu067fr -----END CERTIFICATE-----Generated at Sat May 31 14:35:08 2025 by rpki-client