$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft File: 5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft (raw, json) Hash identifier: PJBCteQB1AB242lpvKgZieeOuBzZVaBPsEGRH1DTKIg= Subject key identifier: F9:CC:69:33:5B:81:49:70:D9:7E:64:BF:81:BC:9F:D6:35:44:56:7B Authority key identifier: E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30 Certificate issuer: /CN=A91EEEB8/serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930 Certificate serial: 34BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft Manifest number: 349A Signing time: Sat 31 May 2025 15:05:33 +0000 Manifest this update: Sat 31 May 2025 15:05:33 +0000 Manifest next update: Sat 07 Jun 2025 15:05:33 +0000 Files and hashes: 1: 5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl (hash: 2Y6sEXOVJRF44Vnmj8ydMPFjW5WOEVV7T98+X+Y14ro=) 2: 32DFCCDCEB8011EAAB806163C4F9AE02.roa (hash: d8SyVppxPlIuR4fpNFIkYTURn6Yx4CMf1TSPHGG+TtY=) 3: 9A4EE834EB8111EA87E2C165C4F9AE02.roa (hash: 2HjZqBm6c0Bz0zik/PCkuHSNvhZSOIqG0dnIWyE0YeQ=) 4: FC75A532DBAC11EA9FF2FA1FC4F9AE02.roa (hash: EbIaf/1Sy/3aBx9khl+6A1cQZxzTMmTyasNR7QqdjR8=) 5: 60DA0694D9E111EA82120960C4F9AE02.roa (hash: 0RxGIy0cRn46gMQ4a+LKJK3dXVABCl5t2jG6UZ82riU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:05:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13498 (0x34ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEEB8, serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930 Validity Not Before: May 31 15:05:33 2025 GMT Not After : Jun 7 15:05:33 2025 GMT Subject: CN=683b1abd-d439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:43:8f:6f:31:d2:58:be:24:da:36:c0:88:ff: 00:6f:69:aa:d7:bd:de:76:b0:4b:a3:76:35:40:bc: de:3f:cb:90:be:7b:4f:09:3e:29:a5:c2:c5:42:6d: 0e:0f:27:e9:4c:f7:81:d0:92:33:67:0d:0c:a0:d1: 93:f7:25:ea:2e:0e:8b:a7:8d:e6:b7:b3:08:4f:72: 43:e3:e1:a6:20:22:8e:76:3d:76:24:23:c1:ad:36: 08:68:1c:54:d4:c6:4e:05:8b:ed:60:22:0c:c2:f8: a9:64:6d:9b:60:5d:39:23:ae:c7:c1:a6:8e:13:7d: ce:36:62:3b:00:dc:7f:7f:c2:cd:bf:17:a1:75:66: 9b:d3:d4:e8:88:62:6d:32:b5:f6:f5:94:04:61:84: 7c:16:cd:74:e1:27:17:8f:63:ef:b1:e6:02:f8:a6: f3:cc:3d:c6:03:c1:28:fc:d0:fe:68:5b:ed:ac:53: e3:e1:4f:42:99:4f:7a:cc:fc:9f:03:37:64:58:ca: 03:c7:28:4d:8b:5f:ef:ae:4e:07:21:c2:36:65:3b: 00:a1:a0:50:e2:cf:45:88:67:ba:9d:ff:2d:c3:99: 65:a8:e4:82:53:58:e1:4d:69:c5:f0:47:81:b8:58: 01:c3:89:c2:99:d2:52:ca:2a:b0:7c:93:c7:a9:be: 11:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:CC:69:33:5B:81:49:70:D9:7E:64:BF:81:BC:9F:D6:35:44:56:7B X509v3 Authority Key Identifier: keyid:E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:d0:9f:92:0b:c2:2e:af:b2:37:4e:67:2f:99:72:e6:1a:27: ba:dc:2c:71:92:00:06:6b:df:1c:ce:4e:3c:57:62:32:2e:8b: 39:8a:2c:81:4a:e8:84:57:14:b2:00:03:6b:1c:09:fb:65:fa: 1a:ae:88:d7:ee:f8:31:ee:45:9b:a4:8a:c4:54:e9:27:f9:f4: b6:21:55:80:61:2f:77:71:ea:13:d8:50:c7:87:e3:7f:5c:b4: 3f:da:dc:8d:91:c9:fd:9c:ea:0b:b0:e4:e6:c2:b4:9a:79:22: 75:ce:a9:13:46:2d:6d:e8:c0:17:d4:10:2e:27:23:0a:16:0b: 3d:d5:0a:7d:03:d8:aa:b7:10:49:6e:0d:fc:9b:62:f6:98:df: d8:a1:10:f4:89:ba:5c:e3:d5:99:ca:9f:51:76:d0:56:9d:ba: 6c:91:b6:7c:7f:d5:13:35:82:e6:2a:e6:34:4b:9a:85:e5:c8: 54:a2:80:6a:e8:e6:12:40:c6:e5:b4:1b:2a:56:ba:7f:cc:89: 49:59:8a:6e:e5:71:56:91:06:e3:5d:f8:eb:4e:34:f2:ee:87: 0d:f3:2f:f7:ad:93:32:2e:50:1e:a9:c8:9d:c6:bd:bc:54:09: 1c:2e:43:08:2b:e6:4d:d4:10:88:75:44:9b:24:f2:f8:81:ef: ad:b1:cf:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFQjgxMTAvBgNVBAUTKEU2MjJDODExNEYzRjI0QUE2QTgwN0M4MTQxRTM5NjRC NTUxQkI5MzAwHhcNMjUwNTMxMTUwNTMzWhcNMjUwNjA3MTUwNTMzWjAYMRYwFAYD VQQDEw02ODNiMWFiZC1kNDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkOPbzHSWL4k2jbAiP8Ab2mq173edrBLo3Y1QLzeP8uQvntPCT4ppcLFQm0O DyfpTPeB0JIzZw0MoNGT9yXqLg6Lp43mt7MIT3JD4+GmICKOdj12JCPBrTYIaBxU 1MZOBYvtYCIMwvipZG2bYF05I67HwaaOE33ONmI7ANx/f8LNvxehdWab09ToiGJt MrX29ZQEYYR8Fs104ScXj2PvseYC+KbzzD3GA8Eo/ND+aFvtrFPj4U9CmU96zPyf AzdkWMoDxyhNi1/vrk4HIcI2ZTsAoaBQ4s9FiGe6nf8tw5llqOSCU1jhTWnF8EeB uFgBw4nCmdJSyiqwfJPHqb4RKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPnMaTNb gUlw2X5kv4G8n9Y1RFZ7MB8GA1UdIwQYMBaAFOYiyBFPPySqaoB8gUHjlktVG7kw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUVCOC84RTBGMkNCNjFE QTExMUUyQjkwNkJDOTMwOEIwMkNEMi81aUxJRVU4X0pLcHFnSHlCUWVPV1MxVWJ1 VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVpTElFVThfSktwcWdIeUJRZU9XUzFVYnVUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUVCOC84RTBGMkNCNjFEQTExMUUyQjkwNkJDOTMwOEIwMkNEMi81aUxJRVU4X0pL cHFnSHlCUWVPV1MxVWJ1VEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA10J+SC8Iur7I3TmcvmXLmGie63CxxkgAGa98czk48V2IyLos5iiyB SuiEVxSyAANrHAn7ZfoarojX7vgx7kWbpIrEVOkn+fS2IVWAYS93ceoT2FDHh+N/ XLQ/2tyNkcn9nOoLsOTmwrSaeSJ1zqkTRi1t6MAX1BAuJyMKFgs91Qp9A9iqtxBJ bg38m2L2mN/YoRD0ibpc49WZyp9RdtBWnbpskbZ8f9UTNYLmKuY0S5qF5chUooBq 6OYSQMbltBsqVrp/zIlJWYpu5XFWkQbjXfjrTjTy7ocN8y/3rZMyLlAeqcidxr28 VAkcLkMIK+ZN1BCIdUSbJPL4ge+tsc+m -----END CERTIFICATE-----Generated at Sat May 31 17:34:23 2025 by rpki-client