$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft File: S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft (raw, json) Hash identifier: iG11E3NOYgqZyuX4eKRQZH2iKHTlnsvvWFaQzznuiDU= Subject key identifier: E7:9D:C4:A1:54:DB:47:41:2D:EA:6B:62:F2:CD:39:38:02:02:AC:BF Authority key identifier: 4B:97:84:15:E1:67:DB:26:3E:F2:64:9A:1C:3B:8B:B2:D4:3F:61:B7 Certificate issuer: /CN=A91EF8D6/serialNumber=4B978415E167DB263EF2649A1C3B8BB2D43F61B7 Certificate serial: 07DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft Manifest number: 07D5 Signing time: Fri 30 May 2025 21:17:24 +0000 Manifest this update: Fri 30 May 2025 21:17:24 +0000 Manifest next update: Fri 06 Jun 2025 21:17:23 +0000 Files and hashes: 1: S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl (hash: TBo2rRVLxFnM+cpcaSXikZa0nEYKXRh811tMdFm1EOE=) 2: 6E603522F1AB11EA9F82A23DC4F9AE02.roa (hash: T4mDZ210SpDVRfUxvUs173RpQ0D7OXBy/5JPPZDEJ78=) 3: 3DA25C7A036811F0A14CC938C4F9AE02.roa (hash: 6wXXxuIxd9enMsyVcB9pxqsVVca0vy4SEk/LuQef8jA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2012 (0x7dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF8D6, serialNumber=4B978415E167DB263EF2649A1C3B8BB2D43F61B7 Validity Not Before: May 30 21:17:24 2025 GMT Not After : Jun 6 21:17:23 2025 GMT Subject: CN=683a2064-da58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d6:95:7c:7f:69:63:6a:ee:0e:4a:46:f2:34: 04:56:b4:a7:52:80:84:b2:8d:7f:dd:97:bd:69:8c: 33:5a:37:9e:c4:cd:f7:98:bd:c4:94:54:d4:f0:45: 76:c7:15:43:0e:fd:69:6d:e0:44:9f:13:8c:29:28: c9:83:01:77:b7:25:fd:fc:84:04:14:22:bc:4c:ed: 3f:1a:5d:21:9b:8a:83:58:5a:1e:cd:e7:e3:78:94: 24:8b:70:d2:26:38:34:dd:43:38:69:9a:d2:dd:11: 0c:96:b3:13:ff:cf:02:75:3d:aa:8c:00:69:cb:6f: 89:03:f0:e2:93:63:92:16:3f:f6:94:23:5d:18:d9: a1:08:9b:db:c3:75:70:ad:3e:1d:45:05:78:da:41: ef:eb:df:90:6c:1d:4e:8c:57:17:b1:dd:b9:22:8b: f6:f7:10:72:e0:12:73:94:62:f2:6c:4f:71:05:4b: 33:74:9b:6a:9b:bd:5a:f5:ce:a9:43:27:35:07:bb: b1:58:1d:8f:95:d9:38:cf:c8:43:8c:09:71:77:bd: 34:32:5f:cd:37:02:89:c6:03:30:bd:73:94:7f:4f: 5a:7a:e3:6f:59:5c:dc:15:62:ba:16:c1:c2:75:e2: be:68:5d:ed:4b:a2:51:f8:89:aa:10:cd:36:f5:5e: 54:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:9D:C4:A1:54:DB:47:41:2D:EA:6B:62:F2:CD:39:38:02:02:AC:BF X509v3 Authority Key Identifier: keyid:4B:97:84:15:E1:67:DB:26:3E:F2:64:9A:1C:3B:8B:B2:D4:3F:61:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:81:66:0a:8b:b6:86:94:6c:76:96:c1:a6:80:9d:14:d0:2f: a0:b2:a8:70:8a:8e:67:9b:fc:af:ea:7e:7b:9c:a5:f8:a1:d4: c3:bf:2d:f9:9e:8a:e9:ba:e0:7f:8d:70:8c:59:1b:6f:18:bd: 97:0e:02:d1:ff:02:ef:bf:40:79:60:d8:91:5b:63:cc:0b:b0: 61:66:ef:38:4b:83:8c:4f:30:0e:14:82:fa:1c:b3:11:a7:52: d7:0a:46:f5:d8:ea:07:11:2f:b8:71:77:a5:10:05:0b:d4:b3: b0:df:54:ee:6b:15:44:ff:69:48:37:2f:c9:77:af:99:19:27: cf:7f:7b:b0:c4:6b:f0:10:04:eb:23:9c:ff:83:10:ac:3c:99: 1c:b0:35:f6:12:bf:cb:aa:5b:e8:e3:63:f2:0c:d5:d7:5e:af: 3b:6b:bb:93:9a:5b:39:5f:a5:ae:91:a1:07:93:2e:02:ce:73: 0b:de:92:e2:4b:1d:5e:de:27:c4:f6:37:d9:62:1e:7c:0d:c9: ba:f4:21:5d:7b:7d:69:cd:7a:d6:58:a0:1f:68:f8:b4:04:8b: 9d:ad:f4:6f:0b:e4:87:19:08:30:44:d1:44:bc:52:a4:88:81: 02:55:86:5f:24:08:75:70:1d:8f:f5:6c:27:d3:29:a6:ca:7e: e4:0e:f8:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY4RDYxMTAvBgNVBAUTKDRCOTc4NDE1RTE2N0RCMjYzRUYyNjQ5QTFDM0I4QkIy RDQzRjYxQjcwHhcNMjUwNTMwMjExNzI0WhcNMjUwNjA2MjExNzIzWjAYMRYwFAYD VQQDEw02ODNhMjA2NC1kYTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9aVfH9pY2ruDkpG8jQEVrSnUoCEso1/3Ze9aYwzWjeexM33mL3ElFTU8EV2 xxVDDv1pbeBEnxOMKSjJgwF3tyX9/IQEFCK8TO0/Gl0hm4qDWFoezefjeJQki3DS Jjg03UM4aZrS3REMlrMT/88CdT2qjABpy2+JA/Dik2OSFj/2lCNdGNmhCJvbw3Vw rT4dRQV42kHv69+QbB1OjFcXsd25Iov29xBy4BJzlGLybE9xBUszdJtqm71a9c6p Qyc1B7uxWB2Pldk4z8hDjAlxd700Ml/NNwKJxgMwvXOUf09aeuNvWVzcFWK6FsHC deK+aF3tS6JR+ImqEM029V5UsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOedxKFU 20dBLeprYvLNOTgCAqy/MB8GA1UdIwQYMBaAFEuXhBXhZ9smPvJkmhw7i7LUP2G3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjhENi80RDQyRjU2Q0Yx QTMxMUVBQjVGRDk4MjRDNEY5QUUwMi9TNWVFRmVGbjJ5WS04bVNhSER1THN0UV9Z YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M1ZUVGZUZuMnlZLThtU2FIRHVMc3RRX1liYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjhENi80RDQyRjU2Q0YxQTMxMUVBQjVGRDk4MjRDNEY5QUUwMi9TNWVFRmVGbjJ5 WS04bVNhSER1THN0UV9ZYmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBngWYKi7aGlGx2lsGmgJ0U0C+gsqhwio5nm/yv6n57nKX4odTDvy35 norpuuB/jXCMWRtvGL2XDgLR/wLvv0B5YNiRW2PMC7BhZu84S4OMTzAOFIL6HLMR p1LXCkb12OoHES+4cXelEAUL1LOw31TuaxVE/2lINy/Jd6+ZGSfPf3uwxGvwEATr I5z/gxCsPJkcsDX2Er/Lqlvo42PyDNXXXq87a7uTmls5X6WukaEHky4CznML3pLi Sx1e3ifE9jfZYh58Dcm69CFde31pzXrWWKAfaPi0BIudrfRvC+SHGQgwRNFEvFKk iIECVYZfJAh1cB2P9Wwn0ymmyn7kDvjf -----END CERTIFICATE-----Generated at Sat May 31 16:31:23 2025 by rpki-client