$ rpki-client -vvf rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft File: 5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft (raw, json) Hash identifier: awuZ5zNYUXaIlZLfhfnNk+VC1lPTeWEV0WUChrzgIHo= Subject key identifier: 3A:92:DE:F2:E8:35:89:7F:38:6E:FE:39:82:A7:01:CB:24:D4:B6:14 Authority key identifier: E6:1F:A1:24:A6:18:E2:56:67:CC:31:CC:FC:49:16:CE:07:6F:DA:57 Certificate issuer: /CN=A91F35BB/serialNumber=E61FA124A618E25667CC31CCFC4916CE076FDA57 Certificate serial: 04BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft Manifest number: 04BF Signing time: Wed 04 Jun 2025 23:41:23 +0000 Manifest this update: Wed 04 Jun 2025 23:41:22 +0000 Manifest next update: Wed 11 Jun 2025 23:41:22 +0000 Files and hashes: 1: 5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl (hash: M4fZnzNv/lVPkiHoYne1ENZnEm+qcSowyHpLO03vW4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 23:41:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1215 (0x4bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F35BB, serialNumber=E61FA124A618E25667CC31CCFC4916CE076FDA57 Validity Not Before: Jun 4 23:41:22 2025 GMT Not After : Jun 11 23:41:22 2025 GMT Subject: CN=6840d9a2-1996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:84:05:bf:c5:b6:16:b9:70:67:59:93:5e:6d: c8:04:93:75:89:59:5f:e6:19:cd:5d:83:a6:12:4b: b8:c6:59:26:94:4e:db:3b:e6:06:19:20:2a:38:63: bd:2b:4d:07:f8:35:60:fb:ab:3c:a1:a4:1e:fe:76: 10:8b:0a:e6:b7:77:4b:f4:c1:f1:e3:96:fd:21:2a: 41:e3:22:f2:d5:55:50:91:5e:71:ef:bf:bf:7a:2f: 4d:77:ee:86:76:70:ad:18:ea:d5:12:02:1d:1c:fe: c9:6b:a9:0f:eb:9f:dc:66:4a:ac:7b:ec:6f:12:6e: f2:9c:df:63:a4:c2:cf:df:17:79:7a:b8:43:bf:28: ee:ea:1d:7c:0a:7d:8b:14:69:d3:87:2c:09:e4:da: 77:2d:93:fb:58:34:f9:e7:77:16:dc:b9:34:50:b5: 6b:ff:2e:fd:96:1c:e7:a9:a3:47:83:7f:58:48:eb: 73:36:01:fa:b6:b5:e0:3d:85:ed:9c:97:3b:ff:ed: a7:5d:33:65:e4:37:91:62:a8:18:57:15:00:22:7d: 44:60:4e:91:f9:c2:59:d9:f7:e9:b0:00:1c:10:05: d3:5b:d7:2d:7b:69:2a:2d:bc:a3:85:52:c1:07:88: fa:39:06:07:eb:5a:6c:27:ff:d6:54:93:65:60:73: 6f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:92:DE:F2:E8:35:89:7F:38:6E:FE:39:82:A7:01:CB:24:D4:B6:14 X509v3 Authority Key Identifier: keyid:E6:1F:A1:24:A6:18:E2:56:67:CC:31:CC:FC:49:16:CE:07:6F:DA:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:9c:a6:b7:91:b0:c7:8f:4e:0c:8c:03:cf:a2:46:a4:aa:dc: f8:e0:de:90:4f:8a:5c:a0:c4:8a:3d:42:f6:80:b7:5a:38:d2: e8:57:cc:5a:6a:04:e2:53:96:20:a5:46:26:cd:33:be:93:93: ad:1f:ca:30:42:40:fa:4e:9c:c8:27:4b:37:7a:51:88:ad:9b: a9:6a:d1:71:6f:6f:6b:4f:60:dc:49:c5:6d:35:db:ba:19:dc: e0:9e:4e:34:0f:42:fd:f8:a2:f6:7c:f0:07:f8:18:a3:68:63: c9:e6:4d:fb:3e:40:6d:91:f1:a5:cc:4d:de:15:af:20:89:30: 28:fc:42:90:79:de:f7:b5:8a:c6:c1:10:00:07:4b:98:72:87: 45:bd:6c:6a:8d:e2:e4:64:07:dc:38:8d:3e:a5:bb:49:c4:77: 7f:cd:7f:07:92:1d:7a:d0:bd:38:cf:8c:30:a9:09:68:7e:7f: eb:ed:62:24:55:e1:78:3e:6e:67:08:50:c1:6d:41:90:0d:9f: aa:49:13:f2:82:80:51:9e:1c:19:bb:24:45:fe:f9:63:bc:4e: c8:0b:09:b7:6a:4a:14:64:07:a6:b1:4e:a0:5e:14:24:77:ae: 46:f4:84:98:aa:fa:96:4c:42:0a:5d:68:56:f7:f7:8b:cd:e4: dd:ce:4e:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM1QkIxMTAvBgNVBAUTKEU2MUZBMTI0QTYxOEUyNTY2N0NDMzFDQ0ZDNDkxNkNF MDc2RkRBNTcwHhcNMjUwNjA0MjM0MTIyWhcNMjUwNjExMjM0MTIyWjAYMRYwFAYD VQQDEw02ODQwZDlhMi0xOTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAroQFv8W2FrlwZ1mTXm3IBJN1iVlf5hnNXYOmEku4xlkmlE7bO+YGGSAqOGO9 K00H+DVg+6s8oaQe/nYQiwrmt3dL9MHx45b9ISpB4yLy1VVQkV5x77+/ei9Nd+6G dnCtGOrVEgIdHP7Ja6kP65/cZkqse+xvEm7ynN9jpMLP3xd5erhDvyju6h18Cn2L FGnThywJ5Np3LZP7WDT553cW3Lk0ULVr/y79lhznqaNHg39YSOtzNgH6trXgPYXt nJc7/+2nXTNl5DeRYqgYVxUAIn1EYE6R+cJZ2ffpsAAcEAXTW9cte2kqLbyjhVLB B4j6OQYH61psJ//WVJNlYHNvbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDqS3vLo NYl/OG7+OYKnAcsk1LYUMB8GA1UdIwQYMBaAFOYfoSSmGOJWZ8wxzPxJFs4Hb9pX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzVCQi8wNzYzN0QwMjI3 RkIxMUVDODg4MEQxNzBDNEY5QUUwMi81aC1oSktZWTRsWm56REhNX0VrV3pnZHYy bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVoLWhKS1lZNGxabnpESE1fRWtXemdkdjJsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzVCQi8wNzYzN0QwMjI3RkIxMUVDODg4MEQxNzBDNEY5QUUwMi81aC1oSktZWTRs Wm56REhNX0VrV3pnZHYybGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbnKa3kbDHj04MjAPPokakqtz44N6QT4pcoMSKPUL2gLdaONLoV8xa agTiU5YgpUYmzTO+k5OtH8owQkD6TpzIJ0s3elGIrZupatFxb29rT2DcScVtNdu6 Gdzgnk40D0L9+KL2fPAH+BijaGPJ5k37PkBtkfGlzE3eFa8giTAo/EKQed73tYrG wRAAB0uYcodFvWxqjeLkZAfcOI0+pbtJxHd/zX8Hkh160L04z4wwqQlofn/r7WIk VeF4Pm5nCFDBbUGQDZ+qSRPygoBRnhwZuyRF/vljvE7ICwm3akoUZAemsU6gXhQk d65G9ISYqvqWTEIKXWhW9/eLzeTdzk7E -----END CERTIFICATE-----Generated at Fri Jun 6 17:18:26 2025 by rpki-client