$ rpki-client -vvf rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft File: q4PFkhuEDFQXM78Ucyl13UlzP_w.mft (raw, json) Hash identifier: p3lZ4PLGrN9yjB3+mWyP9i6OoImaqiWW0sZUeVcgYB8= Subject key identifier: 2D:C6:45:C1:11:B1:2B:2F:61:5B:6D:99:E6:AA:9F:00:7E:F7:FF:AB Authority key identifier: AB:83:C5:92:1B:84:0C:54:17:33:BF:14:73:29:75:DD:49:73:3F:FC Certificate issuer: /CN=A91F523F/serialNumber=AB83C5921B840C541733BF14732975DD49733FFC Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4PFkhuEDFQXM78Ucyl13UlzP_w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft Manifest number: 5D Signing time: Sat 31 May 2025 06:41:36 +0000 Manifest this update: Sat 31 May 2025 06:41:36 +0000 Manifest next update: Sat 07 Jun 2025 06:41:36 +0000 Files and hashes: 1: q4PFkhuEDFQXM78Ucyl13UlzP_w.crl (hash: uF3kISq/qsB1tlKu6NnZqzddmzylatfnZNvg4W8HjvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.crl rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4PFkhuEDFQXM78Ucyl13UlzP_w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:41:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F523F, serialNumber=AB83C5921B840C541733BF14732975DD49733FFC Validity Not Before: May 31 06:41:36 2025 GMT Not After : Jun 7 06:41:36 2025 GMT Subject: CN=683aa4a0-f463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6f:36:89:83:38:12:38:ea:91:61:26:37:98: 7f:28:4c:50:77:6e:c0:35:fe:c6:ef:78:80:02:1f: 0e:a0:23:4b:f0:e6:4d:33:16:03:b8:1b:91:c9:4e: 9e:43:8e:f2:aa:be:af:d9:76:c8:95:2e:c0:bb:95: ef:9b:be:31:0c:da:bf:f4:48:28:35:3f:5d:e4:8d: c4:27:ec:50:d6:6b:5e:c3:74:c7:0a:5c:40:65:86: 87:da:b1:64:bc:ca:49:09:49:7a:2a:d5:62:f5:06: a4:ac:33:44:43:7b:ff:29:99:c0:a7:26:8e:6c:36: 83:f5:db:c0:9b:97:86:a7:a3:d2:6b:c5:cd:5d:41: 44:30:42:bd:e4:14:d5:02:ea:ad:d1:93:08:68:9c: 4c:c6:bc:36:fc:3e:78:2e:e7:ac:5f:43:a1:bd:7c: 08:e8:2f:85:03:c3:de:2b:a3:98:63:32:1a:cb:04: 31:87:a1:46:d6:52:72:72:43:ce:d3:5f:13:8e:3b: b5:1c:26:7e:bb:f3:3f:99:fb:49:b0:1b:60:63:7d: 75:d9:67:b9:cd:86:81:2d:14:f4:4d:b6:2f:af:fb: 16:6c:05:52:c9:7c:c7:bc:e7:31:ea:b6:2c:1f:34: 7f:03:6a:56:43:47:7a:c1:35:8c:5f:a8:6b:73:d6: ef:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C6:45:C1:11:B1:2B:2F:61:5B:6D:99:E6:AA:9F:00:7E:F7:FF:AB X509v3 Authority Key Identifier: keyid:AB:83:C5:92:1B:84:0C:54:17:33:BF:14:73:29:75:DD:49:73:3F:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4PFkhuEDFQXM78Ucyl13UlzP_w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:1a:2b:8e:ad:6e:27:cc:6f:e8:22:8c:c9:d8:a1:42:6d:0b: ab:94:32:2a:94:a4:4d:b6:d2:31:22:b4:bf:1d:25:cd:50:a6: 1f:e0:42:57:b8:bf:63:49:29:16:46:16:ab:8e:cc:1a:3f:49: f7:b4:6e:33:25:03:1d:84:00:b5:b6:8d:c1:71:c3:9f:dc:8b: b4:d6:4a:4e:eb:fb:1e:6e:ba:78:87:12:64:4b:e5:76:a3:f8: b8:99:e3:6c:f6:1b:62:c5:94:18:d0:c2:f9:43:15:d4:e2:d3: 61:c6:ea:18:43:e3:da:e9:f9:84:5a:c5:c6:02:ee:e2:e4:12: 4b:01:0d:dc:2f:de:4e:37:3f:a6:5f:9e:82:17:96:20:db:69: 7d:a3:43:c4:4a:aa:9f:7c:d0:96:cc:d3:b7:f9:92:8d:84:6a: 0c:69:1a:f2:59:6d:cb:98:65:40:a3:f1:68:00:66:f4:ea:5e: 56:af:20:2e:57:d1:6c:4d:d8:6f:c7:34:3b:23:6e:0a:25:16: 24:25:3e:a5:92:59:32:de:8f:d3:2d:f4:b9:87:3a:34:db:2c: fe:da:40:91:18:ba:be:d8:0e:aa:e3:8b:50:ee:ee:00:9c:c1: 33:95:07:b4:a6:57:ff:a0:d3:5c:3f:a9:b2:9d:50:6f:18:5a: 16:12:8c:7d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTIzRjExMC8GA1UEBRMoQUI4M0M1OTIxQjg0MEM1NDE3MzNCRjE0NzMyOTc1REQ0 OTczM0ZGQzAeFw0yNTA1MzEwNjQxMzZaFw0yNTA2MDcwNjQxMzZaMBgxFjAUBgNV BAMTDTY4M2FhNGEwLWY0NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAbzaJgzgSOOqRYSY3mH8oTFB3bsA1/sbveIACHw6gI0vw5k0zFgO4G5HJTp5D jvKqvq/ZdsiVLsC7le+bvjEM2r/0SCg1P13kjcQn7FDWa17DdMcKXEBlhofasWS8 ykkJSXoq1WL1BqSsM0RDe/8pmcCnJo5sNoP128Cbl4ano9Jrxc1dQUQwQr3kFNUC 6q3RkwhonEzGvDb8Pngu56xfQ6G9fAjoL4UDw94ro5hjMhrLBDGHoUbWUnJyQ87T XxOOO7UcJn678z+Z+0mwG2BjfXXZZ7nNhoEtFPRNti+v+xZsBVLJfMe85zHqtiwf NH8DalZDR3rBNYxfqGtz1u9ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULcZFwRGx Ky9hW22Z5qqfAH73/6swHwYDVR0jBBgwFoAUq4PFkhuEDFQXM78Ucyl13UlzP/ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1MjNGLzU2QTRDQjhBQjA1 MzExRUY5QzJCOEQzRkM0RjlBRTAyL3E0UEZraHVFREZRWE03OFVjeWwxM1VselBf dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcTRQRmtodUVERlFYTTc4VWN5bDEzVWx6UF93LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 MjNGLzU2QTRDQjhBQjA1MzExRUY5QzJCOEQzRkM0RjlBRTAyL3E0UEZraHVFREZR WE03OFVjeWwxM1VselBfdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIcaK46tbifMb+gijMnYoUJtC6uUMiqUpE220jEitL8dJc1Qph/gQle4 v2NJKRZGFquOzBo/Sfe0bjMlAx2EALW2jcFxw5/ci7TWSk7r+x5uuniHEmRL5Xaj +LiZ42z2G2LFlBjQwvlDFdTi02HG6hhD49rp+YRaxcYC7uLkEksBDdwv3k43P6Zf noIXliDbaX2jQ8RKqp980JbM07f5ko2EagxpGvJZbcuYZUCj8WgAZvTqXlavIC5X 0WxN2G/HNDsjbgolFiQlPqWSWTLej9Mt9LmHOjTbLP7aQJEYur7YDqrji1Du7gCc wTOVB7SmV/+g01w/qbKdUG8YWhYSjH0= -----END CERTIFICATE-----Generated at Sat May 31 15:11:17 2025 by rpki-client