$ rpki-client -vvf rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft File: 5L99WWC2svPFIUHvK2Aq0RT0DKg.mft (raw, json) Hash identifier: gpJuijr/In2VO82+c9P91FU5jbdnfT4Q1I/zkOxgYKM= Subject key identifier: 10:01:EA:56:BD:95:4C:87:AC:D1:E4:0E:B7:A0:92:01:63:DB:61:AD Authority key identifier: E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8 Certificate issuer: /CN=A91F53A5/serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8 Certificate serial: 0303 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft Manifest number: 02FF Signing time: Mon 09 Jun 2025 00:49:24 +0000 Manifest this update: Mon 09 Jun 2025 00:49:24 +0000 Manifest next update: Mon 16 Jun 2025 00:49:24 +0000 Files and hashes: 1: 5L99WWC2svPFIUHvK2Aq0RT0DKg.crl (hash: za5hw7D9ArG9Jr7ZZinTOG/8G5v7VMO//+Kp+xUqd7w=) 2: 99C51F96DA6D11EC86CE4D59C4F9AE02.roa (hash: nd3BoBWmWncY6CXZjinblw8tRKQ0C9HJdvIgBJwhEHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 00:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 771 (0x303) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F53A5, serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8 Validity Not Before: Jun 9 00:49:24 2025 GMT Not After : Jun 16 00:49:24 2025 GMT Subject: CN=68462f94-89e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:01:69:34:40:92:67:84:ae:f4:83:95:4d:48: 41:fe:28:a4:19:4d:46:77:a6:6f:92:94:32:72:6c: 79:1d:54:f6:be:78:b0:19:98:18:93:48:9d:2b:f7: e6:73:82:b9:32:d0:40:2b:b1:ac:77:65:67:29:c5: f8:b6:34:a4:e2:92:32:82:53:65:50:58:05:ce:fb: 89:0d:63:4c:0a:be:7c:bc:91:5d:ab:48:a8:5a:f6: a6:28:50:6d:b0:8f:6c:32:1d:d7:1b:5c:10:6c:79: 51:e3:ca:20:ed:f4:e3:40:98:e0:53:dc:06:3f:c5: b9:1b:c0:fa:f5:47:2c:06:73:b2:de:f9:da:a2:27: 77:27:ef:78:ac:d7:68:03:a9:f4:bb:a1:a8:b7:5b: 00:56:eb:1c:ca:c5:fd:4f:3c:48:77:04:da:a8:cd: 2f:00:f2:b7:e4:56:96:da:f4:dc:bb:f8:a0:27:39: e1:9e:18:1d:54:6d:c0:11:88:92:bf:83:b8:f0:f5: fc:70:ee:a8:ef:bb:dd:12:79:4a:59:1d:4d:f8:be: 67:63:2b:df:a2:86:08:1e:d3:d1:b8:a3:ab:f6:24: 3b:7f:a5:05:17:65:c2:83:a8:3f:6d:9e:ef:3e:cd: 35:92:26:9b:b2:a4:18:33:56:d2:03:e6:86:6a:30: 11:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:01:EA:56:BD:95:4C:87:AC:D1:E4:0E:B7:A0:92:01:63:DB:61:AD X509v3 Authority Key Identifier: keyid:E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:50:64:fa:87:d0:25:46:60:bc:ea:c1:15:50:4d:85:16:de: cc:82:bb:58:72:97:1d:bc:61:3e:a5:8d:9e:7c:e9:96:ef:e7: 4b:54:e4:46:2b:8e:74:14:2d:ac:35:00:21:97:13:e6:2c:5d: 05:80:fc:ad:9f:dd:b1:0c:03:04:7d:97:75:db:d6:cf:e8:36: e0:1e:77:94:fc:dd:d2:c4:2e:20:4d:5c:95:1c:ec:e9:97:9c: 8c:9e:27:b5:26:0c:3f:83:2f:d4:87:4b:c8:96:a4:b5:c2:3e: 24:20:29:07:12:5b:14:00:db:30:bc:49:ea:3a:4e:2a:f7:29: 61:46:d0:bd:dc:e7:37:1d:1a:4e:de:39:06:69:67:bd:47:f5: 2a:88:d7:ad:bf:ea:42:ce:92:37:10:e3:1f:b1:17:7f:54:a7: d2:f7:ce:bc:ce:29:5c:65:c5:d1:41:bf:43:67:79:65:11:3c: 21:37:d3:16:ca:65:98:b2:90:38:a4:b5:30:71:95:b3:ec:80: 9f:60:5b:8f:06:0d:92:b7:b5:ed:12:58:5e:1c:fc:5b:52:d3: b8:ec:4f:72:01:21:0c:03:e6:ff:e4:63:95:48:6f:0a:16:5e: 71:70:d7:a1:27:ad:93:25:71:c6:4b:1f:cb:42:8e:dc:87:1f: 4d:20:23:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUzQTUxMTAvBgNVBAUTKEU0QkY3RDU5NjBCNkIyRjNDNTIxNDFFRjJCNjAyQUQx MTRGNDBDQTgwHhcNMjUwNjA5MDA0OTI0WhcNMjUwNjE2MDA0OTI0WjAYMRYwFAYD VQQDEw02ODQ2MmY5NC04OWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowFpNECSZ4Su9IOVTUhB/iikGU1Gd6ZvkpQycmx5HVT2vniwGZgYk0idK/fm c4K5MtBAK7Gsd2VnKcX4tjSk4pIyglNlUFgFzvuJDWNMCr58vJFdq0ioWvamKFBt sI9sMh3XG1wQbHlR48og7fTjQJjgU9wGP8W5G8D69UcsBnOy3vnaoid3J+94rNdo A6n0u6Got1sAVuscysX9TzxIdwTaqM0vAPK35FaW2vTcu/igJznhnhgdVG3AEYiS v4O48PX8cO6o77vdEnlKWR1N+L5nYyvfooYIHtPRuKOr9iQ7f6UFF2XCg6g/bZ7v Ps01kiabsqQYM1bSA+aGajARlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBAB6la9 lUyHrNHkDregkgFj22GtMB8GA1UdIwQYMBaAFOS/fVlgtrLzxSFB7ytgKtEU9Ayo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTNBNS81MDBDRkU5OERB NjYxMUVDODBERkU3MzZDNEY5QUUwMi81TDk5V1dDMnN2UEZJVUh2SzJBcTBSVDBE S2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVMOTlXV0Myc3ZQRklVSHZLMkFxMFJUMERLZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTNBNS81MDBDRkU5OERBNjYxMUVDODBERkU3MzZDNEY5QUUwMi81TDk5V1dDMnN2 UEZJVUh2SzJBcTBSVDBES2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5UGT6h9AlRmC86sEVUE2FFt7MgrtYcpcdvGE+pY2efOmW7+dLVORG K450FC2sNQAhlxPmLF0FgPytn92xDAMEfZd129bP6DbgHneU/N3SxC4gTVyVHOzp l5yMnie1Jgw/gy/Uh0vIlqS1wj4kICkHElsUANswvEnqOk4q9ylhRtC93Oc3HRpO 3jkGaWe9R/UqiNetv+pCzpI3EOMfsRd/VKfS9868zilcZcXRQb9DZ3llETwhN9MW ymWYspA4pLUwcZWz7ICfYFuPBg2St7XtElheHPxbUtO47E9yASEMA+b/5GOVSG8K Fl5xcNehJ62TJXHGSx/LQo7chx9NICP7 -----END CERTIFICATE-----Generated at Tue Jun 10 00:17:26 2025 by rpki-client