$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft File: 5GuTGFhaweBs84Ti7swh9HQzibs.mft (raw, json) Hash identifier: 3K8md1nDoiHI2AC0O5hzgj/We5E/Y5EG1k/t9a1S30g= Subject key identifier: 43:9E:76:ED:CA:37:4B:55:81:6A:37:D2:69:1D:C3:5A:AD:21:F3:91 Authority key identifier: E4:6B:93:18:58:5A:C1:E0:6C:F3:84:E2:EE:CC:21:F4:74:33:89:BB Certificate issuer: /CN=A91F83B6/serialNumber=E46B9318585AC1E06CF384E2EECC21F4743389BB Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft Manifest number: 34 Signing time: Sat 31 May 2025 07:14:22 +0000 Manifest this update: Sat 31 May 2025 07:14:21 +0000 Manifest next update: Sat 07 Jun 2025 07:14:21 +0000 Files and hashes: 1: 5GuTGFhaweBs84Ti7swh9HQzibs.crl (hash: b858e9d1nbVBxKYle8pQ7xehyb0RJWS54rr+iH/fNtA=) 2: 3CA27876F73F11EF95C5F011C4F9AE02.roa (hash: N43S8PomeMoOc73XP6mqN9NeUSUDTrEwlo9H3GKtmMY=) 3: E0E5603A371611F0A29AF975C4F9AE02.roa (hash: 7sGkTVjWqxDLmNFPgwzndzV8HDq97b9L4xe31X9V3nA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.crl rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:14:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F83B6, serialNumber=E46B9318585AC1E06CF384E2EECC21F4743389BB Validity Not Before: May 31 07:14:21 2025 GMT Not After : Jun 7 07:14:21 2025 GMT Subject: CN=683aac4d-e156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:31:0c:3f:0d:ae:71:c0:0f:2f:fc:02:8e:3f: 36:26:78:2d:8b:02:34:50:76:88:a0:2a:75:42:a9: 46:cd:a6:65:3e:4c:f3:6e:58:71:2f:45:84:5e:b7: 39:cb:6e:f7:4c:27:f9:b0:42:19:2b:bc:94:f4:1f: bb:4b:d3:5a:c8:75:36:38:4a:c6:2c:c7:f1:7a:e7: 4f:f9:03:13:9d:32:42:51:f9:16:ee:7c:6d:0a:26: c2:19:f0:88:a2:da:a6:02:ae:96:29:9b:2d:7e:63: 43:42:8b:ea:92:87:e3:f1:1e:38:8c:0e:f3:b4:01: e0:0c:8a:87:17:2f:d3:67:74:0c:ce:74:fc:7e:64: ca:47:2e:61:80:58:1f:b8:b5:65:19:cb:c1:f6:71: 6b:5c:dd:2e:f9:54:6d:1a:46:48:aa:a8:6f:6c:22: c7:6a:6e:7f:78:24:9f:d0:c0:aa:b1:eb:ff:4d:cd: 27:d3:6f:bd:7a:d0:66:f1:4f:ed:fe:38:c5:86:8e: 3c:9e:45:50:75:66:7b:14:08:46:eb:df:28:f1:dd: 04:ac:56:19:36:a9:e4:8f:8e:22:73:5d:c0:4c:cd: cd:f0:60:be:30:b3:ac:9c:59:93:7e:a0:8d:5f:bf: 05:e7:5c:9e:8b:73:e8:eb:a9:05:87:a9:32:2f:46: bf:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:9E:76:ED:CA:37:4B:55:81:6A:37:D2:69:1D:C3:5A:AD:21:F3:91 X509v3 Authority Key Identifier: keyid:E4:6B:93:18:58:5A:C1:E0:6C:F3:84:E2:EE:CC:21:F4:74:33:89:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:15:dc:07:fc:86:37:a9:52:ce:71:59:81:90:55:f2:a2:61: 11:77:9d:91:8b:fb:b0:1e:08:7d:51:c1:c9:00:2b:71:f0:82: 8f:2b:7a:29:03:38:aa:c9:6a:3d:b7:a6:7e:97:da:97:68:c0: 68:d9:89:0e:fd:72:8b:4e:40:3c:df:c2:bc:1d:b3:b0:65:6b: fb:99:81:86:00:e8:b5:5c:ef:2c:fc:c7:ca:c9:93:35:f5:fb: 7a:9a:8f:83:03:71:41:2a:2b:8b:2a:e1:c8:b2:87:6b:a9:cd: 52:ab:6b:4c:f6:27:17:f5:aa:71:98:95:51:d0:5e:83:0e:ea: 52:ab:b1:90:ce:23:06:b7:97:06:fe:2c:10:61:77:e7:ac:7d: 44:65:01:18:fe:10:ed:e9:10:4c:45:a2:cf:5e:04:ff:90:f7: a8:8e:ea:6c:d0:a9:0c:ff:6b:45:cd:41:ff:e2:a5:fe:d2:ae: 1a:e4:2c:2b:f6:c0:43:1a:4b:31:76:75:71:47:6d:8f:a2:71: 78:c9:47:10:ad:49:b3:3e:6b:44:70:39:bd:c9:17:b5:d0:91: 06:4c:1e:76:e1:bf:ae:20:c2:7d:9d:5e:bc:c9:af:a2:3f:55: 0e:23:ab:14:55:c4:c4:e6:6d:1c:dd:1f:c0:bb:75:99:18:17: c6:5d:70:2b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODNCNjExMC8GA1UEBRMoRTQ2QjkzMTg1ODVBQzFFMDZDRjM4NEUyRUVDQzIxRjQ3 NDMzODlCQjAeFw0yNTA1MzEwNzE0MjFaFw0yNTA2MDcwNzE0MjFaMBgxFjAUBgNV BAMTDTY4M2FhYzRkLWUxNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2MQw/Da5xwA8v/AKOPzYmeC2LAjRQdoigKnVCqUbNpmU+TPNuWHEvRYRetznL bvdMJ/mwQhkrvJT0H7tL01rIdTY4SsYsx/F650/5AxOdMkJR+RbufG0KJsIZ8Iii 2qYCrpYpmy1+Y0NCi+qSh+PxHjiMDvO0AeAMiocXL9NndAzOdPx+ZMpHLmGAWB+4 tWUZy8H2cWtc3S75VG0aRkiqqG9sIsdqbn94JJ/QwKqx6/9NzSfTb7160GbxT+3+ OMWGjjyeRVB1ZnsUCEbr3yjx3QSsVhk2qeSPjiJzXcBMzc3wYL4ws6ycWZN+oI1f vwXnXJ6Lc+jrqQWHqTIvRr/3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQ5527co3 S1WBajfSaR3DWq0h85EwHwYDVR0jBBgwFoAU5GuTGFhaweBs84Ti7swh9HQzibsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4M0I2L0U4RjE4QjIyRjcz RTExRUY5Njg3MzcwREM0RjlBRTAyLzVHdVRHRmhhd2VCczg0VGk3c3doOUhRemli cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNUd1VEdGaGF3ZUJzODRUaTdzd2g5SFF6aWJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 M0I2L0U4RjE4QjIyRjczRTExRUY5Njg3MzcwREM0RjlBRTAyLzVHdVRHRmhhd2VC czg0VGk3c3doOUhRemlicy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC8V3Af8hjepUs5xWYGQVfKiYRF3nZGL+7AeCH1RwckAK3Hwgo8reikD OKrJaj23pn6X2pdowGjZiQ79cotOQDzfwrwds7Bla/uZgYYA6LVc7yz8x8rJkzX1 +3qaj4MDcUEqK4sq4ciyh2upzVKra0z2Jxf1qnGYlVHQXoMO6lKrsZDOIwa3lwb+ LBBhd+esfURlARj+EO3pEExFos9eBP+Q96iO6mzQqQz/a0XNQf/ipf7SrhrkLCv2 wEMaSzF2dXFHbY+icXjJRxCtSbM+a0RwOb3JF7XQkQZMHnbhv64gwn2dXrzJr6I/ VQ4jqxRVxMTmbRzdH8C7dZkYF8ZdcCs= -----END CERTIFICATE-----Generated at Sat May 31 14:53:20 2025 by rpki-client