$ rpki-client -vvf rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft File: 5c15IB7rS9nw73ZW5zJfVxZffqA.mft (raw, json) Hash identifier: PD6kLi+dwYQC1Ws2ccoyKZMPsitgE/03RndGBWU+7U0= Subject key identifier: 7F:5D:C6:0F:64:46:7E:F2:06:ED:7E:38:07:73:EF:72:52:EF:51:60 Authority key identifier: E5:CD:79:20:1E:EB:4B:D9:F0:EF:76:56:E7:32:5F:57:16:5F:7E:A0 Certificate issuer: /CN=A911218D/serialNumber=E5CD79201EEB4BD9F0EF7656E7325F57165F7EA0 Certificate serial: 07B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft Manifest number: 07A6 Signing time: Thu 24 Apr 2025 21:04:35 +0000 Manifest this update: Thu 24 Apr 2025 21:04:35 +0000 Manifest next update: Thu 01 May 2025 21:04:35 +0000 Files and hashes: 1: 5c15IB7rS9nw73ZW5zJfVxZffqA.crl (hash: oUXS5w9Fk9ceM/nHBtocopwstSBxZL7Ah2p0P7yFcDI=) 2: C14B7B728D0611EDB02E7331C4F9AE02.roa (hash: cW5d9zgypzyK0jiQh7AOhsQ2I4bzZRwKwFE4H9ImC3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.crl rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:04:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1973 (0x7b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911218D, serialNumber=E5CD79201EEB4BD9F0EF7656E7325F57165F7EA0 Validity Not Before: Apr 24 21:04:35 2025 GMT Not After : May 1 21:04:35 2025 GMT Subject: CN=680aa763-39d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f3:22:a5:39:69:cf:29:ac:bf:a5:5e:62:70: ff:b3:00:3f:aa:03:57:66:25:66:f3:be:5f:f9:fb: 31:ca:f8:ea:3c:ff:49:be:12:cc:89:bc:9d:08:49: 54:c4:40:cb:c7:c8:8d:b6:8f:64:f3:f8:5d:3b:12: 8f:44:20:76:5f:2a:a0:79:f2:c6:bf:88:81:77:06: 90:54:5d:9e:98:bb:88:65:94:0e:20:5d:a3:8f:7b: 54:2c:a5:dd:43:e6:17:62:cc:81:03:34:6c:1a:b2: 33:06:03:08:0c:d3:ea:6e:2f:3b:26:a9:a7:86:91: 47:1c:47:c1:ab:da:4e:c1:de:ef:27:21:fc:76:30: c3:30:24:06:47:4d:5d:00:a9:95:ad:25:30:db:a6: cd:23:bf:4e:e0:11:d9:73:8e:ee:33:d0:ab:b0:9f: 52:f0:a6:2f:67:ab:d1:dd:a4:2e:c4:e1:5a:c9:61: cf:5a:88:9c:5c:80:3a:79:8a:9f:99:6b:72:ef:ab: 1c:72:3d:3d:78:cf:46:e2:f2:55:71:55:96:7c:03: d5:86:5c:00:46:3e:9d:02:a3:c1:e1:62:46:a8:2f: 62:5a:8a:ca:d9:d7:ad:2b:6b:c8:09:d1:15:7d:35: 99:b6:8e:2c:64:76:e0:bf:00:38:ed:56:d0:e8:65: e6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5D:C6:0F:64:46:7E:F2:06:ED:7E:38:07:73:EF:72:52:EF:51:60 X509v3 Authority Key Identifier: keyid:E5:CD:79:20:1E:EB:4B:D9:F0:EF:76:56:E7:32:5F:57:16:5F:7E:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:33:3a:6a:a6:c7:84:9c:19:80:82:43:72:ba:32:0b:b7:49: 0a:92:9b:c2:8b:82:9b:99:c4:16:86:06:cc:dd:12:ef:bf:80: 51:d0:43:2b:6a:bc:cc:b7:98:dc:2d:1d:3b:e7:18:cc:78:1d: 48:ba:fe:e3:d7:66:e0:dc:87:da:4b:fd:57:c1:b8:de:34:ab: 4c:fa:ef:63:9f:87:98:68:eb:8c:73:77:5d:24:69:e4:9b:6b: 5a:db:89:c3:fe:a4:d8:5d:d7:d3:2c:d5:b9:e5:d9:04:1d:8f: 85:46:64:df:0b:07:07:79:f6:d0:0b:19:8a:0c:5b:bc:ef:d3: 78:dd:65:13:1c:30:d1:34:e4:0d:49:fc:bf:06:84:b2:5f:06: 97:b2:bf:87:c3:b9:27:5c:69:28:b2:04:85:d3:49:37:2b:b8: b5:25:60:4a:ec:64:10:91:ed:12:8a:42:73:17:dd:9b:00:e6: 8a:81:9e:2d:f3:60:4f:c0:d9:b7:dd:d8:7f:33:77:c2:1d:42: 27:9c:91:76:db:db:9c:46:c0:01:ad:c7:7b:92:a9:38:61:d0: e6:c6:d0:dd:f9:fb:1b:99:db:13:cc:68:b2:10:51:13:50:50: a3:26:34:c7:be:da:9c:ed:5e:d8:d8:19:bf:c5:90:f7:46:6c: 36:b5:c1:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIxOEQxMTAvBgNVBAUTKEU1Q0Q3OTIwMUVFQjRCRDlGMEVGNzY1NkU3MzI1RjU3 MTY1RjdFQTAwHhcNMjUwNDI0MjEwNDM1WhcNMjUwNTAxMjEwNDM1WjAYMRYwFAYD VQQDEw02ODBhYTc2My0zOWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvMipTlpzymsv6VeYnD/swA/qgNXZiVm875f+fsxyvjqPP9JvhLMibydCElU xEDLx8iNto9k8/hdOxKPRCB2XyqgefLGv4iBdwaQVF2emLuIZZQOIF2jj3tULKXd Q+YXYsyBAzRsGrIzBgMIDNPqbi87JqmnhpFHHEfBq9pOwd7vJyH8djDDMCQGR01d AKmVrSUw26bNI79O4BHZc47uM9CrsJ9S8KYvZ6vR3aQuxOFayWHPWoicXIA6eYqf mWty76sccj09eM9G4vJVcVWWfAPVhlwARj6dAqPB4WJGqC9iWorK2detK2vICdEV fTWZto4sZHbgvwA47VbQ6GXmrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9dxg9k Rn7yBu1+OAdz73JS71FgMB8GA1UdIwQYMBaAFOXNeSAe60vZ8O92VucyX1cWX36g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjE4RC8wRUI2NzQ4QUZG QzgxMUVBODRBMzY2N0NDNEY5QUUwMi81YzE1SUI3clM5bnc3M1pXNXpKZlZ4WmZm cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVjMTVJQjdyUzludzczWlc1ekpmVnhaZmZxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjE4RC8wRUI2NzQ4QUZGQzgxMUVBODRBMzY2N0NDNEY5QUUwMi81YzE1SUI3clM5 bnc3M1pXNXpKZlZ4WmZmcUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKMzpqpseEnBmAgkNyujILt0kKkpvCi4KbmcQWhgbM3RLvv4BR0EMr arzMt5jcLR075xjMeB1Iuv7j12bg3IfaS/1XwbjeNKtM+u9jn4eYaOuMc3ddJGnk m2ta24nD/qTYXdfTLNW55dkEHY+FRmTfCwcHefbQCxmKDFu879N43WUTHDDRNOQN Sfy/BoSyXwaXsr+Hw7knXGkosgSF00k3K7i1JWBK7GQQke0SikJzF92bAOaKgZ4t 82BPwNm33dh/M3fCHUInnJF229ucRsABrcd7kqk4YdDmxtDd+fsbmdsTzGiyEFET UFCjJjTHvtqc7V7Y2Bm/xZD3Rmw2tcFQ -----END CERTIFICATE-----Generated at Sat Apr 26 12:36:58 2025 by rpki-client