$ rpki-client -vvf rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft File: 5jLTjFoywhfG7nHVLe-fOMoWbFE.mft (raw, json) Hash identifier: JKaocvcyWyqwUp34ib1Rb5xvQX0I7sd3GOSWqXiXcu8= Subject key identifier: CC:97:7C:CB:69:A7:21:7E:E5:50:CA:CF:CD:29:76:B8:29:67:D5:D2 Authority key identifier: E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51 Certificate issuer: /CN=A911486F/serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51 Certificate serial: 01D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft Manifest number: 01C6 Signing time: Fri 25 Apr 2025 02:18:52 +0000 Manifest this update: Fri 25 Apr 2025 02:18:52 +0000 Manifest next update: Fri 02 May 2025 02:18:52 +0000 Files and hashes: 1: 5jLTjFoywhfG7nHVLe-fOMoWbFE.crl (hash: kNXv3rAf1YN+GMDUty59vOsvBZqTTCEYpTuZSati6jg=) 2: 32D8E190D0CB11EEAB1CAF34C4F9AE02.roa (hash: I6cFYaTwrscj9Do0u5LBBtA5etRJeCEnBRWA8YbVDTo=) 3: 4D554D70D0CA11EE9DCDFA83C4F9AE02.roa (hash: 6yZMYTHYRpP2MH6PChCYijNkjUxZFdtlKAJWlJtdpuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:18:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911486F, serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51 Validity Not Before: Apr 25 02:18:52 2025 GMT Not After : May 2 02:18:52 2025 GMT Subject: CN=680af10c-cebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:82:9d:66:ca:bb:0d:30:fc:8e:e5:16:05:cb: 5f:13:e4:5d:70:b7:b5:27:d8:12:a6:28:7f:42:85: c1:f7:e5:8d:b1:b5:8f:77:df:97:b2:b7:2c:f5:b0: 1f:1b:c2:8b:0a:1c:be:93:3a:d2:cc:19:b0:58:f9: dc:dc:ff:12:f2:cc:22:3a:91:92:e1:bc:f4:9c:b1: ff:8f:e5:12:b7:26:e5:95:07:45:f7:5b:b3:84:93: 4f:ad:a9:0e:54:c2:38:0b:0a:8f:21:61:74:98:f9: 97:50:8c:1e:81:f9:08:b3:26:7f:71:3b:21:82:ac: 0c:56:90:ef:1b:47:0e:b2:ca:e8:53:1e:19:ba:84: 6b:0b:3c:68:bc:70:90:b8:0d:f5:3c:27:c4:36:24: 61:08:53:84:ba:b3:fb:9a:f9:d9:8a:40:e8:86:13: 8a:f8:8c:fc:e0:23:d1:a8:5d:7a:77:3a:55:0d:4d: 50:04:0a:2c:17:cf:23:13:78:f9:ca:d8:23:3c:2f: b1:8f:59:7a:5c:29:ef:b2:77:30:41:f3:0b:37:1e: ae:c3:0f:84:4d:9c:d8:16:90:e1:78:3b:bb:34:17: 49:ab:d9:24:d9:03:49:4f:87:f4:aa:03:60:a1:89: a1:a1:f3:b6:f4:ca:13:ed:1d:fc:da:4d:20:2b:ee: 05:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:97:7C:CB:69:A7:21:7E:E5:50:CA:CF:CD:29:76:B8:29:67:D5:D2 X509v3 Authority Key Identifier: keyid:E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:5f:5b:0a:32:a7:35:27:ce:fb:bf:38:c8:b3:1f:c4:18:9f: ae:59:ce:a9:86:df:f1:67:27:84:4e:15:2c:c5:ee:6b:97:14: 0a:96:fc:3c:ec:63:a3:ac:e4:e2:ca:1a:7c:4c:b6:82:29:e1: 58:c0:f0:fe:83:ad:51:21:ac:78:02:1a:d9:01:3f:8e:91:62: e3:7a:40:1e:f1:f0:2f:e8:37:b3:d2:aa:45:29:5d:ca:a8:f0: 2d:43:bd:fd:95:32:7d:5d:76:ef:93:e4:cb:c6:79:98:eb:da: f7:99:55:f7:ac:33:7e:56:99:5e:af:dd:de:76:d5:0b:9f:6f: 4b:19:5e:36:a9:d6:d9:c4:04:a3:6d:0d:46:bd:6c:4f:0e:76: 64:af:ac:ae:ad:64:1b:61:5a:29:d0:19:e4:e4:aa:e1:82:a0: 0d:9b:7e:2a:58:62:b9:de:21:5b:6a:66:ab:7d:9f:83:5c:46: 1c:e3:71:8a:28:41:74:8d:b4:82:a3:0a:d6:7f:f7:20:e0:1a: 26:51:e2:38:39:73:7b:43:29:61:88:42:b4:bb:8e:73:59:cc: c0:66:0b:3c:43:14:d6:3a:3b:2d:12:db:7a:21:fb:99:91:b4: b0:17:09:b9:93:2a:e5:3d:10:14:a9:98:1a:8c:71:11:c4:54: 53:75:23:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ4NkYxMTAvBgNVBAUTKEU2MzJEMzhDNUEzMkMyMTdDNkVFNzFENTJERUY5RjM4 Q0ExNjZDNTEwHhcNMjUwNDI1MDIxODUyWhcNMjUwNTAyMDIxODUyWjAYMRYwFAYD VQQDEw02ODBhZjEwYy1jZWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3oKdZsq7DTD8juUWBctfE+RdcLe1J9gSpih/QoXB9+WNsbWPd9+Xsrcs9bAf G8KLChy+kzrSzBmwWPnc3P8S8swiOpGS4bz0nLH/j+UStybllQdF91uzhJNPrakO VMI4CwqPIWF0mPmXUIwegfkIsyZ/cTshgqwMVpDvG0cOssroUx4ZuoRrCzxovHCQ uA31PCfENiRhCFOEurP7mvnZikDohhOK+Iz84CPRqF16dzpVDU1QBAosF88jE3j5 ytgjPC+xj1l6XCnvsncwQfMLNx6uww+ETZzYFpDheDu7NBdJq9kk2QNJT4f0qgNg oYmhofO29MoT7R382k0gK+4FKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMyXfMtp pyF+5VDKz80pdrgpZ9XSMB8GA1UdIwQYMBaAFOYy04xaMsIXxu5x1S3vnzjKFmxR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDg2Ri8yMkNGMzQ0ODg2 NkMxMUVEQUZBNUE0NzFDNEY5QUUwMi81akxUakZveXdoZkc3bkhWTGUtZk9Nb1di RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVqTFRqRm95d2hmRzduSFZMZS1mT01vV2JGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDg2Ri8yMkNGMzQ0ODg2NkMxMUVEQUZBNUE0NzFDNEY5QUUwMi81akxUakZveXdo Zkc3bkhWTGUtZk9Nb1diRkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQX1sKMqc1J877vzjIsx/EGJ+uWc6pht/xZyeEThUsxe5rlxQKlvw8 7GOjrOTiyhp8TLaCKeFYwPD+g61RIax4AhrZAT+OkWLjekAe8fAv6Dez0qpFKV3K qPAtQ739lTJ9XXbvk+TLxnmY69r3mVX3rDN+Vpler93edtULn29LGV42qdbZxASj bQ1GvWxPDnZkr6yurWQbYVop0Bnk5KrhgqANm34qWGK53iFbamarfZ+DXEYc43GK KEF0jbSCowrWf/cg4BomUeI4OXN7QylhiEK0u45zWczAZgs8QxTWOjstEtt6IfuZ kbSwFwm5kyrlPRAUqZgajHERxFRTdSOO -----END CERTIFICATE-----Generated at Sat Apr 26 03:59:05 2025 by rpki-client