$ rpki-client -vvf rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft File: 5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft (raw, json) Hash identifier: 0ec3wRQ79NbPgv0VU2bxTfBfUKc6wp6sAPCsTvTmbBE= Subject key identifier: 5A:90:64:30:F9:B4:7B:7A:57:38:90:A3:60:92:95:FE:F2:45:52:20 Authority key identifier: E5:06:93:CA:18:5B:B6:5D:92:CA:FB:30:E3:76:F5:1B:95:9A:D2:D8 Certificate issuer: /CN=A9115122/serialNumber=E50693CA185BB65D92CAFB30E376F51B959AD2D8 Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft Manifest number: 0171 Signing time: Fri 25 Apr 2025 02:57:16 +0000 Manifest this update: Fri 25 Apr 2025 02:57:15 +0000 Manifest next update: Fri 02 May 2025 02:57:15 +0000 Files and hashes: 1: 5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl (hash: oISkUqbfKnlFuyUe41AjG+V5PIKQM19J5KCFeXcscx0=) 2: D4B97082EF2211EDB7EFE882C4F9AE02.roa (hash: hB47ivnW+fJgf8IJJ0l6aDuxJFT7bxRrB7EorTuGqJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:57:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115122, serialNumber=E50693CA185BB65D92CAFB30E376F51B959AD2D8 Validity Not Before: Apr 25 02:57:15 2025 GMT Not After : May 2 02:57:15 2025 GMT Subject: CN=680afa0c-5156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b3:7a:a9:2c:cd:1c:3c:40:ff:79:d3:e7:b5: a5:be:ea:2b:c5:a9:08:64:45:86:8e:74:a0:0d:d7: 93:47:a6:cc:b7:a3:18:c8:e9:9d:ac:1d:3e:98:e1: 06:c7:42:41:96:f8:ed:8a:f8:ab:b4:a3:69:44:88: 2a:c9:56:4d:32:dc:b0:97:1e:14:49:61:63:b9:b2: f9:62:18:2b:2b:3f:44:dd:47:5e:2e:57:58:9f:f6: b3:f7:53:0e:de:9a:9b:75:67:f2:6e:fa:fe:57:6f: b3:d9:d6:9e:da:03:dc:1f:be:25:b0:65:14:7f:e4: 73:25:b7:2a:82:97:c0:e0:aa:e3:5a:38:34:a9:fb: 7d:2f:3e:31:6a:32:52:9f:05:45:f0:3b:14:38:f8: f6:83:8d:df:df:ee:ac:2c:b5:83:b7:1e:25:e8:57: db:f0:f6:5b:96:aa:28:04:ab:99:eb:69:1f:3d:6b: 2c:18:d5:2a:69:78:4b:79:59:51:ef:51:3f:fd:66: 1e:a2:6c:d4:b9:d8:29:f1:e6:25:4a:6c:92:65:87: b0:d2:39:60:eb:01:17:87:36:0e:d2:a6:8c:94:72: fe:00:3b:66:a5:c5:db:bb:bc:a6:6d:e5:4a:90:a0: 3a:b9:34:be:59:0d:a0:aa:36:65:0c:60:b4:c1:de: a7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:90:64:30:F9:B4:7B:7A:57:38:90:A3:60:92:95:FE:F2:45:52:20 X509v3 Authority Key Identifier: keyid:E5:06:93:CA:18:5B:B6:5D:92:CA:FB:30:E3:76:F5:1B:95:9A:D2:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:4a:5d:f8:97:f4:b8:23:cf:f9:f3:61:52:11:8b:dc:3d:da: 04:e5:c8:e7:76:2a:7b:7d:5a:59:8a:f5:fb:d0:05:49:a9:a1: 22:88:dc:fd:05:e5:b8:5a:54:bf:15:5c:54:d0:cc:e2:b4:79: 0a:84:0b:6f:41:48:05:81:97:ab:00:61:db:7a:7b:60:5a:d7: e3:c7:30:45:fa:3b:dc:9a:b4:25:20:f2:fe:ed:df:fd:99:5d: 61:29:02:b0:29:56:ca:fe:59:99:1f:4c:64:fa:cc:b3:f9:bb: 5f:5b:1e:1f:32:b1:31:84:bb:36:13:aa:8d:c9:d7:ab:87:2d: b2:ae:3b:92:50:02:fc:63:af:14:27:ab:4e:47:0e:a3:3a:00: e9:aa:74:e3:40:67:12:86:91:1b:08:02:61:ed:30:3a:c2:09: 08:42:c9:45:97:c9:a1:ac:22:f2:2e:5e:8d:4a:ff:a2:60:d2: d8:21:a0:6f:21:65:3d:92:84:d9:92:88:ee:30:ab:d5:7a:a8: d0:bf:98:1d:16:08:88:62:5e:63:db:9a:94:6d:93:04:e0:90: 4f:c5:5c:8d:df:fe:c8:f9:a5:a2:10:2b:ad:cd:87:e0:22:45: 1a:a1:9c:b0:d1:44:43:f3:f8:97:eb:ae:fb:be:8f:48:c3:e8: 10:78:68:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTUxMjIxMTAvBgNVBAUTKEU1MDY5M0NBMTg1QkI2NUQ5MkNBRkIzMEUzNzZGNTFC OTU5QUQyRDgwHhcNMjUwNDI1MDI1NzE1WhcNMjUwNTAyMDI1NzE1WjAYMRYwFAYD VQQDEw02ODBhZmEwYy01MTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLN6qSzNHDxA/3nT57WlvuorxakIZEWGjnSgDdeTR6bMt6MYyOmdrB0+mOEG x0JBlvjtivirtKNpRIgqyVZNMtywlx4USWFjubL5YhgrKz9E3UdeLldYn/az91MO 3pqbdWfybvr+V2+z2dae2gPcH74lsGUUf+RzJbcqgpfA4KrjWjg0qft9Lz4xajJS nwVF8DsUOPj2g43f3+6sLLWDtx4l6Ffb8PZblqooBKuZ62kfPWssGNUqaXhLeVlR 71E//WYeomzUudgp8eYlSmySZYew0jlg6wEXhzYO0qaMlHL+ADtmpcXbu7ymbeVK kKA6uTS+WQ2gqjZlDGC0wd6nawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqQZDD5 tHt6VziQo2CSlf7yRVIgMB8GA1UdIwQYMBaAFOUGk8oYW7Zdksr7MON29RuVmtLY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTEyMi8zMEM3QTM4RUVG MUYxMUVEQkY3MUNDODBDNEY5QUUwMi81UWFUeWhoYnRsMlN5dnN3NDNiMUc1V2Ew dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRYVR5aGhidGwyU3l2c3c0M2IxRzVXYTB0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTEyMi8zMEM3QTM4RUVGMUYxMUVEQkY3MUNDODBDNEY5QUUwMi81UWFUeWhoYnRs MlN5dnN3NDNiMUc1V2EwdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArSl34l/S4I8/582FSEYvcPdoE5cjndip7fVpZivX70AVJqaEiiNz9 BeW4WlS/FVxU0MzitHkKhAtvQUgFgZerAGHbentgWtfjxzBF+jvcmrQlIPL+7d/9 mV1hKQKwKVbK/lmZH0xk+syz+btfWx4fMrExhLs2E6qNyderhy2yrjuSUAL8Y68U J6tORw6jOgDpqnTjQGcShpEbCAJh7TA6wgkIQslFl8mhrCLyLl6NSv+iYNLYIaBv IWU9koTZkojuMKvVeqjQv5gdFgiIYl5j25qUbZME4JBPxVyN3/7I+aWiECutzYfg IkUaoZyw0URD8/iX6677vo9Iw+gQeGhC -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:52 2025 by rpki-client