$ rpki-client -vvf rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft File: 5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft (raw, json) Hash identifier: Oey6WsIX7Kee5QGsxyt7w16yjZ87bsH9h7RA2n8Uess= Subject key identifier: 07:8C:02:DF:17:DF:21:88:AA:C7:7F:5F:0D:91:A1:FF:30:08:9F:6D Authority key identifier: E6:F0:86:C0:5C:5E:04:DD:96:AE:0E:5F:C9:03:97:91:A3:75:60:FE Certificate issuer: /CN=A91164FE/serialNumber=E6F086C05C5E04DD96AE0E5FC9039791A37560FE Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft Manifest number: 0119 Signing time: Fri 25 Apr 2025 03:54:51 +0000 Manifest this update: Fri 25 Apr 2025 03:54:50 +0000 Manifest next update: Fri 02 May 2025 03:54:50 +0000 Files and hashes: 1: 5vCGwFxeBN2Wrg5fyQOXkaN1YP4.crl (hash: iCabaMxxgp76wak/my74/epGUUebgFqwCqcvqsAc3Dk=) 2: 63EC7E9476C211EE9FDED166C4F9AE02.roa (hash: VIpTaiDF//T8jK4C9n6iwAX2TMSKtXEtM34C7KtsS6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.crl rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91164FE, serialNumber=E6F086C05C5E04DD96AE0E5FC9039791A37560FE Validity Not Before: Apr 25 03:54:50 2025 GMT Not After : May 2 03:54:50 2025 GMT Subject: CN=680b078a-0f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:93:a7:47:da:d5:7a:66:46:85:bf:58:d0:fa: 89:a6:7f:b2:cb:38:59:1a:ae:6a:b2:45:b7:d6:87: d2:ee:39:02:6d:64:28:ef:ba:00:29:c3:e1:d5:c3: 40:dd:f5:1f:5e:7c:77:cd:e4:62:bd:20:28:f6:2e: d9:48:d4:64:6c:18:4f:a1:01:32:0d:5c:b4:ec:0a: 51:5e:c8:1b:4b:f3:52:0b:7b:c7:ad:04:ca:86:f9: b1:62:e7:27:b5:ca:d4:35:b8:6b:63:37:9c:dd:21: d7:d4:6d:17:8d:c9:3a:e7:d4:80:71:ad:8e:54:4c: a2:6b:37:13:0c:e3:21:c3:38:a0:7a:20:17:8e:02: 44:35:51:f8:8e:83:91:a2:d0:7e:f7:ce:a5:d4:64: 43:18:0c:e1:0b:79:87:97:5c:4c:97:51:ad:a0:bb: 90:3c:09:c4:89:14:5e:02:d1:62:48:81:cf:15:c9: 25:e1:c9:1b:ef:0e:fe:de:fd:09:a5:2f:78:08:65: e0:9f:4a:b1:37:43:bb:6f:b3:dd:5b:05:e6:39:d7: dd:7a:43:f9:39:df:06:88:cb:99:a8:7c:cc:f9:20: be:2b:3f:b5:58:fc:53:f5:2d:6c:57:6c:22:dc:ec: 09:88:78:07:da:23:cb:c7:b0:06:79:9b:ca:36:2d: 1c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:8C:02:DF:17:DF:21:88:AA:C7:7F:5F:0D:91:A1:FF:30:08:9F:6D X509v3 Authority Key Identifier: keyid:E6:F0:86:C0:5C:5E:04:DD:96:AE:0E:5F:C9:03:97:91:A3:75:60:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:3a:e7:44:8a:f4:a8:6b:8c:24:c0:24:49:a6:88:cf:3e:32: 5b:2f:71:08:ae:58:b0:84:5a:9c:f1:14:ff:57:7f:05:a9:42: db:43:4a:00:b6:25:1d:6e:b1:e6:14:e8:cd:fa:17:66:83:50: f7:91:32:5f:76:48:d5:8c:15:e9:03:46:cd:58:06:eb:7a:da: fa:0d:05:39:d1:98:56:b1:10:bc:45:82:b5:93:9d:20:3e:2d: f9:64:a9:90:f7:06:cf:5b:91:3d:a1:f8:83:e1:e5:c3:7e:0a: 7a:79:02:7d:62:ad:46:24:76:f3:e5:62:fa:99:73:90:34:86: 4a:9b:aa:56:44:50:e7:4c:76:5b:7a:a7:2e:a3:3e:6d:fc:e1: ca:23:d0:2f:1e:7d:d3:7f:1b:f3:98:34:bb:c7:7d:c8:7b:d0: 2c:4c:0f:b8:f9:a0:98:3a:57:c6:7c:b7:36:ad:38:02:e2:8e: 4c:01:bf:7e:82:65:dd:6c:c0:07:28:a5:cf:4d:2d:3e:c5:91: 49:f4:8b:cb:a3:79:0c:30:8d:ea:09:fd:2d:44:ad:55:3f:16: 05:88:02:3b:70:62:09:f2:af:de:2a:9e:ff:3d:bb:c4:86:29: 4e:1d:57:a5:da:88:cd:55:14:3d:0d:e8:4e:60:f4:c8:47:c0: db:5e:5c:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0RkUxMTAvBgNVBAUTKEU2RjA4NkMwNUM1RTA0REQ5NkFFMEU1RkM5MDM5Nzkx QTM3NTYwRkUwHhcNMjUwNDI1MDM1NDUwWhcNMjUwNTAyMDM1NDUwWjAYMRYwFAYD VQQDEw02ODBiMDc4YS0wZjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZOnR9rVemZGhb9Y0PqJpn+yyzhZGq5qskW31ofS7jkCbWQo77oAKcPh1cNA 3fUfXnx3zeRivSAo9i7ZSNRkbBhPoQEyDVy07ApRXsgbS/NSC3vHrQTKhvmxYucn tcrUNbhrYzec3SHX1G0Xjck659SAca2OVEyiazcTDOMhwzigeiAXjgJENVH4joOR otB+986l1GRDGAzhC3mHl1xMl1GtoLuQPAnEiRReAtFiSIHPFckl4ckb7w7+3v0J pS94CGXgn0qxN0O7b7PdWwXmOdfdekP5Od8GiMuZqHzM+SC+Kz+1WPxT9S1sV2wi 3OwJiHgH2iPLx7AGeZvKNi0cBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAeMAt8X 3yGIqsd/Xw2Rof8wCJ9tMB8GA1UdIwQYMBaAFObwhsBcXgTdlq4OX8kDl5GjdWD+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjRGRS9CODI2Q0E4MDc2 QkYxMUVFQjE0RjJENzJDNEY5QUUwMi81dkNHd0Z4ZUJOMldyZzVmeVFPWGthTjFZ UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV2Q0d3RnhlQk4yV3JnNWZ5UU9Ya2FOMVlQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjRGRS9CODI2Q0E4MDc2QkYxMUVFQjE0RjJENzJDNEY5QUUwMi81dkNHd0Z4ZUJO MldyZzVmeVFPWGthTjFZUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGOudEivSoa4wkwCRJpojPPjJbL3EIrliwhFqc8RT/V38FqULbQ0oA tiUdbrHmFOjN+hdmg1D3kTJfdkjVjBXpA0bNWAbretr6DQU50ZhWsRC8RYK1k50g Pi35ZKmQ9wbPW5E9ofiD4eXDfgp6eQJ9Yq1GJHbz5WL6mXOQNIZKm6pWRFDnTHZb eqcuoz5t/OHKI9AvHn3TfxvzmDS7x33Ie9AsTA+4+aCYOlfGfLc2rTgC4o5MAb9+ gmXdbMAHKKXPTS0+xZFJ9IvLo3kMMI3qCf0tRK1VPxYFiAI7cGIJ8q/eKp7/PbvE hilOHVel2ojNVRQ9DehOYPTIR8DbXlyO -----END CERTIFICATE-----Generated at Sat Apr 26 17:11:39 2025 by rpki-client