$ rpki-client -vvf rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft File: 5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft (raw, json) Hash identifier: V76V0QRN9VrEPePS5wOu2fVnkmg6+nTVnumSd11ZWBY= Subject key identifier: 9F:04:64:5A:1D:54:EE:11:8A:9C:67:20:E2:5C:CB:EA:C4:F1:E5:CB Authority key identifier: E6:F0:81:9C:59:FD:C6:41:E4:5B:CC:33:CB:50:F3:CD:85:4A:C2:F5 Certificate issuer: /CN=A9119363/serialNumber=E6F0819C59FDC641E45BCC33CB50F3CD854AC2F5 Certificate serial: 043D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCBnFn9xkHkW8wzy1DzzYVKwvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft Manifest number: 05A6 Signing time: Fri 25 Apr 2025 00:07:10 +0000 Manifest this update: Fri 25 Apr 2025 00:07:10 +0000 Manifest next update: Fri 02 May 2025 00:07:10 +0000 Files and hashes: 1: 5vCBnFn9xkHkW8wzy1DzzYVKwvU.crl (hash: NdFAEFOSQlbO8O0vldnGHmQdhchdAsajyAZ3rqMRKoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.crl rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCBnFn9xkHkW8wzy1DzzYVKwvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1085 (0x43d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119363, serialNumber=E6F0819C59FDC641E45BCC33CB50F3CD854AC2F5 Validity Not Before: Apr 25 00:07:10 2025 GMT Not After : May 2 00:07:10 2025 GMT Subject: CN=680ad22e-8810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:89:1f:65:a4:6c:f4:d8:a9:56:85:07:6c:3e: 19:db:94:ae:af:3f:6a:3d:a2:4b:f5:24:b3:a9:df: d4:dc:e0:94:eb:8e:ab:5b:ea:9b:ab:36:89:ed:d0: 46:39:e8:dc:06:c0:90:95:f3:29:61:7d:a0:b4:73: 66:a8:8f:d1:8f:f2:d2:4b:aa:02:69:1c:5c:de:91: f3:0b:99:2f:c5:9f:6c:97:34:c7:96:2b:5c:c4:1d: c2:fc:f6:11:95:af:23:43:8e:06:47:35:11:04:2f: f3:59:8b:e8:a2:dc:06:cf:13:8b:86:0d:02:50:8d: f6:00:6b:28:44:06:14:24:eb:cb:fc:c8:b4:79:85: b6:14:54:8e:39:6f:1f:82:e3:c3:65:5a:29:08:e6: 63:1b:7a:f6:9f:59:29:f5:db:9b:50:96:d7:e5:2a: 34:93:60:b1:fb:97:9e:5f:1b:cc:ce:b4:f3:1e:81: 41:8e:10:c7:e8:de:74:91:4d:1f:a2:88:99:27:c2: 1b:9c:1a:3e:0f:1a:af:ec:e5:62:aa:8c:63:56:66: 83:01:2b:8c:58:9f:07:6d:e3:8b:47:1c:a4:22:2f: eb:1b:04:63:08:cf:3d:6e:97:8a:73:17:1d:61:9e: f1:91:cc:72:e6:51:37:0c:cd:de:59:ad:2c:85:b3: 26:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:04:64:5A:1D:54:EE:11:8A:9C:67:20:E2:5C:CB:EA:C4:F1:E5:CB X509v3 Authority Key Identifier: keyid:E6:F0:81:9C:59:FD:C6:41:E4:5B:CC:33:CB:50:F3:CD:85:4A:C2:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCBnFn9xkHkW8wzy1DzzYVKwvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:0b:4d:bd:26:f6:5c:4e:fc:9c:f4:ad:d4:bc:b6:b3:dc:e6: e1:8a:1e:e7:27:cb:21:dd:61:bd:cc:3d:c3:46:77:3f:2c:cb: 9b:e9:e2:17:80:07:69:eb:8f:0c:5a:4d:67:83:c6:d7:b5:6a: f5:58:75:0b:72:8c:77:d3:95:fb:ab:3b:68:b9:16:25:92:75: 3a:db:78:3f:7b:37:12:3b:75:09:66:43:61:6a:62:ef:ff:8a: 6e:7d:eb:d8:bb:08:d6:4d:07:aa:2c:79:57:9b:6c:7d:99:09: 95:bf:18:8b:e4:64:6c:b2:7e:5d:7a:5e:7f:1f:e1:1b:b8:26: 0e:cd:cb:3b:a9:40:3a:ee:34:8c:6d:c8:9a:eb:c9:50:7a:c7: 05:00:85:94:c5:e2:dd:8f:be:55:e5:86:8b:83:d7:5f:08:fa: d7:26:9f:aa:11:f8:35:76:27:1d:70:4b:de:04:45:f4:15:f9: 0e:8d:84:16:11:31:a3:55:c5:6b:81:1c:bd:5a:d9:81:7a:33: 68:bf:1d:6e:3d:34:03:93:a4:e2:37:9f:8f:d6:45:50:c3:54: bb:74:ca:59:3c:f4:53:aa:64:1d:d2:00:62:03:bb:b9:66:42: 31:15:e6:19:71:a7:25:b6:08:7a:ad:e7:44:f8:10:c4:c8:95: f1:74:26:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzNjMxMTAvBgNVBAUTKEU2RjA4MTlDNTlGREM2NDFFNDVCQ0MzM0NCNTBGM0NE ODU0QUMyRjUwHhcNMjUwNDI1MDAwNzEwWhcNMjUwNTAyMDAwNzEwWjAYMRYwFAYD VQQDEw02ODBhZDIyZS04ODEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuokfZaRs9NipVoUHbD4Z25Surz9qPaJL9SSzqd/U3OCU646rW+qbqzaJ7dBG OejcBsCQlfMpYX2gtHNmqI/Rj/LSS6oCaRxc3pHzC5kvxZ9slzTHlitcxB3C/PYR la8jQ44GRzURBC/zWYvootwGzxOLhg0CUI32AGsoRAYUJOvL/Mi0eYW2FFSOOW8f guPDZVopCOZjG3r2n1kp9dubUJbX5So0k2Cx+5eeXxvMzrTzHoFBjhDH6N50kU0f ooiZJ8IbnBo+Dxqv7OViqoxjVmaDASuMWJ8HbeOLRxykIi/rGwRjCM89bpeKcxcd YZ7xkcxy5lE3DM3eWa0shbMmnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8EZFod VO4RipxnIOJcy+rE8eXLMB8GA1UdIwQYMBaAFObwgZxZ/cZB5FvMM8tQ882FSsL1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTM2My8zMUVBREZBNDVD QkExMUVDOEFBMTNFMjRDNEY5QUUwMi81dkNCbkZuOXhrSGtXOHd6eTFEenpZVkt3 dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV2Q0JuRm45eGtIa1c4d3p5MUR6ellWS3d2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTM2My8zMUVBREZBNDVDQkExMUVDOEFBMTNFMjRDNEY5QUUwMi81dkNCbkZuOXhr SGtXOHd6eTFEenpZVkt3dlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbC029JvZcTvyc9K3UvLaz3Obhih7nJ8sh3WG9zD3DRnc/LMub6eIX gAdp648MWk1ng8bXtWr1WHULcox305X7qztouRYlknU623g/ezcSO3UJZkNhamLv /4pufevYuwjWTQeqLHlXm2x9mQmVvxiL5GRssn5del5/H+EbuCYOzcs7qUA67jSM bcia68lQescFAIWUxeLdj75V5YaLg9dfCPrXJp+qEfg1dicdcEveBEX0FfkOjYQW ETGjVcVrgRy9WtmBejNovx1uPTQDk6TiN5+P1kVQw1S7dMpZPPRTqmQd0gBiA7u5 ZkIxFeYZcacltgh6redE+BDEyJXxdCZk -----END CERTIFICATE-----Generated at Sat Apr 26 07:16:37 2025 by rpki-client