$ rpki-client -vvf rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft File: 5LOuPtIxeiPhm9egMr766tU3J9M.mft (raw, json) Hash identifier: W22ThO9yLgCAN9vg/82S8M7hlHQ6AIVDZQ0tbfsMwjY= Subject key identifier: E2:11:46:D4:37:1D:FA:CF:5E:74:44:96:B5:10:ED:8D:13:4F:8E:2F Authority key identifier: E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3 Certificate issuer: /CN=A91298E0/serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3 Certificate serial: 3472 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft Manifest number: 3472 Signing time: Thu 24 Apr 2025 14:41:21 +0000 Manifest this update: Thu 24 Apr 2025 14:41:21 +0000 Manifest next update: Thu 01 May 2025 14:41:21 +0000 Files and hashes: 1: 5LOuPtIxeiPhm9egMr766tU3J9M.crl (hash: ilD2zs7etxZktWsJloLEpiyfqZ9yQMkZW7JZ0z8BIFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:41:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13426 (0x3472) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91298E0, serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3 Validity Not Before: Apr 24 14:41:21 2025 GMT Not After : May 1 14:41:21 2025 GMT Subject: CN=680a4d91-4bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:93:c4:c0:d4:8c:af:d8:c1:ae:a5:3a:e7:c7: e7:76:9b:39:6d:8f:a9:b1:5e:d6:37:23:5e:d6:5d: f1:9e:3e:2a:5e:06:07:dd:ee:9b:5c:fb:3c:ba:cc: fb:ef:f1:cc:8d:61:05:57:e2:da:5e:0e:78:bd:91: 92:85:41:63:49:91:92:9d:94:fc:be:2f:c1:98:57: 3a:67:9a:d8:d3:f3:99:6f:32:4f:58:78:80:3f:8a: 9a:d3:bb:22:64:76:e7:31:0d:24:1e:5b:63:7f:0a: 9b:fd:92:a9:a4:8c:b4:4e:04:82:97:98:95:82:a8: 31:51:d5:f2:ff:ae:7c:04:30:f1:b8:90:5f:16:31: 5c:ab:66:a5:3a:8b:9a:85:36:d1:1c:b8:07:31:ba: c8:17:a4:ee:32:56:91:0c:26:35:97:6e:e0:b8:33: 15:50:43:11:99:e2:1b:74:f6:af:21:a8:c6:e2:c2: c6:25:ba:1e:ad:f9:ca:34:4a:93:3f:06:21:dd:ed: 72:63:2e:2e:f3:3e:ab:18:a4:a5:b7:c8:60:7a:03: 3d:28:0a:ba:35:76:b1:ac:d7:01:c6:77:9c:f1:60: bb:b6:b6:a2:57:12:88:a9:ff:29:6b:d5:cf:1f:47: a2:a9:a3:61:f0:c9:8a:69:3c:26:30:8a:83:c9:37: 58:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:11:46:D4:37:1D:FA:CF:5E:74:44:96:B5:10:ED:8D:13:4F:8E:2F X509v3 Authority Key Identifier: keyid:E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:4f:a6:92:1f:6f:7b:5d:4e:2e:43:73:40:b4:e0:e3:d7:86: 61:7e:4d:98:a1:f9:d1:b6:cf:ee:1d:6d:19:69:57:f4:c7:e4: aa:51:ad:5b:12:04:47:ab:87:85:02:1f:74:48:f5:dd:f5:60: 4a:bf:93:b1:86:ce:ce:3c:18:bc:2f:a4:93:22:b4:ec:6d:97: 78:ec:1c:d8:1a:c1:38:bb:86:0f:3c:ad:65:aa:2d:41:c6:39: 0d:1d:92:88:2f:86:a1:04:62:d5:27:c9:3b:f9:d7:8c:2a:b9: f9:c6:bc:91:73:4d:1d:37:89:fc:65:17:ed:b0:99:e9:ec:97: 1f:a0:f8:db:71:3d:03:a4:10:b5:cc:18:48:f1:96:04:71:95: 7a:d2:1c:d4:7b:12:b7:2b:79:2c:08:44:92:ea:18:a2:85:cf: 14:e3:56:09:fe:b1:4c:c2:10:49:39:df:6a:a9:9f:6f:6f:16: 59:13:59:b9:0d:32:94:51:35:0b:cf:bd:2a:41:11:4b:ba:99: 6d:ef:9a:ce:e4:3c:b9:4e:b0:4a:7f:5b:c1:19:5b:fb:72:32: 29:06:0d:2a:13:4e:ec:96:1e:3d:65:75:d9:cd:66:44:76:b8: 98:bd:87:64:43:3f:17:bd:1e:20:5f:88:23:52:9f:31:17:43: bd:9b:87:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk4RTAxMTAvBgNVBAUTKEU0QjNBRTNFRDIzMTdBMjNFMTlCRDdBMDMyQkVGQUVB RDUzNzI3RDMwHhcNMjUwNDI0MTQ0MTIxWhcNMjUwNTAxMTQ0MTIxWjAYMRYwFAYD VQQDEw02ODBhNGQ5MS00YmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpPEwNSMr9jBrqU658fndps5bY+psV7WNyNe1l3xnj4qXgYH3e6bXPs8usz7 7/HMjWEFV+LaXg54vZGShUFjSZGSnZT8vi/BmFc6Z5rY0/OZbzJPWHiAP4qa07si ZHbnMQ0kHltjfwqb/ZKppIy0TgSCl5iVgqgxUdXy/658BDDxuJBfFjFcq2alOoua hTbRHLgHMbrIF6TuMlaRDCY1l27guDMVUEMRmeIbdPavIajG4sLGJboerfnKNEqT PwYh3e1yYy4u8z6rGKSlt8hgegM9KAq6NXaxrNcBxnec8WC7traiVxKIqf8pa9XP H0eiqaNh8MmKaTwmMIqDyTdYXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIRRtQ3 HfrPXnRElrUQ7Y0TT44vMB8GA1UdIwQYMBaAFOSzrj7SMXoj4ZvXoDK++urVNyfT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOThFMC9EQzFFRkI0QTFE OTAxMUUyQjU3QUU3RjAwOEIwMkNEMi81TE91UHRJeGVpUGhtOWVnTXI3NjZ0VTNK OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVMT3VQdEl4ZWlQaG05ZWdNcjc2NnRVM0o5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OThFMC9EQzFFRkI0QTFEOTAxMUUyQjU3QUU3RjAwOEIwMkNEMi81TE91UHRJeGVp UGhtOWVnTXI3NjZ0VTNKOU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGT6aSH297XU4uQ3NAtODj14Zhfk2YofnRts/uHW0ZaVf0x+SqUa1b EgRHq4eFAh90SPXd9WBKv5Oxhs7OPBi8L6STIrTsbZd47BzYGsE4u4YPPK1lqi1B xjkNHZKIL4ahBGLVJ8k7+deMKrn5xryRc00dN4n8ZRftsJnp7JcfoPjbcT0DpBC1 zBhI8ZYEcZV60hzUexK3K3ksCESS6hiihc8U41YJ/rFMwhBJOd9qqZ9vbxZZE1m5 DTKUUTULz70qQRFLuplt75rO5Dy5TrBKf1vBGVv7cjIpBg0qE07slh49ZXXZzWZE driYvYdkQz8XvR4gX4gjUp8xF0O9m4e/ -----END CERTIFICATE-----Generated at Sat Apr 26 13:41:08 2025 by rpki-client