$ rpki-client -vvf rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft File: c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft (raw, json) Hash identifier: SImF5foFafbjiEBmcau+iM72UM8Hquoym/rEpAjtuIk= Subject key identifier: AC:E6:BA:3D:86:B1:81:B0:6D:77:07:25:07:8C:40:03:79:94:EA:6A Authority key identifier: 73:98:7E:CC:E7:7E:44:EB:36:65:1E:09:8D:33:75:0F:A8:64:E6:76 Certificate issuer: /CN=A91316E5/serialNumber=73987ECCE77E44EB36651E098D33750FA864E676 Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft Manifest number: 0138 Signing time: Fri 25 Apr 2025 03:32:22 +0000 Manifest this update: Fri 25 Apr 2025 03:32:21 +0000 Manifest next update: Fri 02 May 2025 03:32:21 +0000 Files and hashes: 1: c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl (hash: oRUFZ+NPHH/fnx/IdWTRMUXeSu8g1let1DF/qOFyYRs=) 2: C1A8182646D011EE8BE5AE80C4F9AE02.roa (hash: gAXQ6XOA3NODkbVV4z4rY8FPGvcx9W1CdIeenZ4k+xI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91316E5, serialNumber=73987ECCE77E44EB36651E098D33750FA864E676 Validity Not Before: Apr 25 03:32:21 2025 GMT Not After : May 2 03:32:21 2025 GMT Subject: CN=680b0246-b2aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ff:89:b9:ea:05:bb:38:a9:20:6e:7d:d4:6a: de:d1:34:be:b2:9c:93:c6:5c:15:9b:3b:cf:01:10: d0:9e:88:17:32:7b:4f:fe:ba:17:0f:52:70:b4:74: c3:87:a3:df:81:85:fa:a3:71:34:6e:80:24:b6:66: 3d:6a:19:43:37:12:55:d7:ab:90:31:b6:df:fa:13: df:3b:5d:58:d4:3d:16:a6:ac:0f:f5:60:04:cf:cf: 0b:a4:e7:d9:7d:d4:9b:b6:30:d4:70:f3:1c:f0:3c: ce:d6:a7:30:3f:b6:17:d9:72:cf:63:9c:32:e7:d5: f9:2f:37:a1:10:83:94:da:a2:c6:44:2a:c3:1d:25: 80:66:96:9e:85:a3:10:ac:0a:6b:32:4b:08:53:a8: cb:8c:bf:28:08:c2:67:fb:95:3a:5a:74:16:f6:c0: c4:67:8f:1b:e6:1d:07:a9:9a:9e:d3:1e:62:e1:c6: 3c:6d:47:e6:6f:2b:f2:ab:2f:77:86:ba:b7:6f:d8: 10:82:37:d4:f1:a8:27:f4:ac:ea:96:38:f4:f4:c6: 2b:86:36:89:61:f4:3b:99:02:24:35:50:17:5b:f4: c3:8b:0f:b1:be:90:20:72:24:0f:c0:b1:25:43:c2: df:68:d5:df:72:46:da:b5:c6:fb:b5:aa:b2:66:cc: c5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E6:BA:3D:86:B1:81:B0:6D:77:07:25:07:8C:40:03:79:94:EA:6A X509v3 Authority Key Identifier: keyid:73:98:7E:CC:E7:7E:44:EB:36:65:1E:09:8D:33:75:0F:A8:64:E6:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:96:ed:6c:19:1b:fd:c3:91:e0:d7:2f:2e:90:5e:79:35:f8: d5:75:c9:06:82:49:51:b5:69:c9:dc:c5:4b:fc:19:ff:7b:a5: 8b:20:a7:41:f6:ad:07:43:f0:e6:be:0f:1d:5c:b7:19:b3:25: 74:68:a5:8d:9f:d8:85:a9:a6:2c:07:fd:5a:8f:8e:7f:df:12: d2:0a:e8:5a:51:1d:14:f0:1b:77:c1:25:5c:dd:cc:dd:b9:56: 2b:3e:69:2b:06:d4:f8:be:31:e6:66:b1:c2:73:32:f5:4a:e7: fd:ef:d4:14:14:46:33:4d:bf:73:3f:0e:75:fd:3f:ed:ab:a9: 11:ff:f5:cd:3f:36:7b:ca:93:71:59:f2:86:48:2b:d2:7b:74: 73:24:c4:56:64:a5:8c:38:24:f0:28:e2:6d:bd:48:58:3d:b7: 33:5e:bc:4b:fd:99:8c:88:98:33:dd:71:4a:6e:f9:f6:e0:87: 96:f0:fe:f2:7b:48:05:a6:c6:10:77:87:f3:4b:48:cd:3c:5e: 4e:e7:8d:88:31:2b:50:91:3d:0d:45:9b:8b:71:9c:f9:5c:93: 2f:31:18:9b:85:51:1f:46:e0:a1:ea:c5:c8:8a:9b:0f:ef:2b: 48:48:fe:df:2c:01:de:41:40:8b:cb:af:58:97:d4:e2:a8:d6: 96:f6:b9:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2RTUxMTAvBgNVBAUTKDczOTg3RUNDRTc3RTQ0RUIzNjY1MUUwOThEMzM3NTBG QTg2NEU2NzYwHhcNMjUwNDI1MDMzMjIxWhcNMjUwNTAyMDMzMjIxWjAYMRYwFAYD VQQDEw02ODBiMDI0Ni1iMmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwf+JueoFuzipIG591Gre0TS+spyTxlwVmzvPARDQnogXMntP/roXD1JwtHTD h6PfgYX6o3E0boAktmY9ahlDNxJV16uQMbbf+hPfO11Y1D0WpqwP9WAEz88LpOfZ fdSbtjDUcPMc8DzO1qcwP7YX2XLPY5wy59X5LzehEIOU2qLGRCrDHSWAZpaehaMQ rAprMksIU6jLjL8oCMJn+5U6WnQW9sDEZ48b5h0HqZqe0x5i4cY8bUfmbyvyqy93 hrq3b9gQgjfU8agn9Kzqljj09MYrhjaJYfQ7mQIkNVAXW/TDiw+xvpAgciQPwLEl Q8LfaNXfckbatcb7taqyZszFiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKzmuj2G sYGwbXcHJQeMQAN5lOpqMB8GA1UdIwQYMBaAFHOYfsznfkTrNmUeCY0zdQ+oZOZ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTZFNS81MUY5ODM1QzQ2 RDAxMUVFODFGMjA3M0ZDNEY5QUUwMi9jNWgtek9kLVJPczJaUjRKalROMUQ2aGs1 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M1aC16T2QtUk9zMlpSNEpqVE4xRDZoazVuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTZFNS81MUY5ODM1QzQ2RDAxMUVFODFGMjA3M0ZDNEY5QUUwMi9jNWgtek9kLVJP czJaUjRKalROMUQ2aGs1blkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAllu1sGRv9w5Hg1y8ukF55NfjVdckGgklRtWnJ3MVL/Bn/e6WLIKdB 9q0HQ/Dmvg8dXLcZsyV0aKWNn9iFqaYsB/1aj45/3xLSCuhaUR0U8Bt3wSVc3czd uVYrPmkrBtT4vjHmZrHCczL1Suf979QUFEYzTb9zPw51/T/tq6kR//XNPzZ7ypNx WfKGSCvSe3RzJMRWZKWMOCTwKOJtvUhYPbczXrxL/ZmMiJgz3XFKbvn24IeW8P7y e0gFpsYQd4fzS0jNPF5O542IMStQkT0NRZuLcZz5XJMvMRibhVEfRuCh6sXIipsP 7ytISP7fLAHeQUCLy69Yl9TiqNaW9rlb -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:50 2025 by rpki-client