$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft File: 5G4YncjpEKGrvi42TdCBd1zkhGA.mft (raw, json) Hash identifier: vnxxCOat5pOhWUXi4zfGzo3uKxhkQQB+uqfm5RZDOAs= Subject key identifier: 45:A2:31:01:8E:4B:E5:7F:2F:00:59:14:F3:A3:1A:05:7D:5F:6A:09 Authority key identifier: E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60 Certificate issuer: /CN=A9135B44/serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460 Certificate serial: 01FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft Manifest number: 01F6 Signing time: Fri 25 Apr 2025 01:50:40 +0000 Manifest this update: Fri 25 Apr 2025 01:50:40 +0000 Manifest next update: Fri 02 May 2025 01:50:40 +0000 Files and hashes: 1: 5G4YncjpEKGrvi42TdCBd1zkhGA.crl (hash: EmSggdCU5Upzl6PXGEsksUNqrsQ8siecjO3+t2KO9wU=) 2: D4B06AAA3A6E11ED8266115DC4F9AE02.roa (hash: rXyXJ/J6rVFIkAmCNmdDPvJdD/VKGdNuveHL3e4vBN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 507 (0x1fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B44, serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460 Validity Not Before: Apr 25 01:50:40 2025 GMT Not After : May 2 01:50:40 2025 GMT Subject: CN=680aea70-31fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:00:69:82:47:08:42:75:3d:db:dd:75:ae:e7: c0:50:50:00:f5:f1:b1:17:a6:f2:f7:c4:50:bd:00: 6c:3b:20:26:2a:cf:96:8a:0e:81:55:2e:07:bf:ff: d4:e9:d4:53:b2:ff:05:51:6f:3f:10:51:92:45:9e: af:a1:d3:58:02:c4:52:83:6b:99:76:1a:f1:42:18: 3b:9c:84:89:dc:68:c6:a5:ea:39:59:2c:21:51:26: fa:2e:e9:1e:11:c1:c9:51:b9:ae:e3:c4:e3:15:25: d5:00:8c:f5:ec:ff:93:23:02:a4:ba:de:21:3c:e7: d5:ac:8a:b6:2c:89:2a:f5:d3:05:61:5d:f0:2d:0a: b0:87:da:c5:81:38:96:69:90:9e:f7:94:4f:c0:c9: f7:1e:83:21:0c:e0:9a:39:90:fa:e7:1e:4e:b7:a4: b5:15:3b:5f:87:4f:3c:38:35:a0:b0:9a:44:cc:93: 07:b2:71:52:64:82:db:41:ac:7b:7c:c5:ae:eb:23: fb:3b:78:05:17:b4:2f:0d:a0:66:23:7f:d4:b0:c2: 75:6e:e3:93:e4:c3:5a:30:40:8c:99:78:58:8e:2e: df:4f:69:72:aa:46:4e:64:1d:19:4c:b9:21:c9:8d: 37:82:df:82:5f:07:20:75:d7:87:11:70:cb:2f:a6: d4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A2:31:01:8E:4B:E5:7F:2F:00:59:14:F3:A3:1A:05:7D:5F:6A:09 X509v3 Authority Key Identifier: keyid:E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:48:24:fb:4e:10:15:48:4e:fa:93:6b:f3:14:83:07:a9:dd: 58:17:56:ea:be:8a:0f:c9:51:37:1c:5f:24:c9:fd:21:8e:6c: f6:21:c6:66:ff:47:d0:4a:ae:7d:22:48:83:59:79:7d:6c:96: 16:ff:e8:0b:cc:f9:92:c7:ad:75:f4:57:55:27:c7:62:e6:e4: f6:3e:13:ae:0c:ac:a8:e6:1f:b6:0a:7c:96:5a:2e:a0:4c:d0: 78:20:da:c4:31:ed:55:d9:b7:92:19:67:b9:ee:3c:5a:8a:a9: 8a:10:52:c1:30:1d:48:45:f6:24:1f:22:4f:51:40:d6:21:4c: ed:a2:da:4e:4c:8f:29:9b:d2:88:cf:83:b3:3a:50:67:06:87: 2c:55:64:ca:76:c4:30:00:7d:ca:42:b7:53:40:ba:32:30:bb: ba:de:72:d1:73:ba:bb:4b:62:f5:3c:65:00:a5:66:59:94:68: cd:3a:bf:73:b1:25:d8:92:48:64:ec:40:69:0f:98:14:be:c1: 69:d4:6a:9b:fa:0b:07:74:ba:65:e8:c5:23:61:cd:28:96:8a: 77:ec:a2:53:95:70:4f:7e:ad:67:84:3c:e2:6e:42:2b:3e:13: 9b:7b:5c:ae:94:1e:03:db:f8:22:48:16:0a:54:bc:23:f9:2b: 9e:16:ce:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCNDQxMTAvBgNVBAUTKEU0NkUxODlEQzhFOTEwQTFBQkJFMkUzNjRERDA4MTc3 NUNFNDg0NjAwHhcNMjUwNDI1MDE1MDQwWhcNMjUwNTAyMDE1MDQwWjAYMRYwFAYD VQQDEw02ODBhZWE3MC0zMWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+gBpgkcIQnU92911rufAUFAA9fGxF6by98RQvQBsOyAmKs+Wig6BVS4Hv//U 6dRTsv8FUW8/EFGSRZ6vodNYAsRSg2uZdhrxQhg7nISJ3GjGpeo5WSwhUSb6Luke EcHJUbmu48TjFSXVAIz17P+TIwKkut4hPOfVrIq2LIkq9dMFYV3wLQqwh9rFgTiW aZCe95RPwMn3HoMhDOCaOZD65x5Ot6S1FTtfh088ODWgsJpEzJMHsnFSZILbQax7 fMWu6yP7O3gFF7QvDaBmI3/UsMJ1buOT5MNaMECMmXhYji7fT2lyqkZOZB0ZTLkh yY03gt+CXwcgddeHEXDLL6bUnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWiMQGO S+V/LwBZFPOjGgV9X2oJMB8GA1UdIwQYMBaAFORuGJ3I6RChq74uNk3QgXdc5IRg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUI0NC9BRDBENjFGODNB NkMxMUVEOTk0MUY1NUNDNEY5QUUwMi81RzRZbmNqcEVLR3J2aTQyVGRDQmQxemto R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVHNFluY2pwRUtHcnZpNDJUZENCZDF6a2hHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUI0NC9BRDBENjFGODNBNkMxMUVEOTk0MUY1NUNDNEY5QUUwMi81RzRZbmNqcEVL R3J2aTQyVGRDQmQxemtoR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFSCT7ThAVSE76k2vzFIMHqd1YF1bqvooPyVE3HF8kyf0hjmz2IcZm /0fQSq59IkiDWXl9bJYW/+gLzPmSx6119FdVJ8di5uT2PhOuDKyo5h+2CnyWWi6g TNB4INrEMe1V2beSGWe57jxaiqmKEFLBMB1IRfYkHyJPUUDWIUztotpOTI8pm9KI z4OzOlBnBocsVWTKdsQwAH3KQrdTQLoyMLu63nLRc7q7S2L1PGUApWZZlGjNOr9z sSXYkkhk7EBpD5gUvsFp1Gqb+gsHdLpl6MUjYc0olop37KJTlXBPfq1nhDzibkIr PhObe1yulB4D2/giSBYKVLwj+SueFs6S -----END CERTIFICATE-----Generated at Sat Apr 26 16:56:55 2025 by rpki-client