$ rpki-client -vvf rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft File: 5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft (raw, json) Hash identifier: ciyhJqXmmWEY8sDgS0csO0xHPL/fL3Z80KiGxODU1ns= Subject key identifier: E6:19:BA:EE:AD:43:03:4A:DE:27:04:22:AB:49:4C:3B:D9:F7:C9:B8 Authority key identifier: E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18 Certificate issuer: /CN=A91367E0/serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818 Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft Manifest number: 0139 Signing time: Fri 25 Apr 2025 03:31:37 +0000 Manifest this update: Fri 25 Apr 2025 03:31:37 +0000 Manifest next update: Fri 02 May 2025 03:31:37 +0000 Files and hashes: 1: 5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl (hash: MHGN7xZVehfwV5NoH8aGBB3ukI3f9mbQAXvyP7K71Os=) 2: 444EB35A459D11EEA8758641C4F9AE02.roa (hash: HFjFUtVHPNW7Qd56uS2rL+sndelmlhgFQUxhT/KgfFM=) 3: 57F3935045A011EEA9A5215EC4F9AE02.roa (hash: uVCsPTEKvx7XpzG0ppDtvL1K8RxPyB9GI7QJ+Zk5c9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:31:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91367E0, serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818 Validity Not Before: Apr 25 03:31:37 2025 GMT Not After : May 2 03:31:37 2025 GMT Subject: CN=680b0219-925f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c4:a6:3b:8f:97:2f:35:a8:2b:2b:9c:b3:57: 40:bf:7a:3d:c6:38:ac:ff:ba:95:a1:c2:35:b0:f1: 3e:76:44:f5:03:cb:05:ca:26:b4:2e:e9:8d:43:1e: 87:a6:5b:80:01:f0:48:49:5d:07:6e:01:fd:dd:7f: ae:c8:da:1d:64:8b:23:72:d5:c6:99:1a:8b:42:20: 38:e6:c2:e6:21:ff:26:65:b2:27:49:3c:e2:a9:57: 1f:c8:89:80:5a:44:00:47:34:2a:af:69:57:71:ff: 34:38:0e:70:8f:e8:6d:ed:34:e5:8b:25:68:23:1e: dd:a5:89:97:40:6d:b3:96:4c:1f:62:21:e2:d1:09: 91:fe:0a:d5:21:12:86:ae:5e:13:60:b8:1c:a9:e6: 40:48:3d:94:40:fe:5d:90:8a:ee:0f:e5:79:ab:05: da:45:18:e3:98:b0:08:d0:6e:9e:86:8c:99:e5:29: fe:53:67:e0:03:2d:3d:bf:b9:ad:12:25:2e:af:5b: da:72:2e:f1:b5:56:91:61:1a:9b:4a:0d:2e:b0:51: 5c:fa:84:fb:f3:fb:1d:14:25:91:04:e9:dd:54:87: 4f:0d:b6:07:63:28:ba:f7:a1:f7:6a:46:13:4f:6e: a8:9f:e8:59:fc:26:b8:2b:f3:14:7c:ea:c3:99:cf: 7d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:19:BA:EE:AD:43:03:4A:DE:27:04:22:AB:49:4C:3B:D9:F7:C9:B8 X509v3 Authority Key Identifier: keyid:E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:01:04:f4:d0:ea:70:d8:62:ed:b2:ed:37:44:29:9b:cc:14: 3c:bd:3f:07:78:d9:25:7a:6d:10:0a:0b:f5:b3:22:cd:f9:fe: a0:4f:1a:c3:6f:4b:5a:e8:d0:3b:99:ba:bc:e1:8d:1b:11:82: 16:fa:00:06:5d:fa:10:10:98:35:68:4d:b2:98:28:33:97:99: 30:f6:04:1b:d6:2f:16:f1:0e:00:18:23:03:08:45:f2:9b:15: 54:b8:6c:32:99:b2:85:5a:8e:94:b1:10:8d:ea:43:fb:f4:04: bf:6d:b1:0e:6e:14:e5:17:e6:4c:92:83:32:b1:7a:29:fe:40: 17:be:98:5c:34:63:79:5d:54:12:29:ac:07:2a:bd:93:22:6b: 0d:7b:d4:74:53:2a:76:c4:fc:7e:e2:48:de:95:c1:25:68:85: 7f:eb:dc:35:b6:7c:f6:50:1f:e7:08:78:c7:ea:8e:eb:74:0a: 8b:7b:42:7a:4d:62:dd:52:f8:d4:84:de:70:75:6d:ef:9e:44: 26:01:e5:52:2f:89:8b:3b:10:f7:02:e8:f0:03:c6:2c:e2:02: 3c:5b:61:f0:25:36:e9:ae:7e:38:35:fc:06:fe:2e:56:33:bd: 63:a9:f2:b1:a6:c4:db:e6:41:7a:be:3f:64:7e:a7:e8:19:c6: 7f:8b:20:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY3RTAxMTAvBgNVBAUTKEU2MUJFQzEzOTI4NjMyODNEQzk5RTJGRjkzMTU3NUEz MTgxQzI4MTgwHhcNMjUwNDI1MDMzMTM3WhcNMjUwNTAyMDMzMTM3WjAYMRYwFAYD VQQDEw02ODBiMDIxOS05MjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlMSmO4+XLzWoKyucs1dAv3o9xjis/7qVocI1sPE+dkT1A8sFyia0LumNQx6H pluAAfBISV0HbgH93X+uyNodZIsjctXGmRqLQiA45sLmIf8mZbInSTziqVcfyImA WkQARzQqr2lXcf80OA5wj+ht7TTliyVoIx7dpYmXQG2zlkwfYiHi0QmR/grVIRKG rl4TYLgcqeZASD2UQP5dkIruD+V5qwXaRRjjmLAI0G6ehoyZ5Sn+U2fgAy09v7mt EiUur1vaci7xtVaRYRqbSg0usFFc+oT78/sdFCWRBOndVIdPDbYHYyi696H3akYT T26on+hZ/Ca4K/MUfOrDmc99/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOYZuu6t QwNK3icEIqtJTDvZ98m4MB8GA1UdIwQYMBaAFOYb7BOShjKD3Jni/5MVdaMYHCgY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjdFMC9FNDE4OTkxMDQ1 OUMxMUVFQjY5RDY4MzFDNEY5QUUwMi81aHZzRTVLR01vUGNtZUxfa3hWMW94Z2NL QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVodnNFNUtHTW9QY21lTF9reFYxb3hnY0tCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjdFMC9FNDE4OTkxMDQ1OUMxMUVFQjY5RDY4MzFDNEY5QUUwMi81aHZzRTVLR01v UGNtZUxfa3hWMW94Z2NLQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2AQT00Opw2GLtsu03RCmbzBQ8vT8HeNklem0QCgv1syLN+f6gTxrD b0ta6NA7mbq84Y0bEYIW+gAGXfoQEJg1aE2ymCgzl5kw9gQb1i8W8Q4AGCMDCEXy mxVUuGwymbKFWo6UsRCN6kP79AS/bbEObhTlF+ZMkoMysXop/kAXvphcNGN5XVQS KawHKr2TImsNe9R0Uyp2xPx+4kjelcElaIV/69w1tnz2UB/nCHjH6o7rdAqLe0J6 TWLdUvjUhN5wdW3vnkQmAeVSL4mLOxD3AujwA8Ys4gI8W2HwJTbprn44NfwG/i5W M71jqfKxpsTb5kF6vj9kfqfoGcZ/iyAr -----END CERTIFICATE-----Generated at Sat Apr 26 17:19:44 2025 by rpki-client