$ rpki-client -vvf rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft File: 5G6s3CFDhcFCA0Z05Gxo57vilSU.mft (raw, json) Hash identifier: K5UAttBf0+W8gPB/6E1LdFzhptOW/av4zwEqyFt5PQw= Subject key identifier: FF:73:4C:B4:19:7A:2A:C2:8C:64:35:0F:77:55:E4:CC:AE:E8:09:66 Authority key identifier: E4:6E:AC:DC:21:43:85:C1:42:03:46:74:E4:6C:68:E7:BB:E2:95:25 Certificate issuer: /CN=A91372E6/serialNumber=E46EACDC214385C142034674E46C68E7BBE29525 Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft Manifest number: BF Signing time: Fri 25 Apr 2025 04:54:14 +0000 Manifest this update: Fri 25 Apr 2025 04:54:14 +0000 Manifest next update: Fri 02 May 2025 04:54:14 +0000 Files and hashes: 1: 5G6s3CFDhcFCA0Z05Gxo57vilSU.crl (hash: 7TD0AojAdWBzfArCU9ICGaT9QJ5rXIWEqtTryqwM0MI=) 2: 44B42A0EFDE511EEAD5A6432C4F9AE02.roa (hash: N/lCfyLCfQ6pGJZnFWlWQxmi4U70D1DfmNioR3drqK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.crl rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91372E6, serialNumber=E46EACDC214385C142034674E46C68E7BBE29525 Validity Not Before: Apr 25 04:54:14 2025 GMT Not After : May 2 04:54:14 2025 GMT Subject: CN=680b1576-3d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:04:7d:86:93:22:22:c5:1e:00:fd:8d:78:bb: 28:6c:78:19:1f:87:b2:f2:05:ba:ee:38:7e:d7:53: 1f:28:d9:ae:1b:7f:1d:a1:3c:3f:95:f6:cb:a3:50: 8e:21:eb:da:3e:9c:f7:17:df:17:18:31:37:da:68: 79:c3:7f:85:0b:b6:ea:d5:3c:a8:1d:8f:1e:b0:e3: 63:39:fb:b2:08:e5:f9:c9:36:c1:1b:01:52:2f:d0: f5:d3:56:23:f3:e6:ea:04:94:70:a7:ac:fd:e5:11: eb:48:88:c7:8d:1a:20:9c:d8:3d:13:3e:c2:53:d2: ee:b0:31:de:7b:d4:09:fd:be:c5:02:81:c0:37:3c: 6f:52:37:bc:a4:43:cb:d1:df:64:d3:a0:b4:20:4a: 95:cf:51:01:5f:d3:11:f0:4f:cd:6d:b0:73:dd:b8: 06:37:d8:94:fe:c2:cf:ae:7e:e5:07:b4:74:dc:b5: a9:97:1c:e9:0f:60:88:46:77:3d:80:49:33:e3:3d: 35:84:44:f1:93:18:86:56:6d:87:eb:d1:10:95:b6: 8f:49:2f:7c:90:87:fa:d7:fc:f7:ed:d7:e1:01:4b: 25:44:a0:c0:0b:13:b0:c7:ff:b3:98:be:90:13:5e: 87:51:fe:fd:cc:79:09:bd:cb:80:44:f5:dc:fd:dd: cd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:73:4C:B4:19:7A:2A:C2:8C:64:35:0F:77:55:E4:CC:AE:E8:09:66 X509v3 Authority Key Identifier: keyid:E4:6E:AC:DC:21:43:85:C1:42:03:46:74:E4:6C:68:E7:BB:E2:95:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:9c:52:d6:99:65:ec:5c:08:c5:9c:92:31:f7:4c:dc:05:72: 97:52:2e:ce:ac:74:15:0e:59:a9:a9:46:ad:69:37:bb:31:c5: a8:de:d1:5a:97:94:b0:63:54:69:3a:6d:cb:89:12:ed:5f:60: b3:d7:30:43:49:86:f0:26:81:5e:b3:88:33:31:21:d5:df:24: 3b:e1:c9:8a:60:61:23:80:70:6b:ce:25:7d:db:00:04:56:54: e0:78:78:84:b1:aa:d0:40:14:61:8d:e4:49:44:c4:24:2b:46: 10:55:a1:b4:c6:98:fd:6d:1b:0d:82:26:48:41:b4:76:61:7b: e6:75:ea:e4:04:df:3e:d1:11:09:a4:b5:e9:75:2d:67:56:4c: 1b:4e:22:ca:70:c2:36:f8:c6:16:b1:6d:4e:6c:b3:d8:07:b2: 48:ee:ed:25:36:aa:59:2c:82:55:70:ac:80:70:77:65:ce:96: 3d:48:d3:7f:11:4e:6b:e2:dc:9b:9c:49:a2:8e:9f:36:2e:0b: a8:c3:8b:91:ed:6b:b7:ae:27:86:47:0a:fc:cf:31:29:86:56: 27:6f:38:ff:cb:c3:1f:10:06:63:5d:3b:1d:5f:d7:3c:02:62: 3b:90:3d:d8:72:ac:7e:de:4e:55:e7:dc:de:b7:be:f0:84:79: 41:f7:50:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzcyRTYxMTAvBgNVBAUTKEU0NkVBQ0RDMjE0Mzg1QzE0MjAzNDY3NEU0NkM2OEU3 QkJFMjk1MjUwHhcNMjUwNDI1MDQ1NDE0WhcNMjUwNTAyMDQ1NDE0WjAYMRYwFAYD VQQDEw02ODBiMTU3Ni0zZDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3wR9hpMiIsUeAP2NeLsobHgZH4ey8gW67jh+11MfKNmuG38doTw/lfbLo1CO IevaPpz3F98XGDE32mh5w3+FC7bq1TyoHY8esONjOfuyCOX5yTbBGwFSL9D101Yj 8+bqBJRwp6z95RHrSIjHjRognNg9Ez7CU9LusDHee9QJ/b7FAoHANzxvUje8pEPL 0d9k06C0IEqVz1EBX9MR8E/NbbBz3bgGN9iU/sLPrn7lB7R03LWplxzpD2CIRnc9 gEkz4z01hETxkxiGVm2H69EQlbaPSS98kIf61/z37dfhAUslRKDACxOwx/+zmL6Q E16HUf79zHkJvcuARPXc/d3NIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9zTLQZ eirCjGQ1D3dV5Myu6AlmMB8GA1UdIwQYMBaAFORurNwhQ4XBQgNGdORsaOe74pUl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzJFNi9GMzU5MDgyNEZE RTMxMUVFQUE3NzdEMTFDNEY5QUUwMi81RzZzM0NGRGhjRkNBMFowNUd4bzU3dmls U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVHNnMzQ0ZEaGNGQ0EwWjA1R3hvNTd2aWxTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzJFNi9GMzU5MDgyNEZERTMxMUVFQUE3NzdEMTFDNEY5QUUwMi81RzZzM0NGRGhj RkNBMFowNUd4bzU3dmlsU1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBanFLWmWXsXAjFnJIx90zcBXKXUi7OrHQVDlmpqUataTe7McWo3tFa l5SwY1RpOm3LiRLtX2Cz1zBDSYbwJoFes4gzMSHV3yQ74cmKYGEjgHBrziV92wAE VlTgeHiEsarQQBRhjeRJRMQkK0YQVaG0xpj9bRsNgiZIQbR2YXvmderkBN8+0REJ pLXpdS1nVkwbTiLKcMI2+MYWsW1ObLPYB7JI7u0lNqpZLIJVcKyAcHdlzpY9SNN/ EU5r4tybnEmijp82Lguow4uR7Wu3rieGRwr8zzEphlYnbzj/y8MfEAZjXTsdX9c8 AmI7kD3Ycqx+3k5V59zet77whHlB91D1 -----END CERTIFICATE-----Generated at Sat Apr 26 13:05:30 2025 by rpki-client