$ rpki-client -vvf rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft File: A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft (raw, json) Hash identifier: JxNi+OLsC+TJllbV9bbmur/Zg4LE7RYYpRqADzeykA8= Subject key identifier: 74:26:8E:3A:8C:21:33:29:1C:AD:E2:8D:AC:DE:CF:95:AE:48:01:A1 Authority key identifier: 03:91:D9:A7:0E:89:3E:75:1B:C6:12:89:C5:44:17:B8:7A:10:45:59 Certificate issuer: /CN=A91380F7/serialNumber=0391D9A70E893E751BC61289C54417B87A104559 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft Manifest number: 51 Signing time: Fri 25 Apr 2025 06:14:53 +0000 Manifest this update: Fri 25 Apr 2025 06:14:53 +0000 Manifest next update: Fri 02 May 2025 06:14:53 +0000 Files and hashes: 1: A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl (hash: e3CLGEQ4n3CAPo7IG118tmSyhbPywp7W4w8534AMtxI=) 2: 9B3FE178A7FA11EFA7886875C4F9AE02.roa (hash: wskyOCDE340iqc6+xbxJBMsRJGfe9vODWh/hz8Ga1HM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:14:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91380F7, serialNumber=0391D9A70E893E751BC61289C54417B87A104559 Validity Not Before: Apr 25 06:14:53 2025 GMT Not After : May 2 06:14:53 2025 GMT Subject: CN=680b285d-6d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:37:91:2b:f2:39:83:9a:eb:6c:54:79:ec:7d: 32:ab:ed:6b:dc:a3:5f:de:07:5d:60:6e:b5:fe:ba: 9b:bd:7a:69:03:65:5f:ae:2a:27:b3:25:67:8f:82: 69:a0:d6:38:9a:c9:dd:1d:ff:6e:d4:28:15:d4:93: bd:fb:ae:9e:bc:aa:16:d3:95:ac:18:b9:8b:cf:29: 14:ae:8a:04:61:01:71:6a:67:67:b7:0a:2e:ed:95: 8f:dc:7e:b7:0f:69:28:04:e4:84:7a:d0:d8:3a:41: 0f:39:9d:42:d1:e8:92:af:ee:b4:80:de:af:94:eb: d3:8c:41:7c:ac:15:76:9a:7d:35:13:e4:8f:b8:5a: d5:7e:28:bf:53:dc:01:b0:36:bb:cd:ca:87:4e:84: a5:23:bb:c3:7f:dc:4a:0d:86:39:d1:e2:a3:91:09: eb:9f:0a:7b:6d:b0:da:b7:08:69:09:97:f3:70:2b: cc:3f:52:73:96:66:5b:55:00:5f:9f:8c:45:62:6d: a1:14:16:0d:43:4b:15:0a:0e:29:1e:29:f4:2a:d4: 87:e6:05:23:c4:b4:f4:33:21:ff:18:42:58:e9:75: 42:8e:4c:32:14:8c:7c:74:d1:62:1a:a0:2d:4c:fe: 98:18:96:3c:a7:8e:3a:59:fd:64:69:4c:e1:03:bb: 74:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:26:8E:3A:8C:21:33:29:1C:AD:E2:8D:AC:DE:CF:95:AE:48:01:A1 X509v3 Authority Key Identifier: keyid:03:91:D9:A7:0E:89:3E:75:1B:C6:12:89:C5:44:17:B8:7A:10:45:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:ad:53:96:99:c1:8d:50:72:05:10:59:ee:82:ad:e5:4a:4a: 21:59:1f:02:56:7c:a2:86:9f:fe:21:9c:5b:11:a6:0e:dd:2b: 48:bf:c6:53:ed:05:a3:2a:1d:ad:e2:e7:01:74:8b:40:92:6e: 71:58:4d:8d:0c:fa:80:55:9e:1c:9e:1e:6e:86:ec:42:71:ff: 87:c9:18:8b:69:de:13:8b:cf:02:e5:b3:fa:46:8c:35:d5:a1: e6:c1:ff:d3:fe:c1:61:8d:de:4d:87:e5:ad:73:18:f0:19:5a: 62:c1:69:46:b8:0c:84:9f:94:46:c7:8a:c2:79:c4:2e:0c:b4: 08:2a:35:7f:aa:47:be:8f:30:e7:e5:a2:1b:ac:c6:05:7a:b0: f7:3b:94:82:5d:30:0f:28:2f:cd:03:ac:fe:b9:34:13:98:5d: 2d:0e:f0:6c:be:46:4d:27:51:5f:f1:ce:44:9b:57:68:da:3a: 77:63:6d:33:49:62:81:51:a4:bf:cc:a9:a0:95:56:79:ad:a7: 11:52:b8:99:3f:74:3b:f3:84:80:3f:60:df:f6:91:b4:c0:6a: 41:b8:ad:4c:f4:89:37:12:4c:83:96:54:9c:c7:a5:27:22:2a: 48:b0:00:d8:8f:fb:44:4d:4c:35:e7:78:99:8a:e8:49:24:11: e1:7e:6c:51 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODBGNzExMC8GA1UEBRMoMDM5MUQ5QTcwRTg5M0U3NTFCQzYxMjg5QzU0NDE3Qjg3 QTEwNDU1OTAeFw0yNTA0MjUwNjE0NTNaFw0yNTA1MDIwNjE0NTNaMBgxFjAUBgNV BAMTDTY4MGIyODVkLTZkNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtN5Er8jmDmutsVHnsfTKr7Wvco1/eB11gbrX+upu9emkDZV+uKiezJWePgmmg 1jiayd0d/27UKBXUk737rp68qhbTlawYuYvPKRSuigRhAXFqZ2e3Ci7tlY/cfrcP aSgE5IR60Ng6QQ85nULR6JKv7rSA3q+U69OMQXysFXaafTUT5I+4WtV+KL9T3AGw NrvNyodOhKUju8N/3EoNhjnR4qORCeufCnttsNq3CGkJl/NwK8w/UnOWZltVAF+f jEVibaEUFg1DSxUKDikeKfQq1IfmBSPEtPQzIf8YQljpdUKOTDIUjHx00WIaoC1M /pgYljynjjpZ/WRpTOEDu3QpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdCaOOowh MykcreKNrN7Pla5IAaEwHwYDVR0jBBgwFoAUA5HZpw6JPnUbxhKJxUQXuHoQRVkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4MEY3L0E3RUJDMUQyQTdG ODExRUZCQjQ0RjM3MUM0RjlBRTAyL0E1SFpwdzZKUG5VYnhoS0p4VVFYdUhvUVJW ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQTVIWnB3NkpQblVieGhLSnhVUVh1SG9RUlZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 MEY3L0E3RUJDMUQyQTdGODExRUZCQjQ0RjM3MUM0RjlBRTAyL0E1SFpwdzZKUG5V YnhoS0p4VVFYdUhvUVJWay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABatU5aZwY1QcgUQWe6CreVKSiFZHwJWfKKGn/4hnFsRpg7dK0i/xlPt BaMqHa3i5wF0i0CSbnFYTY0M+oBVnhyeHm6G7EJx/4fJGItp3hOLzwLls/pGjDXV oebB/9P+wWGN3k2H5a1zGPAZWmLBaUa4DISflEbHisJ5xC4MtAgqNX+qR76PMOfl ohusxgV6sPc7lIJdMA8oL80DrP65NBOYXS0O8Gy+Rk0nUV/xzkSbV2jaOndjbTNJ YoFRpL/MqaCVVnmtpxFSuJk/dDvzhIA/YN/2kbTAakG4rUz0iTcSTIOWVJzHpSci KkiwANiP+0RNTDXneJmK6EkkEeF+bFE= -----END CERTIFICATE-----Generated at Sat Apr 26 17:16:07 2025 by rpki-client