$ rpki-client -vvf rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft File: 5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft (raw, json) Hash identifier: fztjdb/9OdY/AJt94rYqA2r3pcxQswyIuwaw/NHw6UI= Subject key identifier: AC:09:5F:7B:3D:55:9D:6F:50:B7:70:9A:FD:E6:82:76:4F:F7:DD:BF Authority key identifier: E5:88:C7:3E:6C:B4:FD:B3:8B:84:EE:40:F8:F9:B6:4C:50:BE:4B:73 Certificate issuer: /CN=A913ABFE/serialNumber=E588C73E6CB4FDB38B84EE40F8F9B64C50BE4B73 Certificate serial: 016A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft Manifest number: 015D Signing time: Fri 25 Apr 2025 03:18:53 +0000 Manifest this update: Fri 25 Apr 2025 03:18:53 +0000 Manifest next update: Fri 02 May 2025 03:18:53 +0000 Files and hashes: 1: 5YjHPmy0_bOLhO5A-Pm2TFC-S3M.crl (hash: bOCrywK9XatICnjjHAS7i6yYBEQlOl1ORQDUBjAVfbw=) 2: F4C13F18066811F0B521BF2FC4F9AE02.roa (hash: epExzgPr36sDhlRxRH5MQNOpHIGT7+cJfb/YyVTxfcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.crl rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:18:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913ABFE, serialNumber=E588C73E6CB4FDB38B84EE40F8F9B64C50BE4B73 Validity Not Before: Apr 25 03:18:53 2025 GMT Not After : May 2 03:18:53 2025 GMT Subject: CN=680aff1d-c6c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4b:6f:5a:f9:52:7b:2e:76:2e:22:e5:7a:b4: 72:de:57:03:f5:a8:27:e2:a9:f1:87:d8:a7:3d:eb: 42:8e:6f:69:f4:39:6e:55:b5:0f:20:29:05:d3:b6: 20:39:7d:b6:49:f3:af:43:63:ad:9e:61:4c:23:3e: ba:86:a5:64:28:47:31:b7:df:45:fb:b6:0d:0e:b3: fb:f2:bf:08:c1:b9:32:6c:be:e2:eb:1b:94:40:ed: a6:93:10:4d:67:e6:02:79:e2:b8:0d:fa:26:ee:df: ef:f4:e4:6d:af:80:a1:23:81:73:01:84:3e:03:ac: 79:89:74:30:96:8e:a2:de:3f:cd:8d:6b:62:e7:63: 04:b1:79:aa:ad:7a:02:69:47:27:41:1a:60:1b:d9: 27:36:73:1a:50:dc:95:f5:06:6e:b1:25:e8:31:da: f9:48:9f:26:f1:ce:73:0b:06:96:c3:4c:d1:56:20: f3:19:48:7a:c4:5f:00:1b:e0:d3:53:26:6c:62:63: 4d:30:5d:38:29:80:32:d0:be:81:cc:89:cd:01:d8: 32:40:d5:1f:77:1c:7b:6f:76:17:b9:c2:f2:4d:c0: 40:5b:43:d1:64:69:27:32:51:05:84:5e:18:a3:40: 9f:92:69:d1:e8:c9:3a:53:2b:25:f4:e8:b3:6d:ae: 3d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:09:5F:7B:3D:55:9D:6F:50:B7:70:9A:FD:E6:82:76:4F:F7:DD:BF X509v3 Authority Key Identifier: keyid:E5:88:C7:3E:6C:B4:FD:B3:8B:84:EE:40:F8:F9:B6:4C:50:BE:4B:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:bc:06:e6:ff:32:ed:cd:2e:ff:73:bf:50:6c:78:c5:87:9b: 29:3d:0d:b1:c7:2d:96:89:02:3d:e6:4e:2d:6d:73:27:30:b0: a2:0e:b7:9d:bf:34:b7:eb:c2:68:9f:03:27:c5:86:b4:24:fd: be:86:8f:f3:85:94:cf:3e:52:bc:7c:09:d2:77:08:cc:03:41: 33:35:e5:21:71:7c:3b:56:27:ad:af:4b:ae:dd:6a:b8:34:8b: 26:c9:46:12:22:dd:8d:16:d6:7c:8c:55:3a:de:17:4f:bf:67: f3:1c:db:ab:54:b6:59:9f:4f:20:08:46:48:77:3c:4c:fd:27: 6f:4b:b4:07:4f:a6:13:ad:32:f7:ff:aa:b6:9b:ca:26:d2:8b: 76:d7:45:bc:69:bf:b9:d0:fb:b6:97:82:b3:d8:9b:22:57:65: 54:b0:6f:37:12:80:2d:d9:15:96:75:7d:ca:cf:83:24:6f:0f: 67:94:83:b4:92:52:69:16:bf:3a:bb:a2:9d:4b:8f:2f:bc:e8: d2:84:47:df:f7:0e:bb:25:95:c1:77:72:48:89:e5:69:f4:ec: b7:1b:ef:0e:e6:6c:74:28:a4:b0:66:97:25:41:ef:47:e5:a4: 3b:e9:d0:ce:e0:84:5f:ae:40:0d:4f:82:ba:41:ef:cd:0f:2a: 3f:11:f7:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FCRkUxMTAvBgNVBAUTKEU1ODhDNzNFNkNCNEZEQjM4Qjg0RUU0MEY4RjlCNjRD NTBCRTRCNzMwHhcNMjUwNDI1MDMxODUzWhcNMjUwNTAyMDMxODUzWjAYMRYwFAYD VQQDEw02ODBhZmYxZC1jNmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoktvWvlSey52LiLlerRy3lcD9agn4qnxh9inPetCjm9p9DluVbUPICkF07Yg OX22SfOvQ2OtnmFMIz66hqVkKEcxt99F+7YNDrP78r8IwbkybL7i6xuUQO2mkxBN Z+YCeeK4Dfom7t/v9ORtr4ChI4FzAYQ+A6x5iXQwlo6i3j/NjWti52MEsXmqrXoC aUcnQRpgG9knNnMaUNyV9QZusSXoMdr5SJ8m8c5zCwaWw0zRViDzGUh6xF8AG+DT UyZsYmNNMF04KYAy0L6BzInNAdgyQNUfdxx7b3YXucLyTcBAW0PRZGknMlEFhF4Y o0CfkmnR6Mk6Uysl9Oizba49fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKwJX3s9 VZ1vULdwmv3mgnZP992/MB8GA1UdIwQYMBaAFOWIxz5stP2zi4TuQPj5tkxQvktz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUJGRS9GMUQ1NTg3RTI1 RjExMUVFQjdCNDgwNThDNEY5QUUwMi81WWpIUG15MF9iT0xoTzVBLVBtMlRGQy1T M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVZakhQbXkwX2JPTGhPNUEtUG0yVEZDLVMzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUJGRS9GMUQ1NTg3RTI1RjExMUVFQjdCNDgwNThDNEY5QUUwMi81WWpIUG15MF9i T0xoTzVBLVBtMlRGQy1TM00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBivAbm/zLtzS7/c79QbHjFh5spPQ2xxy2WiQI95k4tbXMnMLCiDred vzS368JonwMnxYa0JP2+ho/zhZTPPlK8fAnSdwjMA0EzNeUhcXw7Vietr0uu3Wq4 NIsmyUYSIt2NFtZ8jFU63hdPv2fzHNurVLZZn08gCEZIdzxM/SdvS7QHT6YTrTL3 /6q2m8om0ot210W8ab+50Pu2l4Kz2JsiV2VUsG83EoAt2RWWdX3Kz4Mkbw9nlIO0 klJpFr86u6KdS48vvOjShEff9w67JZXBd3JIieVp9Oy3G+8O5mx0KKSwZpclQe9H 5aQ76dDO4IRfrkANT4K6Qe/NDyo/Efdr -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:07 2025 by rpki-client