$ rpki-client -vvf rpki.apnic.net/member_repository/A913F680/E1FBFA067F1311EC93FC5C5FC4F9AE02/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.mft File: 5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.mft (raw, json) Hash identifier: cEeKUsp5mfBLWCrnxr4ISH2QoZFAKAV6yLRIdwjil1Q= Subject key identifier: 0F:8D:C0:74:01:37:A6:55:71:F7:18:3A:C2:09:45:C1:DF:4D:F7:9D Authority key identifier: E7:F8:C2:23:61:A9:EC:B7:61:EB:FB:01:E8:B9:77:C9:07:A4:F1:F4 Certificate issuer: /CN=A913F680/serialNumber=E7F8C22361A9ECB761EBFB01E8B977C907A4F1F4 Certificate serial: 03D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F680/E1FBFA067F1311EC93FC5C5FC4F9AE02/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.mft Manifest number: 03D4 Signing time: Fri 25 Apr 2025 00:21:20 +0000 Manifest this update: Fri 25 Apr 2025 00:21:20 +0000 Manifest next update: Fri 02 May 2025 00:21:20 +0000 Files and hashes: 1: 5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.crl (hash: n/Lvm5464KFSwb8K+WM75Sy/M7n5hcFaM4/+9AaQhMc=) 2: 019A77BC7F1811ECA6613535C4F9AE02.roa (hash: TYgGuCEN99XGmSfrnTADvpJpaIXgCSABomnSKWfx4Gw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F680/E1FBFA067F1311EC93FC5C5FC4F9AE02/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.crl rsync://rpki.apnic.net/member_repository/A913F680/E1FBFA067F1311EC93FC5C5FC4F9AE02/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 984 (0x3d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F680, serialNumber=E7F8C22361A9ECB761EBFB01E8B977C907A4F1F4 Validity Not Before: Apr 25 00:21:20 2025 GMT Not After : May 2 00:21:20 2025 GMT Subject: CN=680ad580-3ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:65:0b:51:0a:9b:16:5b:7a:ea:a6:7b:91:b6: f7:1c:73:e0:24:58:21:79:c5:7d:46:af:07:b8:cc: b9:49:d7:38:8a:59:29:a6:d0:41:11:9f:1f:90:3d: 22:c7:02:f4:f7:7a:d7:e1:65:2a:2f:c3:46:49:06: ff:20:12:1c:2e:90:e4:24:bb:06:46:ce:16:5f:8e: 77:6f:74:c8:5b:15:bd:b6:37:36:be:cb:12:f2:bd: f8:58:29:13:23:82:53:46:e4:7e:c9:de:74:d6:31: 80:10:27:0b:a2:00:a3:e2:99:5e:f9:8e:7f:28:22: a0:1e:8a:2a:3f:10:91:dd:6f:22:d3:6d:85:8a:00: d1:19:b0:ec:c5:61:27:5a:26:d6:0c:6a:3e:f1:6f: 2c:27:0a:76:a5:cc:8f:d2:5c:94:64:fe:6a:f0:a0: c6:27:70:b9:2d:a8:6c:27:47:5a:f2:f7:ed:6b:9a: 52:55:47:85:59:98:e7:2b:62:6e:36:68:fb:d1:f0: 22:4a:97:f3:91:ad:0e:4d:1d:4c:a4:a8:59:ad:a3: 80:ca:20:38:0d:73:22:8a:ed:0e:a7:55:4b:ea:14: c0:71:74:14:32:d4:b0:ac:32:2c:98:64:fe:83:ed: 62:d6:d0:38:81:81:ed:af:2f:01:5c:bc:fd:4e:1b: ac:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:8D:C0:74:01:37:A6:55:71:F7:18:3A:C2:09:45:C1:DF:4D:F7:9D X509v3 Authority Key Identifier: keyid:E7:F8:C2:23:61:A9:EC:B7:61:EB:FB:01:E8:B9:77:C9:07:A4:F1:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F680/E1FBFA067F1311EC93FC5C5FC4F9AE02/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F680/E1FBFA067F1311EC93FC5C5FC4F9AE02/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:4c:89:22:42:35:24:e0:f4:5f:8d:d6:dc:a7:da:5c:82:75: 85:19:4d:e9:70:68:53:4f:aa:b3:db:c9:0c:2a:5d:ec:ff:8a: 5d:ab:2a:2a:97:a0:11:4f:d4:d1:2d:7d:64:27:57:57:8a:da: c7:b7:46:a7:66:36:c0:9e:f8:a5:8f:f6:a6:83:f1:46:bc:cd: ce:b8:d0:35:2c:7d:55:7b:29:a9:b6:e6:6d:73:99:01:a5:95: 99:bb:36:c6:a3:a9:3c:37:5f:8a:b4:15:32:bf:91:c7:61:c2: d4:35:98:cd:36:2a:96:3a:f6:1e:28:0f:9a:bc:4c:e3:53:57: 07:f3:f3:93:e1:a8:cb:42:f9:0c:0a:ab:f4:92:42:dd:6c:55: 62:47:2c:72:25:52:18:92:2f:b1:02:94:e0:60:c7:a6:0f:da: cb:99:aa:be:9e:75:20:98:d6:73:bc:cc:88:fb:20:2a:77:07: f6:38:87:c5:76:fd:56:1e:60:4d:2d:ed:ef:d3:95:9f:92:93: 4c:ad:d6:11:24:fe:4a:4d:05:42:bb:7c:dc:d3:d9:75:23:b3: d3:ab:95:b5:55:c3:5c:93:36:d5:38:31:e7:4c:01:51:45:49: 5e:a0:1a:2b:bd:c2:7c:56:95:4b:ac:fb:00:bb:66:2c:45:68: 8d:23:df:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y2ODAxMTAvBgNVBAUTKEU3RjhDMjIzNjFBOUVDQjc2MUVCRkIwMUU4Qjk3N0M5 MDdBNEYxRjQwHhcNMjUwNDI1MDAyMTIwWhcNMjUwNTAyMDAyMTIwWjAYMRYwFAYD VQQDEw02ODBhZDU4MC0zZWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoWULUQqbFlt66qZ7kbb3HHPgJFghecV9Rq8HuMy5Sdc4ilkpptBBEZ8fkD0i xwL093rX4WUqL8NGSQb/IBIcLpDkJLsGRs4WX453b3TIWxW9tjc2vssS8r34WCkT I4JTRuR+yd501jGAECcLogCj4ple+Y5/KCKgHooqPxCR3W8i022FigDRGbDsxWEn WibWDGo+8W8sJwp2pcyP0lyUZP5q8KDGJ3C5LahsJ0da8vfta5pSVUeFWZjnK2Ju Nmj70fAiSpfzka0OTR1MpKhZraOAyiA4DXMiiu0Op1VL6hTAcXQUMtSwrDIsmGT+ g+1i1tA4gYHtry8BXLz9ThussQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+NwHQB N6ZVcfcYOsIJRcHfTfedMB8GA1UdIwQYMBaAFOf4wiNhqey3Yev7Aei5d8kHpPH0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjY4MC9FMUZCRkEwNjdG MTMxMUVDOTNGQzVDNUZDNEY5QUUwMi81X2pDSTJHcDdMZGg2X3NCNkxsM3lRZWs4 ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVfakNJMkdwN0xkaDZfc0I2TGwzeVFlazhmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjY4MC9FMUZCRkEwNjdGMTMxMUVDOTNGQzVDNUZDNEY5QUUwMi81X2pDSTJHcDdM ZGg2X3NCNkxsM3lRZWs4ZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAATIkiQjUk4PRfjdbcp9pcgnWFGU3pcGhTT6qz28kMKl3s/4pdqyoq l6ART9TRLX1kJ1dXitrHt0anZjbAnvilj/amg/FGvM3OuNA1LH1VeymptuZtc5kB pZWZuzbGo6k8N1+KtBUyv5HHYcLUNZjNNiqWOvYeKA+avEzjU1cH8/OT4ajLQvkM Cqv0kkLdbFViRyxyJVIYki+xApTgYMemD9rLmaq+nnUgmNZzvMyI+yAqdwf2OIfF dv1WHmBNLe3v05WfkpNMrdYRJP5KTQVCu3zc09l1I7PTq5W1VcNckzbVODHnTAFR RUleoBorvcJ8VpVLrPsAu2YsRWiNI99p -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:55 2025 by rpki-client