$ rpki-client -vvf rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/5-kErSYVSeMdvVn0azB0xr-m2rI.mft File: 5-kErSYVSeMdvVn0azB0xr-m2rI.mft (raw, json) Hash identifier: wa3vWoBJ82jJyL/KO21iPBPTGcF7oosPNUZbH4T1Mm0= Subject key identifier: 2E:E9:98:03:BF:06:8E:19:5E:DD:08:5F:55:76:36:2D:4E:F5:05:82 Authority key identifier: E7:E9:04:AD:26:15:49:E3:1D:BD:59:F4:6B:30:74:C6:BF:A6:DA:B2 Certificate issuer: /CN=A9148E9A/serialNumber=E7E904AD261549E31DBD59F46B3074C6BFA6DAB2 Certificate serial: 018E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5-kErSYVSeMdvVn0azB0xr-m2rI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/5-kErSYVSeMdvVn0azB0xr-m2rI.mft Manifest number: 018C Signing time: Fri 25 Apr 2025 02:39:44 +0000 Manifest this update: Fri 25 Apr 2025 02:39:43 +0000 Manifest next update: Fri 02 May 2025 02:39:42 +0000 Files and hashes: 1: 5-kErSYVSeMdvVn0azB0xr-m2rI.crl (hash: WCpDaoK3U8xmY2fOoyauenlaLz4YAFxGweZxuGWW4N0=) 2: 20BD79FAC17A11ED8F7A315FC4F9AE02.roa (hash: FtelNB9mh9rm/DPnO36fMVkGjRmD3W2CCA0ojbvk/CE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/5-kErSYVSeMdvVn0azB0xr-m2rI.crl rsync://rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/5-kErSYVSeMdvVn0azB0xr-m2rI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5-kErSYVSeMdvVn0azB0xr-m2rI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:39:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148E9A, serialNumber=E7E904AD261549E31DBD59F46B3074C6BFA6DAB2 Validity Not Before: Apr 25 02:39:43 2025 GMT Not After : May 2 02:39:42 2025 GMT Subject: CN=680af5ef-2b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bc:e3:ec:fd:04:95:fb:3e:5b:b0:84:44:92: 93:cb:76:e9:7c:51:e1:1c:7d:f9:79:e4:85:7c:78: ef:da:ee:02:e7:f9:c1:88:7f:98:13:4a:ac:3f:c5: 6f:52:56:98:4f:70:ef:3d:46:12:84:0a:4f:61:6e: 0f:3a:b4:b7:f8:49:9a:96:da:47:6e:15:c0:9e:3c: af:8a:64:4c:a6:41:9f:20:06:7a:5a:81:05:15:1c: cb:87:0b:29:bb:d3:06:a1:33:eb:49:02:bc:b6:d6: 9e:15:9f:47:3e:12:9c:0c:00:12:64:a3:6d:9f:d5: a0:d0:9c:17:3a:fc:40:aa:3b:3b:f4:7f:ea:bf:48: 93:88:34:c3:c1:21:49:46:29:85:1a:73:cc:4d:f1: f8:b2:b3:a3:30:51:72:f8:b8:00:fd:b9:f1:f9:5b: f2:40:3c:c0:22:5f:e3:28:ae:39:7c:d7:8f:36:76: 12:3d:c9:1c:88:05:16:e1:d4:6a:8c:f0:e8:bd:8b: 2f:36:80:67:06:f7:49:6a:5a:93:b7:34:d8:a7:b6: d3:66:64:a0:6e:d4:0f:06:70:51:78:ae:97:2f:e1: e5:f9:83:1d:c3:de:56:be:8a:e2:a1:3b:d5:3f:0d: bb:6b:34:01:30:97:7a:86:91:ff:08:4e:ed:08:75: d4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E9:98:03:BF:06:8E:19:5E:DD:08:5F:55:76:36:2D:4E:F5:05:82 X509v3 Authority Key Identifier: keyid:E7:E9:04:AD:26:15:49:E3:1D:BD:59:F4:6B:30:74:C6:BF:A6:DA:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/5-kErSYVSeMdvVn0azB0xr-m2rI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5-kErSYVSeMdvVn0azB0xr-m2rI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/5-kErSYVSeMdvVn0azB0xr-m2rI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:32:0e:1a:fc:f2:83:ed:65:b9:8b:69:41:c9:4f:ba:66:9d: 00:dc:e8:2e:0f:fa:65:68:eb:a4:ae:22:49:ed:45:3c:a9:21: e4:8b:86:ab:fa:de:6c:66:66:ee:35:96:a3:ee:44:22:5c:af: 89:25:5f:7a:a1:b6:91:71:88:aa:d4:43:95:aa:a4:8e:1b:e6: 53:81:2c:1c:e3:cb:87:d4:fe:c2:fe:32:d4:1b:55:2c:d8:42: fb:27:4c:e7:d4:7f:39:0c:a3:95:8f:51:52:6c:67:71:83:c8: 92:69:6c:cc:7a:38:55:8f:62:c4:a4:0f:49:2f:86:eb:a8:b7: 2b:77:e3:f8:43:5c:62:f5:b4:c6:d4:f5:af:54:40:e8:c4:0c: 7a:cd:0b:32:90:13:43:63:83:9d:4a:bf:ef:c1:cd:bd:37:24: 0d:71:f2:7d:9d:8d:ee:1a:08:6c:62:f2:af:17:bf:89:f2:ca: de:24:a5:a5:24:4f:f9:72:df:c9:78:e0:6e:45:00:fe:d8:50: 59:a5:77:87:e9:b8:7e:45:2a:71:14:38:a4:e1:8d:f4:ff:22: 4a:b3:5b:32:5d:5e:d0:aa:23:f6:3b:d7:e8:0d:65:f5:af:12: 31:64:73:78:9d:26:4b:5f:3b:a6:7f:e8:1a:0a:7b:a2:94:21: cc:2e:3f:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhFOUExMTAvBgNVBAUTKEU3RTkwNEFEMjYxNTQ5RTMxREJENTlGNDZCMzA3NEM2 QkZBNkRBQjIwHhcNMjUwNDI1MDIzOTQzWhcNMjUwNTAyMDIzOTQyWjAYMRYwFAYD VQQDEw02ODBhZjVlZi0yYjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7zj7P0Elfs+W7CERJKTy3bpfFHhHH35eeSFfHjv2u4C5/nBiH+YE0qsP8Vv UlaYT3DvPUYShApPYW4POrS3+EmaltpHbhXAnjyvimRMpkGfIAZ6WoEFFRzLhwsp u9MGoTPrSQK8ttaeFZ9HPhKcDAASZKNtn9Wg0JwXOvxAqjs79H/qv0iTiDTDwSFJ RimFGnPMTfH4srOjMFFy+LgA/bnx+VvyQDzAIl/jKK45fNePNnYSPckciAUW4dRq jPDovYsvNoBnBvdJalqTtzTYp7bTZmSgbtQPBnBReK6XL+Hl+YMdw95WvorioTvV Pw27azQBMJd6hpH/CE7tCHXU7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7pmAO/ Bo4ZXt0IX1V2Ni1O9QWCMB8GA1UdIwQYMBaAFOfpBK0mFUnjHb1Z9GswdMa/ptqy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEU5QS8wM0Y0N0Q4QUMx NzcxMUVEQTAzOUYyMkZDNEY5QUUwMi81LWtFclNZVlNlTWR2Vm4wYXpCMHhyLW0y ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUta0VyU1lWU2VNZHZWbjBhekIweHItbTJySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEU5QS8wM0Y0N0Q4QUMxNzcxMUVEQTAzOUYyMkZDNEY5QUUwMi81LWtFclNZVlNl TWR2Vm4wYXpCMHhyLW0yckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyMg4a/PKD7WW5i2lByU+6Zp0A3OguD/plaOukriJJ7UU8qSHki4ar +t5sZmbuNZaj7kQiXK+JJV96obaRcYiq1EOVqqSOG+ZTgSwc48uH1P7C/jLUG1Us 2EL7J0zn1H85DKOVj1FSbGdxg8iSaWzMejhVj2LEpA9JL4brqLcrd+P4Q1xi9bTG 1PWvVEDoxAx6zQsykBNDY4OdSr/vwc29NyQNcfJ9nY3uGghsYvKvF7+J8sreJKWl JE/5ct/JeOBuRQD+2FBZpXeH6bh+RSpxFDik4Y30/yJKs1syXV7QqiP2O9foDWX1 rxIxZHN4nSZLXzumf+gaCnuilCHMLj+f -----END CERTIFICATE-----Generated at Sat Apr 26 04:59:38 2025 by rpki-client