$ rpki-client -vvf rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft File: 5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft (raw, json) Hash identifier: lOFbcMze3Fce6ZQ6BM9kCjAap5PH9PXSOgfzNsV8m2Q= Subject key identifier: 45:DF:21:00:C7:4E:4F:8A:26:75:9E:EA:07:9B:A1:32:38:FF:6B:C7 Authority key identifier: E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25 Certificate issuer: /CN=A914A47A/serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25 Certificate serial: 3479 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft Manifest number: 3474 Signing time: Thu 24 Apr 2025 14:53:06 +0000 Manifest this update: Thu 24 Apr 2025 14:53:05 +0000 Manifest next update: Thu 01 May 2025 14:53:05 +0000 Files and hashes: 1: 5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl (hash: HTGzPkM8lrMTFmp6z8GstQl1B6cZxeBMxWZ0q/IzJzI=) 2: A5C01D6ED15511EA904EF30BC4F9AE02.roa (hash: g9pqUh5erEZO/WLay3//J8dkPYx1y9WBTENSIPISBog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13433 (0x3479) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A47A, serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25 Validity Not Before: Apr 24 14:53:05 2025 GMT Not After : May 1 14:53:05 2025 GMT Subject: CN=680a5052-fbf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1c:fd:3a:4c:49:80:5f:24:52:f9:b3:ae:86: 00:b6:25:53:e7:b3:fa:31:2d:ac:aa:81:43:30:b8: 75:4e:3a:ff:56:30:78:d6:ae:53:cc:08:44:eb:97: 2b:70:ff:5d:43:b3:f8:50:06:5e:40:76:7e:7d:c3: 7b:f6:ce:07:44:a3:d8:22:61:12:9e:2f:23:91:4d: 93:ab:be:b8:9f:30:eb:80:47:a7:ee:74:6b:f2:67: e2:95:80:14:31:c0:f3:76:b3:ea:84:43:25:64:3a: 23:4f:6c:35:c4:7e:f8:7d:30:3b:a3:ec:41:fe:72: 04:bd:dd:36:54:5b:fb:5a:d7:e4:7c:48:ff:40:f6: 44:8b:75:aa:02:c0:fc:b8:87:bb:29:af:6c:13:42: 5a:18:b5:74:64:e4:79:db:96:f1:94:2d:ae:b1:0f: fa:4d:50:c0:a1:bf:28:00:a8:1e:2e:ea:f3:13:bb: 77:70:d9:2b:c6:49:6e:23:d6:b8:b5:df:93:38:db: 67:61:a3:98:b1:83:ef:3a:df:67:00:06:ca:b2:8d: fb:be:89:13:72:23:9d:ea:20:e6:c6:c9:a9:61:e5: 7b:c5:0e:47:7b:74:b9:c8:8c:3b:2d:d7:4e:78:c1: e1:60:55:fd:f7:8c:5e:34:90:0c:ce:5a:13:cf:fd: 67:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:DF:21:00:C7:4E:4F:8A:26:75:9E:EA:07:9B:A1:32:38:FF:6B:C7 X509v3 Authority Key Identifier: keyid:E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:eb:b0:be:59:32:77:3c:fe:44:05:48:61:c3:be:14:03:25: 7b:01:c1:24:37:68:6c:7b:ae:26:ef:21:bf:02:0f:62:2f:47: 47:8c:e0:88:e5:00:2c:a8:e8:fc:6f:a2:64:9b:dc:ce:8f:17: fe:d5:1c:39:50:7d:7b:fe:dc:16:de:25:64:96:1e:02:3a:d0: ef:ac:7d:17:4a:b9:dd:f5:6d:98:f1:c9:72:65:fd:ed:66:e3: 9d:36:6f:72:51:99:b2:6c:08:3b:28:01:9f:1a:21:a9:a0:06: 04:eb:b3:1f:e2:77:dc:0d:17:43:e0:22:24:88:f4:ab:20:bb: 2a:71:c5:82:cf:fe:6f:a3:90:2c:c0:89:e6:f6:9e:79:36:b6: be:3e:6b:ca:34:b9:b3:37:cf:c7:c5:67:0e:fd:23:f3:30:52: 16:ca:a4:e9:64:cb:38:aa:7f:9c:7a:42:95:43:ba:25:8a:dc: 22:83:d2:5c:7f:8e:51:4d:9a:84:5b:e9:52:83:d5:b7:b1:50: 36:9a:40:28:19:ed:12:bf:b1:d2:ed:03:3c:60:0d:00:ed:e3: af:cf:c7:1c:db:cb:f8:06:f7:b4:a9:66:30:22:67:dc:1b:a8: 39:94:37:68:bb:df:80:c0:f0:d6:60:46:00:c9:2e:f5:76:8a: 8e:a7:2a:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE0N0ExMTAvBgNVBAUTKEU1MkQ3RjdGQkFBQzFGNzVBRkZBNzYyRURCM0YyODE2 MEJDRkJEMjUwHhcNMjUwNDI0MTQ1MzA1WhcNMjUwNTAxMTQ1MzA1WjAYMRYwFAYD VQQDEw02ODBhNTA1Mi1mYmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxz9OkxJgF8kUvmzroYAtiVT57P6MS2sqoFDMLh1Tjr/VjB41q5TzAhE65cr cP9dQ7P4UAZeQHZ+fcN79s4HRKPYImESni8jkU2Tq764nzDrgEen7nRr8mfilYAU McDzdrPqhEMlZDojT2w1xH74fTA7o+xB/nIEvd02VFv7WtfkfEj/QPZEi3WqAsD8 uIe7Ka9sE0JaGLV0ZOR525bxlC2usQ/6TVDAob8oAKgeLurzE7t3cNkrxkluI9a4 td+TONtnYaOYsYPvOt9nAAbKso37vokTciOd6iDmxsmpYeV7xQ5He3S5yIw7LddO eMHhYFX994xeNJAMzloTz/1n2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXfIQDH Tk+KJnWe6geboTI4/2vHMB8GA1UdIwQYMBaAFOUtf3+6rB91r/p2Lts/KBYLz70l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTQ3QS80QUYyMjFEQTFE OTgxMUUyQUQyQjM5ODIwOEIwMkNEMi81UzFfZjdxc0gzV3Ytbll1Mno4b0ZndlB2 U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVTMV9mN3FzSDNXdi1uWXUyejhvRmd2UHZTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTQ3QS80QUYyMjFEQTFEOTgxMUUyQUQyQjM5ODIwOEIwMkNEMi81UzFfZjdxc0gz V3Ytbll1Mno4b0ZndlB2U1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB167C+WTJ3PP5EBUhhw74UAyV7AcEkN2hse64m7yG/Ag9iL0dHjOCI 5QAsqOj8b6Jkm9zOjxf+1Rw5UH17/twW3iVklh4COtDvrH0XSrnd9W2Y8clyZf3t ZuOdNm9yUZmybAg7KAGfGiGpoAYE67Mf4nfcDRdD4CIkiPSrILsqccWCz/5vo5As wInm9p55Nra+PmvKNLmzN8/HxWcO/SPzMFIWyqTpZMs4qn+cekKVQ7olitwig9Jc f45RTZqEW+lSg9W3sVA2mkAoGe0Sv7HS7QM8YA0A7eOvz8cc28v4Bve0qWYwImfc G6g5lDdou9+AwPDWYEYAyS71doqOpyqE -----END CERTIFICATE-----Generated at Sat Apr 26 14:59:24 2025 by rpki-client