$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft File: 5viFuMHmNK45nsq4FzoD245MEpQ.mft (raw, json) Hash identifier: pn1xogP0jVAFpkQdQNDJ25ut7eIwbEjwBl8/4Hp7YZ0= Subject key identifier: CF:76:0B:A6:2E:82:1F:62:9B:FA:3E:CE:D4:F8:F7:FA:B4:70:A5:92 Authority key identifier: E6:F8:85:B8:C1:E6:34:AE:39:9E:CA:B8:17:3A:03:DB:8E:4C:12:94 Certificate issuer: /CN=A914C4D7/serialNumber=E6F885B8C1E634AE399ECAB8173A03DB8E4C1294 Certificate serial: 0DC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft Manifest number: 0DBB Signing time: Thu 24 Apr 2025 17:52:44 +0000 Manifest this update: Thu 24 Apr 2025 17:52:44 +0000 Manifest next update: Thu 01 May 2025 17:52:44 +0000 Files and hashes: 1: 5viFuMHmNK45nsq4FzoD245MEpQ.crl (hash: reqobFYAGA7/YAJvErwOfnXqqH848bEIIvnL36aqaNo=) 2: 1801797EB79211E986129837C4F9AE02.roa (hash: I7CEbkBg9Av7yOv0PNqj77FDrgxZjjIl1US16C5a7sQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.crl rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3524 (0xdc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C4D7, serialNumber=E6F885B8C1E634AE399ECAB8173A03DB8E4C1294 Validity Not Before: Apr 24 17:52:44 2025 GMT Not After : May 1 17:52:44 2025 GMT Subject: CN=680a7a6c-5d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:41:12:ac:e6:46:7b:7a:01:63:26:59:5b:52: 10:27:c1:d6:3e:bb:12:13:b3:47:63:dd:5c:4a:a3: 77:88:7f:2a:10:77:01:0b:d1:06:08:79:45:71:31: 85:9a:8e:ca:69:e5:cd:11:a6:75:f8:30:27:21:af: 4c:4f:39:bd:34:a8:07:2f:95:a7:10:dd:87:d3:7b: 93:c7:dc:dc:8e:b9:56:dc:9f:09:02:57:8a:1a:dc: fe:8f:bd:73:13:64:c5:52:52:b5:f7:3e:b8:0e:c8: 1a:b9:09:e7:20:d4:e4:b2:0a:ad:ef:79:89:9a:60: ac:34:6e:57:33:6f:2f:cd:c4:2c:bc:2f:33:3e:10: a1:f6:d6:91:31:07:93:70:b9:a3:76:8c:f2:d3:8d: 46:91:76:b0:5d:a0:37:b6:bb:4a:d4:a6:13:15:df: 41:12:0d:71:ed:d6:9f:8f:48:65:d4:e5:f5:bd:16: ea:65:3a:c2:33:1e:c7:2f:a6:34:31:a6:83:02:81: 35:69:c3:a6:92:c8:88:80:68:e0:61:e8:16:7c:1c: 1f:6f:32:df:c4:99:27:54:07:c3:de:44:58:69:4d: 70:7f:0f:26:48:62:2e:d6:c7:22:24:9a:88:e9:c9: 91:dd:02:c6:23:8a:50:7b:63:1e:7c:02:46:b4:6b: c6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:76:0B:A6:2E:82:1F:62:9B:FA:3E:CE:D4:F8:F7:FA:B4:70:A5:92 X509v3 Authority Key Identifier: keyid:E6:F8:85:B8:C1:E6:34:AE:39:9E:CA:B8:17:3A:03:DB:8E:4C:12:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:1a:3e:14:fe:71:72:84:04:fc:83:d4:ee:f9:9e:c1:64:88: 96:12:05:6a:19:5a:53:d1:31:83:8e:41:56:56:19:85:8c:a3: 55:ea:00:cc:3e:e9:91:48:07:a6:6c:3c:be:0f:2c:2c:5e:4e: b5:b3:dd:ed:86:6c:f8:d6:a0:a0:00:34:5f:a6:d4:69:77:5b: d3:94:d2:97:8b:f2:3b:8a:72:85:ff:ac:d3:4d:19:cd:6a:1f: d9:76:cd:1a:9b:1e:2a:0e:01:95:72:1e:55:c8:d1:cf:77:f0: 0b:05:b5:ed:12:4b:b4:2b:58:b3:6e:2d:07:a8:52:85:fe:55: af:36:c0:33:99:19:7b:a0:1b:37:2e:e6:d8:2a:90:8c:67:88: ff:aa:94:a4:08:a1:ba:24:9d:7f:96:56:b9:21:27:31:d7:62: c3:23:c7:11:44:1e:5e:e3:86:57:c6:5a:63:d4:32:a4:b4:84: bb:da:f1:c3:c1:c6:f1:56:ea:1b:59:f7:ae:80:06:a1:b9:dc: ad:a3:14:ef:3d:71:74:d2:3b:42:1d:a4:e6:2c:df:20:84:98: c6:ef:2c:55:9b:e8:51:08:da:d0:04:bd:02:34:9d:18:fa:b3: c7:94:dd:25:e6:a8:6c:3d:4e:a7:2e:9a:e8:47:91:85:4a:11: c5:4b:12:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0RDcxMTAvBgNVBAUTKEU2Rjg4NUI4QzFFNjM0QUUzOTlFQ0FCODE3M0EwM0RC OEU0QzEyOTQwHhcNMjUwNDI0MTc1MjQ0WhcNMjUwNTAxMTc1MjQ0WjAYMRYwFAYD VQQDEw02ODBhN2E2Yy01ZDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8EESrOZGe3oBYyZZW1IQJ8HWPrsSE7NHY91cSqN3iH8qEHcBC9EGCHlFcTGF mo7KaeXNEaZ1+DAnIa9MTzm9NKgHL5WnEN2H03uTx9zcjrlW3J8JAleKGtz+j71z E2TFUlK19z64DsgauQnnINTksgqt73mJmmCsNG5XM28vzcQsvC8zPhCh9taRMQeT cLmjdozy041GkXawXaA3trtK1KYTFd9BEg1x7dafj0hl1OX1vRbqZTrCMx7HL6Y0 MaaDAoE1acOmksiIgGjgYegWfBwfbzLfxJknVAfD3kRYaU1wfw8mSGIu1sciJJqI 6cmR3QLGI4pQe2MefAJGtGvG/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM92C6Yu gh9im/o+ztT49/q0cKWSMB8GA1UdIwQYMBaAFOb4hbjB5jSuOZ7KuBc6A9uOTBKU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRENy85OUQ5MTUzQUI3 OTAxMUU5QkVFOEREMzRDNEY5QUUwMi81dmlGdU1IbU5LNDVuc3E0RnpvRDI0NU1F cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV2aUZ1TUhtTks0NW5zcTRGem9EMjQ1TUVwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzRENy85OUQ5MTUzQUI3OTAxMUU5QkVFOEREMzRDNEY5QUUwMi81dmlGdU1IbU5L NDVuc3E0RnpvRDI0NU1FcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzGj4U/nFyhAT8g9Tu+Z7BZIiWEgVqGVpT0TGDjkFWVhmFjKNV6gDM PumRSAembDy+DywsXk61s93thmz41qCgADRfptRpd1vTlNKXi/I7inKF/6zTTRnN ah/Zds0amx4qDgGVch5VyNHPd/ALBbXtEku0K1izbi0HqFKF/lWvNsAzmRl7oBs3 LubYKpCMZ4j/qpSkCKG6JJ1/lla5IScx12LDI8cRRB5e44ZXxlpj1DKktIS72vHD wcbxVuobWfeugAahudytoxTvPXF00jtCHaTmLN8ghJjG7yxVm+hRCNrQBL0CNJ0Y +rPHlN0l5qhsPU6nLproR5GFShHFSxJR -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:30 2025 by rpki-client