$ rpki-client -vvf rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft File: 5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft (raw, json) Hash identifier: MWFP65pnqo4AkoXAgOwptBQXERIZd1zDIKzEMx3kXUE= Subject key identifier: 13:6D:60:1C:2C:60:02:51:AE:C4:BF:CF:E0:54:E7:82:13:BC:1E:DF Authority key identifier: E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1 Certificate issuer: /CN=A914C7F8/serialNumber=E50963D70468727356B78B7FC4380974429B64E1 Certificate serial: 0169 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft Manifest number: 0163 Signing time: Fri 25 Apr 2025 03:11:55 +0000 Manifest this update: Fri 25 Apr 2025 03:11:55 +0000 Manifest next update: Fri 02 May 2025 03:11:55 +0000 Files and hashes: 1: 5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl (hash: 7yqRdUqIoVPdXZ9ulhzUWO7gHieCBqwdns7TnvEKSEk=) 2: 47862E7E129C11EEA43CFD46C4F9AE02.roa (hash: M9MqZsVmz62prCxeOcSq9CpUw3/czHK+Un3uXWoG0WQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C7F8, serialNumber=E50963D70468727356B78B7FC4380974429B64E1 Validity Not Before: Apr 25 03:11:55 2025 GMT Not After : May 2 03:11:55 2025 GMT Subject: CN=680afd7b-d245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9d:c5:26:bb:1b:a8:94:cb:90:b8:31:8a:0c: 77:17:eb:a6:6d:c0:ce:74:e7:3b:cc:56:65:17:d2: bf:8e:33:d6:cd:78:d0:bd:0e:be:88:07:02:61:57: ec:f5:93:cb:84:c4:34:4f:a5:d5:3d:48:77:94:21: 98:2b:a1:6d:95:7a:03:4d:7a:45:17:15:42:a3:0f: dc:7e:d1:ca:a8:aa:59:8b:4a:86:e0:82:15:db:25: 72:c0:7c:8c:af:25:fc:c6:12:81:b9:a3:72:1a:dc: a3:d6:64:38:6e:cd:85:f9:b3:5b:e6:24:f3:28:30: ea:bd:0f:cb:bb:f4:57:6f:41:43:f9:76:61:3c:a1: 0b:13:d6:6b:83:87:92:c2:1e:be:83:e7:4f:03:ed: 8c:9b:53:fc:77:14:60:4c:fc:e9:48:bc:c6:31:dc: d4:49:88:47:c8:fd:e2:a7:72:bf:ac:13:bb:e0:ef: d0:0a:c2:10:31:af:7a:a4:16:4a:d9:6f:0c:a0:9d: 13:85:ad:1b:55:3e:44:bc:88:f7:e8:45:f7:8a:20: 99:7a:fd:d7:96:9b:3f:ce:ed:c6:18:00:16:90:02: e2:95:4d:a7:ca:09:cd:28:e3:76:57:1d:58:e7:ca: 77:43:29:b0:6b:cf:9c:72:ce:21:c6:56:bf:71:85: 7b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:6D:60:1C:2C:60:02:51:AE:C4:BF:CF:E0:54:E7:82:13:BC:1E:DF X509v3 Authority Key Identifier: keyid:E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:7d:ea:2e:01:55:b3:a1:bf:92:f6:d1:6c:5e:6c:b9:de:a5: d0:f2:1e:1a:fb:3b:6c:fa:75:25:5f:75:02:27:83:92:94:d1: 34:69:49:d5:07:3f:f9:2b:1d:e8:37:cd:38:0a:e8:ee:06:68: 77:71:ab:c2:ca:be:b3:8c:84:8c:f1:9e:aa:c2:c4:a2:0a:52: 80:55:e1:ee:08:10:67:89:17:72:5e:bd:03:26:de:73:06:34: 1b:09:bf:6e:d6:92:42:b7:47:20:04:c1:8e:2e:c0:2f:87:4d: 80:6a:8e:6c:84:55:3b:33:14:b2:2a:94:19:0d:fd:f7:8a:67: 64:d3:fe:37:52:de:da:05:c7:8a:16:4a:04:1b:74:5a:6d:ef: 0e:62:e4:65:2b:0a:94:9a:e4:9e:3e:eb:f5:aa:78:9d:12:8a: 1b:8f:9a:01:19:b9:25:b0:3f:f6:ef:f6:77:a6:d4:65:7a:c9: 36:2d:69:f6:eb:ec:aa:41:71:c0:54:cd:d5:48:2a:7d:b1:05: bb:5c:b1:d5:39:e6:ed:a6:bd:61:50:b1:06:cb:63:74:d7:57: 9c:ed:31:63:8e:bd:7a:18:67:19:ce:8d:4f:d3:84:ad:37:85: 57:6c:cf:b8:46:ef:c1:90:c1:df:2a:ad:fb:2c:23:7c:84:b6: b9:9b:93:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM3RjgxMTAvBgNVBAUTKEU1MDk2M0Q3MDQ2ODcyNzM1NkI3OEI3RkM0MzgwOTc0 NDI5QjY0RTEwHhcNMjUwNDI1MDMxMTU1WhcNMjUwNTAyMDMxMTU1WjAYMRYwFAYD VQQDEw02ODBhZmQ3Yi1kMjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw53FJrsbqJTLkLgxigx3F+umbcDOdOc7zFZlF9K/jjPWzXjQvQ6+iAcCYVfs 9ZPLhMQ0T6XVPUh3lCGYK6FtlXoDTXpFFxVCow/cftHKqKpZi0qG4IIV2yVywHyM ryX8xhKBuaNyGtyj1mQ4bs2F+bNb5iTzKDDqvQ/Lu/RXb0FD+XZhPKELE9Zrg4eS wh6+g+dPA+2Mm1P8dxRgTPzpSLzGMdzUSYhHyP3ip3K/rBO74O/QCsIQMa96pBZK 2W8MoJ0Tha0bVT5EvIj36EX3iiCZev3Xlps/zu3GGAAWkALilU2nygnNKON2Vx1Y 58p3Qymwa8+ccs4hxla/cYV7lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNtYBws YAJRrsS/z+BU54ITvB7fMB8GA1UdIwQYMBaAFOUJY9cEaHJzVreLf8Q4CXRCm2Th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzdGOC9FMjUxMEUxQzEy OTUxMUVFODRCQUQ3NDZDNEY5QUUwMi81UWxqMXdSb2NuTld0NHRfeERnSmRFS2Ja T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRbGoxd1JvY25OV3Q0dF94RGdKZEVLYlpPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzdGOC9FMjUxMEUxQzEyOTUxMUVFODRCQUQ3NDZDNEY5QUUwMi81UWxqMXdSb2Nu Tld0NHRfeERnSmRFS2JaT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBffeouAVWzob+S9tFsXmy53qXQ8h4a+zts+nUlX3UCJ4OSlNE0aUnV Bz/5Kx3oN804CujuBmh3cavCyr6zjISM8Z6qwsSiClKAVeHuCBBniRdyXr0DJt5z BjQbCb9u1pJCt0cgBMGOLsAvh02Aao5shFU7MxSyKpQZDf33imdk0/43Ut7aBceK FkoEG3Rabe8OYuRlKwqUmuSePuv1qnidEoobj5oBGbklsD/27/Z3ptRlesk2LWn2 6+yqQXHAVM3VSCp9sQW7XLHVOebtpr1hULEGy2N011ec7TFjjr16GGcZzo1P04St N4VXbM+4Ru/BkMHfKq37LCN8hLa5m5MN -----END CERTIFICATE-----Generated at Sat Apr 26 15:24:22 2025 by rpki-client