$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft File: 5rsDqligwnDrZrPq6yQI__q6Xsc.mft (raw, json) Hash identifier: e6Ftm9//eCi5M7zWzafS/rzTzIi0S/7x6W6tPUO5C5I= Subject key identifier: 48:F9:8C:25:85:9F:B3:07:48:F5:9D:A7:91:00:0A:6A:66:EA:FE:BA Authority key identifier: E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7 Certificate issuer: /CN=A914D2BF/serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7 Certificate serial: 018B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft Manifest number: 0187 Signing time: Fri 25 Apr 2025 02:47:49 +0000 Manifest this update: Fri 25 Apr 2025 02:47:49 +0000 Manifest next update: Fri 02 May 2025 02:47:49 +0000 Files and hashes: 1: 5rsDqligwnDrZrPq6yQI__q6Xsc.crl (hash: 6MxhiRr3lzFA5s4fi+vQiC6xmkoD6RONaYIHtbVp8fw=) 2: AEF266ECD34811EDAD96D95DC4F9AE02.roa (hash: KXSCbuQLHG9xWL+hihrwdJUS/R0sgZW/C4dlIANzg14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:47:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D2BF, serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7 Validity Not Before: Apr 25 02:47:49 2025 GMT Not After : May 2 02:47:49 2025 GMT Subject: CN=680af7d5-a8ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ec:c1:39:c1:65:73:af:81:77:49:c3:24:8b: dd:b1:d4:b5:0c:ee:05:dc:8a:0e:89:7d:3f:35:1c: 22:b1:59:39:aa:bb:8e:8b:9e:7f:26:6e:a6:50:4c: ef:91:7c:30:47:3e:02:53:96:8d:05:5d:e7:f3:99: 6e:8b:55:e3:a5:ee:40:03:db:7a:1b:9f:44:5b:3e: 7f:49:e7:88:22:33:59:c7:f3:b0:c7:0f:ca:84:e2: fc:b4:47:1a:d2:0d:0c:d4:0e:5d:26:dc:b0:b9:6a: 82:ae:2c:56:32:dd:4f:46:e0:6f:11:36:ab:53:f2: 5b:c3:fc:4a:6a:cf:ca:58:88:fa:e5:44:04:3d:c8: 20:fe:d1:0d:aa:32:fa:a9:00:d4:7c:2e:8b:ae:f7: 29:81:9e:a8:fb:84:cb:ca:60:ee:48:a0:22:b3:b8: 86:cc:68:1e:27:44:bb:ea:8a:2c:04:e0:ce:af:f2: 83:0e:87:a7:ab:16:45:79:95:03:21:0f:e6:8e:d4: 43:19:7e:bb:b5:ca:e3:3c:eb:68:3f:ac:a5:ff:b2: 26:16:34:01:75:10:e3:4a:18:6f:02:0d:3e:3e:a8: 71:7b:00:80:4b:9e:70:e6:20:80:0b:0f:f9:62:87: 4e:4d:37:09:30:51:ba:dc:e4:dd:b8:2c:56:67:4c: 05:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F9:8C:25:85:9F:B3:07:48:F5:9D:A7:91:00:0A:6A:66:EA:FE:BA X509v3 Authority Key Identifier: keyid:E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:02:aa:78:98:ae:05:56:26:d6:fe:f8:aa:99:40:d3:30:c3: c8:04:9a:2d:33:dd:ba:19:3f:3f:b5:61:42:af:7e:ad:73:30: b2:d2:de:bf:e3:f5:81:f1:d5:e9:ec:13:25:5a:27:2f:ed:7b: 30:d8:9e:5d:b5:4f:a5:45:36:45:c2:7a:eb:10:c4:e2:32:3b: 89:8a:71:9c:76:dd:69:28:ee:85:11:fe:86:23:da:fd:fd:06: 1f:5e:6f:87:50:62:4b:a8:3c:c9:87:7b:9e:c5:08:80:22:9f: ee:a7:1b:8e:63:56:96:08:9f:ec:87:8a:83:10:88:81:ab:43: df:c9:05:dc:9a:fc:6a:8a:19:87:d4:35:d4:c4:80:b8:31:1b: 42:14:f0:0e:69:ad:71:cc:2a:86:36:6e:9c:f2:3a:22:b3:8b: 63:1c:d1:b7:a5:42:5f:ea:b0:4c:1c:bc:10:6f:f0:0e:6d:98: 61:29:36:dc:0a:49:1d:a9:d6:84:ad:e5:f7:21:35:06:e0:12: 08:2c:99:d3:4c:06:6c:8c:a7:c1:6e:89:e5:da:5f:07:34:16: 77:48:25:9b:60:71:39:65:90:b8:79:6a:32:e9:24:4a:97:3a: 5a:27:a8:7e:5f:a3:8d:73:a6:6f:74:67:68:18:70:7d:3b:9e: 68:c8:55:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQyQkYxMTAvBgNVBAUTKEU2QkIwM0FBNThBMEMyNzBFQjY2QjNFQUVCMjQwOEZG RkFCQTVFQzcwHhcNMjUwNDI1MDI0NzQ5WhcNMjUwNTAyMDI0NzQ5WjAYMRYwFAYD VQQDEw02ODBhZjdkNS1hOGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+zBOcFlc6+Bd0nDJIvdsdS1DO4F3IoOiX0/NRwisVk5qruOi55/Jm6mUEzv kXwwRz4CU5aNBV3n85lui1Xjpe5AA9t6G59EWz5/SeeIIjNZx/Owxw/KhOL8tEca 0g0M1A5dJtywuWqCrixWMt1PRuBvETarU/Jbw/xKas/KWIj65UQEPcgg/tENqjL6 qQDUfC6LrvcpgZ6o+4TLymDuSKAis7iGzGgeJ0S76oosBODOr/KDDoenqxZFeZUD IQ/mjtRDGX67tcrjPOtoP6yl/7ImFjQBdRDjShhvAg0+PqhxewCAS55w5iCACw/5 YodOTTcJMFG63OTduCxWZ0wFpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEj5jCWF n7MHSPWdp5EACmpm6v66MB8GA1UdIwQYMBaAFOa7A6pYoMJw62az6uskCP/6ul7H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDJCRi8yQTcxRTZCQ0Qz NDQxMUVEOEUyQzU0NjRDNEY5QUUwMi81cnNEcWxpZ3duRHJaclBxNnlRSV9fcTZY c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyc0RxbGlnd25EclpyUHE2eVFJX19xNlhzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDJCRi8yQTcxRTZCQ0QzNDQxMUVEOEUyQzU0NjRDNEY5QUUwMi81cnNEcWxpZ3du RHJaclBxNnlRSV9fcTZYc2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkAqp4mK4FVibW/viqmUDTMMPIBJotM926GT8/tWFCr36tczCy0t6/ 4/WB8dXp7BMlWicv7Xsw2J5dtU+lRTZFwnrrEMTiMjuJinGcdt1pKO6FEf6GI9r9 /QYfXm+HUGJLqDzJh3uexQiAIp/upxuOY1aWCJ/sh4qDEIiBq0PfyQXcmvxqihmH 1DXUxIC4MRtCFPAOaa1xzCqGNm6c8jois4tjHNG3pUJf6rBMHLwQb/AObZhhKTbc CkkdqdaEreX3ITUG4BIILJnTTAZsjKfBbonl2l8HNBZ3SCWbYHE5ZZC4eWoy6SRK lzpaJ6h+X6ONc6ZvdGdoGHB9O55oyFXz -----END CERTIFICATE-----Generated at Sat Apr 26 13:11:33 2025 by rpki-client