$ rpki-client -vvf rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.mft File: 5c6UvYXPCPR6j97JcE8dztA4Bow.mft (raw, json) Hash identifier: kDXhe2zLbdYm7vu9MI3JC5bQlO7YUJNk4H0ujsfFV1Q= Subject key identifier: 01:DB:1B:82:C0:21:23:DC:FF:6D:23:70:45:6D:4B:13:21:15:F5:17 Authority key identifier: E5:CE:94:BD:85:CF:08:F4:7A:8F:DE:C9:70:4F:1D:CE:D0:38:06:8C Certificate issuer: /CN=A91517A0/serialNumber=E5CE94BD85CF08F47A8FDEC9704F1DCED038068C Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c6UvYXPCPR6j97JcE8dztA4Bow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.mft Manifest number: 57 Signing time: Fri 25 Apr 2025 06:09:49 +0000 Manifest this update: Fri 25 Apr 2025 06:09:48 +0000 Manifest next update: Fri 02 May 2025 06:09:48 +0000 Files and hashes: 1: 5c6UvYXPCPR6j97JcE8dztA4Bow.crl (hash: fzyJB+R0zyPNS3cM+9s3oZtrt+dMghMQGk94AMWbd8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.crl rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c6UvYXPCPR6j97JcE8dztA4Bow.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:09:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91517A0, serialNumber=E5CE94BD85CF08F47A8FDEC9704F1DCED038068C Validity Not Before: Apr 25 06:09:48 2025 GMT Not After : May 2 06:09:48 2025 GMT Subject: CN=680b272c-1aa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d4:d1:03:3c:22:ec:93:5b:07:65:40:fe:3b: 64:70:08:ed:d0:8d:d1:4f:4b:45:81:ca:4c:c9:21: db:30:c7:72:ad:35:4b:a9:e6:2f:eb:cc:ca:7e:8f: 88:9e:a9:b4:eb:83:93:5e:c2:de:f1:6e:64:5d:3f: e1:f6:3d:0b:0c:b3:1f:de:16:de:ca:87:42:05:f5: 77:cb:2f:88:0b:8b:4b:c9:81:0d:ff:d0:b9:ce:07: 7f:5f:32:a5:a7:13:19:05:42:02:ef:74:b3:e1:00: ac:83:f3:89:30:cf:af:15:fd:77:1c:ed:67:25:63: f7:dd:44:06:9e:e7:cb:ce:e3:2b:3d:5a:82:fc:ac: c2:7b:c5:e5:a1:bb:6d:53:ad:3c:45:f1:35:89:70: 75:42:47:d0:c9:76:15:a4:11:ff:17:93:53:65:55: be:be:73:f8:38:5c:3d:59:4b:f0:3e:ac:87:0b:88: e8:1e:e6:16:ac:62:ec:1c:91:db:f5:48:3f:2d:eb: ea:27:83:46:88:43:c2:90:3f:4b:44:c9:cc:d6:66: 5c:69:8e:96:d6:0e:ef:9e:2d:6a:ac:41:3a:ca:5b: ac:7b:ca:67:19:a6:26:a2:41:fa:b9:f3:b5:55:4a: 35:89:e3:b8:dc:f1:e7:ea:57:1c:b9:16:d4:d9:29: 3e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:DB:1B:82:C0:21:23:DC:FF:6D:23:70:45:6D:4B:13:21:15:F5:17 X509v3 Authority Key Identifier: keyid:E5:CE:94:BD:85:CF:08:F4:7A:8F:DE:C9:70:4F:1D:CE:D0:38:06:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c6UvYXPCPR6j97JcE8dztA4Bow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:9e:d0:d1:e2:8b:a6:3d:b9:1c:30:3d:4a:c5:65:17:96:3b: 8e:b5:17:44:7a:35:43:ce:ff:34:19:af:b7:06:ff:e5:2b:49: e0:c6:d6:1f:97:9d:d0:aa:6e:9b:6e:9f:f7:4c:d6:a3:93:52: 46:14:13:6e:4c:60:3c:b3:0a:b8:cf:e4:68:9e:05:56:06:0c: d7:7a:46:20:ed:a4:23:7d:00:e2:bc:ec:dd:c8:16:9e:9b:00: 5b:c0:be:1a:70:d1:ac:28:a4:5f:c3:80:1b:52:f4:77:61:bf: f5:60:62:5f:89:c9:d0:a6:29:79:6d:b9:27:fb:24:b4:d5:1c: 84:69:89:c3:30:f0:96:04:fa:8f:2a:00:b3:7a:1e:22:29:77: 97:0c:6c:dd:cd:df:be:d4:8a:d1:21:f6:a0:40:f4:d2:ba:b6: 04:d0:ba:e4:6f:a6:77:9f:0e:ca:b6:d6:11:1c:a7:3b:cd:cb: b1:c0:a4:72:ed:9e:b6:5f:f4:68:c8:ab:53:af:45:43:f1:f9: 9f:d3:3f:40:7a:1c:68:aa:f6:43:41:85:ad:e4:c9:2e:85:84: f8:da:8d:84:a7:c0:50:2b:98:48:af:12:15:85:fd:b1:64:7d: 38:c2:35:e0:95:65:3e:da:1f:2a:84:84:02:fe:9a:f5:bf:5a: b7:78:88:ce -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MTdBMDExMC8GA1UEBRMoRTVDRTk0QkQ4NUNGMDhGNDdBOEZERUM5NzA0RjFEQ0VE MDM4MDY4QzAeFw0yNTA0MjUwNjA5NDhaFw0yNTA1MDIwNjA5NDhaMBgxFjAUBgNV BAMTDTY4MGIyNzJjLTFhYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA1NEDPCLsk1sHZUD+O2RwCO3QjdFPS0WBykzJIdswx3KtNUup5i/rzMp+j4ie qbTrg5Newt7xbmRdP+H2PQsMsx/eFt7Kh0IF9XfLL4gLi0vJgQ3/0LnOB39fMqWn ExkFQgLvdLPhAKyD84kwz68V/Xcc7WclY/fdRAae58vO4ys9WoL8rMJ7xeWhu21T rTxF8TWJcHVCR9DJdhWkEf8Xk1NlVb6+c/g4XD1ZS/A+rIcLiOge5hasYuwckdv1 SD8t6+ong0aIQ8KQP0tEyczWZlxpjpbWDu+eLWqsQTrKW6x7ymcZpiaiQfq587VV SjWJ47jc8efqVxy5FtTZKT5NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAdsbgsAh I9z/bSNwRW1LEyEV9RcwHwYDVR0jBBgwFoAU5c6UvYXPCPR6j97JcE8dztA4Boww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxN0EwLzk1NUZBNTUyOUY2 OTExRUZBNEZFQUY2NUM0RjlBRTAyLzVjNlV2WVhQQ1BSNmo5N0pjRThkenRBNEJv dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNWM2VXZZWFBDUFI2ajk3SmNFOGR6dEE0Qm93LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx N0EwLzk1NUZBNTUyOUY2OTExRUZBNEZFQUY2NUM0RjlBRTAyLzVjNlV2WVhQQ1BS Nmo5N0pjRThkenRBNEJvdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKye0NHii6Y9uRwwPUrFZReWO461F0R6NUPO/zQZr7cG/+UrSeDG1h+X ndCqbptun/dM1qOTUkYUE25MYDyzCrjP5GieBVYGDNd6RiDtpCN9AOK87N3IFp6b AFvAvhpw0awopF/DgBtS9Hdhv/VgYl+JydCmKXltuSf7JLTVHIRpicMw8JYE+o8q ALN6HiIpd5cMbN3N377UitEh9qBA9NK6tgTQuuRvpnefDsq21hEcpzvNy7HApHLt nrZf9GjIq1OvRUPx+Z/TP0B6HGiq9kNBha3kyS6FhPjajYSnwFArmEivEhWF/bFk fTjCNeCVZT7aHyqEhAL+mvW/Wrd4iM4= -----END CERTIFICATE-----Generated at Sat Apr 26 13:54:48 2025 by rpki-client