$ rpki-client -vvf rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft File: 5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft (raw, json) Hash identifier: 6rQk9ykNHi0qs7JZR0Ef++F73APEzUrCQYDAERIKEr4= Subject key identifier: D2:0A:BD:67:75:9A:BE:F4:D3:97:B3:4E:1D:1C:DE:DF:DA:F3:F7:E5 Authority key identifier: E4:58:EA:30:40:09:87:3C:88:84:AF:89:AA:93:1D:48:BA:85:9C:D0 Certificate issuer: /CN=A91529FC/serialNumber=E458EA304009873C8884AF89AA931D48BA859CD0 Certificate serial: 0688 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5FjqMEAJhzyIhK-JqpMdSLqFnNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft Manifest number: 0673 Signing time: Thu 24 Apr 2025 22:08:37 +0000 Manifest this update: Thu 24 Apr 2025 22:08:37 +0000 Manifest next update: Thu 01 May 2025 22:08:37 +0000 Files and hashes: 1: 5FjqMEAJhzyIhK-JqpMdSLqFnNA.crl (hash: 5WHYGNZGA8IuHS1xEgChCkGx1yRrF4Ah4XoL+tLHKqs=) 2: 78ACE25C7FD811ECB5AA233AC4F9AE02.roa (hash: MxKWutQC0EcuRji5odYG9UP8P1SDvkoxib+Ch43rjh0=) 3: 44E8364E7FDB11EC8A268343C4F9AE02.roa (hash: 1pVbnf50ph3sVf6UCkoKWrOgrUMC2r6DGZa8ts6UopE=) 4: B440BFA6324C11ED94FD883AC4F9AE02.roa (hash: yWCloSXl0jHUU4lKP4fqhekgcparm2OxTeAAa5K4mZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.crl rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5FjqMEAJhzyIhK-JqpMdSLqFnNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:08:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1672 (0x688) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91529FC, serialNumber=E458EA304009873C8884AF89AA931D48BA859CD0 Validity Not Before: Apr 24 22:08:37 2025 GMT Not After : May 1 22:08:37 2025 GMT Subject: CN=680ab665-47ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:70:01:7b:8c:46:78:7b:47:0a:fb:46:bd:7f: 73:b0:11:96:31:05:84:97:cb:94:bd:d1:fa:cb:19: 21:f2:04:65:18:5d:f1:ab:d7:07:02:8f:2c:af:ea: ae:1f:e6:5d:f9:cc:f0:f6:8b:a9:9f:cd:37:14:8c: 16:30:ed:ea:3a:6e:3a:63:1e:e9:4f:41:e2:bd:90: 19:2b:8a:90:df:ee:45:92:22:17:61:bd:73:bc:ee: 73:e4:c4:ae:90:b1:00:c3:82:f0:1f:b1:3a:b8:da: dc:61:33:04:2f:5b:99:35:4d:77:91:cb:d1:60:0a: 41:96:08:5d:da:45:01:dc:12:9d:1f:8c:18:c3:09: a8:98:6b:31:eb:1e:69:f7:6e:b6:e5:00:f9:64:61: 05:41:96:ee:c8:52:7a:e8:4c:8c:2e:c2:0a:75:a3: c2:a0:07:d7:e3:1c:c7:be:a4:94:8c:b3:c0:a1:e5: 7d:57:0f:f0:01:a9:fb:44:18:fb:62:47:2f:d1:92: 42:be:bf:29:ca:4f:89:30:5f:82:d9:01:97:82:fa: c1:99:ab:6a:b3:d7:bc:9a:4d:55:bb:be:f1:d4:95: e3:b1:9f:51:c0:29:57:e5:5d:36:90:1b:0d:cf:e1: b7:68:98:ff:35:06:b6:1f:9a:4c:b2:33:2a:56:11: 9e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:0A:BD:67:75:9A:BE:F4:D3:97:B3:4E:1D:1C:DE:DF:DA:F3:F7:E5 X509v3 Authority Key Identifier: keyid:E4:58:EA:30:40:09:87:3C:88:84:AF:89:AA:93:1D:48:BA:85:9C:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5FjqMEAJhzyIhK-JqpMdSLqFnNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:17:00:91:90:e1:cc:d4:67:2f:78:a6:1c:a1:14:51:e0:4f: 9c:f5:4e:54:7f:8d:11:b7:9c:19:30:73:79:45:05:d3:e2:6c: 4e:7b:f9:9f:45:89:4c:9f:df:66:6b:54:90:d9:df:8f:c8:15: 90:f7:c1:4f:83:b4:2c:bb:84:58:03:f5:e1:6e:32:55:a4:4a: 1c:93:d7:cd:04:10:84:8a:c9:b7:60:43:73:9a:10:29:c2:5a: 50:0d:bf:d4:57:63:2a:64:01:04:7c:73:e0:6e:50:1a:c6:c3: b8:f9:b9:d8:32:ed:16:2e:4d:78:ab:9f:91:05:2b:11:23:c7: eb:f9:2b:aa:ad:5f:0c:71:78:9f:b0:1f:47:04:aa:6c:3d:63: c2:6f:36:39:3d:28:a2:fd:74:ec:65:e6:cc:08:df:d7:d0:e5: 74:d9:25:51:ad:7a:88:a8:25:61:30:ba:92:39:be:74:6c:3c: ad:32:d9:65:05:7e:0a:13:f2:60:f7:b1:49:6a:3d:eb:09:c2: 42:68:a9:31:8f:e5:9e:9a:1e:f8:55:34:92:55:6d:dd:58:4d: ed:71:a8:9a:fa:ca:aa:95:aa:a7:38:89:04:9a:2f:46:42:87: 1f:29:c0:99:8e:25:36:a8:cd:00:0d:03:d1:74:13:be:ca:cf: ea:98:bb:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI5RkMxMTAvBgNVBAUTKEU0NThFQTMwNDAwOTg3M0M4ODg0QUY4OUFBOTMxRDQ4 QkE4NTlDRDAwHhcNMjUwNDI0MjIwODM3WhcNMjUwNTAxMjIwODM3WjAYMRYwFAYD VQQDEw02ODBhYjY2NS00N2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXABe4xGeHtHCvtGvX9zsBGWMQWEl8uUvdH6yxkh8gRlGF3xq9cHAo8sr+qu H+Zd+czw9oupn803FIwWMO3qOm46Yx7pT0HivZAZK4qQ3+5FkiIXYb1zvO5z5MSu kLEAw4LwH7E6uNrcYTMEL1uZNU13kcvRYApBlghd2kUB3BKdH4wYwwmomGsx6x5p 92625QD5ZGEFQZbuyFJ66EyMLsIKdaPCoAfX4xzHvqSUjLPAoeV9Vw/wAan7RBj7 Ykcv0ZJCvr8pyk+JMF+C2QGXgvrBmatqs9e8mk1Vu77x1JXjsZ9RwClX5V02kBsN z+G3aJj/NQa2H5pMsjMqVhGeJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNIKvWd1 mr7005ezTh0c3t/a8/flMB8GA1UdIwQYMBaAFORY6jBACYc8iISviaqTHUi6hZzQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjlGQy9ENjlGNzRCODc3 RTgxMUVCQjdGOTlBNDBDNEY5QUUwMi81RmpxTUVBSmh6eUloSy1KcXBNZFNMcUZu TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVGanFNRUFKaHp5SWhLLUpxcE1kU0xxRm5OQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjlGQy9ENjlGNzRCODc3RTgxMUVCQjdGOTlBNDBDNEY5QUUwMi81RmpxTUVBSmh6 eUloSy1KcXBNZFNMcUZuTkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeFwCRkOHM1GcveKYcoRRR4E+c9U5Uf40Rt5wZMHN5RQXT4mxOe/mf RYlMn99ma1SQ2d+PyBWQ98FPg7Qsu4RYA/XhbjJVpEock9fNBBCEism3YENzmhAp wlpQDb/UV2MqZAEEfHPgblAaxsO4+bnYMu0WLk14q5+RBSsRI8fr+SuqrV8McXif sB9HBKpsPWPCbzY5PSii/XTsZebMCN/X0OV02SVRrXqIqCVhMLqSOb50bDytMtll BX4KE/Jg97FJaj3rCcJCaKkxj+Wemh74VTSSVW3dWE3tcaia+sqqlaqnOIkEmi9G QocfKcCZjiU2qM0ADQPRdBO+ys/qmLvS -----END CERTIFICATE-----Generated at Sat Apr 26 15:04:44 2025 by rpki-client