$ rpki-client -vvf rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft File: S5R0cysQASlff10ywBNpOhk3aBM.mft (raw, json) Hash identifier: wozJxRwwpWQkN3HoDuk8dAqYHisW+Jaa7pmao4RVwmA= Subject key identifier: 74:B3:E2:67:F5:58:1F:C0:18:85:FD:B8:1E:E6:8A:09:A6:3C:7E:FC Authority key identifier: 4B:94:74:73:2B:10:01:29:5F:7F:5D:32:C0:13:69:3A:19:37:68:13 Certificate issuer: /CN=A915393C/serialNumber=4B9474732B1001295F7F5D32C013693A19376813 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft Manifest number: 7D Signing time: Fri 25 Apr 2025 05:40:21 +0000 Manifest this update: Fri 25 Apr 2025 05:40:21 +0000 Manifest next update: Fri 02 May 2025 05:40:21 +0000 Files and hashes: 1: S5R0cysQASlff10ywBNpOhk3aBM.crl (hash: lFH09b8i62Kht0b6hfBZWyhylGs+7aegIBunOCFGvV4=) 2: D970354A640E11EF93D18659C4F9AE02.roa (hash: k3HZpqynszzvTxkVmhHqGRdf/ZQZ2uvnxZO8lo9Yzko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.crl rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915393C, serialNumber=4B9474732B1001295F7F5D32C013693A19376813 Validity Not Before: Apr 25 05:40:21 2025 GMT Not After : May 2 05:40:21 2025 GMT Subject: CN=680b2045-cbc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:19:b5:74:c1:1b:88:58:cb:6d:7d:4e:e2:97: 40:38:c8:9f:e5:5a:9d:c7:18:69:25:4d:0d:c1:97: d3:84:f6:15:f8:94:7e:6e:21:ea:80:aa:a8:3c:07: a4:bf:46:43:7e:4f:c6:6d:fc:ce:3c:94:16:3c:4e: e0:a2:6e:32:26:f5:3a:b8:ce:ed:31:88:9b:b3:df: 2f:06:a5:ba:2e:da:14:fb:d0:59:bb:ea:96:57:d3: 64:4a:b3:b9:6c:8b:d9:2a:02:a3:10:c6:66:d5:eb: 51:07:48:03:18:fb:04:bb:d9:71:ef:7e:88:2d:3c: 70:58:35:11:79:0d:d6:ea:50:6b:ae:d4:f3:f5:79: 44:6a:08:9e:f1:11:fa:d1:5d:2a:56:43:02:c5:a0: e6:ca:77:12:cb:b9:4a:78:b1:d3:46:eb:26:1c:d3: 61:42:ba:6b:ab:58:9a:bf:29:5f:60:72:93:d4:12: d8:51:8a:d1:5e:12:c1:19:b2:10:25:7b:cb:c2:d0: 4d:1b:ae:6d:48:66:06:42:e9:b4:e8:21:20:cc:5f: 54:fd:3d:8e:7b:43:c4:28:7d:d2:4e:97:73:38:43: 37:b2:20:ed:22:dc:14:7e:09:51:eb:9e:95:5f:56: bf:85:80:fd:4b:a7:7d:de:62:46:6e:0a:c4:79:eb: 04:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B3:E2:67:F5:58:1F:C0:18:85:FD:B8:1E:E6:8A:09:A6:3C:7E:FC X509v3 Authority Key Identifier: keyid:4B:94:74:73:2B:10:01:29:5F:7F:5D:32:C0:13:69:3A:19:37:68:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:d7:75:c0:c4:33:ab:f9:a3:9b:5d:d4:ea:42:d4:10:b2:51: 2f:74:f7:f0:00:1e:47:96:ff:f3:0a:8e:46:cb:05:6a:c2:1d: ae:03:fb:15:f0:35:be:65:f9:0c:74:8e:19:9f:e5:77:ca:03: 8c:9f:c5:ee:40:c7:16:9d:d2:9c:7f:f0:8f:83:e2:ab:3d:a5: 39:75:c2:0c:7f:8c:20:db:55:f4:53:5c:9a:e5:64:85:18:d3: 20:9a:43:91:68:4f:f4:4c:92:74:4d:98:dc:93:c3:68:42:7b: c5:61:49:63:d4:c0:79:a2:73:7d:85:dc:dc:89:7c:ef:91:95: bb:d9:8c:9b:71:11:98:7e:32:c4:b5:c5:21:60:f9:11:77:f7: 57:a8:20:b0:54:ad:83:96:91:20:d3:68:67:53:39:38:81:57: 58:7c:22:89:ef:2e:fd:54:78:cc:70:e5:50:cf:3f:20:dc:5a: e5:06:8e:de:fa:87:1f:06:c8:12:6d:9f:a3:1d:6e:79:79:35: e9:0a:f9:60:0f:bb:e2:0c:ea:79:22:59:20:0f:d3:32:1c:82: 94:bf:00:9e:4a:1d:4b:54:1e:38:fd:74:d6:b0:c6:14:cc:02: 30:87:7a:7b:b1:b4:b0:9c:0d:18:26:d0:2b:0b:6a:34:42:b8: 58:37:4a:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzkzQzExMC8GA1UEBRMoNEI5NDc0NzMyQjEwMDEyOTVGN0Y1RDMyQzAxMzY5M0Ex OTM3NjgxMzAeFw0yNTA0MjUwNTQwMjFaFw0yNTA1MDIwNTQwMjFaMBgxFjAUBgNV BAMTDTY4MGIyMDQ1LWNiYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkGbV0wRuIWMttfU7il0A4yJ/lWp3HGGklTQ3Bl9OE9hX4lH5uIeqAqqg8B6S/ RkN+T8Zt/M48lBY8TuCibjIm9Tq4zu0xiJuz3y8Gpbou2hT70Fm76pZX02RKs7ls i9kqAqMQxmbV61EHSAMY+wS72XHvfogtPHBYNRF5DdbqUGuu1PP1eURqCJ7xEfrR XSpWQwLFoObKdxLLuUp4sdNG6yYc02FCumurWJq/KV9gcpPUEthRitFeEsEZshAl e8vC0E0brm1IZgZC6bToISDMX1T9PY57Q8QofdJOl3M4QzeyIO0i3BR+CVHrnpVf Vr+FgP1Lp33eYkZuCsR56wTJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdLPiZ/VY H8AYhf24HuaKCaY8fvwwHwYDVR0jBBgwFoAUS5R0cysQASlff10ywBNpOhk3aBMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzOTNDLzZEMDQzMTVFNjQw RTExRUZCNTQ0NjQ1OEM0RjlBRTAyL1M1UjBjeXNRQVNsZmYxMHl3Qk5wT2hrM2FC TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUzVSMGN5c1FBU2xmZjEweXdCTnBPaGszYUJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz OTNDLzZEMDQzMTVFNjQwRTExRUZCNTQ0NjQ1OEM0RjlBRTAyL1M1UjBjeXNRQVNs ZmYxMHl3Qk5wT2hrM2FCTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIXXdcDEM6v5o5td1OpC1BCyUS909/AAHkeW//MKjkbLBWrCHa4D+xXw Nb5l+Qx0jhmf5XfKA4yfxe5Axxad0px/8I+D4qs9pTl1wgx/jCDbVfRTXJrlZIUY 0yCaQ5FoT/RMknRNmNyTw2hCe8VhSWPUwHmic32F3NyJfO+RlbvZjJtxEZh+MsS1 xSFg+RF391eoILBUrYOWkSDTaGdTOTiBV1h8IonvLv1UeMxw5VDPPyDcWuUGjt76 hx8GyBJtn6Mdbnl5NekK+WAPu+IM6nkiWSAP0zIcgpS/AJ5KHUtUHjj9dNawxhTM AjCHenuxtLCcDRgm0CsLajRCuFg3Sus= -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:41 2025 by rpki-client