$ rpki-client -vvf rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.mft File: -tm5N3fQzrort6a3jVB_d5CSHAY.mft (raw, json) Hash identifier: Ze8+v0MS3xkw1lEhazaNK/6l/Ubsbu4VKeVmz1TCyvg= Subject key identifier: 80:8B:1B:F3:7A:D3:80:27:8F:04:DE:0A:2E:65:9B:AD:9D:FE:AB:40 Authority key identifier: FA:D9:B9:37:77:D0:CE:BA:2B:B7:A6:B7:8D:50:7F:77:90:92:1C:06 Certificate issuer: /CN=A91557F2/serialNumber=FAD9B93777D0CEBA2BB7A6B78D507F7790921C06 Certificate serial: 06D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tm5N3fQzrort6a3jVB_d5CSHAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.mft Manifest number: 080E Signing time: Thu 24 Apr 2025 21:50:21 +0000 Manifest this update: Thu 24 Apr 2025 21:50:20 +0000 Manifest next update: Thu 01 May 2025 21:50:20 +0000 Files and hashes: 1: -tm5N3fQzrort6a3jVB_d5CSHAY.crl (hash: ds/+P+1hBRpS25//9O3dzBpGI/s9bBQuL8gETbmLg6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.crl rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tm5N3fQzrort6a3jVB_d5CSHAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1749 (0x6d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557F2, serialNumber=FAD9B93777D0CEBA2BB7A6B78D507F7790921C06 Validity Not Before: Apr 24 21:50:20 2025 GMT Not After : May 1 21:50:20 2025 GMT Subject: CN=680ab21d-dc41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ec:17:84:ac:0d:18:2d:28:85:4a:4b:74:66: dd:fa:ae:53:1b:90:d1:1c:18:bd:17:0c:af:b3:a7: 20:72:90:fa:33:db:3b:65:31:fe:6e:5f:24:07:40: fb:f3:14:e0:09:dd:36:15:f2:b9:b1:6d:d6:99:87: a8:b9:e6:40:94:be:ae:b0:8d:2f:d3:26:49:96:0c: c8:ab:54:28:05:63:55:12:b7:f7:b4:42:e9:ea:a6: c7:84:93:24:73:50:27:25:59:79:e3:6e:63:5e:7c: 68:ae:66:ff:d0:20:ca:c1:83:ca:7e:ed:38:f4:c6: ce:22:be:66:31:45:e7:0f:d9:95:cf:7f:ce:35:a7: 99:cf:ec:3c:c7:66:37:31:c0:49:a4:28:a4:5e:d4: d5:e4:cb:c1:77:0b:9d:a1:20:29:2b:45:62:a8:e7: 15:ee:2f:8c:ed:74:aa:ef:94:db:2e:7a:8b:1e:e1: 16:3e:9b:69:2f:9a:90:9c:67:81:b6:83:c6:a4:df: f0:9e:d6:a2:3a:4d:de:d7:0f:f2:d0:61:60:dd:a2: 30:dc:a9:09:9d:10:f7:8c:d2:54:9e:ba:39:d7:63: 19:ef:c0:02:52:7d:27:37:40:14:25:ba:ef:bf:d3: f3:a1:be:c4:14:e1:85:95:3d:5c:ff:1e:81:e9:52: 74:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:8B:1B:F3:7A:D3:80:27:8F:04:DE:0A:2E:65:9B:AD:9D:FE:AB:40 X509v3 Authority Key Identifier: keyid:FA:D9:B9:37:77:D0:CE:BA:2B:B7:A6:B7:8D:50:7F:77:90:92:1C:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tm5N3fQzrort6a3jVB_d5CSHAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:6b:1f:53:bf:c7:6b:10:28:31:50:c2:d7:b0:62:49:51:99: 76:ca:37:be:8d:d2:db:37:26:7e:95:97:5a:37:53:67:95:c7: 06:33:0b:8f:fe:d7:d3:7f:9a:03:37:46:36:a2:d3:7f:8a:e5: 34:0d:9f:f0:b1:e7:e3:45:af:0a:f1:10:dc:6c:d8:df:6c:77: 6c:41:fa:6d:73:ea:17:83:27:dd:39:c4:90:54:a1:df:d2:80: 8f:36:ac:25:4c:55:9e:67:02:b8:01:0c:29:4c:07:b0:fd:04: 30:71:76:24:6c:bb:a9:05:8c:1c:e1:5b:be:19:e9:53:1f:ee: 94:fd:12:fd:46:5d:cd:e7:c9:0e:83:3d:f7:c1:d7:04:eb:04: ad:fb:cb:19:e6:eb:c5:45:84:9b:d8:d0:3e:de:7c:3a:ad:b8: c4:24:f0:c1:a6:96:7a:af:1e:67:c3:6f:8c:1b:ce:47:11:80: d9:a9:98:7b:cd:0b:e0:d0:03:aa:75:e3:8a:75:5f:f2:3c:c0: 26:70:74:2c:31:e0:75:5e:32:1a:ec:04:07:ca:e5:98:57:52: 88:c3:6b:02:00:3e:c4:97:f5:58:eb:16:90:2b:de:f8:ce:13: ac:cc:fa:6a:ee:85:db:05:4b:d5:55:3f:ff:8c:c4:39:29:41: 34:97:19:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3RjIxMTAvBgNVBAUTKEZBRDlCOTM3NzdEMENFQkEyQkI3QTZCNzhENTA3Rjc3 OTA5MjFDMDYwHhcNMjUwNDI0MjE1MDIwWhcNMjUwNTAxMjE1MDIwWjAYMRYwFAYD VQQDEw02ODBhYjIxZC1kYzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAouwXhKwNGC0ohUpLdGbd+q5TG5DRHBi9Fwyvs6cgcpD6M9s7ZTH+bl8kB0D7 8xTgCd02FfK5sW3WmYeoueZAlL6usI0v0yZJlgzIq1QoBWNVErf3tELp6qbHhJMk c1AnJVl5425jXnxormb/0CDKwYPKfu049MbOIr5mMUXnD9mVz3/ONaeZz+w8x2Y3 McBJpCikXtTV5MvBdwudoSApK0ViqOcV7i+M7XSq75TbLnqLHuEWPptpL5qQnGeB toPGpN/wntaiOk3e1w/y0GFg3aIw3KkJnRD3jNJUnro512MZ78ACUn0nN0AUJbrv v9Pzob7EFOGFlT1c/x6B6VJ0DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFICLG/N6 04AnjwTeCi5lm62d/qtAMB8GA1UdIwQYMBaAFPrZuTd30M66K7emt41Qf3eQkhwG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdGMi8yMzM1MDRBNDRG Q0MxMUVCOURCRTdGNURDNEY5QUUwMi8tdG01TjNmUXpyb3J0NmEzalZCX2Q1Q1NI QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10bTVOM2ZRenJvcnQ2YTNqVkJfZDVDU0hBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdGMi8yMzM1MDRBNDRGQ0MxMUVCOURCRTdGNURDNEY5QUUwMi8tdG01TjNmUXpy b3J0NmEzalZCX2Q1Q1NIQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiax9Tv8drECgxUMLXsGJJUZl2yje+jdLbNyZ+lZdaN1NnlccGMwuP /tfTf5oDN0Y2otN/iuU0DZ/wsefjRa8K8RDcbNjfbHdsQfptc+oXgyfdOcSQVKHf 0oCPNqwlTFWeZwK4AQwpTAew/QQwcXYkbLupBYwc4Vu+GelTH+6U/RL9Rl3N58kO gz33wdcE6wSt+8sZ5uvFRYSb2NA+3nw6rbjEJPDBppZ6rx5nw2+MG85HEYDZqZh7 zQvg0AOqdeOKdV/yPMAmcHQsMeB1XjIa7AQHyuWYV1KIw2sCAD7El/VY6xaQK974 zhOszPpq7oXbBUvVVT//jMQ5KUE0lxl5 -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:10 2025 by rpki-client