$ rpki-client -vvf rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft File: 5HE8G511dZKVr2TN-6YrcNuaBTc.mft (raw, json) Hash identifier: qMoZAwWp+GhkQRAEdyvEHlZStVNtYC4t6RwjMGko1Mc= Subject key identifier: E9:C2:EC:DB:66:DF:16:6C:B1:98:1E:8E:03:96:13:C6:7E:61:06:9A Authority key identifier: E4:71:3C:1B:9D:75:75:92:95:AF:64:CD:FB:A6:2B:70:DB:9A:05:37 Certificate issuer: /CN=A91561B7/serialNumber=E4713C1B9D75759295AF64CDFBA62B70DB9A0537 Certificate serial: 1D9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft Manifest number: 1D86 Signing time: Thu 24 Apr 2025 16:08:14 +0000 Manifest this update: Thu 24 Apr 2025 16:08:13 +0000 Manifest next update: Thu 01 May 2025 16:08:13 +0000 Files and hashes: 1: 5HE8G511dZKVr2TN-6YrcNuaBTc.crl (hash: oiAaXOiFJ427hhpp05Zb8A2S3+ODsYQ1FIKnnP/ZH5U=) 2: 4865DD00A13B11E687921078C4F9AE02.roa (hash: MaFWYkY2HcnSI16cq7zrf3Xg1TMrKe+K2OOU5n2vPcU=) 3: 1D57FF40A01311E684546521C4F9AE02.roa (hash: 8kLRR6g7/NXM5uPCUqU+X4Qb9woBVi0kDN/Wkxs+ARo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.crl rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7579 (0x1d9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91561B7, serialNumber=E4713C1B9D75759295AF64CDFBA62B70DB9A0537 Validity Not Before: Apr 24 16:08:13 2025 GMT Not After : May 1 16:08:13 2025 GMT Subject: CN=680a61ed-56be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:32:b4:12:ff:48:76:90:71:0f:90:6a:dd:ba: 2d:45:34:4e:31:09:02:0d:3a:f6:11:bf:22:3b:08: 69:f2:f3:ea:c9:dd:36:35:d1:76:2d:bc:a9:47:0c: 7e:03:0e:f9:bc:df:7a:fa:32:f1:74:ee:cd:ae:3b: ec:bd:a3:3d:fe:27:1c:ed:4d:de:a5:4d:47:79:e6: 1e:92:24:eb:4d:e1:d3:a3:0d:94:26:db:dd:e2:b7: 8a:72:dd:a0:25:9b:2b:bd:90:c1:3b:f9:83:39:27: 57:66:21:6c:7f:12:dd:a3:8c:a9:e7:bb:20:45:61: 88:60:29:80:51:c9:2a:37:d5:2a:a6:e3:af:95:4c: af:2a:74:d1:6a:56:8d:99:d4:01:92:8a:50:07:9b: 4e:3e:1e:23:20:af:ba:10:fd:e6:d5:d8:4d:ce:e1: ae:06:f1:51:07:3c:86:a5:37:c0:02:9d:92:29:6a: 62:60:a5:77:28:65:c5:ea:e8:d2:11:59:b6:34:ad: 33:a6:24:d2:d6:65:45:78:3c:e9:86:4d:0c:86:ad: a6:d0:21:a4:77:48:c1:0b:6a:bc:73:34:09:27:d4: 87:89:79:db:28:a7:ac:82:dd:d4:e9:6e:7e:7b:87: 9a:62:02:1b:ff:da:4c:28:f7:04:21:45:4b:c5:a9: 76:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C2:EC:DB:66:DF:16:6C:B1:98:1E:8E:03:96:13:C6:7E:61:06:9A X509v3 Authority Key Identifier: keyid:E4:71:3C:1B:9D:75:75:92:95:AF:64:CD:FB:A6:2B:70:DB:9A:05:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:b9:78:6e:ad:f3:0a:60:f3:3f:72:e9:36:ab:8f:17:4f:85: 34:18:ef:a1:d7:46:3e:44:2d:b0:67:38:03:96:d0:22:32:9a: 4d:fc:e8:63:03:a3:c4:7b:c2:fb:bf:78:4e:be:f0:5c:9d:7b: 0c:78:c3:a6:1f:23:f5:ef:02:98:e8:24:37:13:28:f2:b9:92: 64:53:de:59:d6:2d:2c:c1:1f:5a:3a:24:ca:7b:c9:98:94:9f: 00:4b:76:ad:17:80:2a:5f:af:92:33:d6:8a:88:7a:90:92:1c: f1:24:d9:02:02:8f:8a:e6:57:a5:8f:ce:7b:83:ad:a3:60:02: a5:71:5c:6d:cf:de:14:26:70:5b:7b:38:8e:54:1f:36:e1:7d: ef:49:90:40:65:3d:0d:20:51:8d:db:cf:01:b9:7d:08:0f:f1: ab:2a:99:af:fc:21:6e:2e:b3:b9:44:33:54:ef:43:4a:dc:29: 82:0a:97:59:f2:e7:c6:dc:e9:04:ee:36:2f:6d:00:b9:33:20: e5:98:b2:c8:0a:1b:94:fc:43:33:2f:42:a1:44:50:fa:04:8c: bf:2e:2b:e5:a4:4b:a3:f7:70:d1:5f:62:b3:b5:95:4d:2c:ed: 26:1c:35:92:7f:de:aa:63:d2:69:e8:db:43:21:28:48:96:d3: 43:9f:dd:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxQjcxMTAvBgNVBAUTKEU0NzEzQzFCOUQ3NTc1OTI5NUFGNjRDREZCQTYyQjcw REI5QTA1MzcwHhcNMjUwNDI0MTYwODEzWhcNMjUwNTAxMTYwODEzWjAYMRYwFAYD VQQDEw02ODBhNjFlZC01NmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDK0Ev9IdpBxD5Bq3botRTROMQkCDTr2Eb8iOwhp8vPqyd02NdF2LbypRwx+ Aw75vN96+jLxdO7NrjvsvaM9/icc7U3epU1HeeYekiTrTeHTow2UJtvd4reKct2g JZsrvZDBO/mDOSdXZiFsfxLdo4yp57sgRWGIYCmAUckqN9UqpuOvlUyvKnTRalaN mdQBkopQB5tOPh4jIK+6EP3m1dhNzuGuBvFRBzyGpTfAAp2SKWpiYKV3KGXF6ujS EVm2NK0zpiTS1mVFeDzphk0Mhq2m0CGkd0jBC2q8czQJJ9SHiXnbKKesgt3U6W5+ e4eaYgIb/9pMKPcEIUVLxal2EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnC7Ntm 3xZssZgejgOWE8Z+YQaaMB8GA1UdIwQYMBaAFORxPBuddXWSla9kzfumK3DbmgU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjFCNy81RkExRUQzMDlF RjAxMUU2ODExMDI3MzNDNEY5QUUwMi81SEU4RzUxMWRaS1ZyMlROLTZZcmNOdWFC VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVIRThHNTExZFpLVnIyVE4tNllyY051YUJUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjFCNy81RkExRUQzMDlFRjAxMUU2ODExMDI3MzNDNEY5QUUwMi81SEU4RzUxMWRa S1ZyMlROLTZZcmNOdWFCVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6uXhurfMKYPM/cuk2q48XT4U0GO+h10Y+RC2wZzgDltAiMppN/Ohj A6PEe8L7v3hOvvBcnXsMeMOmHyP17wKY6CQ3EyjyuZJkU95Z1i0swR9aOiTKe8mY lJ8AS3atF4AqX6+SM9aKiHqQkhzxJNkCAo+K5lelj857g62jYAKlcVxtz94UJnBb eziOVB824X3vSZBAZT0NIFGN288BuX0ID/GrKpmv/CFuLrO5RDNU70NK3CmCCpdZ 8ufG3OkE7jYvbQC5MyDlmLLIChuU/EMzL0KhRFD6BIy/LivlpEuj93DRX2KztZVN LO0mHDWSf96qY9Jp6NtDIShIltNDn91n -----END CERTIFICATE-----Generated at Sat Apr 26 12:26:25 2025 by rpki-client