$ rpki-client -vvf rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft File: 5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft (raw, json) Hash identifier: 7GQNZBA+aBy2VwaejyTNX/1ZzmDdPiuEZ0Th7ThfHd8= Subject key identifier: 4D:B0:F7:9B:55:5A:C8:29:04:B6:4E:58:B8:76:91:EF:C2:54:FF:8D Authority key identifier: E6:99:DB:CD:E0:9C:0A:A5:F8:E6:6A:E0:A7:32:54:DC:A0:5D:85:D4 Certificate issuer: /CN=A915C15F/serialNumber=E699DBCDE09C0AA5F8E66AE0A73254DCA05D85D4 Certificate serial: 0662 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft Manifest number: 0652 Signing time: Thu 24 Apr 2025 22:24:22 +0000 Manifest this update: Thu 24 Apr 2025 22:24:22 +0000 Manifest next update: Thu 01 May 2025 22:24:22 +0000 Files and hashes: 1: 5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl (hash: M/9WDlDT11+9l/CQBXberPmG3Xp94DOeK8ol9WBGeak=) 2: 1F82BB9C0B9F11F0A5D71B16C4F9AE02.roa (hash: 3DPsYteikwLPPbMMWFK/9fc92rvU3d3QIJer699Jw28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1634 (0x662) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C15F, serialNumber=E699DBCDE09C0AA5F8E66AE0A73254DCA05D85D4 Validity Not Before: Apr 24 22:24:22 2025 GMT Not After : May 1 22:24:22 2025 GMT Subject: CN=680aba16-2fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3d:66:cf:69:3b:e0:c3:76:6b:94:21:c0:a2: 09:72:24:0e:c8:50:86:f3:ee:8e:03:d6:fc:02:87: 6b:b1:4b:dd:08:40:21:00:b2:80:7c:5e:9c:a2:c1: fc:17:3a:d2:4f:94:d2:9c:df:d5:14:d9:60:1d:5f: 77:3f:51:53:cd:ab:f2:01:06:eb:23:31:1b:53:ed: 9b:46:2b:b9:17:82:03:9e:4a:ce:a8:20:aa:e0:58: 90:98:cb:d5:37:8d:4b:fb:fb:3e:52:c8:37:17:4c: cb:fa:66:2d:1b:f7:dc:e4:9e:c5:a7:2e:08:a3:15: fb:62:ae:9e:63:31:0e:aa:d5:80:c5:ff:8a:a4:fe: 23:ed:4d:1a:59:a7:14:b5:a7:be:69:6b:3c:e3:0c: 63:a7:11:48:41:cd:d6:a0:80:fb:36:be:15:f0:0c: 64:c3:59:f8:fe:68:b4:e3:b9:1c:5f:20:66:fe:c0: 42:90:52:31:80:04:ce:44:dd:48:08:42:f9:4a:fe: a3:98:50:6e:3f:35:57:69:8e:6d:e9:fd:d6:ae:62: 2f:c7:74:a0:75:f7:2d:77:c8:0a:0e:06:57:0f:aa: db:d9:d8:b0:92:13:83:fa:4d:8b:b0:1a:3b:b7:3e: b3:ba:43:38:1a:cd:e8:bd:d2:32:80:6d:6e:86:76: 15:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B0:F7:9B:55:5A:C8:29:04:B6:4E:58:B8:76:91:EF:C2:54:FF:8D X509v3 Authority Key Identifier: keyid:E6:99:DB:CD:E0:9C:0A:A5:F8:E6:6A:E0:A7:32:54:DC:A0:5D:85:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:c3:6b:c6:07:2b:ce:29:0b:27:4d:5a:93:c1:12:67:fd:56: 9f:c1:9b:f8:ee:50:9f:75:af:32:d6:b6:3d:fe:01:f3:3a:c5: 53:50:88:bb:96:49:57:69:cf:38:95:56:fe:e1:85:07:a7:d3: 91:1e:14:fb:32:4a:aa:fb:d9:df:6f:67:38:3e:22:cc:03:0f: 4d:55:e0:3a:5f:b8:d8:52:4a:b3:d0:a8:74:2d:8e:52:de:43: 30:1e:13:2e:25:d5:18:7b:7d:1f:3c:c2:92:38:a2:0e:32:d6: 93:aa:8b:76:e6:fe:0a:5e:94:ed:a2:25:21:b4:7a:44:5e:4d: ff:bb:5f:05:d0:62:5d:1e:e0:28:0e:ac:d9:1a:99:a1:e7:78: a1:38:91:af:99:b9:8e:33:5d:0d:ee:31:1f:6f:99:69:90:3a: ba:3b:70:10:08:e8:64:44:a0:7d:98:c3:d4:80:0e:de:d3:de: f0:77:f9:ae:91:b4:04:fd:d2:df:cb:34:b1:31:3f:f4:9a:21: bf:a4:f4:8b:e4:df:58:20:80:0b:af:b3:de:86:6f:f2:07:7b: 62:75:a3:96:c4:06:d1:ba:f2:06:2f:51:79:18:c8:74:d2:02: 82:13:42:3e:31:e3:bf:03:7a:a0:a8:03:33:9e:ed:76:0f:08: 89:f7:fd:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMxNUYxMTAvBgNVBAUTKEU2OTlEQkNERTA5QzBBQTVGOEU2NkFFMEE3MzI1NERD QTA1RDg1RDQwHhcNMjUwNDI0MjIyNDIyWhcNMjUwNTAxMjIyNDIyWjAYMRYwFAYD VQQDEw02ODBhYmExNi0yZmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwD1mz2k74MN2a5QhwKIJciQOyFCG8+6OA9b8AodrsUvdCEAhALKAfF6cosH8 FzrST5TSnN/VFNlgHV93P1FTzavyAQbrIzEbU+2bRiu5F4IDnkrOqCCq4FiQmMvV N41L+/s+Usg3F0zL+mYtG/fc5J7Fpy4IoxX7Yq6eYzEOqtWAxf+KpP4j7U0aWacU tae+aWs84wxjpxFIQc3WoID7Nr4V8Axkw1n4/mi047kcXyBm/sBCkFIxgATORN1I CEL5Sv6jmFBuPzVXaY5t6f3WrmIvx3Sgdfctd8gKDgZXD6rb2diwkhOD+k2LsBo7 tz6zukM4Gs3ovdIygG1uhnYVqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2w95tV WsgpBLZOWLh2ke/CVP+NMB8GA1UdIwQYMBaAFOaZ283gnAql+OZq4KcyVNygXYXU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzE1Ri85MzI5QjBCNjhD NjcxMUVCQjdFRTg2M0VDNEY5QUUwMi81cG5iemVDY0NxWDQ1bXJncHpKVTNLQmRo ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVwbmJ6ZUNjQ3FYNDVtcmdwekpVM0tCZGhkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzE1Ri85MzI5QjBCNjhDNjcxMUVCQjdFRTg2M0VDNEY5QUUwMi81cG5iemVDY0Nx WDQ1bXJncHpKVTNLQmRoZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChw2vGByvOKQsnTVqTwRJn/VafwZv47lCfda8y1rY9/gHzOsVTUIi7 lklXac84lVb+4YUHp9ORHhT7Mkqq+9nfb2c4PiLMAw9NVeA6X7jYUkqz0Kh0LY5S 3kMwHhMuJdUYe30fPMKSOKIOMtaTqot25v4KXpTtoiUhtHpEXk3/u18F0GJdHuAo DqzZGpmh53ihOJGvmbmOM10N7jEfb5lpkDq6O3AQCOhkRKB9mMPUgA7e097wd/mu kbQE/dLfyzSxMT/0miG/pPSL5N9YIIALr7Pehm/yB3tidaOWxAbRuvIGL1F5GMh0 0gKCE0I+MeO/A3qgqAMznu12DwiJ9/3F -----END CERTIFICATE-----Generated at Sat Apr 26 13:02:31 2025 by rpki-client