$ rpki-client -vvf rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.mft File: F5SMh3nFnmXK_OLv3LHLUJEThEw.mft (raw, json) Hash identifier: tp71IpQrKazPFZeTYi9Zslu4zpjM39OYrIAWrwaU7To= Subject key identifier: 4C:ED:95:E1:BE:9F:83:7B:93:33:83:A3:DC:52:F6:D2:85:55:59:D8 Authority key identifier: 17:94:8C:87:79:C5:9E:65:CA:FC:E2:EF:DC:B1:CB:50:91:13:84:4C Certificate issuer: /CN=A915FC0B/serialNumber=17948C8779C59E65CAFCE2EFDCB1CB509113844C Certificate serial: 06F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F5SMh3nFnmXK_OLv3LHLUJEThEw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.mft Manifest number: 06F0 Signing time: Thu 24 Apr 2025 21:48:38 +0000 Manifest this update: Thu 24 Apr 2025 21:48:38 +0000 Manifest next update: Thu 01 May 2025 21:48:38 +0000 Files and hashes: 1: F5SMh3nFnmXK_OLv3LHLUJEThEw.crl (hash: ZuHLv7YZONkj4FxpHmjWGPjl+hei6spdEHLXNQR0s6Q=) 2: 7A75D42E45B211EB99335867C4F9AE02.roa (hash: NsZ4F3z/UkG4nWlQYLX7FdM8TeLtW3jisug+AwHpPsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.crl rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F5SMh3nFnmXK_OLv3LHLUJEThEw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1782 (0x6f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FC0B, serialNumber=17948C8779C59E65CAFCE2EFDCB1CB509113844C Validity Not Before: Apr 24 21:48:38 2025 GMT Not After : May 1 21:48:38 2025 GMT Subject: CN=680ab1b6-8f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2a:d0:a5:ee:0f:df:98:1d:f9:ca:f8:af:6a: e0:cb:34:8a:22:5c:15:8a:fa:1b:fe:4e:41:4c:f5: c9:a7:62:9b:cc:40:ea:76:45:54:1b:b8:8b:f8:0c: 7f:53:7c:c1:60:b0:e5:97:ba:e7:88:84:a5:83:35: 21:5d:06:b8:ad:a6:36:2e:94:f6:fb:81:d9:f2:be: 7b:14:63:70:7d:81:50:34:ea:9e:16:fe:60:9f:c8: 50:47:cf:64:ad:71:0e:d2:37:20:4a:c3:b6:18:18: 1f:b9:be:cc:4b:e7:f8:bf:d9:29:99:0f:14:df:b4: f4:10:6b:00:c5:95:ea:96:49:d3:24:f8:33:85:cb: 34:e5:bd:51:66:ae:61:be:47:29:a3:c0:8a:bf:8d: 9b:b8:67:8c:8e:53:e7:3d:c7:fe:46:81:2b:a3:32: 7a:7c:e4:7f:5d:81:d0:38:21:19:a3:16:44:7e:a3: 60:18:5b:4b:d2:2c:26:dc:7d:6e:0c:2a:b0:92:0b: 9d:3d:5f:3f:d9:54:b9:7e:ad:9f:7b:da:76:2c:a4: 36:ae:45:74:97:d2:f4:6b:5a:38:27:29:03:4b:cb: be:9c:3f:02:7c:a8:03:a4:b6:ac:73:32:a7:35:ab: f8:12:02:c0:41:e1:44:dd:7e:30:9c:aa:50:07:60: bf:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:ED:95:E1:BE:9F:83:7B:93:33:83:A3:DC:52:F6:D2:85:55:59:D8 X509v3 Authority Key Identifier: keyid:17:94:8C:87:79:C5:9E:65:CA:FC:E2:EF:DC:B1:CB:50:91:13:84:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F5SMh3nFnmXK_OLv3LHLUJEThEw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:2c:08:93:b9:92:53:85:8f:6e:3a:95:aa:36:dc:da:cb:92: af:30:a4:6e:d0:46:03:21:64:ef:96:90:b5:37:fb:d8:57:0e: ce:be:f9:62:bf:8d:4d:51:21:e1:95:f2:9f:ce:0a:55:e5:f3: ee:34:2a:7a:3a:93:b7:59:70:9f:35:eb:84:78:78:2b:b9:04: 44:6b:a8:81:2a:a3:29:3d:fd:cd:1c:33:c5:43:ce:1d:22:ab: 9e:82:39:2c:35:49:d9:58:7c:8c:a4:e5:3e:a1:f2:72:1a:26: 33:fc:12:38:0f:ed:f3:74:b9:dd:28:06:89:29:38:b4:ad:43: 09:9e:22:44:d3:12:02:c2:c8:b6:af:cb:b1:58:b9:2e:9e:5d: f5:28:d6:b2:2c:c8:49:28:1d:b0:2f:43:76:56:d4:f3:6b:2e: 15:2b:b2:36:51:90:cd:dd:67:7f:52:62:9e:51:33:c5:14:d4: 7d:52:38:bb:d5:a1:cd:05:77:90:ac:81:9e:b5:ab:ad:86:6e: cf:3d:cf:7c:33:eb:d6:77:1c:5f:36:f0:7c:9a:66:8a:61:f9: 52:90:a6:2d:37:15:04:04:e4:d1:2f:49:df:f1:78:88:8c:6f: b1:32:11:5b:6a:e7:21:28:8f:b2:d9:d0:b1:4e:bc:f0:04:bf: 20:cb:c3:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZDMEIxMTAvBgNVBAUTKDE3OTQ4Qzg3NzlDNTlFNjVDQUZDRTJFRkRDQjFDQjUw OTExMzg0NEMwHhcNMjUwNDI0MjE0ODM4WhcNMjUwNTAxMjE0ODM4WjAYMRYwFAYD VQQDEw02ODBhYjFiNi04ZjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvirQpe4P35gd+cr4r2rgyzSKIlwVivob/k5BTPXJp2KbzEDqdkVUG7iL+Ax/ U3zBYLDll7rniISlgzUhXQa4raY2LpT2+4HZ8r57FGNwfYFQNOqeFv5gn8hQR89k rXEO0jcgSsO2GBgfub7MS+f4v9kpmQ8U37T0EGsAxZXqlknTJPgzhcs05b1RZq5h vkcpo8CKv42buGeMjlPnPcf+RoErozJ6fOR/XYHQOCEZoxZEfqNgGFtL0iwm3H1u DCqwkgudPV8/2VS5fq2fe9p2LKQ2rkV0l9L0a1o4JykDS8u+nD8CfKgDpLasczKn Nav4EgLAQeFE3X4wnKpQB2C/fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEztleG+ n4N7kzODo9xS9tKFVVnYMB8GA1UdIwQYMBaAFBeUjId5xZ5lyvzi79yxy1CRE4RM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkMwQi9CRUU3NTU4MDQ1 QjAxMUVCQTM2OTZENjNDNEY5QUUwMi9GNVNNaDNuRm5tWEtfT0x2M0xITFVKRVRo RXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y1U01oM25Gbm1YS19PTHYzTEhMVUpFVGhFdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkMwQi9CRUU3NTU4MDQ1QjAxMUVCQTM2OTZENjNDNEY5QUUwMi9GNVNNaDNuRm5t WEtfT0x2M0xITFVKRVRoRXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoLAiTuZJThY9uOpWqNtzay5KvMKRu0EYDIWTvlpC1N/vYVw7Ovvli v41NUSHhlfKfzgpV5fPuNCp6OpO3WXCfNeuEeHgruQREa6iBKqMpPf3NHDPFQ84d IquegjksNUnZWHyMpOU+ofJyGiYz/BI4D+3zdLndKAaJKTi0rUMJniJE0xICwsi2 r8uxWLkunl31KNayLMhJKB2wL0N2VtTzay4VK7I2UZDN3Wd/UmKeUTPFFNR9Uji7 1aHNBXeQrIGetauthm7PPc98M+vWdxxfNvB8mmaKYflSkKYtNxUEBOTRL0nf8XiI jG+xMhFbauchKI+y2dCxTrzwBL8gy8OK -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:51 2025 by rpki-client