$ rpki-client -vvf rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft File: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft (raw, json) Hash identifier: HTjScHeBND0Gx/aAe+eDD957YVVzKhsH6fzTX/VGIN8= Subject key identifier: 67:35:2C:9C:12:C3:37:67:7F:F5:FD:58:C4:18:F2:7B:C0:8E:BE:B5 Authority key identifier: 0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14 Certificate issuer: /CN=A91637FD/serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft Manifest number: 55 Signing time: Fri 25 Apr 2025 06:10:35 +0000 Manifest this update: Fri 25 Apr 2025 06:10:34 +0000 Manifest next update: Fri 02 May 2025 06:10:34 +0000 Files and hashes: 1: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl (hash: qvYPbwhr06EGi4PLkK2mSg89X+tQ868m7oYMz1mN1os=) 2: D1E78BC0A15D11EFBAE3332CC4F9AE02.roa (hash: 03/IZSSaWCkjD0t5R6IQf4NgtsFNdSzPU+q4DaqUlgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:10:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91637FD, serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214 Validity Not Before: Apr 25 06:10:34 2025 GMT Not After : May 2 06:10:34 2025 GMT Subject: CN=680b275b-3b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d4:39:5f:a5:af:e1:22:64:8a:23:92:e1:c6: 94:00:8e:61:f4:c1:49:40:30:6a:34:be:9e:f0:a4: 55:7a:80:c0:b1:0e:cb:be:6d:5a:75:5e:4b:3c:c1: 8b:c6:44:42:0a:b4:7e:9a:c0:84:69:91:7f:a9:4d: ed:36:89:c6:e7:21:8f:a1:12:18:fb:c3:ba:be:13: f9:ec:bc:b9:bc:60:0f:51:05:f1:d1:85:5d:de:7e: 04:c8:be:3c:96:ee:fb:1f:05:6c:07:f4:ea:c8:5d: 9d:92:47:9c:01:6a:34:d1:cc:b4:bd:50:51:32:78: 5d:bd:f2:b5:0c:b8:04:00:af:e5:1f:d8:5a:5d:ae: 7f:63:ca:d5:28:54:09:3c:b5:3e:b7:e5:49:40:7c: cb:53:09:e4:f4:f7:fe:48:41:ce:0d:e6:a9:dc:3c: 1d:5e:05:b2:8e:0b:b0:54:e0:6d:f1:31:8f:1f:70: 4d:35:16:39:cc:cf:8e:f2:8b:9e:9b:93:3b:32:06: 0b:2e:60:f4:3a:fa:04:4a:ea:84:6e:93:bf:a1:eb: d1:20:ec:f8:31:90:cb:de:70:1d:e8:df:78:1e:1e: 6a:de:c8:10:ae:23:a1:b9:4e:33:24:6b:a6:83:25: b6:d8:0d:2a:e2:ae:cb:ad:e9:0e:14:e0:2b:46:f4: 54:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:35:2C:9C:12:C3:37:67:7F:F5:FD:58:C4:18:F2:7B:C0:8E:BE:B5 X509v3 Authority Key Identifier: keyid:0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:0e:a4:b5:dd:0e:ce:fa:b1:7a:da:1f:0c:ef:f7:f3:48:5f: e3:67:ae:c9:e8:9d:51:ef:74:f2:15:7a:86:30:22:aa:0b:25: 98:58:bd:1a:47:26:11:65:9a:80:b4:8b:cd:4d:09:93:e4:0f: 19:1d:8d:be:a4:d5:44:6b:a1:a6:b1:25:90:0e:5b:31:99:76: 13:98:c4:65:67:22:a4:11:c4:07:a0:50:e9:74:2f:7b:8a:2e: 6e:72:cd:54:bf:9c:fb:ce:88:3f:32:77:fc:48:d9:9d:e9:44: 68:82:b9:43:dc:a6:70:7c:de:6b:de:a0:6e:61:7b:3d:22:3d: 19:3a:fc:4f:c8:05:3e:69:3f:22:5c:cf:6a:0b:c8:92:56:2e: d5:ed:53:a0:41:0d:3f:39:5e:a6:a8:09:53:6e:00:84:b8:bf: a6:a4:73:ba:70:8c:f2:1c:43:89:ab:bb:8a:ad:12:0d:50:cf: a4:a4:c5:1c:eb:9f:4f:5c:23:77:db:20:15:29:16:43:66:e5: a9:74:34:ad:6d:8d:21:ee:2d:eb:88:92:b0:29:8e:64:ec:94: 74:91:f0:a0:ae:b5:a1:e3:60:d8:f9:99:dd:26:32:39:f7:44: d7:55:77:ca:0d:c6:30:4f:9d:48:2a:ec:36:41:92:52:ea:d0: 0b:e3:bd:4c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MzdGRDExMC8GA1UEBRMoMEFDRTZGNkFBNkEzRkFFMjdBMDg1QzdBMTI3RjlCQzk5 NDI0NTIxNDAeFw0yNTA0MjUwNjEwMzRaFw0yNTA1MDIwNjEwMzRaMBgxFjAUBgNV BAMTDTY4MGIyNzViLTNiMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDg1Dlfpa/hImSKI5LhxpQAjmH0wUlAMGo0vp7wpFV6gMCxDsu+bVp1Xks8wYvG REIKtH6awIRpkX+pTe02icbnIY+hEhj7w7q+E/nsvLm8YA9RBfHRhV3efgTIvjyW 7vsfBWwH9OrIXZ2SR5wBajTRzLS9UFEyeF298rUMuAQAr+Uf2Fpdrn9jytUoVAk8 tT635UlAfMtTCeT09/5IQc4N5qncPB1eBbKOC7BU4G3xMY8fcE01FjnMz47yi56b kzsyBgsuYPQ6+gRK6oRuk7+h69Eg7PgxkMvecB3o33geHmreyBCuI6G5TjMka6aD JbbYDSrirsut6Q4U4CtG9FSTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZzUsnBLD N2d/9f1YxBjye8COvrUwHwYDVR0jBBgwFoAUCs5vaqaj+uJ6CFx6En+byZQkUhQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYzN0ZEL0UyNDVCNUIyQTE1 QTExRUZBMUVDMkI1RkM0RjlBRTAyL0NzNXZhcWFqLXVKNkNGeDZFbi1ieVpRa1Vo US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ3M1dmFxYWotdUo2Q0Z4NkVuLWJ5WlFrVWhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYz N0ZEL0UyNDVCNUIyQTE1QTExRUZBMUVDMkI1RkM0RjlBRTAyL0NzNXZhcWFqLXVK NkNGeDZFbi1ieVpRa1VoUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAgOpLXdDs76sXraHwzv9/NIX+NnrsnonVHvdPIVeoYwIqoLJZhYvRpH JhFlmoC0i81NCZPkDxkdjb6k1URroaaxJZAOWzGZdhOYxGVnIqQRxAegUOl0L3uK Lm5yzVS/nPvOiD8yd/xI2Z3pRGiCuUPcpnB83mveoG5hez0iPRk6/E/IBT5pPyJc z2oLyJJWLtXtU6BBDT85XqaoCVNuAIS4v6akc7pwjPIcQ4mru4qtEg1Qz6SkxRzr n09cI3fbIBUpFkNm5al0NK1tjSHuLeuIkrApjmTslHSR8KCutaHjYNj5md0mMjn3 RNdVd8oNxjBPnUgq7DZBklLq0AvjvUw= -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:50 2025 by rpki-client