$ rpki-client -vvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft File: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft (raw, json) Hash identifier: HUX9+cwiHI+YCQZQN2BHPOdFgorPcw8Vo9cJsuIiAEE= Subject key identifier: E6:44:0D:81:84:AA:E5:52:CC:35:9E:6D:04:BE:AD:EA:BE:84:6A:0E Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 Certificate issuer: /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Certificate serial: 0897 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft Manifest number: 088C Signing time: Thu 24 Apr 2025 20:26:54 +0000 Manifest this update: Thu 24 Apr 2025 20:26:53 +0000 Manifest next update: Thu 01 May 2025 20:26:53 +0000 Files and hashes: 1: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl (hash: Ofdavw+fULORc4tjUIE3JSj5ZO9sfg7nVzNcthSm8/I=) 2: A12DD18E2F1C11EDA3E29B09C4F9AE02.roa (hash: JY394gUy9qqM6BqtEt3A+TeeEC3ZSaP+KRzIxp12INs=) 3: A29A66FE2F1C11EDA3E29B09C4F9AE02.roa (hash: pwrQo06SW1WaZHmpSMN3Di6drTMadsg0IhrZWaRW7r4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2199 (0x897) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91652F7, serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Validity Not Before: Apr 24 20:26:53 2025 GMT Not After : May 1 20:26:53 2025 GMT Subject: CN=680a9e8d-783a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:06:0e:72:b5:a3:36:bb:5b:6b:61:12:f7:b2: b7:bf:95:76:47:cb:d9:7f:ab:35:c0:17:5b:05:84: e7:5c:41:a0:a8:89:61:5f:40:4e:03:e2:66:07:f7: e2:6a:d9:72:91:63:59:23:04:4e:8e:91:24:66:d2: 65:2e:8a:be:7c:7b:0c:68:09:10:2e:2e:42:4e:cd: c0:4c:90:7a:e7:40:a4:0f:80:75:ab:c4:9c:03:77: 00:d8:08:72:02:aa:20:ba:99:65:e9:12:5c:9e:28: 34:6f:dc:15:15:dc:92:7a:92:90:ba:63:f1:4a:1f: 1e:98:fe:c3:4d:0d:19:a9:1a:b0:ea:67:8f:e1:b5: c4:d2:f8:fe:fd:51:33:79:ed:05:e3:b8:f5:3d:2a: a5:db:87:5f:9d:cd:1a:a5:f2:06:8f:d9:94:ec:77: 81:27:05:52:2e:77:b5:8b:3b:9c:cf:21:58:b6:c9: 55:46:64:ce:93:7a:a0:ef:71:34:0d:ec:2b:a7:e3: 01:c0:28:9b:ba:a2:1e:39:0c:f5:a1:08:19:a4:89: 89:0c:ee:bc:aa:12:ef:c0:b1:3d:3e:b2:0a:f1:d0: 2b:46:44:d3:78:97:19:e2:df:7f:ba:8c:bd:9f:c6: 32:dd:f8:6c:cf:41:6b:7e:df:41:58:cc:fc:b2:3a: b8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:44:0D:81:84:AA:E5:52:CC:35:9E:6D:04:BE:AD:EA:BE:84:6A:0E X509v3 Authority Key Identifier: keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:b9:7c:f4:7d:10:64:75:61:dd:f0:1a:01:b6:fa:85:33:26: 33:58:f1:dd:43:4d:02:a7:f0:f6:12:5a:e9:55:be:3d:8b:00: 09:6a:67:82:d3:ca:76:0a:69:1e:57:a0:5c:82:07:1f:93:18: 7e:14:98:09:42:3d:b7:ee:04:37:2a:ae:ec:6f:0d:d8:0a:28: 66:92:62:8c:db:b4:a7:b4:1a:b9:92:9b:5c:33:e9:a3:97:f4: 3a:0d:60:c2:4f:89:10:62:23:b6:4c:37:8d:ad:0d:18:20:3b: b1:dc:82:54:25:eb:1c:c2:48:e8:76:a8:53:dc:cb:ea:17:bc: 3c:55:71:5b:a3:5f:82:1b:4f:c8:6c:c6:de:03:1e:ed:b3:b8: 4b:52:32:d5:cb:0a:fe:9a:31:c6:a5:68:cf:d5:3e:57:b2:2f: 67:bd:17:aa:7a:4a:7c:19:f2:68:af:b8:81:65:bb:f0:01:f8: 9a:cc:9e:5d:a1:6c:3d:59:2d:a3:fd:5d:24:b8:8b:05:cc:c2: 44:fa:86:2b:4d:20:ee:25:bc:35:13:d5:96:9c:7f:43:30:b3: 13:64:72:01:fb:39:74:da:b4:50:64:b8:00:6f:e7:02:7b:38: 57:f4:1e:34:d1:9b:89:7f:93:6e:d2:a3:c8:70:35:65:a0:47: 22:5a:81:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyRjcxMTAvBgNVBAUTKEU1MDI3NTdDNjE3QzIxRDQ3QjFCMzU1OUMwOUQ2RUE3 QzNBRkU0MDMwHhcNMjUwNDI0MjAyNjUzWhcNMjUwNTAxMjAyNjUzWjAYMRYwFAYD VQQDEw02ODBhOWU4ZC03ODNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvAYOcrWjNrtba2ES97K3v5V2R8vZf6s1wBdbBYTnXEGgqIlhX0BOA+JmB/fi atlykWNZIwROjpEkZtJlLoq+fHsMaAkQLi5CTs3ATJB650CkD4B1q8ScA3cA2Ahy Aqogupll6RJcnig0b9wVFdySepKQumPxSh8emP7DTQ0ZqRqw6meP4bXE0vj+/VEz ee0F47j1PSql24dfnc0apfIGj9mU7HeBJwVSLne1izuczyFYtslVRmTOk3qg73E0 Dewrp+MBwCibuqIeOQz1oQgZpImJDO68qhLvwLE9PrIK8dArRkTTeJcZ4t9/uoy9 n8Yy3fhsz0Frft9BWMz8sjq4DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZEDYGE quVSzDWebQS+req+hGoOMB8GA1UdIwQYMBaAFOUCdXxhfCHUexs1WcCdbqfDr+QD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTJGNy83Q0M0NUZBRUJB QUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElkUjdHelZad0oxdXA4T3Y1 QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRSjFmR0Y4SWRSN0d6Vlp3SjF1cDhPdjVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTJGNy83Q0M0NUZBRUJBQUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElk UjdHelZad0oxdXA4T3Y1QU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmuXz0fRBkdWHd8BoBtvqFMyYzWPHdQ00Cp/D2ElrpVb49iwAJameC 08p2CmkeV6Bcggcfkxh+FJgJQj237gQ3Kq7sbw3YCihmkmKM27SntBq5kptcM+mj l/Q6DWDCT4kQYiO2TDeNrQ0YIDux3IJUJescwkjodqhT3MvqF7w8VXFbo1+CG0/I bMbeAx7ts7hLUjLVywr+mjHGpWjP1T5Xsi9nvReqekp8GfJor7iBZbvwAfiazJ5d oWw9WS2j/V0kuIsFzMJE+oYrTSDuJbw1E9WWnH9DMLMTZHIB+zl02rRQZLgAb+cC ezhX9B400ZuJf5Nu0qPIcDVloEciWoEc -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:31 2025 by rpki-client