$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft File: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft (raw, json) Hash identifier: p4H/swqUmJYJiBCpE6NgwgLf/y7HGSqBfZDaOY/Fz10= Subject key identifier: D8:34:94:D7:AD:56:E3:FB:60:B3:5A:80:72:B0:EA:AA:2F:93:F9:0A Authority key identifier: E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79 Certificate issuer: /CN=A91698EC/serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft Manifest number: B0 Signing time: Fri 25 Apr 2025 05:07:00 +0000 Manifest this update: Fri 25 Apr 2025 05:07:00 +0000 Manifest next update: Fri 02 May 2025 05:07:00 +0000 Files and hashes: 1: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl (hash: muKuhQcboGJYgJ/cWhZaSUlJtDGm1LD+OrZoE3AdPd8=) 2: 1FCE5CE0214F11EFAB245D49C4F9AE02.roa (hash: MjGt04itAcx8gNx2WflFnwPVZOKhZPX7R3K5xPavI28=) 3: 02BCE50286AF11EF9EFFD52FC4F9AE02.roa (hash: erN7f1B2CkGS1+dEWje+lQKXL/zVRbw1MSrnrEP1M7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91698EC, serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79 Validity Not Before: Apr 25 05:07:00 2025 GMT Not After : May 2 05:07:00 2025 GMT Subject: CN=680b1874-3ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ab:93:d3:61:96:c6:18:8e:2f:29:51:7f:3c: 52:8d:59:06:b3:5f:8d:b2:f1:06:7b:48:70:ec:34: c7:50:f8:65:62:51:81:50:a5:db:bf:f9:9e:9d:70: e0:d4:16:be:5c:80:c5:ac:fa:6c:5a:86:36:39:39: 09:d4:2e:5d:a0:fc:74:a8:9b:41:2e:2f:8f:94:f4: b2:10:83:94:b7:c3:32:f7:55:fe:33:07:e5:2c:b9: 71:9f:5a:79:94:92:2a:e6:05:5f:6b:69:28:0c:d8: e6:40:59:bf:f2:1c:e3:11:30:a0:ed:94:d0:ea:37: 41:6c:fa:b4:51:c1:4f:93:5d:29:fd:77:4c:98:03: bd:7d:1e:01:b2:71:92:9b:a3:c3:3c:19:1e:e1:71: 29:6e:7a:08:fb:ec:d2:62:ca:c9:31:c1:54:9f:83: 98:3c:70:be:ff:bb:39:76:ed:d5:d8:d0:0f:5c:4a: af:70:c0:3b:7f:a0:76:e4:ef:69:4b:9e:a8:c8:9f: 9f:4f:86:a7:25:63:e1:8b:35:dd:43:ea:ce:c2:1e: 14:2e:cf:4f:5f:20:5f:63:5e:49:c7:97:02:7e:f5: d8:ca:5f:a5:5d:8a:ec:ad:04:ac:f8:18:82:4c:b6: 8f:76:d9:2b:a2:46:93:76:e1:ac:84:c1:8e:df:1f: 24:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:34:94:D7:AD:56:E3:FB:60:B3:5A:80:72:B0:EA:AA:2F:93:F9:0A X509v3 Authority Key Identifier: keyid:E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:f9:33:40:a9:27:2b:15:60:b1:88:78:cd:f4:35:ba:88:46: 33:72:69:51:12:b8:e2:31:ff:e7:ef:29:4e:5f:1f:87:10:68: 06:5d:f6:7b:cc:73:2a:a0:59:19:b0:c7:08:cf:dc:78:50:47: 41:4c:09:4c:c2:39:a9:c1:f5:92:f7:b6:23:a4:64:b8:4a:f5: b9:12:ac:5c:82:e4:75:5b:c7:35:77:ac:db:e5:1c:0d:12:9f: 91:41:8b:f6:29:b7:7f:f8:c6:d5:55:c6:f2:79:62:99:d7:33: 49:ab:65:9a:1b:0b:d4:ce:fb:d4:ac:65:14:53:b4:7f:be:6c: df:54:62:36:ad:77:51:2e:bd:dd:ad:56:2a:bc:95:71:f9:40: 5a:27:19:82:5e:b8:f3:8a:83:f7:e8:fc:8a:a2:ae:d5:0c:82: 90:b7:01:41:03:5b:90:d6:74:0c:ca:b3:d2:41:84:6e:d5:ee: f5:88:ee:59:39:0a:1c:28:56:6c:aa:16:a0:ef:c5:95:34:98: 6c:c2:bf:98:32:fa:df:fd:90:61:71:e4:ad:18:d5:ff:56:20: b7:08:b4:58:6e:3d:cd:f3:ee:59:c1:d4:0b:6c:a2:7b:b0:c7: be:73:a9:cb:80:f8:31:82:ee:8f:84:38:cd:75:d9:b5:6a:77: 39:74:69:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4RUMxMTAvBgNVBAUTKEU1OEYwRjUyQTREMkQxREU0NDY3NUFDQTE3NTU3QkY5 ODJFQzdENzkwHhcNMjUwNDI1MDUwNzAwWhcNMjUwNTAyMDUwNzAwWjAYMRYwFAYD VQQDEw02ODBiMTg3NC0zZWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzauT02GWxhiOLylRfzxSjVkGs1+NsvEGe0hw7DTHUPhlYlGBUKXbv/menXDg 1Ba+XIDFrPpsWoY2OTkJ1C5doPx0qJtBLi+PlPSyEIOUt8My91X+MwflLLlxn1p5 lJIq5gVfa2koDNjmQFm/8hzjETCg7ZTQ6jdBbPq0UcFPk10p/XdMmAO9fR4BsnGS m6PDPBke4XEpbnoI++zSYsrJMcFUn4OYPHC+/7s5du3V2NAPXEqvcMA7f6B25O9p S56oyJ+fT4anJWPhizXdQ+rOwh4ULs9PXyBfY15Jx5cCfvXYyl+lXYrsrQSs+BiC TLaPdtkrokaTduGshMGO3x8kaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNg0lNet VuP7YLNagHKw6qovk/kKMB8GA1UdIwQYMBaAFOWPD1Kk0tHeRGdayhdVe/mC7H15 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OThFQy8yMUU1QTMwQTFF RTExMUVGOTNGOTg1M0RDNEY5QUUwMi81WThQVXFUUzBkNUVaMXJLRjFWNy1ZTHNm WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVZOFBVcVRTMGQ1RVoxcktGMVY3LVlMc2ZYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OThFQy8yMUU1QTMwQTFFRTExMUVGOTNGOTg1M0RDNEY5QUUwMi81WThQVXFUUzBk NUVaMXJLRjFWNy1ZTHNmWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx+TNAqScrFWCxiHjN9DW6iEYzcmlRErjiMf/n7ylOXx+HEGgGXfZ7 zHMqoFkZsMcIz9x4UEdBTAlMwjmpwfWS97YjpGS4SvW5EqxcguR1W8c1d6zb5RwN Ep+RQYv2Kbd/+MbVVcbyeWKZ1zNJq2WaGwvUzvvUrGUUU7R/vmzfVGI2rXdRLr3d rVYqvJVx+UBaJxmCXrjzioP36PyKoq7VDIKQtwFBA1uQ1nQMyrPSQYRu1e71iO5Z OQocKFZsqhag78WVNJhswr+YMvrf/ZBhceStGNX/ViC3CLRYbj3N8+5ZwdQLbKJ7 sMe+c6nLgPgxgu6PhDjNddm1anc5dGmu -----END CERTIFICATE-----Generated at Sat Apr 26 04:52:57 2025 by rpki-client