$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft File: s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft (raw, json) Hash identifier: cl1UnQ3+UGru9Fu0RjYrs/3BwopcXU+NlbX/wq1S8aA= Subject key identifier: 1E:1A:10:4B:E0:8A:75:6C:49:68:AE:07:EE:9E:B0:42:2F:2C:89:10 Authority key identifier: B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44 Certificate issuer: /CN=A917530D/serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44 Certificate serial: 010A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft Manifest number: FE Signing time: Fri 25 Apr 2025 04:22:30 +0000 Manifest this update: Fri 25 Apr 2025 04:22:29 +0000 Manifest next update: Fri 02 May 2025 04:22:29 +0000 Files and hashes: 1: s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl (hash: ZZZHkcMWkhBWuLkLCu6YKXWeodbmvkODGkmxeNHonkI=) 2: 762CACD0B04311EF95390327C4F9AE02.roa (hash: 7lH097TnqT2Frr0JL7F0/A/6TnFN0hBEwwqzvbNC3Tc=) 3: A97CBD42A06611EFA888B57DC4F9AE02.roa (hash: iA4PiBqhCGu6j+QREktQJZZ0YDevgINmDR162rqZIpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917530D, serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44 Validity Not Before: Apr 25 04:22:29 2025 GMT Not After : May 2 04:22:29 2025 GMT Subject: CN=680b0e06-0b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:09:3a:77:71:e4:0f:e5:ec:2b:a4:27:c0:6d: a2:0a:04:76:7b:68:63:6d:58:b2:04:de:4d:c0:1c: 70:da:e5:9d:55:26:24:7c:16:e6:e7:b0:88:f4:0a: a7:67:c2:06:38:20:bf:65:85:80:f5:51:70:c0:89: 53:3d:6b:eb:8e:19:32:b8:04:83:12:81:c2:e4:72: c9:04:8a:8f:a6:92:1a:dd:17:a3:dd:a8:09:53:18: e6:db:c1:22:72:df:66:07:ff:3b:31:a3:ee:d6:e5: bf:33:d4:55:39:e8:de:b9:e6:e4:6a:72:fe:93:ce: b7:31:4d:35:44:af:9a:63:7f:d4:fd:cc:08:a4:83: 80:43:59:07:ce:cb:43:39:14:40:38:62:83:20:30: c5:5e:c2:e0:4f:34:63:5f:44:89:6c:c1:e4:7a:ee: f3:01:2f:dd:b1:5c:4b:3b:69:5f:0f:3b:ee:ad:a9: 7e:9e:54:a1:88:2c:07:1e:cc:ec:45:35:5c:a4:6d: df:b8:b2:2b:8a:3d:78:e4:60:4c:fc:b6:0c:ed:c7: fd:fb:55:0d:04:b5:05:2f:eb:96:b3:ac:c4:ad:da: 17:22:c4:07:79:3a:1f:b6:1e:cb:cb:c8:da:37:2e: b3:45:fb:2e:c6:f9:6c:fb:90:b5:18:ac:d9:49:83: 3f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:1A:10:4B:E0:8A:75:6C:49:68:AE:07:EE:9E:B0:42:2F:2C:89:10 X509v3 Authority Key Identifier: keyid:B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:52:77:18:f8:3b:f7:50:d6:51:90:bd:59:d1:1f:a8:4e:30: 72:59:83:17:63:1f:36:2d:91:a3:33:98:8d:53:27:79:86:10: 22:ca:77:d3:15:f0:8e:47:be:75:9f:c8:07:04:1c:c7:8a:45: cb:bc:25:cf:be:af:f6:b8:66:a1:75:55:17:75:04:84:3a:62: a0:37:0d:c4:1f:b7:0d:0a:41:9e:3e:11:3f:e8:75:77:ac:74: b2:31:9e:96:80:68:68:9e:d6:cf:d4:76:fd:92:06:43:2c:b0: 9c:2e:59:b3:6a:a1:fe:db:d9:d8:46:92:ba:9e:f1:33:57:b5: a5:1e:13:51:f0:64:26:f1:56:ba:e0:e0:60:b0:c8:ef:68:87: 4e:c6:cb:20:fb:a9:9f:cf:a3:6e:b1:8f:3d:41:32:7e:9f:55: 29:ff:78:96:3b:e5:92:77:ff:36:e0:2e:cc:10:5a:5f:4f:2f: bf:b0:84:5e:ae:c5:d9:1e:c2:18:d8:df:a1:f4:59:b7:dd:d1: c3:09:31:29:92:c4:00:ca:96:14:b5:a3:2a:7e:68:cb:ba:af: 3b:4c:32:44:de:e3:51:bc:68:af:d6:b3:21:64:db:f2:af:33: da:33:0c:8f:3e:f9:08:aa:b1:5f:d4:60:11:56:f6:63:59:28: 7d:f7:14:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMEQxMTAvBgNVBAUTKEIzOTkyRjBENDlCQUY2QTM2RkRBNjU4RTVCNDU5NDY5 NTIxRTVCNDQwHhcNMjUwNDI1MDQyMjI5WhcNMjUwNTAyMDQyMjI5WjAYMRYwFAYD VQQDEw02ODBiMGUwNi0wYjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApwk6d3HkD+XsK6QnwG2iCgR2e2hjbViyBN5NwBxw2uWdVSYkfBbm57CI9Aqn Z8IGOCC/ZYWA9VFwwIlTPWvrjhkyuASDEoHC5HLJBIqPppIa3Rej3agJUxjm28Ei ct9mB/87MaPu1uW/M9RVOejeuebkanL+k863MU01RK+aY3/U/cwIpIOAQ1kHzstD ORRAOGKDIDDFXsLgTzRjX0SJbMHkeu7zAS/dsVxLO2lfDzvural+nlShiCwHHszs RTVcpG3fuLIrij145GBM/LYM7cf9+1UNBLUFL+uWs6zErdoXIsQHeTofth7Ly8ja Ny6zRfsuxvls+5C1GKzZSYM/jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4aEEvg inVsSWiuB+6esEIvLIkQMB8GA1UdIwQYMBaAFLOZLw1Juvajb9pljltFlGlSHltE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwRC9ERDdFMDkxQ0I2 NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi9zNWt2RFVtNjlxTnYybVdPVzBXVWFWSWVX MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3M1a3ZEVW02OXFOdjJtV09XMFdVYVZJZVcwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTMwRC9ERDdFMDkxQ0I2NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi9zNWt2RFVtNjlx TnYybVdPVzBXVWFWSWVXMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJUncY+Dv3UNZRkL1Z0R+oTjByWYMXYx82LZGjM5iNUyd5hhAiynfT FfCOR751n8gHBBzHikXLvCXPvq/2uGahdVUXdQSEOmKgNw3EH7cNCkGePhE/6HV3 rHSyMZ6WgGhontbP1Hb9kgZDLLCcLlmzaqH+29nYRpK6nvEzV7WlHhNR8GQm8Va6 4OBgsMjvaIdOxssg+6mfz6NusY89QTJ+n1Up/3iWO+WSd/824C7MEFpfTy+/sIRe rsXZHsIY2N+h9Fm33dHDCTEpksQAypYUtaMqfmjLuq87TDJE3uNRvGiv1rMhZNvy rzPaMwyPPvkIqrFf1GARVvZjWSh99xTA -----END CERTIFICATE-----Generated at Sat Apr 26 16:48:04 2025 by rpki-client