$ rpki-client -vvf rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft File: t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft (raw, json) Hash identifier: 3kilJ4R4a7jfWFmxkhu9Vy2ebnYovMRUvMy/3l9eOhc= Subject key identifier: F0:3D:F6:AE:5A:A2:CE:70:3A:77:6C:1F:42:BF:18:B2:62:06:10:7F Authority key identifier: B7:91:BD:1C:9E:20:81:AA:84:F8:07:80:66:C0:C7:F6:0A:63:79:0E Certificate issuer: /CN=A917F8F2/serialNumber=B791BD1C9E2081AA84F8078066C0C7F60A63790E Certificate serial: 0822 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft Manifest number: 0813 Signing time: Thu 24 Apr 2025 20:42:57 +0000 Manifest this update: Thu 24 Apr 2025 20:42:56 +0000 Manifest next update: Thu 01 May 2025 20:42:56 +0000 Files and hashes: 1: t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl (hash: KqyDnSWTqpwfBc70T1UXremYfZOs2XG1gJwXg4nwBC8=) 2: B78B5CB6D65F11EA8B30486EC4F9AE02.roa (hash: MyNq7pYsfXRPiYwbL0q3/Dn2sx3QYfe2KkNfFn5PXS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:42:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2082 (0x822) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F8F2, serialNumber=B791BD1C9E2081AA84F8078066C0C7F60A63790E Validity Not Before: Apr 24 20:42:56 2025 GMT Not After : May 1 20:42:56 2025 GMT Subject: CN=680aa250-f9f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:92:3f:17:f8:94:69:32:40:d1:12:87:3f:a1: e5:c7:4d:6d:d3:33:fa:be:4e:8c:0d:82:39:0b:b6: 1f:e9:12:fa:c0:e6:ec:6d:53:b9:4e:12:b9:92:ca: b1:4b:2d:9e:f3:1f:26:2e:bf:ab:b7:bd:43:6f:5a: 12:eb:36:ae:37:28:b7:db:0e:3b:82:9b:cc:23:e9: e7:bf:aa:8a:42:28:f9:b0:3c:36:f7:40:f7:4a:7f: 1f:40:aa:07:12:82:4e:00:ef:1e:02:11:2e:9c:b9: dc:51:03:bb:9c:de:2d:93:cf:79:5c:c7:9f:ff:3b: fe:58:08:b6:eb:18:c7:ba:fa:5d:15:ee:01:3c:10: cb:29:c1:22:46:4a:ca:2b:ab:8f:64:e8:5c:93:93: 60:76:16:58:29:31:1b:42:23:bb:13:21:48:b8:72: d8:8b:50:21:43:84:b7:32:b4:47:12:48:cd:db:69: 9c:65:2a:b1:8e:47:21:33:34:46:17:a6:1c:0e:ec: 5c:c2:b8:fd:a6:45:f4:b8:0a:24:89:c6:4a:8a:44: 6e:6a:31:35:d1:d3:1d:b4:f2:8f:e3:77:21:1d:43: 00:49:e6:ff:ed:74:ba:4e:9f:83:ff:83:09:31:4c: 86:7e:a8:f7:d7:7e:76:cc:57:ee:37:8c:5e:51:4f: 98:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:3D:F6:AE:5A:A2:CE:70:3A:77:6C:1F:42:BF:18:B2:62:06:10:7F X509v3 Authority Key Identifier: keyid:B7:91:BD:1C:9E:20:81:AA:84:F8:07:80:66:C0:C7:F6:0A:63:79:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:83:83:87:c5:be:a0:74:1f:70:2e:0d:03:2c:2c:be:ee:58: f8:3e:7b:a0:d2:a0:20:dc:ed:ab:00:28:7d:5c:3e:b3:59:b8: c5:eb:5d:f6:f8:3b:ca:d9:62:81:37:8e:49:e7:58:ad:d6:b8: f6:1f:20:bd:e6:df:8a:4a:c3:29:15:5c:e6:ed:7f:38:51:df: 78:28:40:a9:3c:07:f5:80:05:92:2c:20:06:9f:b8:f7:3d:6e: d2:39:67:1b:a3:35:53:31:64:6d:15:40:12:42:ff:8f:19:46: 5a:8d:dc:8f:31:d2:20:ce:f5:2c:24:7e:85:a3:bf:cb:e5:25: 46:78:11:9e:d4:76:f7:65:c2:b0:49:07:f7:f1:cf:ac:74:99: 3d:da:8b:a5:89:73:d9:aa:f7:55:a2:bf:38:c3:b0:0f:b4:8d: 84:f9:73:ea:a6:d7:16:37:35:d1:7d:3e:01:07:0b:1e:df:c3: 3c:86:90:eb:6c:80:cf:d0:1b:86:d8:f5:4a:d3:2f:c0:1d:eb: 42:75:2e:ab:bb:4e:bf:e0:f7:c5:44:4f:38:ca:75:dc:88:4d: 79:a7:49:ea:60:b8:b7:ea:2b:5e:71:2c:b1:5f:93:31:a0:f2: 19:6b:6b:ed:9e:38:a5:22:08:bf:d2:35:6c:03:bf:cb:17:a3: 36:da:a3:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4RjIxMTAvBgNVBAUTKEI3OTFCRDFDOUUyMDgxQUE4NEY4MDc4MDY2QzBDN0Y2 MEE2Mzc5MEUwHhcNMjUwNDI0MjA0MjU2WhcNMjUwNTAxMjA0MjU2WjAYMRYwFAYD VQQDEw02ODBhYTI1MC1mOWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6pI/F/iUaTJA0RKHP6Hlx01t0zP6vk6MDYI5C7Yf6RL6wObsbVO5ThK5ksqx Sy2e8x8mLr+rt71Db1oS6zauNyi32w47gpvMI+nnv6qKQij5sDw290D3Sn8fQKoH EoJOAO8eAhEunLncUQO7nN4tk895XMef/zv+WAi26xjHuvpdFe4BPBDLKcEiRkrK K6uPZOhck5NgdhZYKTEbQiO7EyFIuHLYi1AhQ4S3MrRHEkjN22mcZSqxjkchMzRG F6YcDuxcwrj9pkX0uAokicZKikRuajE10dMdtPKP43chHUMASeb/7XS6Tp+D/4MJ MUyGfqj31352zFfuN4xeUU+YGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPA99q5a os5wOndsH0K/GLJiBhB/MB8GA1UdIwQYMBaAFLeRvRyeIIGqhPgHgGbAx/YKY3kO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjhGMi8wMjJENTcxQ0Q2 NUUxMUVBQjYwQ0EzNkJDNEY5QUUwMi90NUc5SEo0Z2dhcUUtQWVBWnNESDlncGpl UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q1RzlISjRnZ2FxRS1BZUFac0RIOWdwamVRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjhGMi8wMjJENTcxQ0Q2NUUxMUVBQjYwQ0EzNkJDNEY5QUUwMi90NUc5SEo0Z2dh cUUtQWVBWnNESDlncGplUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClg4OHxb6gdB9wLg0DLCy+7lj4Pnug0qAg3O2rACh9XD6zWbjF6132 +DvK2WKBN45J51it1rj2HyC95t+KSsMpFVzm7X84Ud94KECpPAf1gAWSLCAGn7j3 PW7SOWcbozVTMWRtFUASQv+PGUZajdyPMdIgzvUsJH6Fo7/L5SVGeBGe1Hb3ZcKw SQf38c+sdJk92ouliXPZqvdVor84w7APtI2E+XPqptcWNzXRfT4BBwse38M8hpDr bIDP0BuG2PVK0y/AHetCdS6ru06/4PfFRE84ynXciE15p0nqYLi36itecSyxX5Mx oPIZa2vtnjilIgi/0jVsA7/LF6M22qMc -----END CERTIFICATE-----Generated at Sat Apr 26 05:48:09 2025 by rpki-client