$ rpki-client -vvf rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft File: 5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft (raw, json) Hash identifier: F3W3PAuD4jUucp0skHGq++JHPOkCzD7MpKI8jNdmDwM= Subject key identifier: 76:5E:01:99:37:18:07:3E:4F:70:07:30:1F:EC:3F:BC:59:FD:6D:83 Authority key identifier: E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D Certificate issuer: /CN=A91801A5/serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D Certificate serial: 0668 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft Manifest number: 0660 Signing time: Thu 24 Apr 2025 22:13:09 +0000 Manifest this update: Thu 24 Apr 2025 22:13:08 +0000 Manifest next update: Thu 01 May 2025 22:13:08 +0000 Files and hashes: 1: 5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl (hash: XJhCUPZfHgrkxwSP0jmXN+/NELTVDS2i1/KwU+mZe+E=) 2: 54F537EC32CD11EFA6C5320EC4F9AE02.roa (hash: S55fbog5DZrTL6CQ8gLDN4CUVpPp3b9gzfe68beFEQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1640 (0x668) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91801A5, serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D Validity Not Before: Apr 24 22:13:08 2025 GMT Not After : May 1 22:13:08 2025 GMT Subject: CN=680ab774-7c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:54:d0:56:32:09:a6:bc:62:4c:c3:39:d4:57: b1:d9:67:1f:df:a6:82:47:e8:12:da:c8:d2:c1:64: 05:cf:e3:32:04:55:b1:7e:c3:df:06:36:e5:b7:9b: eb:53:2d:04:c1:9d:60:d4:b7:a9:8a:1c:f0:a5:a2: 72:da:25:c5:14:26:ae:a5:02:a6:97:45:9d:50:4d: 52:0e:f3:ef:b0:b6:7b:02:28:28:55:36:cf:10:e6: bc:4b:fc:88:50:5f:3a:cd:b2:5d:94:e3:ca:4c:a6: 63:c3:05:29:19:23:44:c5:b2:ba:81:ef:19:70:69: b3:73:d5:f3:99:92:94:2e:8b:f6:c1:98:4f:93:b8: 0b:51:cd:da:7d:9d:40:eb:93:53:43:1b:0e:32:de: c3:13:ab:06:44:a7:81:bc:a6:f7:e7:5f:da:1a:67: 3e:06:c8:c6:9e:9f:bc:aa:4a:71:41:c9:65:0a:71: 4e:a6:f1:6b:93:6e:9b:96:df:f6:73:2a:65:48:01: 9c:27:8e:01:9e:45:5b:48:40:0c:a0:e1:7d:f8:25: c2:52:18:fe:12:4a:5c:7e:13:b2:62:15:f5:9b:7a: e8:ca:2a:88:b2:a2:3e:30:11:92:71:6b:dc:c0:eb: f8:e5:87:50:2b:52:5a:7d:0f:9e:05:fe:02:e2:7c: 75:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:5E:01:99:37:18:07:3E:4F:70:07:30:1F:EC:3F:BC:59:FD:6D:83 X509v3 Authority Key Identifier: keyid:E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:61:dc:73:49:88:7f:ca:63:f1:d9:42:94:16:15:fb:12:b5: 62:db:ad:36:3c:13:31:ad:83:a3:07:aa:fb:75:26:c5:7b:5e: 96:23:5e:3d:30:7a:49:64:71:0e:74:bb:7d:10:39:0c:7b:08: ff:f8:03:4a:75:e9:8b:d5:4d:b5:c6:96:2c:46:bd:19:f8:bf: 0f:d1:4a:67:c5:90:68:41:18:3e:d0:ae:f8:2a:c5:4c:5a:04: 81:4d:16:5e:a5:37:11:39:1a:09:20:f5:11:2c:67:2a:fc:c3: 6d:76:a4:fb:59:ae:1d:ab:af:04:bd:b9:a0:0b:94:3e:48:df: 3f:db:ae:94:49:3c:b5:f9:75:03:6c:52:49:ec:59:a2:4f:5e: 61:84:c7:8f:fd:b3:37:0d:07:7b:aa:98:4b:e6:a7:2c:c1:6b: b5:10:cb:d7:c8:f1:02:1d:d4:ea:42:3b:16:dc:17:e0:50:7f: 66:cb:ab:65:58:75:b7:b4:ad:38:91:45:0c:29:71:72:a4:2f: 45:40:25:b8:fb:c5:a1:63:b0:48:1c:ea:a0:44:3b:99:e3:c1: d9:e0:7f:64:a1:f6:5a:1f:84:e3:c3:18:04:8e:5f:3c:fb:be: b6:3b:4f:29:74:58:41:78:10:5a:fc:c8:bc:d1:e4:93:5e:1e: 71:11:4e:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAxQTUxMTAvBgNVBAUTKEU1RTFDRkNBRTFGOUU2RjEyMUNBMTM1NTFCNDBGNjk4 OTg0QjlEOUQwHhcNMjUwNDI0MjIxMzA4WhcNMjUwNTAxMjIxMzA4WjAYMRYwFAYD VQQDEw02ODBhYjc3NC03Yzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1TQVjIJprxiTMM51Fex2Wcf36aCR+gS2sjSwWQFz+MyBFWxfsPfBjblt5vr Uy0EwZ1g1LepihzwpaJy2iXFFCaupQKml0WdUE1SDvPvsLZ7AigoVTbPEOa8S/yI UF86zbJdlOPKTKZjwwUpGSNExbK6ge8ZcGmzc9XzmZKULov2wZhPk7gLUc3afZ1A 65NTQxsOMt7DE6sGRKeBvKb351/aGmc+BsjGnp+8qkpxQcllCnFOpvFrk26blt/2 cyplSAGcJ44BnkVbSEAMoOF9+CXCUhj+EkpcfhOyYhX1m3royiqIsqI+MBGScWvc wOv45YdQK1JafQ+eBf4C4nx1aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZeAZk3 GAc+T3AHMB/sP7xZ/W2DMB8GA1UdIwQYMBaAFOXhz8rh+ebxIcoTVRtA9piYS52d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDFBNS84NEI1RDYxQzdE NkQxMUVCQTZBNEE4MTdDNEY5QUUwMi81ZUhQeXVINTV2RWh5aE5WRzBEMm1KaExu WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVlSFB5dUg1NXZFaHloTlZHMEQybUpoTG5aMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDFBNS84NEI1RDYxQzdENkQxMUVCQTZBNEE4MTdDNEY5QUUwMi81ZUhQeXVINTV2 RWh5aE5WRzBEMm1KaExuWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKYdxzSYh/ymPx2UKUFhX7ErVi2602PBMxrYOjB6r7dSbFe16WI149 MHpJZHEOdLt9EDkMewj/+ANKdemL1U21xpYsRr0Z+L8P0UpnxZBoQRg+0K74KsVM WgSBTRZepTcRORoJIPURLGcq/MNtdqT7Wa4dq68EvbmgC5Q+SN8/266USTy1+XUD bFJJ7FmiT15hhMeP/bM3DQd7qphL5qcswWu1EMvXyPECHdTqQjsW3BfgUH9my6tl WHW3tK04kUUMKXFypC9FQCW4+8WhY7BIHOqgRDuZ48HZ4H9kofZaH4TjwxgEjl88 +762O08pdFhBeBBa/Mi80eSTXh5xEU5y -----END CERTIFICATE-----Generated at Sat Apr 26 12:32:02 2025 by rpki-client