$ rpki-client -vvf rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft File: 5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft (raw, json) Hash identifier: zLnfFIhQTt2Qaj8xKd2l2ZeWAXA4MWTswd5guxNN5z4= Subject key identifier: 2C:F3:97:ED:D2:FE:0B:47:C5:83:7D:2B:1B:DE:D4:04:59:1B:20:98 Authority key identifier: E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36 Certificate issuer: /CN=A9183DB7/serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836 Certificate serial: 0DDC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft Manifest number: 0DCB Signing time: Thu 24 Apr 2025 17:52:16 +0000 Manifest this update: Thu 24 Apr 2025 17:52:15 +0000 Manifest next update: Thu 01 May 2025 17:52:15 +0000 Files and hashes: 1: 5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl (hash: 91zOS9I/bGvqMxddjqBjb1i7ydKw0fqb9HO9kXeNKK0=) 2: 6B7E8FC670DE11EC8B944928C4F9AE02.roa (hash: 6b2tMOXqi0MLk/Hu4xH6AhhU3ZFcsYoMzDIzjHh7G84=) 3: 6A5EC93A70DE11EC8B944928C4F9AE02.roa (hash: pfOPMFW4kQhWgEqFAOwq3YPcCBwScpJaJmY0T/CFlyo=) 4: 9F14D15E70DB11ECACCABD21C4F9AE02.roa (hash: +n1zXMDCEU4YWE/0cXk32wV8ITOzuCJeFwK/MfgKlSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:52:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3548 (0xddc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183DB7, serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836 Validity Not Before: Apr 24 17:52:15 2025 GMT Not After : May 1 17:52:15 2025 GMT Subject: CN=680a7a50-7b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c3:33:3d:cb:9d:7e:77:ce:3e:0e:94:2e:c6: 50:48:51:4b:d6:ef:8d:8b:a8:f1:d1:48:40:cf:62: 3d:96:53:06:ff:cb:c2:7d:43:88:e6:e9:59:1e:fb: 9f:9b:24:fd:1c:59:0e:31:f6:77:3a:a1:42:4b:7c: c4:c0:dc:71:60:7e:1c:71:cc:6f:d9:5a:5a:6e:ce: 55:61:f7:cf:37:56:0c:89:9f:b9:48:74:5d:98:e0: e3:c3:df:c2:58:fb:65:15:f4:9d:f3:ca:4e:a3:e0: 4f:a8:80:bf:4a:63:dd:f6:48:c4:26:c7:1e:47:32: 71:6c:95:24:0a:5d:68:5e:34:6b:74:c5:e9:65:56: c7:dc:3b:4e:e7:a7:e6:b1:d9:0b:c0:ce:fe:30:bb: 7a:74:5b:fd:86:57:1e:36:e1:99:bb:b2:b6:ff:9e: 7f:cd:60:26:ed:24:4a:f6:c6:b1:85:74:53:9a:43: f9:bb:a0:e3:0c:a2:5e:0b:05:b6:38:e6:06:21:05: 16:8c:d4:48:2a:d5:4b:74:b8:01:a4:34:40:7b:72: 73:a2:67:39:45:84:57:3c:91:db:d8:d0:31:ce:21: a1:20:c6:59:ac:6f:52:46:96:05:f8:4d:1d:5f:17: f8:6e:d5:13:cb:b5:9b:d8:ac:e6:e5:a3:db:4a:6d: c0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F3:97:ED:D2:FE:0B:47:C5:83:7D:2B:1B:DE:D4:04:59:1B:20:98 X509v3 Authority Key Identifier: keyid:E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:4e:ba:c1:b3:ab:f4:51:05:14:81:29:b1:12:f9:94:df:4e: 8d:7c:1e:25:bd:ea:80:a8:9c:8d:62:b0:54:9d:6d:81:24:5d: 2f:9f:dc:d8:bd:7f:ee:13:71:c8:01:80:d6:7d:f9:10:6a:9d: 27:9a:90:c4:20:7c:f5:a9:5c:e3:4c:2f:56:7d:80:e0:b7:7e: e4:d8:70:da:e9:fe:61:17:ab:52:6e:df:17:71:33:ba:65:76: 50:d5:58:80:ba:ba:90:d8:4a:bd:a5:a9:36:03:ba:11:1b:98: 7f:e0:6a:83:96:24:89:8f:ba:56:60:6f:29:01:c2:fc:d2:e5: b8:d2:8a:d7:08:e8:72:4f:29:cf:7f:15:5a:5e:63:24:17:e2: 09:7f:04:f8:7b:10:3f:9c:e5:fa:b6:81:4c:a5:23:c9:38:3e: 1c:b2:16:4e:29:6b:3b:b9:82:7c:a7:f0:0c:4b:ed:06:0f:59: 3d:51:2d:76:94:67:16:83:99:79:f7:c2:d3:fb:bd:89:06:1b: 36:21:b8:2b:1a:09:d3:43:10:c4:93:91:b6:a1:12:1b:7a:8e: c9:72:1d:03:42:13:d9:18:9e:86:f4:b7:3f:ce:2b:24:18:48: 58:3e:58:6a:0a:15:0f:ff:04:c3:3f:08:9b:e5:c1:b6:83:71: 74:f0:31:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNEQjcxMTAvBgNVBAUTKEU1MThFOTQ4MTVDNDZEN0Q4RTZGRUY0RUJDM0QxOERG MEUyMUY4MzYwHhcNMjUwNDI0MTc1MjE1WhcNMjUwNTAxMTc1MjE1WjAYMRYwFAYD VQQDEw02ODBhN2E1MC03YjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusMzPcudfnfOPg6ULsZQSFFL1u+Ni6jx0UhAz2I9llMG/8vCfUOI5ulZHvuf myT9HFkOMfZ3OqFCS3zEwNxxYH4cccxv2Vpabs5VYffPN1YMiZ+5SHRdmODjw9/C WPtlFfSd88pOo+BPqIC/SmPd9kjEJsceRzJxbJUkCl1oXjRrdMXpZVbH3DtO56fm sdkLwM7+MLt6dFv9hlceNuGZu7K2/55/zWAm7SRK9saxhXRTmkP5u6DjDKJeCwW2 OOYGIQUWjNRIKtVLdLgBpDRAe3Jzomc5RYRXPJHb2NAxziGhIMZZrG9SRpYF+E0d Xxf4btUTy7Wb2Kzm5aPbSm3A2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzzl+3S /gtHxYN9Kxve1ARZGyCYMB8GA1UdIwQYMBaAFOUY6UgVxG19jm/vTrw9GN8OIfg2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0RCNy8wRjM3NTk5RUI1 MjExMUU5OEQ4QkFDNTJDNEY5QUUwMi81UmpwU0JYRWJYMk9iLTlPdkQwWTN3NGgt RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVSanBTQlhFYlgyT2ItOU92RDBZM3c0aC1EWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0RCNy8wRjM3NTk5RUI1MjExMUU5OEQ4QkFDNTJDNEY5QUUwMi81UmpwU0JYRWJY Mk9iLTlPdkQwWTN3NGgtRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAITrrBs6v0UQUUgSmxEvmU306NfB4lveqAqJyNYrBUnW2BJF0vn9zY vX/uE3HIAYDWffkQap0nmpDEIHz1qVzjTC9WfYDgt37k2HDa6f5hF6tSbt8XcTO6 ZXZQ1ViAurqQ2Eq9pak2A7oRG5h/4GqDliSJj7pWYG8pAcL80uW40orXCOhyTynP fxVaXmMkF+IJfwT4exA/nOX6toFMpSPJOD4cshZOKWs7uYJ8p/AMS+0GD1k9US12 lGcWg5l598LT+72JBhs2IbgrGgnTQxDEk5G2oRIbeo7Jch0DQhPZGJ6G9Lc/zisk GEhYPlhqChUP/wTDPwib5cG2g3F08DFI -----END CERTIFICATE-----Generated at Sat Apr 26 13:09:28 2025 by rpki-client