$ rpki-client -vvf rpki.apnic.net/member_repository/A9184324/F4ABE12C7B1C11EFAC109416C4F9AE02/5xDyX0M7YmytODrCnzbCYXy-8Ak.mft File: 5xDyX0M7YmytODrCnzbCYXy-8Ak.mft (raw, json) Hash identifier: 6cCB0gGUbOWkVkutXZ6ipAKuTLuo0kGdl5iov/QuuCg= Subject key identifier: 3F:59:67:B9:3A:6C:5B:81:0E:91:76:20:5A:2F:94:CA:7E:92:77:88 Authority key identifier: E7:10:F2:5F:43:3B:62:6C:AD:38:3A:C2:9F:36:C2:61:7C:BE:F0:09 Certificate issuer: /CN=A9184324/serialNumber=E710F25F433B626CAD383AC29F36C2617CBEF009 Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xDyX0M7YmytODrCnzbCYXy-8Ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184324/F4ABE12C7B1C11EFAC109416C4F9AE02/5xDyX0M7YmytODrCnzbCYXy-8Ak.mft Manifest number: 6E Signing time: Fri 25 Apr 2025 05:50:52 +0000 Manifest this update: Fri 25 Apr 2025 05:50:52 +0000 Manifest next update: Fri 02 May 2025 05:50:51 +0000 Files and hashes: 1: 5xDyX0M7YmytODrCnzbCYXy-8Ak.crl (hash: 3xPB+j3QLZafZb+0yCisIwNOAgn8Vp5rA5yGmieWB5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184324/F4ABE12C7B1C11EFAC109416C4F9AE02/5xDyX0M7YmytODrCnzbCYXy-8Ak.crl rsync://rpki.apnic.net/member_repository/A9184324/F4ABE12C7B1C11EFAC109416C4F9AE02/5xDyX0M7YmytODrCnzbCYXy-8Ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xDyX0M7YmytODrCnzbCYXy-8Ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184324, serialNumber=E710F25F433B626CAD383AC29F36C2617CBEF009 Validity Not Before: Apr 25 05:50:52 2025 GMT Not After : May 2 05:50:51 2025 GMT Subject: CN=680b22bc-0a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:03:3a:75:3c:67:77:8f:f2:fe:9b:6e:01:bf: 3d:13:de:c9:88:42:36:00:1d:16:f7:72:1d:59:2d: 13:e9:70:fc:e5:98:44:df:76:f9:d1:d7:78:ea:d3: 2c:1d:72:d1:2d:2d:4a:51:94:57:98:e6:5c:4b:f2: 22:19:6c:62:b7:f6:f9:10:50:0e:a3:bc:09:c8:f9: 76:3d:df:8a:f3:48:ce:62:80:0a:c7:40:70:29:19: 2e:f9:c2:cd:b6:ca:19:63:26:db:fc:0b:80:c4:3e: 86:8b:0a:dc:f2:3f:89:46:a0:6b:08:79:19:c3:66: 50:9a:24:86:e2:5d:90:58:61:6a:66:07:4c:2c:d7: 09:77:2f:54:27:44:c6:92:4c:14:c2:d5:55:83:98: b0:ac:96:05:93:c8:9c:04:aa:7c:27:04:93:ae:2b: 04:b7:b8:94:81:ca:c6:e9:29:89:a9:05:d6:be:26: 01:da:f1:1b:55:b1:8d:4d:d9:64:63:9b:50:b6:dd: 34:e0:25:e9:ca:d5:16:8a:c2:75:e8:61:e7:86:03: 74:92:cf:7c:03:49:d7:56:e3:9a:22:1b:44:78:7c: 8c:7f:82:48:66:2b:6a:db:72:4f:7a:9a:0a:33:84: e1:20:93:9d:f0:9a:f8:e2:36:02:d5:d7:66:1a:0d: b8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:59:67:B9:3A:6C:5B:81:0E:91:76:20:5A:2F:94:CA:7E:92:77:88 X509v3 Authority Key Identifier: keyid:E7:10:F2:5F:43:3B:62:6C:AD:38:3A:C2:9F:36:C2:61:7C:BE:F0:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184324/F4ABE12C7B1C11EFAC109416C4F9AE02/5xDyX0M7YmytODrCnzbCYXy-8Ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xDyX0M7YmytODrCnzbCYXy-8Ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184324/F4ABE12C7B1C11EFAC109416C4F9AE02/5xDyX0M7YmytODrCnzbCYXy-8Ak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:70:3c:a1:35:ff:93:4c:16:55:20:21:c1:81:c4:d2:ff:6f: 28:95:fb:98:ee:b4:4e:2e:89:d2:1f:d3:e6:ae:25:89:bd:66: 3c:f2:b9:ac:ba:ac:59:66:11:64:6d:e2:3e:57:0f:18:e3:34: 7f:96:0d:32:6c:b5:a8:fd:36:91:a3:aa:49:d1:ca:ff:51:dc: a7:50:e1:e8:da:87:41:60:77:63:03:0f:f2:c4:98:8f:e2:4a: 68:c8:c9:40:14:a4:35:52:b3:cb:b4:f8:8b:e6:b2:f8:90:07: 4a:d0:7b:f9:6a:8f:3d:22:36:76:1b:72:37:c1:49:65:15:44: 72:d3:52:15:b8:7d:a0:15:f8:cf:f1:43:e0:89:c3:81:44:c9: 26:1f:d9:09:8a:65:df:da:75:82:95:4f:7b:ab:55:cd:3c:80: 00:f9:e7:3e:94:a3:9f:3e:7a:eb:f2:97:13:c0:82:f5:5e:a2: 2c:b5:88:4f:1f:01:1c:73:23:de:05:24:9a:25:ac:28:e0:ca: 6d:ec:05:b0:5d:ce:52:9b:e5:04:91:42:24:d3:22:f9:3d:44: 24:00:1d:22:73:0d:9c:9b:63:53:66:db:56:82:1b:e9:47:3a: df:e8:ea:08:c3:8a:b0:81:50:29:af:8c:69:92:1d:d3:e4:8f: 26:18:4d:be -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NDMyNDExMC8GA1UEBRMoRTcxMEYyNUY0MzNCNjI2Q0FEMzgzQUMyOUYzNkMyNjE3 Q0JFRjAwOTAeFw0yNTA0MjUwNTUwNTJaFw0yNTA1MDIwNTUwNTFaMBgxFjAUBgNV BAMTDTY4MGIyMmJjLTBhOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDwAzp1PGd3j/L+m24Bvz0T3smIQjYAHRb3ch1ZLRPpcPzlmETfdvnR13jq0ywd ctEtLUpRlFeY5lxL8iIZbGK39vkQUA6jvAnI+XY934rzSM5igArHQHApGS75ws22 yhljJtv8C4DEPoaLCtzyP4lGoGsIeRnDZlCaJIbiXZBYYWpmB0ws1wl3L1QnRMaS TBTC1VWDmLCslgWTyJwEqnwnBJOuKwS3uJSBysbpKYmpBda+JgHa8RtVsY1N2WRj m1C23TTgJenK1RaKwnXoYeeGA3SSz3wDSddW45oiG0R4fIx/gkhmK2rbck96mgoz hOEgk53wmvjiNgLV12YaDbixAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUP1lnuTps W4EOkXYgWi+Uyn6Sd4gwHwYDVR0jBBgwFoAU5xDyX0M7YmytODrCnzbCYXy+8Akw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0MzI0L0Y0QUJFMTJDN0Ix QzExRUZBQzEwOTQxNkM0RjlBRTAyLzV4RHlYME03WW15dE9EckNuemJDWVh5LThB ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNXhEeVgwTTdZbXl0T0RyQ256YkNZWHktOEFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 MzI0L0Y0QUJFMTJDN0IxQzExRUZBQzEwOTQxNkM0RjlBRTAyLzV4RHlYME03WW15 dE9EckNuemJDWVh5LThBay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIxwPKE1/5NMFlUgIcGBxNL/byiV+5jutE4uidIf0+auJYm9Zjzyuay6 rFlmEWRt4j5XDxjjNH+WDTJstaj9NpGjqknRyv9R3KdQ4ejah0Fgd2MDD/LEmI/i SmjIyUAUpDVSs8u0+IvmsviQB0rQe/lqjz0iNnYbcjfBSWUVRHLTUhW4faAV+M/x Q+CJw4FEySYf2QmKZd/adYKVT3urVc08gAD55z6Uo58+euvylxPAgvVeoiy1iE8f ARxzI94FJJolrCjgym3sBbBdzlKb5QSRQiTTIvk9RCQAHSJzDZybY1Nm21aCG+lH Ot/o6gjDirCBUCmvjGmSHdPkjyYYTb4= -----END CERTIFICATE-----Generated at Sat Apr 26 13:07:51 2025 by rpki-client