$ rpki-client -vvf rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.mft File: s5MbVo8uudLtLKTWS-vAhvuduJo.mft (raw, json) Hash identifier: F4Vl02oGJV+XcuXCqTko5sL6A82B3CDx3QBmAfQv3xc= Subject key identifier: 20:92:5C:F2:16:1E:3B:5B:3B:21:B2:BD:19:28:AD:95:C5:4A:20:D2 Authority key identifier: B3:93:1B:56:8F:2E:B9:D2:ED:2C:A4:D6:4B:EB:C0:86:FB:9D:B8:9A Certificate issuer: /CN=A91867F1/serialNumber=B3931B568F2EB9D2ED2CA4D64BEBC086FB9DB89A Certificate serial: 0A86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5MbVo8uudLtLKTWS-vAhvuduJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.mft Manifest number: 0A7F Signing time: Thu 24 Apr 2025 19:29:53 +0000 Manifest this update: Thu 24 Apr 2025 19:29:52 +0000 Manifest next update: Thu 01 May 2025 19:29:52 +0000 Files and hashes: 1: s5MbVo8uudLtLKTWS-vAhvuduJo.crl (hash: C8i4hbx6lh3OH2uLNp4+4bOzDparNhbmZEQ5iAayQg0=) 2: 6FEF33E05C2B11EAAE63403FC4F9AE02.roa (hash: OjmKjbirK1HOaPuAuxNpB1VjEustiEgzLqIxeeZ+0sM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.crl rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5MbVo8uudLtLKTWS-vAhvuduJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2694 (0xa86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91867F1, serialNumber=B3931B568F2EB9D2ED2CA4D64BEBC086FB9DB89A Validity Not Before: Apr 24 19:29:52 2025 GMT Not After : May 1 19:29:52 2025 GMT Subject: CN=680a9131-e076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:9c:50:43:79:65:fa:a5:6e:e6:f7:08:d2:49: 79:4c:7f:bf:ee:54:e4:1a:29:14:92:62:d8:07:11: e2:57:e3:3f:b3:73:b4:e9:19:70:e9:fc:a8:0a:f8: 7e:3c:6c:3f:70:3f:97:c6:3f:b2:81:ec:66:02:37: 8c:6b:b8:20:d7:4a:5e:bd:06:ba:38:5a:38:4b:32: b3:a2:d4:a0:4f:d5:19:91:b9:fa:a9:20:17:97:b3: 29:a1:b5:2d:58:e8:d9:dd:9a:61:1b:a4:40:f5:a9: 25:4c:ea:17:b4:53:14:f7:0d:9f:73:d0:65:a5:d0: 34:81:42:cc:ed:69:06:cc:6a:db:54:87:c4:2f:36: da:34:94:da:43:73:93:52:9a:df:83:58:9e:ae:99: cc:b7:35:99:28:68:a2:f2:11:d7:ca:46:a5:4b:f9: 82:6e:7b:8d:76:5f:2c:aa:73:29:dd:67:0f:2b:93: 12:49:4b:f0:52:34:f3:3f:3c:ba:f4:a7:84:b7:9e: a7:59:7d:6a:aa:b1:e2:22:70:91:c2:d6:e6:82:b5: 36:ef:9f:83:5c:83:99:fd:92:4b:84:34:53:7c:ae: fd:07:09:5a:e5:9c:01:4a:8f:eb:6d:8a:9a:82:da: 95:11:26:79:5e:b2:a0:5c:48:17:0d:67:91:d5:c4: 86:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:92:5C:F2:16:1E:3B:5B:3B:21:B2:BD:19:28:AD:95:C5:4A:20:D2 X509v3 Authority Key Identifier: keyid:B3:93:1B:56:8F:2E:B9:D2:ED:2C:A4:D6:4B:EB:C0:86:FB:9D:B8:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5MbVo8uudLtLKTWS-vAhvuduJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:c8:1a:16:42:dd:4c:76:80:98:0e:2f:f2:0e:34:0c:a3:bc: 74:96:9e:c4:74:b2:8c:4b:68:dc:0b:20:0c:38:ae:3c:e6:6d: e4:a2:ec:e4:36:3b:86:4b:64:f2:63:72:24:e2:e9:a2:3b:9f: d6:1b:73:57:bc:2d:69:d8:7e:1c:73:66:38:6e:b7:05:b8:ee: ab:16:57:87:ba:50:d0:38:c2:04:58:f1:49:6c:fd:f5:b3:3f: 33:77:7a:ce:c0:75:1e:b8:7b:c4:e7:8d:88:1a:fe:9c:b4:90: ba:e2:08:c5:aa:6d:cc:d4:f0:36:ae:5b:33:e5:76:a8:e8:6c: 2e:df:ba:65:91:06:99:64:27:5d:f6:2e:4b:fc:9f:87:57:0d: c9:9c:8a:de:d9:12:b5:6b:5b:cb:02:b4:7f:ca:6f:5f:d5:f5: dc:f5:ce:06:eb:2e:24:80:36:c5:aa:a6:f8:6e:0d:1b:75:57: fe:72:db:e6:70:a1:e0:e1:16:2b:29:65:22:02:6b:8b:59:cc: f2:b6:0e:9b:29:13:fd:b6:c0:45:a1:f5:ed:fe:c5:09:c9:4b: 64:f6:1e:21:87:6b:e5:40:c5:61:0d:5a:16:44:1e:d2:dc:58: 4e:09:8d:11:75:ec:de:33:0f:7d:a3:c3:5a:19:29:3b:6b:39: d0:ef:68:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY3RjExMTAvBgNVBAUTKEIzOTMxQjU2OEYyRUI5RDJFRDJDQTRENjRCRUJDMDg2 RkI5REI4OUEwHhcNMjUwNDI0MTkyOTUyWhcNMjUwNTAxMTkyOTUyWjAYMRYwFAYD VQQDEw02ODBhOTEzMS1lMDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA85xQQ3ll+qVu5vcI0kl5TH+/7lTkGikUkmLYBxHiV+M/s3O06Rlw6fyoCvh+ PGw/cD+Xxj+ygexmAjeMa7gg10pevQa6OFo4SzKzotSgT9UZkbn6qSAXl7MpobUt WOjZ3ZphG6RA9aklTOoXtFMU9w2fc9BlpdA0gULM7WkGzGrbVIfELzbaNJTaQ3OT Uprfg1ierpnMtzWZKGii8hHXykalS/mCbnuNdl8sqnMp3WcPK5MSSUvwUjTzPzy6 9KeEt56nWX1qqrHiInCRwtbmgrU275+DXIOZ/ZJLhDRTfK79Bwla5ZwBSo/rbYqa gtqVESZ5XrKgXEgXDWeR1cSGTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCSXPIW HjtbOyGyvRkorZXFSiDSMB8GA1UdIwQYMBaAFLOTG1aPLrnS7Syk1kvrwIb7nbia MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjdGMS84MDlENzE1QzU5 MUExMUVBOTY5MkFBM0NDNEY5QUUwMi9zNU1iVm84dXVkTHRMS1RXUy12QWh2dWR1 Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M1TWJWbzh1dWRMdExLVFdTLXZBaHZ1ZHVKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjdGMS84MDlENzE1QzU5MUExMUVBOTY5MkFBM0NDNEY5QUUwMi9zNU1iVm84dXVk THRMS1RXUy12QWh2dWR1Sm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEyBoWQt1MdoCYDi/yDjQMo7x0lp7EdLKMS2jcCyAMOK485m3kouzk NjuGS2TyY3Ik4umiO5/WG3NXvC1p2H4cc2Y4brcFuO6rFleHulDQOMIEWPFJbP31 sz8zd3rOwHUeuHvE542IGv6ctJC64gjFqm3M1PA2rlsz5Xao6Gwu37plkQaZZCdd 9i5L/J+HVw3JnIre2RK1a1vLArR/ym9f1fXc9c4G6y4kgDbFqqb4bg0bdVf+ctvm cKHg4RYrKWUiAmuLWczytg6bKRP9tsBFofXt/sUJyUtk9h4hh2vlQMVhDVoWRB7S 3FhOCY0RdezeMw99o8NaGSk7aznQ72hn -----END CERTIFICATE-----Generated at Sat Apr 26 05:24:47 2025 by rpki-client