$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft File: l_m5BihHZTCOwmiFXVY9q5GGMFs.mft (raw, json) Hash identifier: 4ElvMLloPjI8IM0SL2WM0KbfLX/0y8PWMlu670F3uMo= Subject key identifier: CB:42:E1:D2:E2:58:B6:9C:97:5E:A3:90:32:37:A5:D4:3D:C9:6C:3C Authority key identifier: 97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B Certificate issuer: /CN=A918E4E6/serialNumber=97F9B906284765308EC268855D563DAB9186305B Certificate serial: 0C64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft Manifest number: 0C5E Signing time: Mon 28 Apr 2025 18:33:24 +0000 Manifest this update: Mon 28 Apr 2025 18:33:23 +0000 Manifest next update: Mon 05 May 2025 18:33:23 +0000 Files and hashes: 1: l_m5BihHZTCOwmiFXVY9q5GGMFs.crl (hash: VdKDrpfvg1zaL59j3E13Ka0MoDCZBqk+h65KjuaSHW0=) 2: 9C9660D4FC6E11E9BC6D4822C4F9AE02.roa (hash: xyYlJncaSUNWmGDmUFY6Ptm1YpyAyeIUKxqpTgZgQ8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 18:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3172 (0xc64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4E6, serialNumber=97F9B906284765308EC268855D563DAB9186305B Validity Not Before: Apr 28 18:33:23 2025 GMT Not After : May 5 18:33:23 2025 GMT Subject: CN=680fc9f3-91e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ba:89:3c:6a:34:4c:05:21:da:17:c8:dc:61: cb:8c:c6:2d:72:dd:0b:d9:98:fd:0a:21:aa:73:99: 93:19:4d:df:3c:c8:c2:26:43:1b:16:b8:0e:e0:fd: 3e:6a:5b:87:95:b6:69:44:68:19:77:04:29:e1:38: c5:2f:78:2a:df:49:85:b2:75:d8:09:c5:9a:04:b4: 55:c1:3d:c0:00:31:60:41:42:43:57:a6:79:86:ea: df:2e:7d:e3:fb:c2:13:21:8f:fa:64:69:71:80:33: 6b:39:a1:28:dc:9a:81:77:a8:9d:20:8b:f3:97:a8: 3f:81:10:f1:c0:1f:fd:7c:2d:71:69:0f:5b:eb:b2: 2e:7e:45:61:f1:a6:19:02:f5:9a:f4:0f:05:c4:5c: 89:e2:4b:c8:d2:47:b8:b6:67:89:cd:d9:8c:db:59: 57:86:87:26:88:f6:7b:58:2e:25:7d:5c:09:a1:bb: 1c:24:e7:0a:e8:1c:01:d6:1d:45:63:c9:60:36:0a: b0:85:b8:88:5f:2c:54:57:e5:db:d7:cd:ac:22:d2: dd:9f:fb:98:d0:7d:11:8c:fc:cb:60:c2:e0:10:4c: 9c:e8:28:10:11:c1:c7:35:ea:ef:08:02:1d:b3:12: ab:db:21:1e:70:eb:b2:4c:64:4d:1f:7d:6a:b4:4a: 26:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:42:E1:D2:E2:58:B6:9C:97:5E:A3:90:32:37:A5:D4:3D:C9:6C:3C X509v3 Authority Key Identifier: keyid:97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:ea:7e:40:6e:6e:ae:88:87:55:7d:12:88:dd:fc:7d:26:e6: 14:9d:2e:a5:7a:ea:28:e8:6c:e7:14:1a:1a:b7:3d:fc:a8:ad: 8e:1e:a4:92:45:b6:04:b6:31:94:30:63:06:ad:e8:a7:ad:34: 7f:ab:e6:b0:3d:05:62:82:ab:12:40:b4:41:29:53:5a:cd:35: 53:b4:bb:6e:4a:d3:69:9e:89:f2:e3:77:d2:0e:43:1f:b0:74: ac:23:3e:d8:65:01:b7:32:6e:cc:9f:c7:74:2d:61:ff:87:af: 5a:4f:44:a8:ee:08:01:d0:53:03:fc:76:c7:69:9c:97:52:41: 35:91:be:18:78:24:9e:59:63:b1:09:60:07:8c:12:49:b4:8c: a7:0d:09:fd:c9:c4:a4:36:4d:10:25:cc:f8:c7:c8:b6:32:ee: eb:32:9d:1b:32:96:77:1c:b7:6a:59:ed:ee:84:14:17:6a:80: af:5d:9d:5d:89:df:41:77:00:48:b6:fd:6f:2f:80:ad:67:d5: ee:5e:67:be:77:8f:38:21:29:ee:f1:b9:42:b9:a8:80:9b:0f: 18:18:2d:cc:18:4b:4d:cb:b6:93:f7:4f:11:5c:8c:18:dd:38: e8:fd:00:77:6d:a8:24:8a:64:12:ac:dd:71:5d:a7:1a:e7:49: ff:60:83:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0RTYxMTAvBgNVBAUTKDk3RjlCOTA2Mjg0NzY1MzA4RUMyNjg4NTVENTYzREFC OTE4NjMwNUIwHhcNMjUwNDI4MTgzMzIzWhcNMjUwNTA1MTgzMzIzWjAYMRYwFAYD VQQDEw02ODBmYzlmMy05MWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbqJPGo0TAUh2hfI3GHLjMYtct0L2Zj9CiGqc5mTGU3fPMjCJkMbFrgO4P0+ aluHlbZpRGgZdwQp4TjFL3gq30mFsnXYCcWaBLRVwT3AADFgQUJDV6Z5hurfLn3j +8ITIY/6ZGlxgDNrOaEo3JqBd6idIIvzl6g/gRDxwB/9fC1xaQ9b67IufkVh8aYZ AvWa9A8FxFyJ4kvI0ke4tmeJzdmM21lXhocmiPZ7WC4lfVwJobscJOcK6BwB1h1F Y8lgNgqwhbiIXyxUV+Xb182sItLdn/uY0H0RjPzLYMLgEEyc6CgQEcHHNervCAId sxKr2yEecOuyTGRNH31qtEom0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMtC4dLi WLacl16jkDI3pdQ9yWw8MB8GA1UdIwQYMBaAFJf5uQYoR2UwjsJohV1WPauRhjBb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRFNi8yQjNCMkZDRUZD NkQxMUU5OEZDMkM5MUNDNEY5QUUwMi9sX201QmloSFpUQ093bWlGWFZZOXE1R0dN RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xfbTVCaWhIWlRDT3dtaUZYVlk5cTVHR01Gcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTRFNi8yQjNCMkZDRUZDNkQxMUU5OEZDMkM5MUNDNEY5QUUwMi9sX201QmloSFpU Q093bWlGWFZZOXE1R0dNRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA16n5Abm6uiIdVfRKI3fx9JuYUnS6leuoo6GznFBoatz38qK2OHqSS RbYEtjGUMGMGreinrTR/q+awPQVigqsSQLRBKVNazTVTtLtuStNpnony43fSDkMf sHSsIz7YZQG3Mm7Mn8d0LWH/h69aT0So7ggB0FMD/HbHaZyXUkE1kb4YeCSeWWOx CWAHjBJJtIynDQn9ycSkNk0QJcz4x8i2Mu7rMp0bMpZ3HLdqWe3uhBQXaoCvXZ1d id9BdwBItv1vL4CtZ9XuXme+d484ISnu8blCuaiAmw8YGC3MGEtNy7aT908RXIwY 3Tjo/QB3bagkimQSrN1xXaca50n/YIO2 -----END CERTIFICATE-----Generated at Wed Apr 30 13:00:05 2025 by rpki-client