$ rpki-client -vvf rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft File: 5IPa-2wrg71IK24pCn5AU1W1Ltk.mft (raw, json) Hash identifier: oM/fzLH+xOGSSu7Qg41GziMXkFIfIfvK7nJ04I8nNyU= Subject key identifier: F1:53:3F:1C:CD:37:3B:8F:D8:6E:75:15:50:2E:D0:30:CE:F9:50:1A Authority key identifier: E4:83:DA:FB:6C:2B:83:BD:48:2B:6E:29:0A:7E:40:53:55:B5:2E:D9 Certificate issuer: /CN=A919136B/serialNumber=E483DAFB6C2B83BD482B6E290A7E405355B52ED9 Certificate serial: 1046 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft Manifest number: 103B Signing time: Thu 24 Apr 2025 17:24:34 +0000 Manifest this update: Thu 24 Apr 2025 17:24:34 +0000 Manifest next update: Thu 01 May 2025 17:24:34 +0000 Files and hashes: 1: 5IPa-2wrg71IK24pCn5AU1W1Ltk.crl (hash: EhK2rRhapkQptooEkU+mWxCQ5fUaaoZDtHpgKzT1gyo=) 2: 99B6039C215311EA86E1E020C4F9AE02.roa (hash: FBjiENDexTIY9F8hqJiP3C+uJeH57VnMwir8al3nYvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.crl rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4166 (0x1046) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919136B, serialNumber=E483DAFB6C2B83BD482B6E290A7E405355B52ED9 Validity Not Before: Apr 24 17:24:34 2025 GMT Not After : May 1 17:24:34 2025 GMT Subject: CN=680a73d2-45e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5f:73:89:45:5f:88:19:8a:1d:18:1c:12:8c: cd:64:d9:f8:f0:4d:5d:e9:ac:b1:8e:01:85:1a:ac: 9d:7c:89:49:79:e3:7e:e3:c5:0b:cc:f0:f9:fe:de: 3f:f0:9c:b4:3e:6b:a2:82:67:42:5c:e1:67:80:a1: 22:32:4e:c4:e7:ac:9e:31:20:5b:7a:c9:22:39:01: d6:d3:4e:0c:33:e9:ad:38:a2:87:c3:ac:02:70:23: 0d:9c:5f:b0:c3:63:cd:a2:a8:69:c1:55:8b:7d:60: a9:29:4e:f3:c0:ba:6e:ef:50:17:e9:2a:03:29:23: 85:fe:80:8c:b6:69:54:02:76:ff:9a:75:68:07:59: ee:72:4a:76:94:f5:7d:f5:48:96:4e:c7:56:d5:92: a1:2b:a8:8e:af:f0:e9:9f:2c:92:3d:32:bd:27:9f: 58:f3:c3:ab:ab:e5:bd:5e:9f:50:00:04:9c:82:9b: 70:78:10:db:55:13:6e:8f:56:31:28:79:23:3b:cf: 51:07:75:ce:e3:15:f2:62:f2:55:57:f9:4f:2e:68: 2f:6e:e7:e3:2a:6f:75:e0:de:a6:9c:69:c4:16:ec: e0:88:5a:d8:fd:58:b5:d7:3a:d9:5d:83:96:60:a3: 05:ee:ed:81:85:33:2c:18:22:5d:49:1c:12:0f:91: e2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:53:3F:1C:CD:37:3B:8F:D8:6E:75:15:50:2E:D0:30:CE:F9:50:1A X509v3 Authority Key Identifier: keyid:E4:83:DA:FB:6C:2B:83:BD:48:2B:6E:29:0A:7E:40:53:55:B5:2E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:63:af:94:65:d6:e2:26:08:70:e5:ce:c1:3b:06:fe:09:4b: 6d:5d:56:5c:42:15:14:12:f1:e9:68:9b:ea:e2:2a:af:a5:8d: af:3a:75:c7:64:48:a4:fe:ce:4f:ca:a2:55:1f:05:94:81:04: d9:7b:1a:e3:f5:57:62:8a:cc:e2:27:4b:f0:ba:7c:05:04:b1: e1:16:17:77:44:54:41:ce:cc:fa:1c:0c:be:0c:85:5b:41:4b: 7a:c4:4d:f1:00:ec:03:4e:79:f9:bf:44:ea:59:ed:be:a3:a1: 33:f4:d4:d1:18:37:ac:cd:c0:0b:87:b6:e7:0a:6b:49:11:3c: 3f:0f:ba:ef:1d:59:a3:75:b3:cd:48:b9:81:e4:a1:8b:94:80: b0:a7:b6:3c:ec:22:bd:00:f7:2d:f7:45:19:6f:f2:28:59:4e: 93:fe:db:ce:2f:a0:c1:33:5d:ca:d3:60:77:08:b2:ca:5e:df: 51:da:83:82:76:a0:3d:bc:60:30:d1:41:d1:d2:95:a8:02:a4: 45:28:d3:d2:35:ea:d2:00:6b:ef:b5:0f:3d:19:1c:17:44:12: 55:60:ce:e3:ee:4d:59:f8:cb:7e:6e:89:4f:c8:3a:03:0b:d0: 60:27:57:58:ce:2c:5d:6d:67:97:27:6a:68:3d:04:e9:54:ef: 2f:bb:c5:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEzNkIxMTAvBgNVBAUTKEU0ODNEQUZCNkMyQjgzQkQ0ODJCNkUyOTBBN0U0MDUz NTVCNTJFRDkwHhcNMjUwNDI0MTcyNDM0WhcNMjUwNTAxMTcyNDM0WjAYMRYwFAYD VQQDEw02ODBhNzNkMi00NWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx19ziUVfiBmKHRgcEozNZNn48E1d6ayxjgGFGqydfIlJeeN+48ULzPD5/t4/ 8Jy0PmuigmdCXOFngKEiMk7E56yeMSBbeskiOQHW004MM+mtOKKHw6wCcCMNnF+w w2PNoqhpwVWLfWCpKU7zwLpu71AX6SoDKSOF/oCMtmlUAnb/mnVoB1nuckp2lPV9 9UiWTsdW1ZKhK6iOr/DpnyySPTK9J59Y88Orq+W9Xp9QAAScgptweBDbVRNuj1Yx KHkjO89RB3XO4xXyYvJVV/lPLmgvbufjKm914N6mnGnEFuzgiFrY/Vi11zrZXYOW YKMF7u2BhTMsGCJdSRwSD5HiaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFTPxzN NzuP2G51FVAu0DDO+VAaMB8GA1UdIwQYMBaAFOSD2vtsK4O9SCtuKQp+QFNVtS7Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTM2Qi9GN0M4N0U4NDNB N0IxMUU5QUNCQzZBMThDNEY5QUUwMi81SVBhLTJ3cmc3MUlLMjRwQ241QVUxVzFM dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVJUGEtMndyZzcxSUsyNHBDbjVBVTFXMUx0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTM2Qi9GN0M4N0U4NDNBN0IxMUU5QUNCQzZBMThDNEY5QUUwMi81SVBhLTJ3cmc3 MUlLMjRwQ241QVUxVzFMdGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9Y6+UZdbiJghw5c7BOwb+CUttXVZcQhUUEvHpaJvq4iqvpY2vOnXH ZEik/s5PyqJVHwWUgQTZexrj9VdiisziJ0vwunwFBLHhFhd3RFRBzsz6HAy+DIVb QUt6xE3xAOwDTnn5v0TqWe2+o6Ez9NTRGDeszcALh7bnCmtJETw/D7rvHVmjdbPN SLmB5KGLlICwp7Y87CK9APct90UZb/IoWU6T/tvOL6DBM13K02B3CLLKXt9R2oOC dqA9vGAw0UHR0pWoAqRFKNPSNerSAGvvtQ89GRwXRBJVYM7j7k1Z+Mt+bolPyDoD C9BgJ1dYzixdbWeXJ2poPQTpVO8vu8XJ -----END CERTIFICATE-----Generated at Sat Apr 26 04:04:53 2025 by rpki-client