$ rpki-client -vvf rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft File: 5VbchrlOkc-bLilEqF9xaS2glNI.mft (raw, json) Hash identifier: 6aQAgj5ffBR+SdQdjyQGOPY5wt7eYRXC143ReOR7GxM= Subject key identifier: FB:E2:2B:5D:2B:00:32:56:C6:52:2A:26:E7:55:7A:41:31:A2:D6:2E Authority key identifier: E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2 Certificate issuer: /CN=A919B20D/serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2 Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft Manifest number: 0106 Signing time: Fri 25 Apr 2025 04:08:29 +0000 Manifest this update: Fri 25 Apr 2025 04:08:28 +0000 Manifest next update: Fri 02 May 2025 04:08:28 +0000 Files and hashes: 1: 5VbchrlOkc-bLilEqF9xaS2glNI.crl (hash: Kr86XiP+uJI2LbufD17w2QcCgMZLkEQRU/FR+uCwwb8=) 2: 4B3E4A0693DE11EE81D1045FC4F9AE02.roa (hash: 4Cz/oqpVomdj5KjMuMHHcnulXM/0E2/i4QAzsSN/Y08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B20D, serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2 Validity Not Before: Apr 25 04:08:28 2025 GMT Not After : May 2 04:08:28 2025 GMT Subject: CN=680b0abd-43ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:42:bf:2c:cd:06:f5:25:79:11:fb:76:82:0e: c0:9b:67:2b:e5:c0:42:3b:16:77:cd:d1:77:fb:cd: 92:f5:63:23:26:35:4c:ef:40:a7:b4:71:b7:6e:35: 2b:0f:b7:08:63:a1:b5:cc:80:2a:91:a8:b8:6a:b7: c9:ef:13:55:f0:3a:cc:e8:3e:8a:10:c3:5f:fc:a0: 6f:89:65:2f:a1:da:6c:b3:2f:9e:8f:27:60:41:8a: d2:20:87:de:95:92:a3:0d:11:49:58:e5:fd:72:3a: 1d:65:5a:b8:f8:08:4a:bf:1f:db:fb:ce:90:18:c2: e1:36:7a:1e:e9:ec:65:99:9f:11:fb:6d:3b:6b:e5: bf:fc:0d:5a:02:c3:c0:54:bf:d7:65:88:09:db:52: 61:48:9d:14:ce:3c:c2:b6:5f:48:af:26:8b:b9:50: e9:d4:44:05:5c:e4:94:2e:19:0d:fa:6e:ab:50:b8: 38:9e:29:ae:b7:07:71:fd:09:0d:25:17:aa:1e:5b: c8:c4:bf:0f:59:23:b6:15:de:11:65:71:fd:40:cd: 1b:72:51:a3:dc:81:57:25:6a:19:43:98:8a:0a:29: 08:56:39:0f:ce:da:39:6a:97:f6:e6:64:97:5c:27: e0:72:18:51:0c:6c:49:54:c0:de:57:3f:3b:97:b5: 33:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E2:2B:5D:2B:00:32:56:C6:52:2A:26:E7:55:7A:41:31:A2:D6:2E X509v3 Authority Key Identifier: keyid:E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ac:7c:b2:19:08:75:05:51:33:95:2e:d0:e1:61:26:a1:51: 64:49:4e:21:76:ec:f4:44:bd:d3:2a:e4:fe:da:53:99:28:02: 62:12:6e:4c:b2:f2:23:10:9d:b2:01:6f:f3:2c:4d:5a:cf:b2: a1:00:85:8e:60:45:ba:22:8c:0b:9f:3f:d4:8f:0d:17:4c:e5: d6:6c:c1:0b:30:89:6a:34:e4:6e:bb:e7:63:df:23:42:2b:79: b7:d0:ff:cd:88:16:3b:e7:bb:2f:52:01:b9:3b:61:66:b3:78: cd:0d:25:0d:53:06:2c:43:a9:d1:e2:e3:46:e3:f5:0d:77:d8: 34:6d:c7:8e:15:d5:5b:c1:3d:70:0a:5d:ea:f1:b6:ad:7d:e9: 08:c6:36:a0:4b:9d:f8:71:c6:71:33:81:e0:47:6e:11:5a:1e: 59:22:df:44:c4:5f:8e:63:17:67:32:e3:cc:6c:69:13:81:f8: 73:b3:55:90:b7:e4:65:57:ca:0e:41:03:41:b2:1c:16:55:31: 94:ed:76:31:67:31:dd:38:2e:41:6c:6f:3d:99:69:4d:e5:6c: 9a:12:59:34:61:d1:12:f5:e6:18:d5:7a:35:11:5b:20:7a:66: e5:04:c6:31:4c:af:0a:7c:72:b6:9d:fa:a0:8e:cd:40:4b:fd: 92:86:f3:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIyMEQxMTAvBgNVBAUTKEU1NTZEQzg2Qjk0RTkxQ0Y5QjJFMjk0NEE4NUY3MTY5 MkRBMDk0RDIwHhcNMjUwNDI1MDQwODI4WhcNMjUwNTAyMDQwODI4WjAYMRYwFAYD VQQDEw02ODBiMGFiZC00M2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlUK/LM0G9SV5Eft2gg7Am2cr5cBCOxZ3zdF3+82S9WMjJjVM70CntHG3bjUr D7cIY6G1zIAqkai4arfJ7xNV8DrM6D6KEMNf/KBviWUvodpssy+ejydgQYrSIIfe lZKjDRFJWOX9cjodZVq4+AhKvx/b+86QGMLhNnoe6exlmZ8R+207a+W//A1aAsPA VL/XZYgJ21JhSJ0UzjzCtl9IryaLuVDp1EQFXOSULhkN+m6rULg4nimutwdx/QkN JReqHlvIxL8PWSO2Fd4RZXH9QM0bclGj3IFXJWoZQ5iKCikIVjkPzto5apf25mSX XCfgchhRDGxJVMDeVz87l7UzBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPviK10r ADJWxlIqJudVekExotYuMB8GA1UdIwQYMBaAFOVW3Ia5TpHPmy4pRKhfcWktoJTS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjIwRC82MUFDQkY0Njkz QTkxMUVFOTE0OUUzNTRDNEY5QUUwMi81VmJjaHJsT2tjLWJMaWxFcUY5eGFTMmds TkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVWYmNocmxPa2MtYkxpbEVxRjl4YVMyZ2xOSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjIwRC82MUFDQkY0NjkzQTkxMUVFOTE0OUUzNTRDNEY5QUUwMi81VmJjaHJsT2tj LWJMaWxFcUY5eGFTMmdsTkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7rHyyGQh1BVEzlS7Q4WEmoVFkSU4hduz0RL3TKuT+2lOZKAJiEm5M svIjEJ2yAW/zLE1az7KhAIWOYEW6IowLnz/Ujw0XTOXWbMELMIlqNORuu+dj3yNC K3m30P/NiBY757svUgG5O2Fms3jNDSUNUwYsQ6nR4uNG4/UNd9g0bceOFdVbwT1w Cl3q8batfekIxjagS534ccZxM4HgR24RWh5ZIt9ExF+OYxdnMuPMbGkTgfhzs1WQ t+RlV8oOQQNBshwWVTGU7XYxZzHdOC5BbG89mWlN5WyaElk0YdES9eYY1Xo1EVsg emblBMYxTK8KfHK2nfqgjs1AS/2ShvOD -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:39 2025 by rpki-client