$ rpki-client -vvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft File: p5uCiHAxRBmQsY0aBfnicefnuOY.mft (raw, json) Hash identifier: uD76216Acm6RgkbrlvctSQbEDzKX8QUs1K9DZM4FpYk= Subject key identifier: 4C:2D:5B:CD:36:F5:9B:4A:CC:43:C1:6C:50:5A:56:08:8F:B5:81:82 Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6 Certificate issuer: /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6 Certificate serial: 01BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft Manifest number: 01A8 Signing time: Fri 25 Apr 2025 02:35:45 +0000 Manifest this update: Fri 25 Apr 2025 02:35:44 +0000 Manifest next update: Fri 02 May 2025 02:35:44 +0000 Files and hashes: 1: p5uCiHAxRBmQsY0aBfnicefnuOY.crl (hash: GldIIWO6WF9UvkmKVAmp3dW36q2R99ttWPLh1yqNPIY=) 2: 0900F7CA7AE611EF8CE1F784C4F9AE02.roa (hash: W140YuUw38RWGHye5n3YkyDF6hOcdpwcpeuapHj9/oU=) 3: 4DD66E3C347F11EFB73F4074C4F9AE02.roa (hash: IwMTYHcJhnDCmYuEYV2O2JwZjBRHGFoqwvNK7SHib0M=) 4: C8E6CF687AE811EFA0337A38C4F9AE02.roa (hash: tX7lm1nOa6r+dedq7UOBuZmnOgxOghWuASrmaNTRTBw=) 5: 610B51267AE711EFACC0CA34C4F9AE02.roa (hash: Sia8Gi3qcpCvgS981cn17WU6AtoHaTrcG1W6ziIGcuE=) 6: 5D463936C87611EDAC86AA74C4F9AE02.roa (hash: DhLdq1kTF9Xobsk7bvGN3nq1HO2Wf6ttTbcUB3K/bdI=) 7: E98F15362B3811EF926F1555C4F9AE02.roa (hash: 2uRcl4/JP86oXm/PKDdwTqt31tGszZ15TnxmrrEvK14=) 8: 34D5ED1210F511EEBCE2A81EC4F9AE02.roa (hash: WMB572OriY7OKNmhFvdEBkase4yBRTMM9Ky+WZetjbA=) 9: 9F4683A0B86211EDB9EDAD2CC4F9AE02.roa (hash: 9e6WnUGZ2SYgJMci9BvDZ2+QZaGMJqkA1vwlNaja2Rg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BE9A, serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6 Validity Not Before: Apr 25 02:35:44 2025 GMT Not After : May 2 02:35:44 2025 GMT Subject: CN=680af501-9e88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:64:e4:be:b6:7c:93:48:12:a1:38:c2:95:54: 9d:ec:47:4f:80:e1:87:c8:52:f5:d1:da:c4:9b:12: 22:74:25:3e:cf:1a:c0:96:8d:8e:58:5c:81:17:5b: 85:3a:6f:a6:f0:57:00:58:7c:66:e7:50:70:65:bb: 35:1a:db:bb:96:22:82:7e:95:aa:1b:75:de:41:c1: 47:78:ee:c6:ae:6c:76:bb:1b:91:98:7a:15:77:51: 75:dd:78:74:ca:d7:46:78:bd:21:1c:22:c2:36:8a: 8b:72:0d:22:b7:b1:0d:28:7b:9e:e9:fe:b2:f2:e2: e3:02:5a:18:e6:0a:0e:6f:66:5d:45:c9:f1:64:06: eb:14:00:d5:10:19:58:80:44:9d:91:aa:4c:78:b8: 81:7c:9a:9b:9a:1b:28:af:28:dc:37:8c:be:89:2e: c2:6c:45:a7:18:17:d5:24:74:80:29:25:e7:8e:3b: c5:17:89:d5:45:82:36:da:bb:c8:a1:d4:9e:fc:4e: e4:ed:1f:19:56:57:47:14:0a:20:9c:e8:2a:ba:c6: ec:57:f4:b3:78:c3:1d:19:82:77:6d:a8:53:f4:b5: 0b:9f:5e:63:77:ef:94:0e:eb:e8:5e:c9:34:56:aa: 62:5b:cd:e0:69:eb:2c:8e:e5:e5:25:81:38:96:95: ef:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2D:5B:CD:36:F5:9B:4A:CC:43:C1:6C:50:5A:56:08:8F:B5:81:82 X509v3 Authority Key Identifier: keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:b7:10:87:fa:ac:61:0f:9e:88:11:ef:d0:a6:87:47:7e:57: 1d:b3:6d:c9:c4:57:0b:69:dd:94:8b:51:f0:ee:d7:3c:28:f5: 7d:d2:57:9b:21:67:01:78:05:7c:89:ee:91:bf:6a:7b:39:e0: e3:5d:69:5e:20:3e:17:f9:66:f6:eb:ca:36:ae:2d:13:b9:9f: 5e:4f:40:ef:a3:61:88:13:64:f6:74:eb:de:55:95:5f:2b:13: a2:59:0a:01:49:8a:45:71:3f:f8:e2:37:a1:d2:8a:fa:11:56: b3:15:57:f4:93:78:81:5c:04:6b:c3:99:71:a4:22:cf:7b:8f: 3c:70:96:bc:1b:aa:5d:68:b3:d5:c2:31:e2:5c:7f:fa:24:04: 67:e5:b2:94:7d:bd:a0:d5:4c:6f:64:a4:8f:9d:c6:85:5c:52: ac:54:f7:48:a5:ac:26:12:98:eb:54:47:18:e2:af:7a:25:a2: 6b:d9:72:7b:9d:cb:f6:89:e9:0d:04:04:a2:37:f0:83:21:99: 58:3b:c3:f2:ad:70:ad:54:bf:f5:fd:3f:17:7e:aa:43:92:37: f7:88:46:96:bc:2a:52:6f:89:a7:b9:1b:2e:52:95:89:5b:cf: 45:29:95:44:4b:51:3d:0e:fb:27:01:3b:69:49:35:d1:d0:d2: 91:60:0e:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJFOUExMTAvBgNVBAUTKEE3OUI4Mjg4NzAzMTQ0MTk5MEIxOEQxQTA1RjlFMjcx RTdFN0I4RTYwHhcNMjUwNDI1MDIzNTQ0WhcNMjUwNTAyMDIzNTQ0WjAYMRYwFAYD VQQDEw02ODBhZjUwMS05ZTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGTkvrZ8k0gSoTjClVSd7EdPgOGHyFL10drEmxIidCU+zxrAlo2OWFyBF1uF Om+m8FcAWHxm51BwZbs1Gtu7liKCfpWqG3XeQcFHeO7Grmx2uxuRmHoVd1F13Xh0 ytdGeL0hHCLCNoqLcg0it7ENKHue6f6y8uLjAloY5goOb2ZdRcnxZAbrFADVEBlY gESdkapMeLiBfJqbmhsoryjcN4y+iS7CbEWnGBfVJHSAKSXnjjvFF4nVRYI22rvI odSe/E7k7R8ZVldHFAognOgqusbsV/SzeMMdGYJ3bahT9LULn15jd++UDuvoXsk0 VqpiW83gaessjuXlJYE4lpXvqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwtW802 9ZtKzEPBbFBaVgiPtYGCMB8GA1UdIwQYMBaAFKebgohwMUQZkLGNGgX54nHn57jm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkU5QS84RkExRjU2RUI4 NUUxMUVEOEU2RjQyMTNDNEY5QUUwMi9wNXVDaUhBeFJCbVFzWTBhQmZuaWNlZm51 T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A1dUNpSEF4UkJtUXNZMGFCZm5pY2VmbnVPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkU5QS84RkExRjU2RUI4NUUxMUVEOEU2RjQyMTNDNEY5QUUwMi9wNXVDaUhBeFJC bVFzWTBhQmZuaWNlZm51T1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAtxCH+qxhD56IEe/QpodHflcds23JxFcLad2Ui1Hw7tc8KPV90leb IWcBeAV8ie6Rv2p7OeDjXWleID4X+Wb268o2ri0TuZ9eT0Dvo2GIE2T2dOveVZVf KxOiWQoBSYpFcT/44jeh0or6EVazFVf0k3iBXARrw5lxpCLPe488cJa8G6pdaLPV wjHiXH/6JARn5bKUfb2g1UxvZKSPncaFXFKsVPdIpawmEpjrVEcY4q96JaJr2XJ7 ncv2iekNBASiN/CDIZlYO8PyrXCtVL/1/T8XfqpDkjf3iEaWvCpSb4mnuRsuUpWJ W89FKZVES1E9DvsnATtpSTXR0NKRYA4j -----END CERTIFICATE-----Generated at Sat Apr 26 04:02:34 2025 by rpki-client