$ rpki-client -vvf rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft File: 5wYdsiKDjeaKk84h7ykbBVQthyY.mft (raw, json) Hash identifier: Yu+n9w1Ar/R3YOx9/JJfX+R0WkKPh4JidevY9uslsSI= Subject key identifier: 20:7C:A2:F2:C8:99:4B:5D:F8:E1:77:5C:6A:A6:A8:0F:E6:A1:E1:11 Authority key identifier: E7:06:1D:B2:22:83:8D:E6:8A:93:CE:21:EF:29:1B:05:54:2D:87:26 Certificate issuer: /CN=A919D3C2/serialNumber=E7061DB222838DE68A93CE21EF291B05542D8726 Certificate serial: 1AE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wYdsiKDjeaKk84h7ykbBVQthyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft Manifest number: 1ADE Signing time: Thu 24 Apr 2025 16:19:23 +0000 Manifest this update: Thu 24 Apr 2025 16:19:22 +0000 Manifest next update: Thu 01 May 2025 16:19:22 +0000 Files and hashes: 1: 5wYdsiKDjeaKk84h7ykbBVQthyY.crl (hash: GFx0uAh/UfrrvmpSC/3AEbW2mDSHLtEtLEaBnnwl2cA=) 2: A6B5F55C23F911E79BE44454C4F9AE02.roa (hash: F2ak73nonVZ20QRrcSfPPZHYy8EZQeLDHTDgpyvlwUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.crl rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wYdsiKDjeaKk84h7ykbBVQthyY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:19:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6888 (0x1ae8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D3C2, serialNumber=E7061DB222838DE68A93CE21EF291B05542D8726 Validity Not Before: Apr 24 16:19:22 2025 GMT Not After : May 1 16:19:22 2025 GMT Subject: CN=680a648b-4e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:73:ce:fd:6b:e8:60:24:93:d6:cf:a9:03:2d: 3b:36:9d:6a:1a:05:9d:02:f2:a6:43:53:35:1d:37: 43:0d:32:e2:5d:6b:0b:ce:63:4d:2a:2e:f8:aa:33: 3a:1f:27:01:4e:51:e3:31:d8:5c:a7:6d:2d:0f:d8: 9b:52:a2:73:ef:4a:eb:4a:9d:cd:98:99:fe:aa:92: 76:5f:3d:e7:b6:08:72:44:33:ad:bb:d4:1d:54:60: 60:6b:c5:bf:00:a2:01:9c:cb:f7:a2:7f:97:63:24: 91:75:0a:a6:1e:a8:a9:82:d8:af:ae:07:93:97:b3: b7:61:fe:2f:7a:a6:bf:19:60:d6:e6:99:af:ca:d9: 91:6e:7f:af:ec:1e:c9:82:56:84:25:5c:3b:46:70: a9:6d:19:27:88:7c:ca:7b:e1:73:64:37:53:5e:af: cd:94:cc:7a:75:b2:00:f7:07:44:14:1a:2f:16:1e: 98:71:c3:1c:eb:19:e3:c8:28:aa:8d:e8:14:31:04: a8:89:a9:bf:fc:96:a5:0f:90:74:83:b5:d0:ea:87: fa:53:9e:7c:5d:de:a5:b2:61:40:07:88:b4:54:28: c9:d2:ee:ee:23:b6:39:54:1a:4f:65:50:40:01:23: 5a:32:f0:aa:e6:5d:0e:8e:7b:87:4c:8b:6f:25:38: 5f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7C:A2:F2:C8:99:4B:5D:F8:E1:77:5C:6A:A6:A8:0F:E6:A1:E1:11 X509v3 Authority Key Identifier: keyid:E7:06:1D:B2:22:83:8D:E6:8A:93:CE:21:EF:29:1B:05:54:2D:87:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wYdsiKDjeaKk84h7ykbBVQthyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:cd:90:7a:75:17:2f:ab:9a:cf:8c:65:7a:af:b2:23:57:32: a7:79:c8:51:62:c0:ca:a6:a5:5b:79:3e:1f:d5:71:00:72:68: 48:89:c6:16:09:f3:f7:e7:fe:61:eb:3e:96:8e:20:36:e0:cc: 44:7b:e4:d2:0e:0b:40:fb:20:de:38:7f:39:40:87:11:64:44: 9f:20:9c:a7:44:22:95:34:ea:42:27:80:5a:21:6e:bb:ec:5a: d2:20:74:81:17:c2:dc:0c:72:15:f3:66:44:5b:80:0e:56:11: 40:94:4a:0f:d4:8a:12:05:b1:fa:7c:a7:5a:0c:fd:67:d3:2c: af:05:4e:3b:5b:2b:fe:54:9e:b6:ba:f9:b8:b9:86:d3:da:14: a7:eb:e0:79:fa:5b:b9:35:52:5d:1c:e9:9a:3f:ed:1d:68:06: ce:66:e5:2f:38:04:1c:c7:cb:00:7a:79:4d:6a:4e:38:b1:20: 5c:60:54:60:63:5b:9e:48:45:60:93:1f:c1:3c:cf:1e:08:b8: 1f:4c:a1:65:b4:e6:d0:a6:00:6f:7c:a6:5a:8b:61:4f:3b:ec: 4e:7a:aa:f0:3a:cf:6b:cc:90:0a:f0:cd:7f:84:0b:f3:ab:fe: ca:41:bb:f7:a1:f9:77:12:2c:82:7a:15:4b:05:ed:a4:9a:53: dd:6a:65:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQzQzIxMTAvBgNVBAUTKEU3MDYxREIyMjI4MzhERTY4QTkzQ0UyMUVGMjkxQjA1 NTQyRDg3MjYwHhcNMjUwNDI0MTYxOTIyWhcNMjUwNTAxMTYxOTIyWjAYMRYwFAYD VQQDEw02ODBhNjQ4Yi00ZTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA23PO/WvoYCST1s+pAy07Np1qGgWdAvKmQ1M1HTdDDTLiXWsLzmNNKi74qjM6 HycBTlHjMdhcp20tD9ibUqJz70rrSp3NmJn+qpJ2Xz3ntghyRDOtu9QdVGBga8W/ AKIBnMv3on+XYySRdQqmHqipgtivrgeTl7O3Yf4veqa/GWDW5pmvytmRbn+v7B7J glaEJVw7RnCpbRkniHzKe+FzZDdTXq/NlMx6dbIA9wdEFBovFh6YccMc6xnjyCiq jegUMQSoiam//JalD5B0g7XQ6of6U558Xd6lsmFAB4i0VCjJ0u7uI7Y5VBpPZVBA ASNaMvCq5l0OjnuHTItvJThfeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCB8ovLI mUtd+OF3XGqmqA/moeERMB8GA1UdIwQYMBaAFOcGHbIig43mipPOIe8pGwVULYcm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDNDMi83MkQ3Q0ZENjIz RjgxMUU3OTU4OUQ3NTJDNEY5QUUwMi81d1lkc2lLRGplYUtrODRoN3lrYkJWUXRo eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV3WWRzaUtEamVhS2s4NGg3eWtiQlZRdGh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDNDMi83MkQ3Q0ZENjIzRjgxMUU3OTU4OUQ3NTJDNEY5QUUwMi81d1lkc2lLRGpl YUtrODRoN3lrYkJWUXRoeVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0zZB6dRcvq5rPjGV6r7IjVzKnechRYsDKpqVbeT4f1XEAcmhIicYW CfP35/5h6z6WjiA24MxEe+TSDgtA+yDeOH85QIcRZESfIJynRCKVNOpCJ4BaIW67 7FrSIHSBF8LcDHIV82ZEW4AOVhFAlEoP1IoSBbH6fKdaDP1n0yyvBU47Wyv+VJ62 uvm4uYbT2hSn6+B5+lu5NVJdHOmaP+0daAbOZuUvOAQcx8sAenlNak44sSBcYFRg Y1ueSEVgkx/BPM8eCLgfTKFltObQpgBvfKZai2FPO+xOeqrwOs9rzJAK8M1/hAvz q/7KQbv3ofl3EiyCehVLBe2kmlPdamV6 -----END CERTIFICATE-----Generated at Sat Apr 26 17:11:44 2025 by rpki-client