$ rpki-client -vvf rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft File: 5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft (raw, json) Hash identifier: yF+Wf5+0JuUNv5m96IvvPgMffo5E1MKtJSSRbZmjtJs= Subject key identifier: 94:27:61:EC:10:57:17:10:43:FF:3A:96:E4:21:B8:B1:1B:80:0C:4E Authority key identifier: E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04 Certificate issuer: /CN=A919F207/serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04 Certificate serial: 0882 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft Manifest number: 0866 Signing time: Thu 24 Apr 2025 20:33:14 +0000 Manifest this update: Thu 24 Apr 2025 20:33:14 +0000 Manifest next update: Thu 01 May 2025 20:33:14 +0000 Files and hashes: 1: 5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl (hash: mGfSKXKlha62ki9xDqg31CJW8tJSuRH8K8wD7jNRhj4=) 2: FE5523767A4111EB9E76B867C4F9AE02.roa (hash: AFaeu2oL4cNNHYlnGZfZQpi+3m9ltpqYBL3jC9MdwyA=) 3: 9F95B0B4232811EBB98A6C1AC4F9AE02.roa (hash: 0po2YnmF7LUsQv1OhpceWfM4UKdi7rr2HPXL/pTpDy0=) 4: 0A88715AC2A711EAB8D9B426C4F9AE02.roa (hash: hEtTiUQOvKMaXnGzhNc1AksaZZBPn4CMUgbwNqIqaYM=) 5: 0A00EE7EC2A711EAB8D9B426C4F9AE02.roa (hash: t8BmeMehn227H8dOJrIEHLoPLZBtqxvvD/eMG/7UDR8=) 6: D661BF1821E111EB85E9C824C4F9AE02.roa (hash: VaYW5XVqy5zl5lpqnEYWS9FtMV51Bf/m8xOkw2cjG0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2178 (0x882) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F207, serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04 Validity Not Before: Apr 24 20:33:14 2025 GMT Not After : May 1 20:33:14 2025 GMT Subject: CN=680aa00a-8a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:72:8b:d8:47:5d:df:b6:18:db:d2:c3:80:42: 4e:fd:43:4b:13:39:22:42:e5:77:04:78:85:65:5a: 46:08:ba:5f:b0:6c:af:29:80:33:5a:a1:b9:17:76: ae:6a:f2:50:72:fe:65:7e:04:ec:b3:d6:f7:e8:83: de:4c:c0:44:45:dc:b8:14:92:16:22:0e:29:28:31: 7d:2f:84:27:3e:7e:b6:d7:6c:4a:6f:5b:7e:c6:27: e0:08:9e:45:f1:8f:44:72:85:97:67:9f:2d:cd:1b: ad:f9:72:b5:24:46:52:c1:86:71:c3:a9:f1:d0:23: 5d:10:87:94:fd:c9:de:fa:87:bf:13:52:be:c6:9b: eb:93:e3:76:fd:cd:9c:89:61:89:94:e1:a0:73:25: 68:9c:6f:15:54:6b:ef:41:b2:d4:a3:ae:58:81:77: 57:09:10:de:0c:a9:c2:96:54:fc:fa:e4:12:03:ff: 26:1e:a2:42:10:c6:1b:9b:ae:38:b4:3c:03:2a:0a: bb:80:e1:8b:45:2b:49:5c:c2:11:0a:c3:d5:85:6e: e0:0b:b2:ca:6d:26:5b:18:27:81:91:f6:2e:22:32: e6:39:7f:6e:44:a9:7a:30:24:60:73:05:ef:77:ce: be:a2:39:2a:28:c2:99:25:15:08:b7:2e:5a:d0:69: f5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:27:61:EC:10:57:17:10:43:FF:3A:96:E4:21:B8:B1:1B:80:0C:4E X509v3 Authority Key Identifier: keyid:E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:f3:00:2c:05:04:7b:23:89:95:ca:d6:f4:56:3b:0b:97:83: bc:59:3f:1d:cb:2e:17:88:c2:bc:f9:5d:72:86:d6:74:87:d5: 8c:f4:d0:37:e9:2e:8b:e3:1c:2f:d0:ee:e2:ce:a6:93:6a:64: 5b:ee:10:d1:d2:f8:00:5a:23:4c:d4:60:59:e2:58:c3:08:cb: 93:4d:6c:1a:3e:10:51:3e:c7:92:11:f7:3b:08:c9:36:dc:fd: f0:bc:c5:7d:34:1f:db:8e:66:2c:94:38:29:54:c1:79:8d:69: c7:5c:e4:e7:c8:3b:a6:6e:3f:8f:51:ae:79:db:fa:a9:69:79: 79:d3:87:19:a0:36:27:f2:51:ed:79:e9:1c:e3:5a:7a:8c:7a: f6:d6:eb:86:c8:42:ce:a6:b1:61:6e:70:66:3a:85:ac:87:85: ba:76:66:6f:e3:1d:28:63:95:ab:56:20:3a:94:a5:e4:c4:77: 6f:a9:cb:b0:85:cc:af:5b:1d:29:67:99:8d:d5:d6:4a:ac:b8: ef:e7:65:11:75:27:2c:fa:5f:4f:46:25:16:4b:2e:f1:2a:c3: c9:ac:e8:bc:9a:77:c2:17:39:25:d6:4d:8d:22:0c:9e:c8:28: 43:50:fd:0d:69:e1:d5:5c:62:30:99:dc:30:f6:c1:67:56:09: af:e5:a5:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYyMDcxMTAvBgNVBAUTKEU3M0E3OTQ0MDQ0NEZFMzRDMzEwRjc4NDg5NEM0QUIy MUVBQ0FBMDQwHhcNMjUwNDI0MjAzMzE0WhcNMjUwNTAxMjAzMzE0WjAYMRYwFAYD VQQDEw02ODBhYTAwYS04YTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwHKL2Edd37YY29LDgEJO/UNLEzkiQuV3BHiFZVpGCLpfsGyvKYAzWqG5F3au avJQcv5lfgTss9b36IPeTMBERdy4FJIWIg4pKDF9L4QnPn6212xKb1t+xifgCJ5F 8Y9EcoWXZ58tzRut+XK1JEZSwYZxw6nx0CNdEIeU/cne+oe/E1K+xpvrk+N2/c2c iWGJlOGgcyVonG8VVGvvQbLUo65YgXdXCRDeDKnCllT8+uQSA/8mHqJCEMYbm644 tDwDKgq7gOGLRStJXMIRCsPVhW7gC7LKbSZbGCeBkfYuIjLmOX9uRKl6MCRgcwXv d86+ojkqKMKZJRUIty5a0Gn1twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQnYewQ VxcQQ/86luQhuLEbgAxOMB8GA1UdIwQYMBaAFOc6eUQERP40wxD3hIlMSrIerKoE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjIwNy8xMkYyQ0MwQUMy NjExMUVBOTg2RUVGNDFDNEY5QUUwMi81enA1UkFSRV9qVERFUGVFaVV4S3NoNnNx Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV6cDVSQVJFX2pUREVQZUVpVXhLc2g2c3FnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjIwNy8xMkYyQ0MwQUMyNjExMUVBOTg2RUVGNDFDNEY5QUUwMi81enA1UkFSRV9q VERFUGVFaVV4S3NoNnNxZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+8wAsBQR7I4mVytb0VjsLl4O8WT8dyy4XiMK8+V1yhtZ0h9WM9NA3 6S6L4xwv0O7izqaTamRb7hDR0vgAWiNM1GBZ4ljDCMuTTWwaPhBRPseSEfc7CMk2 3P3wvMV9NB/bjmYslDgpVMF5jWnHXOTnyDumbj+PUa552/qpaXl504cZoDYn8lHt eekc41p6jHr21uuGyELOprFhbnBmOoWsh4W6dmZv4x0oY5WrViA6lKXkxHdvqcuw hcyvWx0pZ5mN1dZKrLjv52URdScs+l9PRiUWSy7xKsPJrOi8mnfCFzkl1k2NIgye yChDUP0NaeHVXGIwmdww9sFnVgmv5aWM -----END CERTIFICATE-----Generated at Sat Apr 26 20:38:25 2025 by rpki-client