$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft File: 5KlM-o0vn1s570Y1BZHOMS5RT7M.mft (raw, json) Hash identifier: BVuQ4AiLfNkYym2ukriC0k/tXHlb/XrBtoATa75U9xc= Subject key identifier: 96:85:CA:33:ED:5F:DA:EC:26:1E:A5:36:78:C5:89:90:4D:C2:14:23 Authority key identifier: E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3 Certificate issuer: /CN=A91A3AB3/serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3 Certificate serial: 0273 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft Manifest number: 0260 Signing time: Fri 25 Apr 2025 01:38:25 +0000 Manifest this update: Fri 25 Apr 2025 01:38:25 +0000 Manifest next update: Fri 02 May 2025 01:38:25 +0000 Files and hashes: 1: 5KlM-o0vn1s570Y1BZHOMS5RT7M.crl (hash: 6s5YQ7c4j40Ti8aQIxC+Lvh5sYp5FmQB7n1Gx0/cp7Q=) 2: F3997FACE21D11EFA5819B7EC4F9AE02.roa (hash: i36MDRfdl1BfbC03GXG9+ec9wUo58UWBRkWVFnwZOdc=) 3: 5B69CE3A474A11EF8624EE6DC4F9AE02.roa (hash: 67zhTTp2vfU+e/e2tJTNawILQWqWdPCohYNKfRAh44c=) 4: 3D331986E17211EFA5959B2FC4F9AE02.roa (hash: c9azchd3zpY+xW9jIYIXi4nMNx42n/PmJQ0XhSYx2YM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:38:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 627 (0x273) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3AB3, serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3 Validity Not Before: Apr 25 01:38:25 2025 GMT Not After : May 2 01:38:25 2025 GMT Subject: CN=680ae791-4ea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f8:1e:b2:7e:24:a3:ef:92:2e:21:f4:95:30: 16:c2:b8:dc:7c:69:ea:d7:42:0d:83:cd:56:2d:64: aa:48:f3:ca:10:b4:98:79:cc:03:d7:3b:ab:ff:04: d3:25:a1:39:a6:6e:5c:95:88:5d:d3:96:89:6e:8a: 62:89:2a:d7:e6:28:41:67:ec:d2:86:b9:11:ad:40: 5e:55:d3:95:5a:88:30:13:70:14:e4:50:61:3a:7b: 24:c5:d6:5f:1d:b8:b0:b5:96:2f:f5:af:4c:75:e3: e8:96:1c:35:e3:6f:9a:d7:b8:93:8b:c5:65:9a:07: c2:af:c9:13:39:c5:0c:0a:61:50:09:d2:f0:d0:e8: 0b:52:f1:a0:15:b6:0f:6d:26:1b:e9:9d:14:ff:0d: b8:7d:82:1d:07:fe:c9:d9:02:80:4b:d2:e8:62:a7: b2:23:ae:94:cc:c4:12:a5:be:c7:26:72:3e:89:4d: dc:5d:a8:5b:58:91:cc:cd:da:c5:ac:ac:8a:c8:c6: 34:3f:b4:1d:92:fb:fe:9a:fe:c9:00:48:60:e2:85: a5:32:10:57:99:2f:71:c8:f7:cb:82:f4:7b:ae:43: 92:29:d4:83:79:00:d3:bc:7f:b2:49:65:b5:59:12: 65:23:46:7c:36:71:55:cf:f7:fc:64:0c:ea:69:a3: 87:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:85:CA:33:ED:5F:DA:EC:26:1E:A5:36:78:C5:89:90:4D:C2:14:23 X509v3 Authority Key Identifier: keyid:E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:aa:03:69:ef:7e:3e:ca:99:59:72:6c:ba:62:92:bd:79:02: f1:2a:77:b6:fb:78:9a:f4:a2:46:74:e6:94:e4:5f:37:f9:b7: f8:a7:0d:ce:40:71:17:6f:12:05:57:07:f8:50:5a:ee:b7:0c: 44:c0:52:c8:5d:95:45:0d:c2:8d:42:9c:21:87:3b:ff:c1:5e: 50:29:a9:05:1e:c6:17:4b:d7:6b:f2:4d:9f:39:89:75:9c:c2: 49:9b:a8:96:c1:af:c8:bb:f9:cd:25:f9:9e:02:a4:4e:df:71: 1d:b9:64:06:05:26:24:07:5a:35:5c:9d:17:02:3a:bf:3b:38: 5c:5c:04:8c:fe:08:51:41:d0:e8:f2:28:ef:dc:a8:00:f3:97: 0a:53:ad:c0:44:bd:86:c0:c1:44:40:3e:7c:28:2f:fb:8f:20: c2:e2:68:7e:6b:b0:61:51:a2:89:d6:7c:30:2a:8c:4c:f0:ee: 7d:2f:6b:9c:0d:f0:65:32:ff:df:87:bc:2b:c9:61:2c:2c:8b: d3:02:34:98:42:a2:20:85:98:76:39:d5:8f:d7:2c:ed:d5:6d: fa:ef:f7:7c:33:ca:8e:39:11:51:cf:94:9c:f5:dc:09:01:a7: e4:7b:13:62:b9:61:b1:ad:97:e8:54:a7:3e:da:b9:a0:8d:4a: 66:89:09:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNBQjMxMTAvBgNVBAUTKEU0QTk0Q0ZBOEQyRjlGNUIzOUVGNDYzNTA1OTFDRTMx MkU1MTRGQjMwHhcNMjUwNDI1MDEzODI1WhcNMjUwNTAyMDEzODI1WjAYMRYwFAYD VQQDEw02ODBhZTc5MS00ZWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvgesn4ko++SLiH0lTAWwrjcfGnq10INg81WLWSqSPPKELSYecwD1zur/wTT JaE5pm5clYhd05aJbopiiSrX5ihBZ+zShrkRrUBeVdOVWogwE3AU5FBhOnskxdZf HbiwtZYv9a9MdePolhw142+a17iTi8VlmgfCr8kTOcUMCmFQCdLw0OgLUvGgFbYP bSYb6Z0U/w24fYIdB/7J2QKAS9LoYqeyI66UzMQSpb7HJnI+iU3cXahbWJHMzdrF rKyKyMY0P7Qdkvv+mv7JAEhg4oWlMhBXmS9xyPfLgvR7rkOSKdSDeQDTvH+ySWW1 WRJlI0Z8NnFVz/f8ZAzqaaOHRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJaFyjPt X9rsJh6lNnjFiZBNwhQjMB8GA1UdIwQYMBaAFOSpTPqNL59bOe9GNQWRzjEuUU+z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0FCMy8wNUVEOTRDRTE5 NEMxMUVEQUQzOEYyMkJDNEY5QUUwMi81S2xNLW8wdm4xczU3MFkxQlpIT01TNVJU N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVLbE0tbzB2bjFzNTcwWTFCWkhPTVM1UlQ3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0FCMy8wNUVEOTRDRTE5NEMxMUVEQUQzOEYyMkJDNEY5QUUwMi81S2xNLW8wdm4x czU3MFkxQlpIT01TNVJUN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRqgNp734+yplZcmy6YpK9eQLxKne2+3ia9KJGdOaU5F83+bf4pw3O QHEXbxIFVwf4UFrutwxEwFLIXZVFDcKNQpwhhzv/wV5QKakFHsYXS9dr8k2fOYl1 nMJJm6iWwa/Iu/nNJfmeAqRO33EduWQGBSYkB1o1XJ0XAjq/OzhcXASM/ghRQdDo 8ijv3KgA85cKU63ARL2GwMFEQD58KC/7jyDC4mh+a7BhUaKJ1nwwKoxM8O59L2uc DfBlMv/fh7wryWEsLIvTAjSYQqIghZh2OdWP1yzt1W367/d8M8qOORFRz5Sc9dwJ AafkexNiuWGxrZfoVKc+2rmgjUpmiQly -----END CERTIFICATE-----Generated at Sat Apr 26 14:21:24 2025 by rpki-client