$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft File: 5fjJ4D7R71BndlYU2mtRJq1vyz4.mft (raw, json) Hash identifier: HkpXipqKzw9uBY7A5E7plh3FxmT8X7TkafGU7oOCkWA= Subject key identifier: FC:6C:D2:EE:A5:8E:36:B6:08:F5:DD:AE:7E:F2:58:BC:72:EA:89:0A Authority key identifier: E5:F8:C9:E0:3E:D1:EF:50:67:76:56:14:DA:6B:51:26:AD:6F:CB:3E Certificate issuer: /CN=A91A6548/serialNumber=E5F8C9E03ED1EF5067765614DA6B5126AD6FCB3E Certificate serial: 04F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5fjJ4D7R71BndlYU2mtRJq1vyz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft Manifest number: 04F0 Signing time: Thu 24 Apr 2025 23:30:00 +0000 Manifest this update: Thu 24 Apr 2025 23:29:59 +0000 Manifest next update: Thu 01 May 2025 23:29:59 +0000 Files and hashes: 1: 5fjJ4D7R71BndlYU2mtRJq1vyz4.crl (hash: dmBgpU2ttev8O7n/isEQdEmZ+Z1wTD2bpTVutlmLWaM=) 2: E6EC55EE0D7E11EC94917272C4F9AE02.roa (hash: ZFPLjWKhXylD4Z8vt5rlOjVNLoBd2B0qS7n8g9uJPA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.crl rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5fjJ4D7R71BndlYU2mtRJq1vyz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1268 (0x4f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6548, serialNumber=E5F8C9E03ED1EF5067765614DA6B5126AD6FCB3E Validity Not Before: Apr 24 23:29:59 2025 GMT Not After : May 1 23:29:59 2025 GMT Subject: CN=680ac978-bcac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d1:e9:25:b8:43:bf:10:74:d4:14:f0:79:5a: 46:57:7e:05:4a:d1:f0:e1:a5:9a:78:e5:e0:ad:59: a1:0a:5c:ce:2c:88:bd:9c:3a:b3:0a:0b:92:c1:c5: ef:e3:eb:e1:2d:92:51:b6:ef:69:a0:1b:3a:1a:e9: 82:12:68:53:04:fa:97:66:08:76:eb:c2:ea:db:b0: dd:d9:0f:72:16:92:cc:75:f8:9c:5c:d4:c0:34:d1: ea:e3:f5:ab:a3:0a:66:4d:a1:ef:37:f2:cf:d4:a3: e9:c2:9d:b4:de:d7:d2:0d:d0:f5:97:9c:86:2e:08: 2d:a6:c3:71:1c:45:67:26:9a:95:33:7a:78:0c:ec: ad:33:7b:00:82:87:96:c5:91:6f:01:97:d2:34:80: eb:1d:fe:86:45:b7:ff:9f:dd:4f:57:64:1e:8d:28: d9:19:2e:d5:f5:93:19:db:c2:40:ad:1d:ac:b6:5a: 8d:20:2d:11:14:8e:d8:0a:d6:79:26:61:39:bc:8d: da:15:1f:90:92:c0:1a:fb:50:ee:83:64:85:57:1e: 4a:11:01:06:e6:a4:18:12:64:6b:a2:ff:65:24:f6: ca:0e:7f:56:de:f9:98:62:78:90:f5:92:c4:66:7e: 2a:9b:7b:40:5f:46:d8:af:ca:0b:84:4e:69:f0:7c: e7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:6C:D2:EE:A5:8E:36:B6:08:F5:DD:AE:7E:F2:58:BC:72:EA:89:0A X509v3 Authority Key Identifier: keyid:E5:F8:C9:E0:3E:D1:EF:50:67:76:56:14:DA:6B:51:26:AD:6F:CB:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5fjJ4D7R71BndlYU2mtRJq1vyz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:02:ea:05:d6:3d:0f:41:3e:c9:2d:a8:a7:d0:79:85:01:93: 46:49:31:20:bb:77:72:be:07:df:54:19:42:24:fd:07:1c:ed: 15:76:a4:73:b7:60:79:d7:43:b0:fe:97:ef:3c:c7:d1:cd:19: 2a:07:16:6c:ee:e2:cc:c5:03:c1:f7:d1:9f:39:72:03:c1:53: 22:06:d0:2f:db:9a:16:57:8a:1f:d1:b1:72:19:e9:6d:a8:e9: a5:db:ba:9a:db:ab:cb:67:1d:49:b8:9f:92:a2:10:2e:6a:59: c2:a0:19:b3:65:47:65:90:53:5e:be:b9:62:1e:b2:af:99:a5: 7a:81:bc:ab:5e:a6:e6:c5:57:de:c4:28:ea:8d:22:7c:06:c1: 09:df:4a:5d:f9:30:ff:b5:b1:3e:12:f5:52:49:5d:8e:18:87: 3a:cb:5b:46:1e:08:14:e4:24:cb:6a:df:4a:e4:c7:ba:02:57: 94:fd:84:6e:a1:75:f9:b1:76:f9:44:ab:ad:b8:70:63:60:d7: 55:2e:0b:e0:cb:4d:26:5f:77:b7:90:67:8d:4c:3d:4d:b1:2f: 8e:5a:ff:90:1b:f4:9e:c1:be:21:29:ca:b2:51:44:50:16:4a: 63:09:10:52:5f:9d:5c:b5:2c:34:22:c9:09:2e:d6:7b:a0:1a: 04:68:2a:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY1NDgxMTAvBgNVBAUTKEU1RjhDOUUwM0VEMUVGNTA2Nzc2NTYxNERBNkI1MTI2 QUQ2RkNCM0UwHhcNMjUwNDI0MjMyOTU5WhcNMjUwNTAxMjMyOTU5WjAYMRYwFAYD VQQDEw02ODBhYzk3OC1iY2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9HpJbhDvxB01BTweVpGV34FStHw4aWaeOXgrVmhClzOLIi9nDqzCguSwcXv 4+vhLZJRtu9poBs6GumCEmhTBPqXZgh268Lq27Dd2Q9yFpLMdficXNTANNHq4/Wr owpmTaHvN/LP1KPpwp203tfSDdD1l5yGLggtpsNxHEVnJpqVM3p4DOytM3sAgoeW xZFvAZfSNIDrHf6GRbf/n91PV2QejSjZGS7V9ZMZ28JArR2stlqNIC0RFI7YCtZ5 JmE5vI3aFR+QksAa+1Dug2SFVx5KEQEG5qQYEmRrov9lJPbKDn9W3vmYYniQ9ZLE Zn4qm3tAX0bYr8oLhE5p8HznoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPxs0u6l jja2CPXdrn7yWLxy6okKMB8GA1UdIwQYMBaAFOX4yeA+0e9QZ3ZWFNprUSatb8s+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjU0OC83RENGMjQ4QTBE N0MxMUVDQkFCREQ1NkRDNEY5QUUwMi81ZmpKNEQ3UjcxQm5kbFlVMm10UkpxMXZ5 ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVmako0RDdSNzFCbmRsWVUybXRSSnExdnl6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjU0OC83RENGMjQ4QTBEN0MxMUVDQkFCREQ1NkRDNEY5QUUwMi81ZmpKNEQ3Ujcx Qm5kbFlVMm10UkpxMXZ5ejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkAuoF1j0PQT7JLain0HmFAZNGSTEgu3dyvgffVBlCJP0HHO0VdqRz t2B510Ow/pfvPMfRzRkqBxZs7uLMxQPB99GfOXIDwVMiBtAv25oWV4of0bFyGelt qOml27qa26vLZx1JuJ+SohAualnCoBmzZUdlkFNevrliHrKvmaV6gbyrXqbmxVfe xCjqjSJ8BsEJ30pd+TD/tbE+EvVSSV2OGIc6y1tGHggU5CTLat9K5Me6AleU/YRu oXX5sXb5RKutuHBjYNdVLgvgy00mX3e3kGeNTD1NsS+OWv+QG/Sewb4hKcqyUURQ FkpjCRBSX51ctSw0IskJLtZ7oBoEaCqb -----END CERTIFICATE-----Generated at Sat Apr 26 04:27:17 2025 by rpki-client