$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.mft File: 5EZZ6m_c00PGwef_0BSlsHgYlos.mft (raw, json) Hash identifier: UZOOHMsQKd3XePDrLdgb6Kuyq45eIQNEVxJesTB+iI8= Subject key identifier: 46:AC:94:D8:E2:BA:3D:33:90:31:BF:4B:6A:4A:B2:24:D1:F7:FF:BC Authority key identifier: E4:46:59:EA:6F:DC:D3:43:C6:C1:E7:FF:D0:14:A5:B0:78:18:96:8B Certificate issuer: /CN=A91B3062/serialNumber=E44659EA6FDCD343C6C1E7FFD014A5B07818968B Certificate serial: 06A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EZZ6m_c00PGwef_0BSlsHgYlos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.mft Manifest number: 06A2 Signing time: Thu 24 Apr 2025 22:00:00 +0000 Manifest this update: Thu 24 Apr 2025 22:00:00 +0000 Manifest next update: Thu 01 May 2025 22:00:00 +0000 Files and hashes: 1: 5EZZ6m_c00PGwef_0BSlsHgYlos.crl (hash: ojS3PvmRET5Or1IoCLM43aLREUdywUvXQLVTBbAj2FM=) 2: C8FB0DB8616D11EB928F0250C4F9AE02.roa (hash: wvBpCoANMp6HM7/0VPGZvZaF4FC0qm23TRsKibzPLZk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.crl rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EZZ6m_c00PGwef_0BSlsHgYlos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:59:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1703 (0x6a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3062, serialNumber=E44659EA6FDCD343C6C1E7FFD014A5B07818968B Validity Not Before: Apr 24 22:00:00 2025 GMT Not After : May 1 22:00:00 2025 GMT Subject: CN=680ab460-df9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:48:e0:dc:14:1c:a5:10:7e:6a:49:d6:1f:ff: 8c:39:b4:d1:c1:6c:17:ba:1d:64:cb:a8:97:00:07: a9:aa:b4:7d:0d:30:f9:e2:3a:d0:41:6e:3e:04:0d: 1e:ce:64:50:d3:9b:88:cd:63:22:19:58:06:e2:19: bf:1d:7b:72:70:7e:30:12:5d:d9:3b:d2:87:ea:a2: 84:c6:55:bc:aa:48:d5:7a:94:ff:60:47:94:65:ff: 04:b6:91:9d:ea:73:80:e0:c8:c3:8d:b4:56:f8:0d: 9f:00:10:fe:1f:ea:c4:aa:b3:ac:1a:4c:6e:0d:6e: d4:52:2f:27:aa:33:62:91:ec:4a:89:0f:78:6e:94: 62:4f:21:eb:4f:f6:bc:2f:3c:fb:3f:38:4f:5a:f0: 6f:fd:85:78:ed:dd:84:32:87:5e:cf:16:1d:5f:ed: fa:de:e6:35:52:e9:9d:33:29:bb:5b:5e:71:b0:d1: 31:ec:d1:95:68:e1:d5:a3:25:7a:5c:31:88:7d:aa: 58:c5:d5:06:19:51:4f:45:f5:12:59:90:db:65:30: 9e:4a:bc:06:af:ef:aa:83:d1:dc:47:1d:ce:78:0f: 82:af:89:83:17:3c:12:12:ce:6c:a8:f1:c6:82:06: ae:4f:43:43:dd:f3:d9:8b:e7:fa:33:ef:e3:e0:fc: 2d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:AC:94:D8:E2:BA:3D:33:90:31:BF:4B:6A:4A:B2:24:D1:F7:FF:BC X509v3 Authority Key Identifier: keyid:E4:46:59:EA:6F:DC:D3:43:C6:C1:E7:FF:D0:14:A5:B0:78:18:96:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EZZ6m_c00PGwef_0BSlsHgYlos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:ed:da:77:f0:cd:13:93:65:34:cb:eb:86:20:95:26:0e:30: 71:a4:5b:ef:91:a3:54:51:7c:e4:8f:f9:dc:22:f5:5e:6d:74: b5:37:91:3b:03:4c:54:78:73:b5:10:75:80:48:d1:fb:c4:f6: 92:94:70:64:1b:ea:3f:dd:2a:1c:43:fd:df:33:15:22:6f:5c: 45:92:50:38:b5:92:4a:66:df:97:66:16:fe:f0:42:22:1d:b6: 64:9a:7d:e4:39:99:01:b9:51:25:f0:c7:70:7b:9c:3b:82:02: c8:d5:24:49:82:c6:8c:91:1c:93:ea:d8:5a:34:63:ee:cf:d2: 2d:26:c1:0c:a8:d7:2d:50:a2:c1:c4:ab:79:f6:f0:f4:3f:37: 66:68:13:63:50:75:5c:17:ee:6b:83:79:67:b4:2b:6d:af:ee: 96:c0:1d:f4:d4:39:37:59:46:e4:d7:35:1d:04:e0:c1:74:72: 9b:54:18:c8:ad:ec:ce:81:91:13:78:60:da:ec:8a:f5:0a:88: ed:79:18:e4:f5:f2:1e:51:e8:77:bc:95:fe:85:78:ab:22:2e: 9a:f6:12:e5:d9:3f:d6:fa:94:1b:ac:f0:bd:9f:58:78:3e:74: 94:05:f6:72:2a:d1:ee:1d:2d:7d:e5:28:28:d1:71:99:46:f8: e5:96:61:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMwNjIxMTAvBgNVBAUTKEU0NDY1OUVBNkZEQ0QzNDNDNkMxRTdGRkQwMTRBNUIw NzgxODk2OEIwHhcNMjUwNDI0MjIwMDAwWhcNMjUwNTAxMjIwMDAwWjAYMRYwFAYD VQQDEw02ODBhYjQ2MC1kZjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0jg3BQcpRB+aknWH/+MObTRwWwXuh1ky6iXAAepqrR9DTD54jrQQW4+BA0e zmRQ05uIzWMiGVgG4hm/HXtycH4wEl3ZO9KH6qKExlW8qkjVepT/YEeUZf8EtpGd 6nOA4MjDjbRW+A2fABD+H+rEqrOsGkxuDW7UUi8nqjNikexKiQ94bpRiTyHrT/a8 Lzz7PzhPWvBv/YV47d2EModezxYdX+363uY1UumdMym7W15xsNEx7NGVaOHVoyV6 XDGIfapYxdUGGVFPRfUSWZDbZTCeSrwGr++qg9HcRx3OeA+Cr4mDFzwSEs5sqPHG ggauT0ND3fPZi+f6M+/j4PwtiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEaslNji uj0zkDG/S2pKsiTR9/+8MB8GA1UdIwQYMBaAFORGWepv3NNDxsHn/9AUpbB4GJaL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzA2Mi85ODgwODlFNDYx NkIxMUVCQTY0Nzg3NEFDNEY5QUUwMi81RVpaNm1fYzAwUEd3ZWZfMEJTbHNIZ1ls b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVFWlo2bV9jMDBQR3dlZl8wQlNsc0hnWWxvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzA2Mi85ODgwODlFNDYxNkIxMUVCQTY0Nzg3NEFDNEY5QUUwMi81RVpaNm1fYzAw UEd3ZWZfMEJTbHNIZ1lsb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB37dp38M0Tk2U0y+uGIJUmDjBxpFvvkaNUUXzkj/ncIvVebXS1N5E7 A0xUeHO1EHWASNH7xPaSlHBkG+o/3SocQ/3fMxUib1xFklA4tZJKZt+XZhb+8EIi HbZkmn3kOZkBuVEl8Mdwe5w7ggLI1SRJgsaMkRyT6thaNGPuz9ItJsEMqNctUKLB xKt59vD0PzdmaBNjUHVcF+5rg3lntCttr+6WwB301Dk3WUbk1zUdBODBdHKbVBjI rezOgZETeGDa7Ir1CojteRjk9fIeUeh3vJX+hXirIi6a9hLl2T/W+pQbrPC9n1h4 PnSUBfZyKtHuHS195Sgo0XGZRvjllmFg -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:46 2025 by rpki-client