$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft File: t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft (raw, json) Hash identifier: nDG/fJhrwpeXyjTLwGXB9jOCHB61ovERcCyG1WTQFl4= Subject key identifier: E5:90:A6:C3:9E:58:4F:1E:D3:6A:67:BF:02:43:44:C0:46:07:16:48 Authority key identifier: B7:94:F9:97:33:EE:FC:3F:A0:00:3F:68:8F:64:C9:C3:53:92:66:B5 Certificate issuer: /CN=A91B4E11/serialNumber=B794F99733EEFC3FA0003F688F64C9C3539266B5 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft Manifest number: AC Signing time: Fri 25 Apr 2025 05:05:29 +0000 Manifest this update: Fri 25 Apr 2025 05:05:29 +0000 Manifest next update: Fri 02 May 2025 05:05:29 +0000 Files and hashes: 1: t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl (hash: AINf7Bq+74cyuxIZ2ybGBkx2PTHeKqennX08la01fjE=) 2: A2939A381CB711EF8F98240CC4F9AE02.roa (hash: AIIOALhmpVgtbG/Y3VLxrUnP8fQ71eZKv8RmFzdHCHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:05:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4E11, serialNumber=B794F99733EEFC3FA0003F688F64C9C3539266B5 Validity Not Before: Apr 25 05:05:29 2025 GMT Not After : May 2 05:05:29 2025 GMT Subject: CN=680b1819-d5e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:86:49:33:05:96:61:33:68:ef:ca:8d:da:45: c9:ea:f6:da:50:0e:82:25:5d:8f:25:4c:88:72:17: 53:8b:6b:7b:1c:df:39:4c:72:9d:61:32:f4:1a:1b: c3:db:9e:24:ac:63:29:53:87:93:94:e8:af:af:f0: 0f:fe:c9:04:6f:80:6b:91:95:05:aa:7b:bf:98:ee: 05:5a:4b:83:ff:c5:d9:c2:a5:dd:34:65:08:6d:d2: e4:46:79:fc:03:43:99:49:b9:0e:2a:7f:6c:6c:72: a8:14:9c:97:69:ed:fc:80:d8:52:7b:57:48:2e:c4: 0f:73:eb:66:9f:45:d9:28:e1:84:00:ac:8f:42:e2: 0d:44:75:32:e3:cc:c5:ea:42:4d:f7:5e:8e:d1:9e: 19:76:d9:86:00:26:6e:7f:63:1d:fa:ac:f5:6b:40: ec:32:76:e5:53:5a:25:3e:d2:a5:03:cb:4f:24:0b: 20:be:08:48:c6:3e:b7:bb:8e:e5:44:59:58:9a:89: 3e:fa:4d:8e:c3:3b:a1:61:fe:06:95:13:b4:7b:15: a3:c1:1b:87:29:19:67:86:06:ae:61:e9:a6:d0:2e: 30:4c:94:5d:ca:c5:c9:c2:4f:86:a8:17:25:70:51: 7a:a4:41:14:1b:6e:77:bc:cf:69:05:5c:61:a0:aa: ff:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:90:A6:C3:9E:58:4F:1E:D3:6A:67:BF:02:43:44:C0:46:07:16:48 X509v3 Authority Key Identifier: keyid:B7:94:F9:97:33:EE:FC:3F:A0:00:3F:68:8F:64:C9:C3:53:92:66:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:51:43:fb:8c:96:8c:79:a4:68:b6:2f:6d:2a:4e:3f:26:d2: d3:d3:3b:a9:30:88:8f:0e:6b:7d:d8:c6:db:19:0f:8b:c3:d2: 94:58:24:cd:6d:1d:2f:0b:c4:7d:b7:f9:11:ed:fc:c6:99:57: 79:7e:58:0f:c2:3c:bf:21:af:df:46:bc:f6:f9:db:41:2e:0c: 32:cc:b8:54:9a:87:0e:97:21:8f:c3:94:c2:00:69:a4:00:11: 7f:9a:0f:b8:96:db:07:ae:65:7f:76:89:4a:74:14:5e:22:75: 00:f6:c5:f0:d5:e1:05:ba:9e:e0:80:4b:2c:f4:b0:f1:1b:a4: b8:b6:45:ef:6b:cd:c4:29:7d:da:dd:71:fe:56:4d:88:6e:03: 9f:43:19:12:f3:4d:ce:65:e3:06:06:c6:d9:5b:15:26:9b:c7: 85:c4:38:9f:24:d3:26:0a:67:ab:93:83:ca:c8:32:46:8d:24: 89:66:ad:d3:e0:df:a7:bd:ed:81:b7:9a:a4:32:ce:a9:70:54: b0:e2:52:c0:5f:c2:1f:c3:98:5e:a6:0a:5c:b1:8c:a6:50:49: 40:70:db:45:45:34:97:2b:45:da:87:9b:b0:a2:38:f7:48:66: 29:96:0e:36:5d:e1:d1:8b:26:ad:12:3a:2b:e6:d4:39:ae:72: 45:c0:fb:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRFMTExMTAvBgNVBAUTKEI3OTRGOTk3MzNFRUZDM0ZBMDAwM0Y2ODhGNjRDOUMz NTM5MjY2QjUwHhcNMjUwNDI1MDUwNTI5WhcNMjUwNTAyMDUwNTI5WjAYMRYwFAYD VQQDEw02ODBiMTgxOS1kNWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3IZJMwWWYTNo78qN2kXJ6vbaUA6CJV2PJUyIchdTi2t7HN85THKdYTL0GhvD 254krGMpU4eTlOivr/AP/skEb4BrkZUFqnu/mO4FWkuD/8XZwqXdNGUIbdLkRnn8 A0OZSbkOKn9sbHKoFJyXae38gNhSe1dILsQPc+tmn0XZKOGEAKyPQuINRHUy48zF 6kJN916O0Z4ZdtmGACZuf2Md+qz1a0DsMnblU1olPtKlA8tPJAsgvghIxj63u47l RFlYmok++k2OwzuhYf4GlRO0exWjwRuHKRlnhgauYemm0C4wTJRdysXJwk+GqBcl cFF6pEEUG253vM9pBVxhoKr/JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWQpsOe WE8e02pnvwJDRMBGBxZIMB8GA1UdIwQYMBaAFLeU+Zcz7vw/oAA/aI9kycNTkma1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEUxMS83QkNGODEyODFD QTgxMUVGQTUwMzBCNERDNEY5QUUwMi90NVQ1bHpQdV9ELWdBRDlvajJUSncxT1Na clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q1VDVselB1X0QtZ0FEOW9qMlRKdzFPU1pyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEUxMS83QkNGODEyODFDQTgxMUVGQTUwMzBCNERDNEY5QUUwMi90NVQ1bHpQdV9E LWdBRDlvajJUSncxT1NaclUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPUUP7jJaMeaRoti9tKk4/JtLT0zupMIiPDmt92MbbGQ+Lw9KUWCTN bR0vC8R9t/kR7fzGmVd5flgPwjy/Ia/fRrz2+dtBLgwyzLhUmocOlyGPw5TCAGmk ABF/mg+4ltsHrmV/dolKdBReInUA9sXw1eEFup7ggEss9LDxG6S4tkXva83EKX3a 3XH+Vk2IbgOfQxkS803OZeMGBsbZWxUmm8eFxDifJNMmCmerk4PKyDJGjSSJZq3T 4N+nve2Bt5qkMs6pcFSw4lLAX8Ifw5hepgpcsYymUElAcNtFRTSXK0Xah5uwojj3 SGYplg42XeHRiyatEjor5tQ5rnJFwPtU -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:08 2025 by rpki-client