$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft File: 5MWJuJPSconPhG3wWt-1lgNkKP0.mft (raw, json) Hash identifier: 0AHDLKeJjtAZwMRCbAWmjuRPtEtwsnp6q4SHGdN63Ns= Subject key identifier: A2:97:14:27:18:DD:2C:EB:A2:4C:D6:B7:46:8B:E0:0A:BD:D4:59:73 Authority key identifier: E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD Certificate issuer: /CN=A91B8AC8/serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft Manifest number: 50 Signing time: Fri 25 Apr 2025 06:20:33 +0000 Manifest this update: Fri 25 Apr 2025 06:20:32 +0000 Manifest next update: Fri 02 May 2025 06:20:32 +0000 Files and hashes: 1: 5MWJuJPSconPhG3wWt-1lgNkKP0.crl (hash: BFpNIkw2osFL7bGZWuUfWxY7uUwOihTtgFAJpBx002Q=) 2: 8FFA61D4B13D11EF9EFDE433C4F9AE02.roa (hash: EhNDnWOJJGSPSxGl0lercQlAl3yvPmyKkzL2DPkH1sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8AC8, serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD Validity Not Before: Apr 25 06:20:32 2025 GMT Not After : May 2 06:20:32 2025 GMT Subject: CN=680b29b0-1448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8b:2d:e7:e8:8c:e7:97:43:c0:ae:f5:b0:1e: 8c:f4:b9:a0:3f:93:71:5d:c4:2b:46:58:60:1b:b6: 3c:ee:8b:5b:22:59:86:f5:21:e3:4d:50:37:7d:89: 98:b6:e9:b5:d0:f4:e1:c1:54:c8:06:1f:63:b9:55: 3a:ec:e7:ed:e5:34:30:56:6c:05:cd:5c:d4:62:00: 04:fa:89:3d:10:44:7e:ee:ab:73:3e:10:7e:c6:b2: c3:1b:66:7a:c6:21:a3:02:0b:a6:17:85:a8:4a:c8: 99:50:4e:69:cf:fa:30:b7:6c:90:e4:61:20:27:0b: 89:ab:e9:5f:df:73:47:6b:dd:e6:85:5e:b1:82:db: 8f:5e:83:2e:11:03:3a:0a:04:04:b4:1f:0c:a9:c0: 3a:76:b0:eb:8e:7a:0c:c7:d2:9d:af:dc:6c:2f:fb: b8:06:a3:05:95:7c:10:5e:74:3b:92:98:d2:f6:26: 70:b0:ee:dc:c7:4a:68:66:ec:05:1c:70:cb:7b:2f: 10:da:b3:9c:e7:eb:10:18:d3:72:b2:ec:ca:b6:4f: c3:54:e4:c4:f3:dd:cf:34:f0:d6:c0:30:9c:ef:d7: 63:62:3b:63:c7:51:f4:b1:52:96:14:95:40:22:b2: bd:10:77:46:65:88:dc:ab:16:4e:6f:02:95:b4:9a: 8c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:97:14:27:18:DD:2C:EB:A2:4C:D6:B7:46:8B:E0:0A:BD:D4:59:73 X509v3 Authority Key Identifier: keyid:E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:05:71:43:8d:0d:af:72:8a:e6:ba:b8:a8:c9:f8:b9:3f:6e: 1c:0b:d2:22:9f:51:34:cf:fd:e8:00:d9:5e:6f:f4:11:88:dc: c3:4b:db:03:76:ca:4c:b3:d4:b8:9c:97:55:5f:8e:54:a9:1e: fe:37:53:c9:4c:18:48:26:10:3a:03:80:a5:6d:51:a4:df:03: 5e:b1:2d:8d:b0:e6:82:d0:05:a1:53:67:c5:b2:77:56:99:6c: 97:36:ce:08:23:52:60:19:32:00:46:85:a9:84:3f:97:be:94: bf:d6:3e:1c:65:82:6e:c6:e3:8f:e3:36:1e:35:04:0a:da:52: 71:78:0f:39:16:2e:aa:1c:da:f9:34:80:1a:36:c7:6a:31:54: 22:fe:7b:f0:5a:3e:07:47:f5:96:dd:b2:7e:81:d0:55:86:5b: 1e:42:aa:73:e5:77:74:37:f3:fb:4e:1c:a2:d5:67:5d:c2:60: 2f:94:ab:9e:bd:ed:e8:66:0b:91:87:f5:e0:da:bd:06:a9:44: b8:27:40:b1:38:5d:1f:b4:5a:5a:15:01:b9:eb:e1:3d:ea:9d: df:90:fc:95:16:01:86:f9:2b:b8:ed:42:60:02:9a:29:0c:0d: 9f:0d:74:9e:e9:82:bc:52:ff:58:17:48:57:3a:e3:a9:01:1c: 7a:f0:6c:e0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEFDODExMC8GA1UEBRMoRTRDNTg5Qjg5M0QyNzI4OUNGODQ2REYwNUFERkI1OTYw MzY0MjhGRDAeFw0yNTA0MjUwNjIwMzJaFw0yNTA1MDIwNjIwMzJaMBgxFjAUBgNV BAMTDTY4MGIyOWIwLTE0NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUiy3n6Iznl0PArvWwHoz0uaA/k3FdxCtGWGAbtjzui1siWYb1IeNNUDd9iZi2 6bXQ9OHBVMgGH2O5VTrs5+3lNDBWbAXNXNRiAAT6iT0QRH7uq3M+EH7GssMbZnrG IaMCC6YXhahKyJlQTmnP+jC3bJDkYSAnC4mr6V/fc0dr3eaFXrGC249egy4RAzoK BAS0HwypwDp2sOuOegzH0p2v3Gwv+7gGowWVfBBedDuSmNL2JnCw7tzHSmhm7AUc cMt7LxDas5zn6xAY03Ky7Mq2T8NU5MTz3c808NbAMJzv12NiO2PHUfSxUpYUlUAi sr0Qd0ZliNyrFk5vApW0mowHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUopcUJxjd LOuiTNa3RovgCr3UWXMwHwYDVR0jBBgwFoAU5MWJuJPSconPhG3wWt+1lgNkKP0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4QUM4L0UxMkQxMDUyQjEz QzExRUZBQUY5RDczMUM0RjlBRTAyLzVNV0p1SlBTY29uUGhHM3dXdC0xbGdOa0tQ MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNU1XSnVKUFNjb25QaEczd1d0LTFsZ05rS1AwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 QUM4L0UxMkQxMDUyQjEzQzExRUZBQUY5RDczMUM0RjlBRTAyLzVNV0p1SlBTY29u UGhHM3dXdC0xbGdOa0tQMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADAFcUONDa9yiua6uKjJ+Lk/bhwL0iKfUTTP/egA2V5v9BGI3MNL2wN2 ykyz1Licl1VfjlSpHv43U8lMGEgmEDoDgKVtUaTfA16xLY2w5oLQBaFTZ8Wyd1aZ bJc2zggjUmAZMgBGhamEP5e+lL/WPhxlgm7G44/jNh41BAraUnF4DzkWLqoc2vk0 gBo2x2oxVCL+e/BaPgdH9Zbdsn6B0FWGWx5CqnPld3Q38/tOHKLVZ13CYC+Uq569 7ehmC5GH9eDavQapRLgnQLE4XR+0WloVAbnr4T3qnd+Q/JUWAYb5K7jtQmACmikM DZ8NdJ7pgrxS/1gXSFc646kBHHrwbOA= -----END CERTIFICATE-----Generated at Sat Apr 26 12:37:30 2025 by rpki-client