$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft File: 5yN2M529XTAqWcz6d6wJzRcjlU0.mft (raw, json) Hash identifier: yP930XlgAt09epAaRcKJ0Fey3+zemxPoyHSH+RhplLE= Subject key identifier: 54:A7:59:38:6B:AE:14:24:E2:FC:34:5B:E9:6B:0A:8F:2A:D9:54:FD Authority key identifier: E7:23:76:33:9D:BD:5D:30:2A:59:CC:FA:77:AC:09:CD:17:23:95:4D Certificate issuer: /CN=A91CD60C/serialNumber=E72376339DBD5D302A59CCFA77AC09CD1723954D Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft Manifest number: 62 Signing time: Fri 25 Apr 2025 06:06:22 +0000 Manifest this update: Fri 25 Apr 2025 06:06:21 +0000 Manifest next update: Fri 02 May 2025 06:06:21 +0000 Files and hashes: 1: 5yN2M529XTAqWcz6d6wJzRcjlU0.crl (hash: jTDD1V3VKqYboFHQ6kf4IANJjjDCLU3NmU4+4KJfvgc=) 2: AC8EE79E975B11EFB1D18E82C4F9AE02.roa (hash: kMM0jFEoPR+G6/cERfYwCAE7TUEU6HaJy9v+jML5/oY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.crl rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD60C, serialNumber=E72376339DBD5D302A59CCFA77AC09CD1723954D Validity Not Before: Apr 25 06:06:21 2025 GMT Not After : May 2 06:06:21 2025 GMT Subject: CN=680b265e-a480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f9:31:8a:eb:e2:7f:ca:f4:f7:6d:f3:12:78: 42:74:d9:de:74:41:1c:01:87:b1:8f:7a:13:f0:12: ce:06:83:ac:d5:6c:cc:2e:8a:2f:28:4a:4b:dc:93: 5a:27:d0:2c:f6:d9:cc:7c:54:6b:5b:e7:aa:bd:b8: 13:cd:c0:08:a4:84:05:da:53:d6:b0:fc:86:ac:4c: 30:af:ac:7c:83:65:40:9c:5c:1f:ae:a3:e3:73:7d: ab:15:48:cf:0e:cb:45:8b:30:9b:77:9c:a0:f0:ff: 39:8d:47:51:f7:ec:ba:4b:da:54:a0:e3:6e:b4:ea: 07:08:88:9c:b1:bb:d3:c7:47:82:c3:3f:fa:78:7e: 19:b7:88:11:2f:ea:4e:f7:de:6b:bf:c0:4e:6b:34: 9a:fa:be:ae:62:3c:b0:55:bc:a2:41:04:85:98:34: d0:03:64:ac:6b:e8:7f:4a:55:0b:74:f7:66:4c:a3: 50:a1:fa:7a:93:bb:97:30:db:a1:be:c7:a5:ee:ab: 5d:29:33:b6:44:d3:e1:e7:03:75:aa:a3:37:e2:65: 23:26:40:e3:b7:4f:97:e7:40:2e:24:1f:11:82:a3: ed:53:5b:56:c9:d2:a2:3b:1a:ae:71:25:ba:e8:1b: 77:f2:67:23:9b:41:61:28:95:bf:f5:73:22:71:d5: 7f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A7:59:38:6B:AE:14:24:E2:FC:34:5B:E9:6B:0A:8F:2A:D9:54:FD X509v3 Authority Key Identifier: keyid:E7:23:76:33:9D:BD:5D:30:2A:59:CC:FA:77:AC:09:CD:17:23:95:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:84:b5:26:4a:75:ff:ff:30:f2:bf:3b:04:97:5f:2b:f3:fa: 01:f9:4e:4d:be:62:6f:0c:51:35:a5:15:c2:6a:c0:21:8f:1e: 77:2a:af:64:97:30:b9:60:b9:ee:33:b0:33:88:d9:cd:b3:f7: 92:7e:31:9a:f5:46:98:87:37:f6:14:61:dd:6c:0d:88:15:0d: 79:62:56:27:8e:fe:94:9a:79:3d:e0:9e:b6:ad:c4:53:96:4f: 16:31:27:e4:28:68:c3:a6:2f:d6:ed:e3:ab:e7:eb:a0:c8:8b: 14:62:7b:ba:c9:b1:d1:50:ae:ca:eb:ec:78:67:62:82:5e:e1: 47:d3:90:ec:f9:51:fb:1d:d3:78:6d:87:bd:bc:72:d2:59:52: 2c:34:d3:a5:6d:0d:cc:5a:07:87:d6:6e:5f:3c:c6:d4:54:e1: 3d:5e:47:b1:00:59:54:ac:bf:c7:91:08:99:8a:21:16:23:c9: 22:6c:78:20:15:fd:5a:71:f2:90:74:4e:2e:8b:50:4e:c2:6d: 97:25:01:b8:5d:b5:99:d8:66:26:64:8f:c1:88:27:6e:73:f9: f1:c5:c3:e7:24:f6:7a:59:05:f3:2a:ea:60:1e:12:e1:1d:30: 82:d4:20:95:de:51:88:37:ce:51:10:c0:17:df:bf:53:95:7e: 4c:dc:68:a9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RDYwQzExMC8GA1UEBRMoRTcyMzc2MzM5REJENUQzMDJBNTlDQ0ZBNzdBQzA5Q0Qx NzIzOTU0RDAeFw0yNTA0MjUwNjA2MjFaFw0yNTA1MDIwNjA2MjFaMBgxFjAUBgNV BAMTDTY4MGIyNjVlLWE0ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5+TGK6+J/yvT3bfMSeEJ02d50QRwBh7GPehPwEs4Gg6zVbMwuii8oSkvck1on 0Cz22cx8VGtb56q9uBPNwAikhAXaU9aw/IasTDCvrHyDZUCcXB+uo+NzfasVSM8O y0WLMJt3nKDw/zmNR1H37LpL2lSg42606gcIiJyxu9PHR4LDP/p4fhm3iBEv6k73 3mu/wE5rNJr6vq5iPLBVvKJBBIWYNNADZKxr6H9KVQt092ZMo1Ch+nqTu5cw26G+ x6Xuq10pM7ZE0+HnA3WqozfiZSMmQOO3T5fnQC4kHxGCo+1TW1bJ0qI7Gq5xJbro G3fyZyObQWEolb/1cyJx1X+hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVKdZOGuu FCTi/DRb6WsKjyrZVP0wHwYDVR0jBBgwFoAU5yN2M529XTAqWcz6d6wJzRcjlU0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNENjBDLzE4OEYxMTcyOTcz RDExRUZBNTE5NjA1OEM0RjlBRTAyLzV5TjJNNTI5WFRBcVdjejZkNndKelJjamxV MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNXlOMk01MjlYVEFxV2N6NmQ2d0p6UmNqbFUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE NjBDLzE4OEYxMTcyOTczRDExRUZBNTE5NjA1OEM0RjlBRTAyLzV5TjJNNTI5WFRB cVdjejZkNndKelJjamxVMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABKEtSZKdf//MPK/OwSXXyvz+gH5Tk2+Ym8MUTWlFcJqwCGPHncqr2SX MLlgue4zsDOI2c2z95J+MZr1RpiHN/YUYd1sDYgVDXliVieO/pSaeT3gnratxFOW TxYxJ+QoaMOmL9bt46vn66DIixRie7rJsdFQrsrr7HhnYoJe4UfTkOz5Ufsd03ht h728ctJZUiw006VtDcxaB4fWbl88xtRU4T1eR7EAWVSsv8eRCJmKIRYjySJseCAV /Vpx8pB0Ti6LUE7CbZclAbhdtZnYZiZkj8GIJ25z+fHFw+ck9npZBfMq6mAeEuEd MILUIJXeUYg3zlEQwBffv1OVfkzcaKk= -----END CERTIFICATE-----Generated at Sat Apr 26 12:35:41 2025 by rpki-client