$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft File: r5ACm-EBySLPz0vRRdevHcZA5eA.mft (raw, json) Hash identifier: 1DIkSOvXWWQqHZMO98l1jhCM2MewQwzg5y8c/ByS9zo= Subject key identifier: D4:DA:8C:9A:10:74:27:8B:33:55:BB:9B:C4:88:FB:95:02:A6:D7:97 Authority key identifier: AF:90:02:9B:E1:01:C9:22:CF:CF:4B:D1:45:D7:AF:1D:C6:40:E5:E0 Certificate issuer: /CN=A91D2646/serialNumber=AF90029BE101C922CFCF4BD145D7AF1DC640E5E0 Certificate serial: 09DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft Manifest number: 09D4 Signing time: Thu 24 Apr 2025 19:50:10 +0000 Manifest this update: Thu 24 Apr 2025 19:50:09 +0000 Manifest next update: Thu 01 May 2025 19:50:09 +0000 Files and hashes: 1: r5ACm-EBySLPz0vRRdevHcZA5eA.crl (hash: XWgZFpjCv53kd56j6VqUbXTxIy4lPOTft5B/BmJWvnM=) 2: EE675FC27BED11EABD4A3A27C4F9AE02.roa (hash: AgjaL53ax01ov0J7/NtNC0271FAg3f2kxQ+XWNRqNo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.crl rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2525 (0x9dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2646, serialNumber=AF90029BE101C922CFCF4BD145D7AF1DC640E5E0 Validity Not Before: Apr 24 19:50:09 2025 GMT Not After : May 1 19:50:09 2025 GMT Subject: CN=680a95f1-f33b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:18:06:75:a1:fd:c0:a1:91:ba:81:a2:80:aa: be:da:ef:f0:22:52:12:a5:5a:98:72:de:00:f2:f9: 79:9f:18:12:ee:7d:a7:12:a5:d7:b6:d6:78:f8:8f: cd:d7:10:f7:2f:ab:17:80:ec:c4:5a:b4:b7:22:b7: 99:fa:3c:15:f9:83:ac:6d:a0:f3:33:5c:f5:20:35: 66:6d:ed:20:39:dd:fb:d9:2d:fd:9e:5e:12:e2:42: d3:d4:3c:4a:03:05:5f:47:c0:ec:25:6d:6c:f9:38: f4:90:71:ad:4a:bf:50:ad:23:8c:9f:46:1d:ac:7a: f2:c8:bc:92:be:cc:5b:56:bd:f6:a6:db:39:f5:a7: 06:af:81:fe:4d:35:3e:d5:fd:eb:4d:3e:93:9a:e7: a9:46:25:96:fd:3f:c7:2d:d8:7d:c7:46:7d:f6:1a: 2c:f1:15:75:05:fc:32:20:90:b1:a3:78:c6:47:ff: 8d:f8:7e:fe:e9:9f:e0:a9:7e:7b:bc:ae:f8:92:fc: 1f:bf:93:84:39:14:76:18:38:70:e1:e2:4d:c7:b0: 79:6d:40:dc:8b:2f:b5:64:50:a9:88:ca:50:41:07: fa:de:79:34:a1:f4:3d:73:b4:69:7b:bf:a7:67:40: 1a:12:e0:4e:f0:c6:bf:d3:69:ec:1a:f2:55:1c:fd: fd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:DA:8C:9A:10:74:27:8B:33:55:BB:9B:C4:88:FB:95:02:A6:D7:97 X509v3 Authority Key Identifier: keyid:AF:90:02:9B:E1:01:C9:22:CF:CF:4B:D1:45:D7:AF:1D:C6:40:E5:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:72:06:9e:05:da:aa:5c:fb:cb:c4:74:47:5b:03:15:38:4e: a0:64:c5:d8:e3:b5:a8:ec:35:1b:65:1c:c5:e5:8d:b9:e1:66: 0f:2a:e7:65:6b:72:f7:46:22:53:54:bc:4f:2d:58:82:b5:52: 4c:11:01:66:80:9f:89:20:cf:8a:70:d9:02:9f:50:4a:1a:98: b9:3d:21:1c:bc:6b:28:bd:55:fb:4a:1a:8b:d3:48:0d:ad:71: 62:75:b9:da:f2:6e:57:05:70:b0:fd:31:a0:e1:cf:a2:d6:46: fc:8f:27:96:8d:ec:24:3f:2b:53:60:39:7d:62:5a:e1:8d:a7: c0:c3:d4:f6:59:64:5f:13:f0:b5:de:21:fd:ef:97:ef:f9:cc: 22:cc:13:28:d5:11:b8:36:75:54:db:22:ac:6e:7c:52:f6:1b: 51:e0:26:41:b0:42:95:5a:2a:fd:7c:f1:6f:a0:92:dc:14:fe: db:4d:5f:87:11:59:2e:ee:08:b1:99:5d:f1:9f:48:fe:ee:96: df:31:03:0b:bf:fb:dd:81:f2:d5:17:3f:3e:5b:b9:73:fe:19: 28:72:11:ee:4b:78:bc:80:2b:8e:3e:79:94:98:3d:23:fe:1e: e1:51:44:b4:8f:c1:71:ce:90:24:0a:f9:4d:e8:11:83:b3:71: fb:ed:81:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2NDYxMTAvBgNVBAUTKEFGOTAwMjlCRTEwMUM5MjJDRkNGNEJEMTQ1RDdBRjFE QzY0MEU1RTAwHhcNMjUwNDI0MTk1MDA5WhcNMjUwNTAxMTk1MDA5WjAYMRYwFAYD VQQDEw02ODBhOTVmMS1mMzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxgGdaH9wKGRuoGigKq+2u/wIlISpVqYct4A8vl5nxgS7n2nEqXXttZ4+I/N 1xD3L6sXgOzEWrS3IreZ+jwV+YOsbaDzM1z1IDVmbe0gOd372S39nl4S4kLT1DxK AwVfR8DsJW1s+Tj0kHGtSr9QrSOMn0YdrHryyLySvsxbVr32pts59acGr4H+TTU+ 1f3rTT6TmuepRiWW/T/HLdh9x0Z99hos8RV1BfwyIJCxo3jGR/+N+H7+6Z/gqX57 vK74kvwfv5OEORR2GDhw4eJNx7B5bUDciy+1ZFCpiMpQQQf63nk0ofQ9c7Rpe7+n Z0AaEuBO8Ma/02nsGvJVHP392wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTajJoQ dCeLM1W7m8SI+5UCpteXMB8GA1UdIwQYMBaAFK+QApvhAckiz89L0UXXrx3GQOXg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjY0Ni9EMjAzN0QxMjdC RUMxMUVBQTlBNkM3MjVDNEY5QUUwMi9yNUFDbS1FQnlTTFB6MHZSUmRldkhjWkE1 ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I1QUNtLUVCeVNMUHowdlJSZGV2SGNaQTVlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjY0Ni9EMjAzN0QxMjdCRUMxMUVBQTlBNkM3MjVDNEY5QUUwMi9yNUFDbS1FQnlT TFB6MHZSUmRldkhjWkE1ZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCscgaeBdqqXPvLxHRHWwMVOE6gZMXY47Wo7DUbZRzF5Y254WYPKudl a3L3RiJTVLxPLViCtVJMEQFmgJ+JIM+KcNkCn1BKGpi5PSEcvGsovVX7ShqL00gN rXFidbna8m5XBXCw/TGg4c+i1kb8jyeWjewkPytTYDl9YlrhjafAw9T2WWRfE/C1 3iH975fv+cwizBMo1RG4NnVU2yKsbnxS9htR4CZBsEKVWir9fPFvoJLcFP7bTV+H EVku7gixmV3xn0j+7pbfMQMLv/vdgfLVFz8+W7lz/hkochHuS3i8gCuOPnmUmD0j /h7hUUS0j8FxzpAkCvlN6BGDs3H77YHJ -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:59 2025 by rpki-client