$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.mft File: 5dmsjXWxbbnyPICt2LO72OWLaHg.mft (raw, json) Hash identifier: KYTvm/rSoOyCJr3xPR5xPqpEzdBJpeEaiQI5LTMnFIg= Subject key identifier: A3:78:C7:D0:A1:03:DB:A2:FE:93:3F:92:91:E8:B2:F2:55:70:3E:E3 Authority key identifier: E5:D9:AC:8D:75:B1:6D:B9:F2:3C:80:AD:D8:B3:BB:D8:E5:8B:68:78 Certificate issuer: /CN=A91D8400/serialNumber=E5D9AC8D75B16DB9F23C80ADD8B3BBD8E58B6878 Certificate serial: 03EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5dmsjXWxbbnyPICt2LO72OWLaHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.mft Manifest number: 03E6 Signing time: Fri 25 Apr 2025 00:18:01 +0000 Manifest this update: Fri 25 Apr 2025 00:17:59 +0000 Manifest next update: Fri 02 May 2025 00:17:59 +0000 Files and hashes: 1: 5dmsjXWxbbnyPICt2LO72OWLaHg.crl (hash: OBx22pznr6uukUAapsMc+6MTmI9WYhKz9iAwt4LZG74=) 2: 46C1646C781611ECADCDAB0EC4F9AE02.roa (hash: X0bJVDOuH3hxzxDqtFhaGE8zyPysnrk6jtT4gfdw6QQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.crl rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5dmsjXWxbbnyPICt2LO72OWLaHg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:17:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1003 (0x3eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8400, serialNumber=E5D9AC8D75B16DB9F23C80ADD8B3BBD8E58B6878 Validity Not Before: Apr 25 00:17:59 2025 GMT Not After : May 2 00:17:59 2025 GMT Subject: CN=680ad4b8-2d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:49:c4:b6:a5:86:03:ba:b9:06:d8:b6:5b:1f: 64:7a:6e:9c:cf:74:d2:17:1e:72:f5:e3:c2:e3:53: 7a:a7:51:78:6e:ab:d1:9b:1c:d8:ae:be:16:bc:19: f2:60:11:a9:e2:9d:8d:32:5e:b7:b8:70:0e:30:8b: aa:54:d5:2a:69:31:d7:25:88:c1:07:03:b7:e0:6d: 27:d7:08:7c:92:0d:83:01:e1:78:bf:db:5f:1a:25: bb:ba:84:49:6b:b9:1a:ed:4d:b3:a1:0b:b5:3f:86: bf:03:58:c5:78:4c:c2:99:76:11:8a:ea:46:3e:06: b6:9d:54:46:04:45:3c:47:97:f9:70:7e:50:93:ad: d5:51:f8:6b:13:ed:f2:8d:48:8c:68:19:f9:98:d3: 9e:48:ab:9b:33:9c:56:9a:6e:99:b8:29:b5:67:9f: 8a:1d:5e:f9:75:d3:8b:99:2a:0e:d5:06:15:0d:cd: 60:af:a0:2e:a8:7f:d1:b3:8f:e3:3d:e8:f6:c2:48: 68:ec:c7:a2:bc:f0:67:42:f3:85:96:e1:d5:14:de: c3:c4:18:a5:b1:bb:e1:3d:80:3a:43:bd:09:52:47: 6f:69:88:89:ad:bd:fb:be:97:8f:de:0d:2e:ed:4f: f5:54:71:db:7b:ff:58:b8:dc:b8:05:fe:f9:18:89: 03:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:78:C7:D0:A1:03:DB:A2:FE:93:3F:92:91:E8:B2:F2:55:70:3E:E3 X509v3 Authority Key Identifier: keyid:E5:D9:AC:8D:75:B1:6D:B9:F2:3C:80:AD:D8:B3:BB:D8:E5:8B:68:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5dmsjXWxbbnyPICt2LO72OWLaHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:e2:d1:45:2a:6c:05:b6:19:0c:7b:6e:93:eb:f9:f9:07:ea: 8e:d0:30:67:27:a2:ff:7b:11:d5:a2:c6:98:1b:fd:93:6a:71: 76:27:cb:89:40:87:5c:5d:c4:e8:5b:69:36:b7:dc:d3:33:69: e1:8e:72:71:6c:e4:18:05:78:18:39:d9:4b:b9:c3:e3:e4:8d: 9a:70:e7:e8:36:e5:20:fb:37:7d:d7:98:5a:a1:e7:c3:4a:9a: 8e:58:2d:12:be:1a:0e:72:e3:df:0d:f8:d2:bc:cc:85:d6:76: 8d:a9:fd:e4:ef:2d:b1:75:51:f5:a4:16:c7:50:b9:51:b5:8f: d0:86:51:87:9d:9f:eb:46:e2:4a:38:4e:5e:3c:13:1d:86:af: 4c:a8:fb:96:71:5c:3f:b5:84:3e:04:f4:da:ac:32:18:2c:77: 1a:7d:32:bf:af:30:df:ab:76:35:84:3c:f5:7d:69:6c:98:b2: d4:a7:b3:bf:3e:50:24:2d:f5:d6:ce:65:f1:8c:95:4e:6c:1d: ac:36:e2:06:1d:77:2b:53:f3:ac:45:49:71:f6:64:28:fd:8a: e4:49:08:a9:1c:1c:ff:50:58:e2:e8:b9:1a:d2:6c:eb:aa:99: bb:85:5b:00:b8:1a:99:c1:22:d3:15:87:a6:31:10:5c:5c:fa: 96:3d:00:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg0MDAxMTAvBgNVBAUTKEU1RDlBQzhENzVCMTZEQjlGMjNDODBBREQ4QjNCQkQ4 RTU4QjY4NzgwHhcNMjUwNDI1MDAxNzU5WhcNMjUwNTAyMDAxNzU5WjAYMRYwFAYD VQQDEw02ODBhZDRiOC0yZDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUnEtqWGA7q5Bti2Wx9kem6cz3TSFx5y9ePC41N6p1F4bqvRmxzYrr4WvBny YBGp4p2NMl63uHAOMIuqVNUqaTHXJYjBBwO34G0n1wh8kg2DAeF4v9tfGiW7uoRJ a7ka7U2zoQu1P4a/A1jFeEzCmXYRiupGPga2nVRGBEU8R5f5cH5Qk63VUfhrE+3y jUiMaBn5mNOeSKubM5xWmm6ZuCm1Z5+KHV75ddOLmSoO1QYVDc1gr6AuqH/Rs4/j Pej2wkho7MeivPBnQvOFluHVFN7DxBilsbvhPYA6Q70JUkdvaYiJrb37vpeP3g0u 7U/1VHHbe/9YuNy4Bf75GIkDBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKN4x9Ch A9ui/pM/kpHosvJVcD7jMB8GA1UdIwQYMBaAFOXZrI11sW258jyArdizu9jli2h4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODQwMC9GNjgxQkJBNDc4 MTExMUVDQTM5N0QwMzRDNEY5QUUwMi81ZG1zalhXeGJibnlQSUN0MkxPNzJPV0xh SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVkbXNqWFd4YmJueVBJQ3QyTE83Mk9XTGFIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODQwMC9GNjgxQkJBNDc4MTExMUVDQTM5N0QwMzRDNEY5QUUwMi81ZG1zalhXeGJi bnlQSUN0MkxPNzJPV0xhSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA4tFFKmwFthkMe26T6/n5B+qO0DBnJ6L/exHVosaYG/2TanF2J8uJ QIdcXcToW2k2t9zTM2nhjnJxbOQYBXgYOdlLucPj5I2acOfoNuUg+zd915haoefD SpqOWC0SvhoOcuPfDfjSvMyF1naNqf3k7y2xdVH1pBbHULlRtY/QhlGHnZ/rRuJK OE5ePBMdhq9MqPuWcVw/tYQ+BPTarDIYLHcafTK/rzDfq3Y1hDz1fWlsmLLUp7O/ PlAkLfXWzmXxjJVObB2sNuIGHXcrU/OsRUlx9mQo/YrkSQipHBz/UFji6Lka0mzr qpm7hVsAuBqZwSLTFYemMRBcXPqWPQAg -----END CERTIFICATE-----Generated at Sat Apr 26 12:24:39 2025 by rpki-client