$ rpki-client -vvf rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.mft File: s5m0raB1Aagp1W8h2o613DIDSlY.mft (raw, json) Hash identifier: pGaSoI4qeh+I2FQRuexydVdRygUwWro6+Qpc/jmg98E= Subject key identifier: DB:A2:91:9D:E7:4A:40:E2:18:BB:12:2C:87:1E:22:65:7F:74:DC:48 Authority key identifier: B3:99:B4:AD:A0:75:01:A8:29:D5:6F:21:DA:8E:B5:DC:32:03:4A:56 Certificate issuer: /CN=A91D98FC/serialNumber=B399B4ADA07501A829D56F21DA8EB5DC32034A56 Certificate serial: 0C9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5m0raB1Aagp1W8h2o613DIDSlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.mft Manifest number: 0C8E Signing time: Thu 24 Apr 2025 18:10:38 +0000 Manifest this update: Thu 24 Apr 2025 18:10:37 +0000 Manifest next update: Thu 01 May 2025 18:10:37 +0000 Files and hashes: 1: s5m0raB1Aagp1W8h2o613DIDSlY.crl (hash: uUHnuUKo0XGGYak4VwPoLFqQPCDVYRZeBeIQdgxly+0=) 2: 238AAE04B3CD11EF82D5B34FC4F9AE02.roa (hash: Vh7yMYlqWkmmCVoJUzEKALaYDnLO+UKuaoILrbL+tGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.crl rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5m0raB1Aagp1W8h2o613DIDSlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3228 (0xc9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D98FC, serialNumber=B399B4ADA07501A829D56F21DA8EB5DC32034A56 Validity Not Before: Apr 24 18:10:37 2025 GMT Not After : May 1 18:10:37 2025 GMT Subject: CN=680a7e9e-cced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9c:71:d9:f2:87:ed:ee:8c:f2:50:09:95:8d: c9:5e:a6:1a:c2:9a:ec:60:80:71:b0:bb:82:ea:64: 59:91:7f:6e:32:85:37:c1:43:d5:3d:16:6e:12:21: 22:8b:7f:56:e2:0b:f3:24:45:54:ab:06:c8:0a:51: 9d:a9:f2:e8:11:b7:44:73:30:c5:0d:00:be:55:23: 7c:7c:cc:dd:e0:f2:31:d1:57:c5:87:09:e8:15:24: c0:04:f9:ea:38:77:8a:a5:8f:92:7b:dd:5b:90:27: ca:0a:7e:cc:21:78:8d:e6:62:1d:8b:64:6a:18:de: 33:0c:fd:a7:58:a3:3f:8e:d9:31:b8:96:26:21:69: e5:6c:a9:20:1e:77:e6:75:ee:1f:ed:c7:3c:3a:94: c8:dd:21:54:bf:64:47:10:01:2e:95:50:ea:33:73: 08:cd:14:91:23:02:34:c8:c8:32:99:a4:c5:03:af: b8:ba:ac:ab:da:6a:8b:98:de:6d:a8:ee:f4:24:2e: 51:2f:40:48:00:a9:f8:67:62:a5:35:98:a8:c9:18: b3:79:e3:b1:b6:88:e1:f1:ef:68:d3:26:c6:1a:4c: 2c:84:01:5f:4c:45:48:e6:75:4a:df:a8:e5:5b:01: 54:63:91:87:b5:6a:5e:b4:db:40:87:d9:ce:be:e2: 9b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A2:91:9D:E7:4A:40:E2:18:BB:12:2C:87:1E:22:65:7F:74:DC:48 X509v3 Authority Key Identifier: keyid:B3:99:B4:AD:A0:75:01:A8:29:D5:6F:21:DA:8E:B5:DC:32:03:4A:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5m0raB1Aagp1W8h2o613DIDSlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:cf:eb:b5:6f:12:07:09:d4:df:6b:9f:21:63:16:fa:bd:c2: c0:8d:81:83:31:d4:ad:cb:95:d8:91:de:ac:54:a8:3f:69:0f: 94:10:62:69:95:e1:c4:9e:0e:c5:97:1a:7a:dc:48:17:a6:16: 2c:43:6f:8d:78:f0:fe:d4:0f:48:21:8a:67:05:e5:9c:05:10: 73:d9:ae:ad:a0:bd:68:9d:f8:f9:85:c0:1f:bc:b7:0d:6d:9d: 2a:46:5f:2a:d4:77:f9:3e:44:37:04:b4:1a:19:df:4f:78:5e: 36:43:fd:24:b0:93:40:62:58:8d:42:98:53:42:c6:50:72:a2: 03:5f:27:8d:00:be:f0:49:ea:c4:43:c7:af:46:27:80:c7:ef: 94:a0:26:91:3e:74:cf:07:25:77:9e:62:cc:44:48:d0:b1:63: 84:19:c8:f5:5b:97:f4:de:ef:0e:de:1f:d0:fb:1d:07:88:cf: 7d:98:b5:09:96:bc:08:cb:58:ac:b6:7f:6e:2e:e2:32:5b:6b: 75:37:08:e4:e7:1e:ae:dd:65:9e:6c:38:d4:2f:2c:f4:87:ea: e3:7e:ae:ad:92:dd:c5:2e:2e:bf:98:98:26:b1:9d:90:6d:fd: 48:74:89:01:2b:d9:1d:9e:13:c9:60:93:97:9c:f0:ed:cb:6f: 8d:0f:6b:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk4RkMxMTAvBgNVBAUTKEIzOTlCNEFEQTA3NTAxQTgyOUQ1NkYyMURBOEVCNURD MzIwMzRBNTYwHhcNMjUwNDI0MTgxMDM3WhcNMjUwNTAxMTgxMDM3WjAYMRYwFAYD VQQDEw02ODBhN2U5ZS1jY2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5xx2fKH7e6M8lAJlY3JXqYawprsYIBxsLuC6mRZkX9uMoU3wUPVPRZuEiEi i39W4gvzJEVUqwbIClGdqfLoEbdEczDFDQC+VSN8fMzd4PIx0VfFhwnoFSTABPnq OHeKpY+Se91bkCfKCn7MIXiN5mIdi2RqGN4zDP2nWKM/jtkxuJYmIWnlbKkgHnfm de4f7cc8OpTI3SFUv2RHEAEulVDqM3MIzRSRIwI0yMgymaTFA6+4uqyr2mqLmN5t qO70JC5RL0BIAKn4Z2KlNZioyRizeeOxtojh8e9o0ybGGkwshAFfTEVI5nVK36jl WwFUY5GHtWpetNtAh9nOvuKb/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNuikZ3n SkDiGLsSLIceImV/dNxIMB8GA1UdIwQYMBaAFLOZtK2gdQGoKdVvIdqOtdwyA0pW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOThGQy8xQzg5OUUyNkY0 RUMxMUU5OEZCRTlCMEZDNEY5QUUwMi9zNW0wcmFCMUFhZ3AxVzhoMm82MTNESURT bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M1bTByYUIxQWFncDFXOGgybzYxM0RJRFNsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OThGQy8xQzg5OUUyNkY0RUMxMUU5OEZCRTlCMEZDNEY5QUUwMi9zNW0wcmFCMUFh Z3AxVzhoMm82MTNESURTbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbz+u1bxIHCdTfa58hYxb6vcLAjYGDMdSty5XYkd6sVKg/aQ+UEGJp leHEng7Flxp63EgXphYsQ2+NePD+1A9IIYpnBeWcBRBz2a6toL1onfj5hcAfvLcN bZ0qRl8q1Hf5PkQ3BLQaGd9PeF42Q/0ksJNAYliNQphTQsZQcqIDXyeNAL7wSerE Q8evRieAx++UoCaRPnTPByV3nmLMREjQsWOEGcj1W5f03u8O3h/Q+x0HiM99mLUJ lrwIy1istn9uLuIyW2t1Nwjk5x6u3WWebDjULyz0h+rjfq6tkt3FLi6/mJgmsZ2Q bf1IdIkBK9kdnhPJYJOXnPDty2+ND2sy -----END CERTIFICATE-----Generated at Sat Apr 26 05:20:11 2025 by rpki-client