$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft File: 5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft (raw, json) Hash identifier: Y0716yhuIIv8psX4YH3b7PwEpejpYzn2bQ26wKTCFh8= Subject key identifier: 9E:24:A5:BE:DD:97:C3:D1:38:43:FE:BB:D8:C0:B8:1E:05:85:44:64 Authority key identifier: E4:6B:BF:01:76:89:56:E8:66:AE:C4:43:F2:BB:13:50:1F:2E:73:79 Certificate issuer: /CN=A91D9F0A/serialNumber=E46BBF01768956E866AEC443F2BB13501F2E7379 Certificate serial: 139D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft Manifest number: 1376 Signing time: Thu 24 Apr 2025 17:01:34 +0000 Manifest this update: Thu 24 Apr 2025 17:01:33 +0000 Manifest next update: Thu 01 May 2025 17:01:33 +0000 Files and hashes: 1: 5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl (hash: 6LCbrLgcFBv8sQYsugbWifNxH3eyv1znzPZEXhhntDg=) 2: 3F6E94ACF5CF11EF90104A57C4F9AE02.roa (hash: 7uQFFcgxthASWlrUTTAafSbuld5eAvVIoBe4dcMvHgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5021 (0x139d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9F0A, serialNumber=E46BBF01768956E866AEC443F2BB13501F2E7379 Validity Not Before: Apr 24 17:01:33 2025 GMT Not After : May 1 17:01:33 2025 GMT Subject: CN=680a6e6d-9820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c6:bc:2b:bd:0d:21:15:b2:1c:e5:3e:f4:91: fa:05:9b:2c:11:fe:93:2b:34:d5:ae:e4:40:99:84: c4:f0:8b:9a:c7:c8:5d:35:ee:2e:dd:ab:84:e9:ac: 5d:ab:73:ec:b0:ad:6a:7f:c3:b9:d3:5d:a9:4e:2a: cd:55:6e:45:31:55:fe:46:f0:ae:6e:56:4b:90:f0: 4f:a1:42:61:9e:9a:ad:9d:c5:45:c8:30:52:4e:cf: 60:41:b6:ea:d7:36:fb:6a:f9:38:61:6b:16:9b:62: ef:68:31:8f:0f:27:a4:0b:18:47:e2:15:7f:23:28: 59:8a:14:e5:5f:71:76:65:04:da:aa:25:31:a8:b3: 16:0d:db:91:13:24:87:4b:4e:90:41:f0:40:f4:48: eb:e0:08:34:d6:28:90:87:d6:57:fd:12:1a:a4:7d: 00:64:49:71:94:87:99:34:4f:e1:22:00:83:19:bc: 49:71:95:7f:f9:19:e1:28:04:ec:cb:d1:79:34:b0: 9e:ac:29:d0:cc:52:c6:65:13:bc:91:c3:a3:81:4e: 45:fe:78:fb:be:7f:4c:9a:72:ef:f6:2e:bb:96:b0: 4f:4e:7c:2e:db:12:6d:77:df:b1:df:fb:6c:a6:6d: 18:bd:60:c9:39:a9:0f:af:3a:69:d9:6e:9b:5f:16: c4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:24:A5:BE:DD:97:C3:D1:38:43:FE:BB:D8:C0:B8:1E:05:85:44:64 X509v3 Authority Key Identifier: keyid:E4:6B:BF:01:76:89:56:E8:66:AE:C4:43:F2:BB:13:50:1F:2E:73:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:f9:55:0c:8d:42:42:a8:2f:c6:4f:17:15:92:05:f2:3b:a9: 4e:5e:db:ec:63:00:36:1b:d7:db:f0:a0:b1:78:0a:06:cf:8f: b6:59:45:39:a8:3d:50:04:2d:d4:8e:27:dc:ea:1c:71:e6:cd: ec:d1:cf:7f:e7:4d:d5:d3:6f:71:be:75:d2:77:a4:a7:31:3c: d7:53:42:3b:29:72:b0:15:77:14:1e:74:67:09:48:65:c5:5f: 5c:60:75:a2:fd:07:4f:a1:ad:17:5d:9e:fb:ef:d5:73:84:04: 8e:6a:ff:63:4e:d6:4c:c4:39:ed:f2:4c:a5:f3:6f:41:59:74: b2:27:61:a2:78:51:84:f8:ac:81:a3:5a:51:0a:58:3e:ac:2d: e6:53:83:52:67:6b:3f:5f:01:6d:90:fd:cd:cc:93:a5:30:d6: 01:b9:10:2c:0d:a1:e1:c3:fd:29:16:76:de:2f:05:67:79:de: 99:34:43:72:26:e3:9c:c3:d9:2f:d8:e1:77:bc:47:33:c9:17: f9:52:28:e1:c0:ac:6b:41:53:ca:66:f8:21:f0:78:08:c1:67: c3:5f:d5:f7:a9:90:8b:ac:41:6e:b6:4c:af:93:8b:7d:00:41: b0:8a:2a:ff:40:0b:c4:a4:bc:3c:36:0f:26:8c:c8:d0:3a:c9: 81:cd:77:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGMEExMTAvBgNVBAUTKEU0NkJCRjAxNzY4OTU2RTg2NkFFQzQ0M0YyQkIxMzUw MUYyRTczNzkwHhcNMjUwNDI0MTcwMTMzWhcNMjUwNTAxMTcwMTMzWjAYMRYwFAYD VQQDEw02ODBhNmU2ZC05ODIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwca8K70NIRWyHOU+9JH6BZssEf6TKzTVruRAmYTE8Iuax8hdNe4u3auE6axd q3PssK1qf8O5012pTirNVW5FMVX+RvCublZLkPBPoUJhnpqtncVFyDBSTs9gQbbq 1zb7avk4YWsWm2LvaDGPDyekCxhH4hV/IyhZihTlX3F2ZQTaqiUxqLMWDduREySH S06QQfBA9Ejr4Ag01iiQh9ZX/RIapH0AZElxlIeZNE/hIgCDGbxJcZV/+RnhKATs y9F5NLCerCnQzFLGZRO8kcOjgU5F/nj7vn9MmnLv9i67lrBPTnwu2xJtd9+x3/ts pm0YvWDJOakPrzpp2W6bXxbEcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4kpb7d l8PROEP+u9jAuB4FhURkMB8GA1UdIwQYMBaAFORrvwF2iVboZq7EQ/K7E1AfLnN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUYwQS9FODYwMjFENkEy M0MxMUU4OEE2RkU2NkNDNEY5QUUwMi81R3VfQVhhSlZ1aG1yc1JEOHJzVFVCOHVj M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVHdV9BWGFKVnVobXJzUkQ4cnNUVUI4dWMzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUYwQS9FODYwMjFENkEyM0MxMUU4OEE2RkU2NkNDNEY5QUUwMi81R3VfQVhhSlZ1 aG1yc1JEOHJzVFVCOHVjM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI+VUMjUJCqC/GTxcVkgXyO6lOXtvsYwA2G9fb8KCxeAoGz4+2WUU5 qD1QBC3Ujifc6hxx5s3s0c9/503V029xvnXSd6SnMTzXU0I7KXKwFXcUHnRnCUhl xV9cYHWi/QdPoa0XXZ7779VzhASOav9jTtZMxDnt8kyl829BWXSyJ2GieFGE+KyB o1pRClg+rC3mU4NSZ2s/XwFtkP3NzJOlMNYBuRAsDaHhw/0pFnbeLwVned6ZNENy JuOcw9kv2OF3vEczyRf5UijhwKxrQVPKZvgh8HgIwWfDX9X3qZCLrEFutkyvk4t9 AEGwiir/QAvEpLw8Ng8mjMjQOsmBzXda -----END CERTIFICATE-----Generated at Sat Apr 26 05:13:45 2025 by rpki-client