$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft File: P5liYas9HvBBZhs6732JMrVwJjc.mft (raw, json) Hash identifier: tT5u7sWQ5XK9GC/+ZllQ6iulrF1puWYvU7gk1ZBaYUs= Subject key identifier: F0:A0:D8:D4:A6:0C:E6:6A:51:7A:04:B0:7B:52:3F:83:39:B7:80:5A Authority key identifier: 3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37 Certificate issuer: /CN=A91DC2A9/serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637 Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft Manifest number: 014E Signing time: Fri 25 Apr 2025 03:25:41 +0000 Manifest this update: Fri 25 Apr 2025 03:25:41 +0000 Manifest next update: Fri 02 May 2025 03:25:41 +0000 Files and hashes: 1: P5liYas9HvBBZhs6732JMrVwJjc.crl (hash: S54WT/I1o+Wt1OwEssmRufeiN/plAn7gn4PQkAeojto=) 2: 9908BDDE1CAA11EF80E3BB87C4F9AE02.roa (hash: 0UTp5Ayv/ftDBInci/moVW1XbBA3xfvlEMb4Bw4foQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC2A9, serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637 Validity Not Before: Apr 25 03:25:41 2025 GMT Not After : May 2 03:25:41 2025 GMT Subject: CN=680b00b5-d641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c4:01:01:fe:a9:75:bb:55:b0:89:f6:6a:24: e0:f8:c9:56:29:4f:5a:fd:cb:48:45:e7:ad:31:73: 86:76:2c:2d:71:de:3d:9d:51:89:87:a2:b2:d8:8f: 11:72:65:33:40:ef:6a:60:98:a9:6d:a2:08:0d:da: 05:8d:53:b7:58:bc:63:2c:ea:19:25:7a:48:02:fe: 6c:e7:a1:e5:56:75:71:c7:22:19:f2:48:ca:d8:15: 6c:18:d0:55:80:cc:f3:b0:c9:96:91:ff:9b:66:8c: c4:d5:e1:1e:14:3a:c8:dd:ea:f0:bc:a5:0d:bd:ae: 03:51:c9:f3:29:b7:d6:e8:0f:67:22:c2:a2:bc:c0: 66:f8:3d:fb:4d:dc:e2:33:ae:2c:53:2a:37:a2:45: 8d:51:2b:e0:6c:b7:2a:4f:94:2b:e2:9d:21:aa:b5: 48:5e:98:48:22:84:16:76:1d:3a:31:16:69:6d:45: 7d:59:e5:5c:56:22:51:b5:13:50:12:95:96:20:3b: 40:32:ae:5e:54:42:53:df:77:7a:3e:be:cf:79:5c: 6a:9e:29:9b:1e:7e:fa:b3:3b:a0:87:e8:d6:2d:5f: 5f:f6:6a:88:4a:9d:36:fd:59:ce:26:83:a6:f1:30: e4:86:6b:8d:d9:54:82:2d:f0:0f:e6:f6:26:9f:d3: 2b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A0:D8:D4:A6:0C:E6:6A:51:7A:04:B0:7B:52:3F:83:39:B7:80:5A X509v3 Authority Key Identifier: keyid:3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:03:46:78:cb:36:eb:47:36:77:62:22:8f:df:9c:8b:06:d7: 4a:e6:fa:59:05:5b:a8:8c:a4:fc:cd:6d:05:7b:64:c8:eb:d5: dd:78:b1:03:02:5c:00:31:b6:7a:95:3f:2d:03:cb:40:6f:de: 51:7e:63:fb:f5:cd:55:aa:8f:35:e0:c8:d4:e9:d4:cb:21:0b: 51:48:58:bc:cb:b8:d5:10:2f:66:cc:a4:13:e0:d9:36:7f:36: 8d:c7:5f:71:13:8c:05:eb:e4:b0:b1:ef:6e:b9:5e:86:26:fb: c4:af:18:49:b1:c3:5c:10:be:20:1b:ce:bd:df:03:32:7a:6e: af:2c:2d:a0:d1:f8:bb:bd:05:66:27:bb:51:e7:54:65:8b:66: cc:74:c5:a7:75:da:2c:fe:9a:b6:11:8d:44:93:cd:dc:7c:bf: e3:a8:82:76:07:2f:b6:8b:16:b4:84:36:32:2e:4c:0b:bc:dc: b6:97:1e:2d:a4:48:0a:04:57:51:4d:11:c6:76:f7:ca:86:47: e6:13:2c:63:4d:82:13:48:47:cc:5b:c3:33:97:8e:b8:50:f1: d6:4d:30:82:8a:cf:b7:f2:ff:47:3c:a7:32:ea:ab:3f:94:54: 03:99:e0:b4:4b:98:b5:93:bd:ee:32:99:d9:de:78:e8:17:a0: d8:69:33:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMyQTkxMTAvBgNVBAUTKDNGOTk2MjYxQUIzRDFFRjA0MTY2MUIzQUVGN0Q4OTMy QjU3MDI2MzcwHhcNMjUwNDI1MDMyNTQxWhcNMjUwNTAyMDMyNTQxWjAYMRYwFAYD VQQDEw02ODBiMDBiNS1kNjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMQBAf6pdbtVsIn2aiTg+MlWKU9a/ctIReetMXOGdiwtcd49nVGJh6Ky2I8R cmUzQO9qYJipbaIIDdoFjVO3WLxjLOoZJXpIAv5s56HlVnVxxyIZ8kjK2BVsGNBV gMzzsMmWkf+bZozE1eEeFDrI3erwvKUNva4DUcnzKbfW6A9nIsKivMBm+D37Tdzi M64sUyo3okWNUSvgbLcqT5Qr4p0hqrVIXphIIoQWdh06MRZpbUV9WeVcViJRtRNQ EpWWIDtAMq5eVEJT33d6Pr7PeVxqnimbHn76szugh+jWLV9f9mqISp02/VnOJoOm 8TDkhmuN2VSCLfAP5vYmn9MrUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCg2NSm DOZqUXoEsHtSP4M5t4BaMB8GA1UdIwQYMBaAFD+ZYmGrPR7wQWYbOu99iTK1cCY3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzJBOS9EOEREQzFBNjM0 QzYxMUVFQjRFQkIwNzBDNEY5QUUwMi9QNWxpWWFzOUh2QkJaaHM2NzMySk1yVndK amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A1bGlZYXM5SHZCQlpoczY3MzJKTXJWd0pqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzJBOS9EOEREQzFBNjM0QzYxMUVFQjRFQkIwNzBDNEY5QUUwMi9QNWxpWWFzOUh2 QkJaaHM2NzMySk1yVndKamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzA0Z4yzbrRzZ3YiKP35yLBtdK5vpZBVuojKT8zW0Fe2TI69XdeLED AlwAMbZ6lT8tA8tAb95RfmP79c1Vqo814MjU6dTLIQtRSFi8y7jVEC9mzKQT4Nk2 fzaNx19xE4wF6+Swse9uuV6GJvvErxhJscNcEL4gG8693wMyem6vLC2g0fi7vQVm J7tR51Rli2bMdMWnddos/pq2EY1Ek83cfL/jqIJ2By+2ixa0hDYyLkwLvNy2lx4t pEgKBFdRTRHGdvfKhkfmEyxjTYITSEfMW8Mzl464UPHWTTCCis+38v9HPKcy6qs/ lFQDmeC0S5i1k73uMpnZ3njoF6DYaTPD -----END CERTIFICATE-----Generated at Sat Apr 26 17:00:01 2025 by rpki-client