$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft File: x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft (raw, json) Hash identifier: h+RBTmfsbT5IaPUQ/4FZgH6/QSt779RU1GUTYM0mOws= Subject key identifier: 21:0D:07:AA:67:BB:C3:7F:E2:E7:6C:68:E8:A6:22:D4:9F:E5:B4:F9 Authority key identifier: C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9 Certificate issuer: /CN=A91E01B2/serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9 Certificate serial: 0351 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft Manifest number: 0347 Signing time: Fri 25 Apr 2025 00:48:16 +0000 Manifest this update: Fri 25 Apr 2025 00:48:15 +0000 Manifest next update: Fri 02 May 2025 00:48:15 +0000 Files and hashes: 1: x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl (hash: 6LXz1MJh0Rmtwoi4n/s+O0/c6WdeLuVlAcZKKRGUFZQ=) 2: A8E34E9CB66611ECAF76DA4CC4F9AE02.roa (hash: 3ltUc1MRVqJi3SEeMGw79iaqCBtkg84cqJVUr/o1VYA=) 3: A9906244B66611ECAF76DA4CC4F9AE02.roa (hash: Amk0fNoLVyq/V0Aumz+LOy4QbvlRWTIXw8dCA9q0zmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:48:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 849 (0x351) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01B2, serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9 Validity Not Before: Apr 25 00:48:15 2025 GMT Not After : May 2 00:48:15 2025 GMT Subject: CN=680adbd0-263e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:46:dc:6e:8d:77:c7:13:47:3a:93:6c:5e:9a: 0e:44:e6:f5:36:89:6d:b0:40:f8:fb:0f:60:53:8d: 5b:33:c9:c5:81:fb:1a:1f:b5:46:d2:8a:f9:03:9d: 7a:ec:30:53:ee:70:df:10:af:04:75:0c:1a:ca:6b: a5:89:8f:4e:ae:81:33:91:81:ea:18:a0:a5:1e:0d: 52:4f:0e:4b:d4:9a:81:de:c7:80:cf:70:8d:87:ca: 36:86:5e:c0:3f:c1:9b:c1:a2:97:8c:8c:82:0a:f0: d3:66:2a:50:a2:c7:ca:49:8e:93:c8:b6:de:ee:2c: f5:38:29:fe:86:2c:83:59:7a:1d:6e:a2:d5:6b:6e: 43:57:ad:1e:c8:a6:89:cf:d6:71:b3:20:70:8b:eb: f1:a5:38:aa:b9:7e:34:3f:c8:96:99:5b:a4:f9:2f: 02:47:b9:e6:6c:35:5d:4e:9d:2e:81:f4:a9:99:69: e5:56:6d:df:f9:f2:0d:0d:5d:aa:01:8d:86:f7:4e: b3:38:f8:59:54:00:ce:70:2f:17:2d:ff:b2:c8:4f: 95:b2:c5:a4:17:9a:ce:ee:95:0e:a3:55:dc:6a:1c: 7f:48:28:3d:73:21:82:94:22:e8:f4:d2:c9:48:af: 70:41:74:4d:69:67:62:c7:41:59:c9:06:73:82:c4: a5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:0D:07:AA:67:BB:C3:7F:E2:E7:6C:68:E8:A6:22:D4:9F:E5:B4:F9 X509v3 Authority Key Identifier: keyid:C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:f1:cf:e7:00:c9:b3:95:58:7b:70:e5:11:63:8f:15:32:d2: a9:e6:c3:fe:3e:3b:25:5d:50:03:9c:20:e3:db:50:f8:7d:38: 44:d0:4f:44:6f:18:91:fe:d1:c3:6a:58:0f:7e:1f:01:89:24: f2:47:8c:27:02:5f:be:c8:20:22:46:58:9c:3f:71:31:9e:cb: 5c:53:4b:59:ad:99:90:f2:57:10:c2:ea:c1:75:1b:80:54:5f: 18:a8:d1:4a:80:78:53:71:d8:76:d6:9d:b3:cd:40:ae:a6:9c: 8a:6c:bd:95:30:68:01:4f:02:b6:d4:de:2f:e5:8f:3f:a6:28: 4d:0b:ed:d4:3d:4b:6e:1f:4e:e0:9f:4f:b0:de:8c:23:41:d2: d0:0f:65:8b:08:aa:67:fb:bb:ed:61:b6:db:52:85:47:e2:46: f9:f3:8d:f2:e4:95:14:52:f5:67:19:db:fe:0d:ed:3b:fe:4a: 56:dd:05:10:0c:73:9d:f7:fc:0e:3a:2f:ec:91:bb:9e:95:9f: f1:3f:90:49:6c:b2:a7:50:ff:d5:d7:a2:d6:4c:d5:fa:84:6d: 44:cd:df:0f:57:ac:9a:c8:12:56:29:77:3b:bf:03:1b:0d:02: 32:ee:dd:40:da:65:15:51:2f:88:56:e5:51:8a:f0:68:e9:ab: 92:fe:7c:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxQjIxMTAvBgNVBAUTKEM3RTU3OTBCMDVFMEQ0RDIwOURCNDNEQzY4MEZCNzg4 Mjc5ODE0QTkwHhcNMjUwNDI1MDA0ODE1WhcNMjUwNTAyMDA0ODE1WjAYMRYwFAYD VQQDEw02ODBhZGJkMC0yNjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUbcbo13xxNHOpNsXpoOROb1NoltsED4+w9gU41bM8nFgfsaH7VG0or5A516 7DBT7nDfEK8EdQwaymuliY9OroEzkYHqGKClHg1STw5L1JqB3seAz3CNh8o2hl7A P8GbwaKXjIyCCvDTZipQosfKSY6TyLbe7iz1OCn+hiyDWXodbqLVa25DV60eyKaJ z9ZxsyBwi+vxpTiquX40P8iWmVuk+S8CR7nmbDVdTp0ugfSpmWnlVm3f+fINDV2q AY2G906zOPhZVADOcC8XLf+yyE+VssWkF5rO7pUOo1Xcahx/SCg9cyGClCLo9NLJ SK9wQXRNaWdix0FZyQZzgsSlTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCENB6pn u8N/4udsaOimItSf5bT5MB8GA1UdIwQYMBaAFMfleQsF4NTSCdtD3GgPt4gnmBSp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFCMi82REU5RjQxMEI2 NjMxMUVDOEQ1NEE0NDlDNEY5QUUwMi94LVY1Q3dYZzFOSUoyMFBjYUEtM2lDZVlG S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gtVjVDd1hnMU5JSjIwUGNhQS0zaUNlWUZLay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFCMi82REU5RjQxMEI2NjMxMUVDOEQ1NEE0NDlDNEY5QUUwMi94LVY1Q3dYZzFO SUoyMFBjYUEtM2lDZVlGS2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt8c/nAMmzlVh7cOURY48VMtKp5sP+PjslXVADnCDj21D4fThE0E9E bxiR/tHDalgPfh8BiSTyR4wnAl++yCAiRlicP3ExnstcU0tZrZmQ8lcQwurBdRuA VF8YqNFKgHhTcdh21p2zzUCuppyKbL2VMGgBTwK21N4v5Y8/pihNC+3UPUtuH07g n0+w3owjQdLQD2WLCKpn+7vtYbbbUoVH4kb5843y5JUUUvVnGdv+De07/kpW3QUQ DHOd9/wOOi/skbuelZ/xP5BJbLKnUP/V16LWTNX6hG1Ezd8PV6yayBJWKXc7vwMb DQIy7t1A2mUVUS+IVuVRivBo6auS/nze -----END CERTIFICATE-----Generated at Sat Apr 26 04:26:38 2025 by rpki-client