$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft File: 5Acguik7ryW8Chd4xlzw0uDzUWA.mft (raw, json) Hash identifier: BB/a5nyUIKLRgVJzwhvKTv6l7xjOU0hLsAxvqRjp5Fc= Subject key identifier: 21:52:7E:DB:28:83:86:91:A7:61:F9:59:F8:9C:63:A6:0B:5E:41:A4 Authority key identifier: E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60 Certificate issuer: /CN=A91EF35B/serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160 Certificate serial: 0464 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft Manifest number: 044B Signing time: Fri 25 Apr 2025 00:02:50 +0000 Manifest this update: Fri 25 Apr 2025 00:02:49 +0000 Manifest next update: Fri 02 May 2025 00:02:49 +0000 Files and hashes: 1: 5Acguik7ryW8Chd4xlzw0uDzUWA.crl (hash: j3W104NwQBQdywDkf07TmTko+wHXGhOw2lnzKMVx/3A=) 2: 859B9868927E11EEB878AA50C4F9AE02.roa (hash: ZCpdqccvGNQRvKgyIaRry+OF/s1VpSriPxxNhei30Yk=) 3: 0BFA0C9C927E11EEA47AD74FC4F9AE02.roa (hash: JbuO9QygXZWdecTCM5Sf89ukRTRQrSasLXKuG+IV9QE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1124 (0x464) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF35B, serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160 Validity Not Before: Apr 25 00:02:49 2025 GMT Not After : May 2 00:02:49 2025 GMT Subject: CN=680ad12a-1e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:39:fd:ac:b1:1f:9f:25:25:70:a7:96:be:ab: 90:53:11:4d:25:6f:f0:5c:73:e7:ad:ed:10:6c:cd: 8f:9e:1c:87:3d:4a:d5:27:a7:c5:9c:35:6f:2b:74: bc:ba:cc:96:00:47:79:cf:4a:98:a9:cd:54:4e:13: f5:ce:8e:73:04:83:60:c8:98:66:29:85:f5:9b:c8: 27:b8:fd:64:87:35:58:d5:30:aa:11:11:66:23:8f: 1e:0b:ba:b1:15:7a:15:47:24:27:79:8d:37:cd:fa: 9d:75:8c:f6:8b:4d:49:33:f5:39:fb:16:48:e6:68: a3:8d:99:db:70:c4:cb:ef:a8:90:d3:be:1a:10:8f: 4c:c5:a8:08:c1:9f:02:83:d9:d5:85:f8:d6:d4:8d: 9a:af:21:32:dc:d3:00:d5:7f:9a:b0:71:3b:52:bc: c8:d3:7a:2c:ae:c6:c9:9d:b7:03:b9:50:0a:f2:70: 10:c2:77:98:13:4b:8d:b2:13:08:99:4a:04:70:16: 18:c4:4a:a6:e5:ce:f1:dd:f8:d9:7f:51:54:c8:65: 14:5f:35:10:75:bd:89:38:ac:28:85:1c:e4:f8:56: 16:45:b8:82:22:30:a4:fa:e9:0e:53:4f:6e:62:ca: 8f:d0:e4:0b:0e:c3:b7:ff:11:3e:f8:90:c8:bd:e6: 7e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:52:7E:DB:28:83:86:91:A7:61:F9:59:F8:9C:63:A6:0B:5E:41:A4 X509v3 Authority Key Identifier: keyid:E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:1f:03:3e:7e:15:67:00:2c:a8:76:1e:af:fe:f9:fd:a6:dc: 4c:6b:64:d2:8b:15:77:b7:dc:42:34:2f:29:a8:2d:a0:63:0a: 43:5d:71:21:73:73:b3:72:52:c1:58:b4:b0:3e:ed:b8:fe:36: 6a:28:4d:f8:1b:18:f5:c2:e5:10:e7:fc:ee:14:90:f9:9c:b8: 72:06:67:07:60:67:01:c5:5f:f4:cd:04:46:0e:b6:7a:9e:cf: 8b:a8:cc:d6:16:e2:a5:1d:ee:3e:fc:1b:c2:19:9c:1f:7f:0c: ec:b3:63:8b:94:7f:42:91:d9:d0:1c:d0:19:df:fc:a2:4e:5c: 3d:07:d9:43:db:fe:4e:1a:93:ac:da:26:96:e0:48:f6:94:38: cb:ce:40:5e:51:f9:96:29:c7:75:82:32:b5:cd:cb:c7:6d:f5: 7a:dd:49:e8:87:4c:a6:d8:d6:86:7f:0d:45:ec:05:75:a0:e3: 62:4f:35:27:96:5f:3a:b7:04:31:13:e3:5f:8a:0c:f4:b9:08: 4f:ce:08:c0:5e:81:9a:35:79:ca:d8:2c:2e:51:50:82:4f:c8: 0b:c9:c2:97:f6:30:2c:b4:cb:1a:c0:be:0d:b0:43:82:91:11: 7a:fb:4c:95:c2:53:cb:be:9f:c5:bd:b0:7a:bf:df:a2:df:0d: cd:7b:0f:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYzNUIxMTAvBgNVBAUTKEU0MDcyMEJBMjkzQkFGMjVCQzBBMTc3OEM2NUNGMEQy RTBGMzUxNjAwHhcNMjUwNDI1MDAwMjQ5WhcNMjUwNTAyMDAwMjQ5WjAYMRYwFAYD VQQDEw02ODBhZDEyYS0xZTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzn9rLEfnyUlcKeWvquQUxFNJW/wXHPnre0QbM2PnhyHPUrVJ6fFnDVvK3S8 usyWAEd5z0qYqc1UThP1zo5zBINgyJhmKYX1m8gnuP1khzVY1TCqERFmI48eC7qx FXoVRyQneY03zfqddYz2i01JM/U5+xZI5mijjZnbcMTL76iQ074aEI9MxagIwZ8C g9nVhfjW1I2aryEy3NMA1X+asHE7UrzI03osrsbJnbcDuVAK8nAQwneYE0uNshMI mUoEcBYYxEqm5c7x3fjZf1FUyGUUXzUQdb2JOKwohRzk+FYWRbiCIjCk+ukOU09u YsqP0OQLDsO3/xE++JDIveZ+jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCFSftso g4aRp2H5WficY6YLXkGkMB8GA1UdIwQYMBaAFOQHILopO68lvAoXeMZc8NLg81Fg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjM1Qi9FMDEwMTU4QTU2 NEUxMUVDODU4ODU5MTRDNEY5QUUwMi81QWNndWlrN3J5VzhDaGQ0eGx6dzB1RHpV V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVBY2d1aWs3cnlXOENoZDR4bHp3MHVEelVXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjM1Qi9FMDEwMTU4QTU2NEUxMUVDODU4ODU5MTRDNEY5QUUwMi81QWNndWlrN3J5 VzhDaGQ0eGx6dzB1RHpVV0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnHwM+fhVnACyodh6v/vn9ptxMa2TSixV3t9xCNC8pqC2gYwpDXXEh c3OzclLBWLSwPu24/jZqKE34Gxj1wuUQ5/zuFJD5nLhyBmcHYGcBxV/0zQRGDrZ6 ns+LqMzWFuKlHe4+/BvCGZwffwzss2OLlH9CkdnQHNAZ3/yiTlw9B9lD2/5OGpOs 2iaW4Ej2lDjLzkBeUfmWKcd1gjK1zcvHbfV63Unoh0ym2NaGfw1F7AV1oONiTzUn ll86twQxE+Nfigz0uQhPzgjAXoGaNXnK2CwuUVCCT8gLycKX9jAstMsawL4NsEOC kRF6+0yVwlPLvp/FvbB6v9+i3w3New+3 -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:51 2025 by rpki-client