$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft File: C5I347CGtYw82c5v1JrCYffVJaM.mft (raw, json) Hash identifier: Z2qvRK+6Peycl7L4pCqJp6JTlg5VIFwCc36iwkV61gA= Subject key identifier: D9:00:A1:5B:F0:DD:3F:DE:AE:63:F7:33:C1:79:BF:0D:74:55:18:5C Authority key identifier: 0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3 Certificate issuer: /CN=A91F08FA/serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft Manifest number: 2C Signing time: Sun 27 Apr 2025 06:32:54 +0000 Manifest this update: Sun 27 Apr 2025 06:32:54 +0000 Manifest next update: Sun 04 May 2025 06:32:54 +0000 Files and hashes: 1: C5I347CGtYw82c5v1JrCYffVJaM.crl (hash: CPZsZncopSfLuOqVCrVdkiTGG6a88SEAKIvdRg70nWw=) 2: B4F27262FA2911EFA783CE2DC4F9AE02.roa (hash: bP9/t2AlBY53g2t6Q5eQ3rldZs73eo2gwKpDvHbyV4Y=) 3: 9C9C1046F7CD11EF9245601CC4F9AE02.roa (hash: DqTJbrCn4Uj3CYLjBwjQvRunEdKhXtsy8A7Y63yZ9r4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 06:32:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F08FA, serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3 Validity Not Before: Apr 27 06:32:54 2025 GMT Not After : May 4 06:32:54 2025 GMT Subject: CN=680dcf96-0866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4a:27:5a:a9:b2:03:13:72:10:f2:3f:0c:6c: 69:1a:6d:82:cc:01:1e:cf:78:a4:03:8b:c1:97:6f: cf:b7:2c:be:18:b6:88:50:f4:05:eb:cd:6c:6c:5b: df:5c:11:87:70:63:0b:e7:04:77:61:e6:f0:3c:c8: ca:2f:34:88:e7:1b:f0:e6:bc:7b:44:25:74:ea:9c: 43:07:ef:01:8f:f6:7f:6e:68:bb:24:cf:53:61:ab: d5:fa:60:e6:61:be:d7:68:a7:57:2b:7f:cb:89:57: 3a:e3:f5:b1:af:e4:36:fc:10:49:dd:bd:f8:e4:93: 5f:6f:74:40:5e:65:91:91:5f:62:30:5e:3b:e6:f2: 89:06:93:ca:f6:a4:fc:51:4c:7c:25:b1:98:49:b1: c7:7d:d3:7d:5d:42:60:e5:58:1a:1e:92:be:5e:75: 92:19:00:e6:81:ee:8e:28:15:74:7d:24:e4:dc:4d: 51:9b:38:77:f5:72:e3:2c:d1:e9:bc:02:ed:cb:d8: a2:a3:3c:46:73:1f:02:ec:5c:6b:87:81:63:31:ac: 3d:1b:66:1b:3c:c2:88:16:92:29:86:88:c4:a1:56: 74:6c:4f:35:f0:1f:a2:e5:a5:1d:01:2b:3e:b8:d7: 3c:82:33:3f:fb:c6:58:43:dd:3e:92:8c:0c:0f:94: 33:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:00:A1:5B:F0:DD:3F:DE:AE:63:F7:33:C1:79:BF:0D:74:55:18:5C X509v3 Authority Key Identifier: keyid:0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:c6:6d:d7:9f:94:e5:0c:da:04:f8:56:16:1b:95:4d:9a:8d: 60:f8:90:9c:ab:66:cf:e4:a7:06:53:78:cb:4d:a0:47:38:e9: 94:5d:d6:11:51:6c:95:70:75:18:22:ac:a3:bf:26:00:cd:32: 6e:83:42:ea:74:0a:c9:74:74:74:8b:ea:f7:bd:7e:c1:6a:1c: a4:f7:72:ad:73:2e:06:52:73:af:02:1f:e1:ca:88:b1:19:e0: cc:fa:91:03:ca:f1:a0:b9:a2:ed:87:a6:c8:cc:f9:35:15:ff: bb:bb:76:63:f1:be:45:a8:1e:70:ea:f4:05:0b:c3:6c:b5:03: a8:88:d9:ce:2f:bf:17:e1:4c:7c:4a:2d:28:c2:84:c2:57:18: f7:c1:5a:d3:17:23:fb:38:f7:1c:7e:93:cb:db:ae:0e:ad:9d: e1:5d:b0:e8:9f:af:8b:af:d6:66:79:e0:ad:65:ea:c7:31:4f: 7a:44:36:cf:10:a4:99:8a:5a:0a:f7:6e:ac:62:3a:0c:c8:11: 70:4d:24:eb:e8:53:1c:8f:5f:76:2d:39:d7:5a:19:d8:e0:ff: 7d:7e:c9:d9:47:6e:6e:11:59:f0:5e:51:1b:4b:c9:ff:cd:33: a0:7e:5c:f5:cf:b0:12:64:29:93:bf:c2:4c:73:a0:63:6a:b4: 70:25:6c:0d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDhGQTExMC8GA1UEBRMoMEI5MjM3RTNCMDg2QjU4QzNDRDlDRTZGRDQ5QUMyNjFG N0Q1MjVBMzAeFw0yNTA0MjcwNjMyNTRaFw0yNTA1MDQwNjMyNTRaMBgxFjAUBgNV BAMTDTY4MGRjZjk2LTA4NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMSidaqbIDE3IQ8j8MbGkabYLMAR7PeKQDi8GXb8+3LL4YtohQ9AXrzWxsW99c EYdwYwvnBHdh5vA8yMovNIjnG/DmvHtEJXTqnEMH7wGP9n9uaLskz1Nhq9X6YOZh vtdop1crf8uJVzrj9bGv5Db8EEndvfjkk19vdEBeZZGRX2IwXjvm8okGk8r2pPxR THwlsZhJscd9031dQmDlWBoekr5edZIZAOaB7o4oFXR9JOTcTVGbOHf1cuMs0em8 Au3L2KKjPEZzHwLsXGuHgWMxrD0bZhs8wogWkimGiMShVnRsTzXwH6LlpR0BKz64 1zyCMz/7xlhD3T6SjAwPlDOPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2QChW/Dd P96uY/czwXm/DXRVGFwwHwYDVR0jBBgwFoAUC5I347CGtYw82c5v1JrCYffVJaMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwOEZBL0QzN0Y2MjVDRTcz RDExRUY4QTA0NjIxN0M0RjlBRTAyL0M1STM0N0NHdFl3ODJjNXYxSnJDWWZmVkph TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQzVJMzQ3Q0d0WXc4MmM1djFKckNZZmZWSmFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw OEZBL0QzN0Y2MjVDRTczRDExRUY4QTA0NjIxN0M0RjlBRTAyL0M1STM0N0NHdFl3 ODJjNXYxSnJDWWZmVkphTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGPGbdeflOUM2gT4VhYblU2ajWD4kJyrZs/kpwZTeMtNoEc46ZRd1hFR bJVwdRgirKO/JgDNMm6DQup0Csl0dHSL6ve9fsFqHKT3cq1zLgZSc68CH+HKiLEZ 4Mz6kQPK8aC5ou2HpsjM+TUV/7u7dmPxvkWoHnDq9AULw2y1A6iI2c4vvxfhTHxK LSjChMJXGPfBWtMXI/s49xx+k8vbrg6tneFdsOifr4uv1mZ54K1l6scxT3pENs8Q pJmKWgr3bqxiOgzIEXBNJOvoUxyPX3YtOddaGdjg/31+ydlHbm4RWfBeURtLyf/N M6B+XPXPsBJkKZO/wkxzoGNqtHAlbA0= -----END CERTIFICATE-----Generated at Mon Apr 28 03:24:31 2025 by rpki-client