$ rpki-client -vvf rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft File: 5L99WWC2svPFIUHvK2Aq0RT0DKg.mft (raw, json) Hash identifier: +W6wvUL5LzlwU7zi7LPvTuf8jBnaEaOCFAMtIClJ6L8= Subject key identifier: FA:E3:2D:A3:94:D3:C6:69:85:54:D0:F9:31:94:D5:E8:AC:27:78:6D Authority key identifier: E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8 Certificate issuer: /CN=A91F53A5/serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8 Certificate serial: 02EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft Manifest number: 02E7 Signing time: Fri 25 Apr 2025 01:04:43 +0000 Manifest this update: Fri 25 Apr 2025 01:04:43 +0000 Manifest next update: Fri 02 May 2025 01:04:43 +0000 Files and hashes: 1: 5L99WWC2svPFIUHvK2Aq0RT0DKg.crl (hash: l2W4ppj2PsMvaaZtLFdqE7I9JXvdkPI+bY+2qYLo3iU=) 2: 99C51F96DA6D11EC86CE4D59C4F9AE02.roa (hash: JVCzZkuG4CHRB6G2oinVMp3rcx6RD2PvDmsbTNaguh8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 746 (0x2ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F53A5, serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8 Validity Not Before: Apr 25 01:04:43 2025 GMT Not After : May 2 01:04:43 2025 GMT Subject: CN=680adfab-a4f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cc:7a:80:cf:74:52:66:c6:89:6e:ab:d2:b2: ab:74:78:18:d5:3b:8a:99:e1:37:7a:fb:c3:d9:4e: 02:34:ed:86:97:5c:5e:51:94:49:35:0c:01:ed:ca: 73:34:e0:1c:61:e0:34:c9:27:6d:dc:dd:fd:e7:f0: aa:2c:7b:26:46:97:c5:f2:47:65:2a:30:7d:bf:08: 49:88:7d:20:21:57:cc:94:78:d6:7c:88:d3:b7:55: 9f:55:ed:89:b9:45:6a:9f:c1:3c:bc:67:82:9b:70: 67:ab:49:87:49:65:13:10:cc:07:a9:5b:61:2c:eb: e4:5a:32:3e:cc:e4:0c:e4:90:f5:d7:a6:1b:7d:20: 86:dc:c5:c5:e5:50:7b:f2:2a:30:4e:41:86:80:47: 63:c5:1f:7a:e6:aa:01:65:cb:21:55:6a:0f:b8:91: 17:36:e7:69:6f:52:bb:df:dd:22:09:b4:9d:9b:6f: ca:31:24:f5:35:2a:b2:8b:e2:c0:98:22:a3:83:c3: f0:15:6f:f6:4c:e5:11:47:fd:8f:c8:e8:7f:fe:af: 96:df:42:88:36:c1:3e:e0:fb:ac:99:c9:2b:4e:26: b0:88:7a:7c:6c:88:0b:b0:85:a3:9d:52:10:e8:6e: c9:f4:85:40:98:9a:dd:6c:6e:af:e4:3f:af:fe:c1: 49:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E3:2D:A3:94:D3:C6:69:85:54:D0:F9:31:94:D5:E8:AC:27:78:6D X509v3 Authority Key Identifier: keyid:E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:fe:0c:dd:07:dc:31:d2:a9:23:9e:44:f1:7d:9c:db:a9:22: d4:f9:9b:4f:f5:97:0c:32:dd:e1:bf:f6:e1:aa:2f:71:de:77: 76:42:01:e1:24:c4:ab:3d:82:de:fb:71:e8:bb:3e:ad:e4:91: d0:2f:5b:8e:c7:01:9b:aa:a6:90:d1:88:28:e6:f9:3b:fa:ce: a3:b1:b8:f9:f9:8f:42:c5:b9:8a:6d:f6:e3:fa:a3:9c:45:19: 60:b3:d0:eb:37:ac:78:15:b1:04:85:b4:ab:96:ff:72:4a:b6: 62:fb:45:8d:1d:86:ba:45:87:7e:be:bb:48:df:1b:53:a4:96: 15:16:e5:0c:d8:d8:5b:db:1b:a7:ea:dc:11:c4:6c:42:4e:e8: fc:ec:e1:70:f1:db:6e:38:60:77:a9:a6:88:92:54:30:15:95: 70:e1:73:38:95:c7:2e:ad:2c:69:03:37:1c:e7:9f:5e:61:59: e7:51:4d:9f:10:78:cd:4f:51:8f:74:7a:aa:6c:35:53:49:13: 8c:90:6f:ee:8c:b5:37:ca:19:c8:65:41:18:14:a4:42:0f:f7: 84:1e:5b:20:7e:2b:c9:a3:f7:75:63:f5:22:b1:9d:ff:d2:89: 99:07:b3:d7:63:b1:72:54:ae:14:4e:95:2b:d4:9c:d5:6b:12: ea:b8:80:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUzQTUxMTAvBgNVBAUTKEU0QkY3RDU5NjBCNkIyRjNDNTIxNDFFRjJCNjAyQUQx MTRGNDBDQTgwHhcNMjUwNDI1MDEwNDQzWhcNMjUwNTAyMDEwNDQzWjAYMRYwFAYD VQQDEw02ODBhZGZhYi1hNGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1cx6gM90UmbGiW6r0rKrdHgY1TuKmeE3evvD2U4CNO2Gl1xeUZRJNQwB7cpz NOAcYeA0ySdt3N395/CqLHsmRpfF8kdlKjB9vwhJiH0gIVfMlHjWfIjTt1WfVe2J uUVqn8E8vGeCm3Bnq0mHSWUTEMwHqVthLOvkWjI+zOQM5JD116YbfSCG3MXF5VB7 8iowTkGGgEdjxR965qoBZcshVWoPuJEXNudpb1K7390iCbSdm2/KMST1NSqyi+LA mCKjg8PwFW/2TOURR/2PyOh//q+W30KINsE+4PusmckrTiawiHp8bIgLsIWjnVIQ 6G7J9IVAmJrdbG6v5D+v/sFJZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPrjLaOU 08ZphVTQ+TGU1eisJ3htMB8GA1UdIwQYMBaAFOS/fVlgtrLzxSFB7ytgKtEU9Ayo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTNBNS81MDBDRkU5OERB NjYxMUVDODBERkU3MzZDNEY5QUUwMi81TDk5V1dDMnN2UEZJVUh2SzJBcTBSVDBE S2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVMOTlXV0Myc3ZQRklVSHZLMkFxMFJUMERLZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTNBNS81MDBDRkU5OERBNjYxMUVDODBERkU3MzZDNEY5QUUwMi81TDk5V1dDMnN2 UEZJVUh2SzJBcTBSVDBES2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK/gzdB9wx0qkjnkTxfZzbqSLU+ZtP9ZcMMt3hv/bhqi9x3nd2QgHh JMSrPYLe+3Houz6t5JHQL1uOxwGbqqaQ0Ygo5vk7+s6jsbj5+Y9CxbmKbfbj+qOc RRlgs9DrN6x4FbEEhbSrlv9ySrZi+0WNHYa6RYd+vrtI3xtTpJYVFuUM2Nhb2xun 6twRxGxCTuj87OFw8dtuOGB3qaaIklQwFZVw4XM4lccurSxpAzcc559eYVnnUU2f EHjNT1GPdHqqbDVTSROMkG/ujLU3yhnIZUEYFKRCD/eEHlsgfivJo/d1Y/UisZ3/ 0omZB7PXY7FyVK4UTpUr1JzVaxLquIBZ -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:26 2025 by rpki-client