$ rpki-client -vvf rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft File: 53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft (raw, json) Hash identifier: KHyW1IoJD8KaCjaw6todw+djxabDSwQuzVXGHdTtA2Y= Subject key identifier: 1C:88:3B:7B:A4:02:D9:E1:A9:AF:8D:FA:08:72:B8:10:27:60:79:03 Authority key identifier: E7:71:32:E4:FE:AD:04:EE:D4:FE:94:6D:60:7A:0D:CB:57:A4:20:65 Certificate issuer: /CN=A91F715C/serialNumber=E77132E4FEAD04EED4FE946D607A0DCB57A42065 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft Manifest number: 0147 Signing time: Fri 25 Apr 2025 03:35:49 +0000 Manifest this update: Fri 25 Apr 2025 03:35:49 +0000 Manifest next update: Fri 02 May 2025 03:35:49 +0000 Files and hashes: 1: 53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl (hash: fwGZmZ0WhzpGjn2GVdxCt927Mydmz7qFo6RK6D6a4lU=) 2: 7A97D2F2174311EFAA4B5762C4F9AE02.roa (hash: qiuU93Lc7YatLMlsGPtovUfT87zuHB3bZX8CwFGs5GE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:35:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F715C, serialNumber=E77132E4FEAD04EED4FE946D607A0DCB57A42065 Validity Not Before: Apr 25 03:35:49 2025 GMT Not After : May 2 03:35:49 2025 GMT Subject: CN=680b0315-2973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5d:2a:80:82:51:8a:61:8f:c0:3e:02:f5:74: cc:11:9d:10:94:dc:98:ff:4f:53:08:e2:5f:6f:37: 6a:c8:f2:76:d0:82:1e:cc:74:1c:52:e5:cb:40:de: 66:c8:6b:29:57:69:fc:0a:b1:2e:f1:6a:bb:c5:ba: aa:96:9c:64:f7:ae:fc:d6:60:06:c6:3e:40:b4:8e: 2c:6f:76:a0:08:75:c4:5b:ba:61:89:6e:ef:1f:16: 2f:ad:ea:08:6a:a4:5d:0b:45:10:a2:6f:53:db:53: b2:7a:75:ad:05:22:c6:e8:30:30:9c:4e:7d:54:34: 15:5f:34:59:4c:db:98:2c:67:fd:8b:72:0b:a0:f5: f7:a5:be:1b:16:93:8a:8f:52:4b:19:96:b2:76:d7: 24:99:eb:19:53:41:7d:db:87:14:6f:af:17:8b:b8: ae:42:91:6b:2a:95:d5:8d:0e:cf:57:6e:44:0d:01: a8:24:b8:3a:f8:1d:e2:b4:e9:12:5a:39:35:68:ea: 6c:76:d8:88:4f:4b:65:82:eb:af:30:13:19:4b:6f: e2:7a:19:7b:0d:60:f9:0f:3f:8a:3e:da:c9:90:fb: 96:5d:04:fc:73:eb:6e:0c:e8:cd:ba:04:b7:d0:b4: 1a:cd:31:42:6f:78:6a:42:f4:5b:3a:f0:21:34:e8: 3b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:88:3B:7B:A4:02:D9:E1:A9:AF:8D:FA:08:72:B8:10:27:60:79:03 X509v3 Authority Key Identifier: keyid:E7:71:32:E4:FE:AD:04:EE:D4:FE:94:6D:60:7A:0D:CB:57:A4:20:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:84:8d:7a:a2:d6:40:bd:78:ae:87:04:be:1a:2c:df:6f:88: 5d:d2:f4:ca:3a:79:b9:77:55:3e:b7:c7:7d:0c:5c:05:9c:87: dc:fd:07:2d:a3:89:ec:b4:97:55:6e:cf:7a:d7:3f:a3:f0:0e: 7c:c7:75:ce:fc:fc:bb:ac:cf:b9:3e:02:61:4a:88:c4:6f:90: 8b:e7:c3:cb:7b:57:1d:9c:c9:32:76:74:39:ed:15:f8:c3:2f: 86:3a:c8:39:a8:2a:7a:a0:06:52:39:e8:41:49:ca:08:f9:3e: 6e:16:f4:dd:45:55:48:ce:06:31:ff:1a:8a:91:79:1b:b7:ca: 27:e7:55:9a:d0:06:41:ea:cf:b3:59:dd:ca:4d:d7:77:f2:fe: e4:a6:66:bd:40:1d:28:ac:55:c6:c4:dc:b5:76:d4:08:73:6e: 4d:3f:32:c2:22:ec:39:95:de:d4:9b:5a:17:8d:b7:f0:b6:e3: 06:d2:38:49:22:f8:93:54:c5:71:d4:ea:c1:c3:3b:f1:26:38: 08:a7:e6:a9:b3:55:20:e5:ae:65:0c:57:da:0b:e4:d9:57:d3: 19:67:d1:aa:6b:16:d4:42:55:df:21:1e:1f:6d:89:bf:c4:65: 4d:fa:6a:9c:80:e5:c6:50:45:a6:90:86:73:ce:90:c8:32:4e: a7:16:9b:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxNUMxMTAvBgNVBAUTKEU3NzEzMkU0RkVBRDA0RUVENEZFOTQ2RDYwN0EwRENC NTdBNDIwNjUwHhcNMjUwNDI1MDMzNTQ5WhcNMjUwNTAyMDMzNTQ5WjAYMRYwFAYD VQQDEw02ODBiMDMxNS0yOTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3l0qgIJRimGPwD4C9XTMEZ0QlNyY/09TCOJfbzdqyPJ20IIezHQcUuXLQN5m yGspV2n8CrEu8Wq7xbqqlpxk96781mAGxj5AtI4sb3agCHXEW7phiW7vHxYvreoI aqRdC0UQom9T21OyenWtBSLG6DAwnE59VDQVXzRZTNuYLGf9i3ILoPX3pb4bFpOK j1JLGZaydtckmesZU0F924cUb68Xi7iuQpFrKpXVjQ7PV25EDQGoJLg6+B3itOkS Wjk1aOpsdtiIT0tlguuvMBMZS2/iehl7DWD5Dz+KPtrJkPuWXQT8c+tuDOjNugS3 0LQazTFCb3hqQvRbOvAhNOg7DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFByIO3uk Atnhqa+N+ghyuBAnYHkDMB8GA1UdIwQYMBaAFOdxMuT+rQTu1P6UbWB6DctXpCBl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzE1Qy81RjA3MjYzODRG MzMxMUVFOTY2RTBGNzJDNEY5QUUwMi81M0V5NVA2dEJPN1VfcFJ0WUhvTnkxZWtJ R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUzRXk1UDZ0Qk83VV9wUnRZSG9OeTFla0lHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzE1Qy81RjA3MjYzODRGMzMxMUVFOTY2RTBGNzJDNEY5QUUwMi81M0V5NVA2dEJP N1VfcFJ0WUhvTnkxZWtJR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEhI16otZAvXiuhwS+Gizfb4hd0vTKOnm5d1U+t8d9DFwFnIfc/Qct o4nstJdVbs961z+j8A58x3XO/Py7rM+5PgJhSojEb5CL58PLe1cdnMkydnQ57RX4 wy+GOsg5qCp6oAZSOehBScoI+T5uFvTdRVVIzgYx/xqKkXkbt8on51Wa0AZB6s+z Wd3KTdd38v7kpma9QB0orFXGxNy1dtQIc25NPzLCIuw5ld7Um1oXjbfwtuMG0jhJ IviTVMVx1OrBwzvxJjgIp+aps1Ug5a5lDFfaC+TZV9MZZ9GqaxbUQlXfIR4fbYm/ xGVN+mqcgOXGUEWmkIZzzpDIMk6nFpsK -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:48 2025 by rpki-client