$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft File: S5pjiBqFVgIQVOlL3DInTse33fI.mft (raw, json) Hash identifier: 5yZ66iKOMrNm/hGZYQkwPIQjReYYRNMbzfGygeJaGow= Subject key identifier: 3C:0E:19:5B:3C:70:0C:69:6B:B1:60:8F:6D:F2:B3:3F:1D:E2:19:E9 Authority key identifier: 4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2 Certificate issuer: /CN=A91FD90A/serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2 Certificate serial: 05EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft Manifest number: 05DC Signing time: Thu 24 Apr 2025 22:48:29 +0000 Manifest this update: Thu 24 Apr 2025 22:48:29 +0000 Manifest next update: Thu 01 May 2025 22:48:29 +0000 Files and hashes: 1: S5pjiBqFVgIQVOlL3DInTse33fI.crl (hash: wmh4vo22DDfbSElasint/Y1fBp0FiBP4M1+6EEhSG70=) 2: 410F8C0EDBC611EEA717194DC4F9AE02.roa (hash: WalTM0heTU/pB4x2h5BFYPYTixxcx+WNC43Aop8+j9U=) 3: 65D38F7CC44111EF8409C156C4F9AE02.roa (hash: f9AHjTbNbqSt8k/eMNuMhNVjcuM6wjeLwT4q/khUyEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1514 (0x5ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD90A, serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2 Validity Not Before: Apr 24 22:48:29 2025 GMT Not After : May 1 22:48:29 2025 GMT Subject: CN=680abfbd-d38e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a8:b7:dd:8f:3c:3c:20:e7:5d:20:b9:69:48: f9:43:f4:fa:4d:ab:a8:32:3b:b8:a6:9a:73:71:13: 77:54:28:98:b5:84:41:a1:3b:31:a5:af:6e:bd:50: ba:8d:b0:ae:b1:12:61:64:19:57:f8:c7:9e:a0:72: 0f:30:bd:1c:8a:c6:28:4f:8c:4d:7a:10:9e:2f:13: fe:f9:fc:a6:41:2f:a6:a7:bc:64:79:bd:3f:e3:c6: 9a:65:99:cc:6b:81:54:1d:79:af:0e:e7:db:4e:84: 9e:a3:59:fd:82:97:01:6d:6b:c9:7c:72:cf:03:3d: 3f:cc:24:ac:8d:49:6f:59:7c:6a:bc:b2:2e:53:a6: 44:20:e0:be:0b:25:6d:99:6b:d9:ca:b1:cc:07:30: 6a:b1:b3:95:9f:75:0b:8f:82:32:3b:d3:a5:26:be: 17:a6:95:a4:cc:de:af:b2:2f:51:be:0c:48:8a:bd: 2a:9c:1f:17:76:27:46:b9:ab:d5:54:a6:69:2c:77: e7:ae:5e:3b:f3:c7:0b:7f:b7:5a:47:39:58:b6:e8: 2a:59:63:3b:ec:3f:10:62:f4:c2:25:ba:76:20:26: 64:cd:66:eb:d1:56:ba:75:7f:6f:12:25:1c:2e:56: 01:0d:1c:9c:9a:5c:22:46:4e:55:fd:49:a5:06:3b: e7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0E:19:5B:3C:70:0C:69:6B:B1:60:8F:6D:F2:B3:3F:1D:E2:19:E9 X509v3 Authority Key Identifier: keyid:4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:e3:d3:86:b7:9a:db:83:52:ae:47:7a:a8:27:44:13:1e:57: 7a:41:6b:05:d5:aa:d1:72:eb:97:5d:82:03:8c:d4:da:e1:55: 59:0e:e4:ce:65:72:45:73:29:76:f9:6a:b2:b5:58:14:33:22: 8c:61:4a:ff:77:38:05:a4:60:62:7b:3a:74:f7:84:87:f2:04: fc:39:07:33:6b:d6:62:30:15:e2:d8:8e:ed:b3:94:51:46:a2: 6a:ef:e7:ba:8b:72:c7:f2:09:77:94:60:df:9f:64:e6:fc:a6: d4:10:bc:97:f0:10:9f:82:26:cc:31:32:2c:80:c8:ec:1e:94: 47:87:fe:d9:45:4e:ac:4b:31:1f:be:73:75:e6:29:dd:14:a7: 9c:f8:b2:a9:1a:fc:2d:c6:76:52:d2:10:37:ad:06:f4:49:44: 1b:38:22:9c:34:d3:4e:8e:1c:45:55:4f:49:55:da:18:a8:d4: d8:3d:f7:e5:82:d9:fe:e9:23:ac:41:fe:fa:f3:92:d7:1d:e2: e1:58:04:c3:30:4e:01:ed:83:26:a3:eb:6a:05:c0:b5:24:4d: de:bd:e4:7e:14:08:4c:24:35:89:f7:b2:21:21:d8:26:0c:b1: 83:d0:05:48:5d:93:79:7e:5d:ac:f7:3f:e7:d8:07:cc:fb:7d: 03:ac:b3:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ5MEExMTAvBgNVBAUTKDRCOUE2Mzg4MUE4NTU2MDIxMDU0RTk0QkRDMzIyNzRF QzdCN0RERjIwHhcNMjUwNDI0MjI0ODI5WhcNMjUwNTAxMjI0ODI5WjAYMRYwFAYD VQQDEw02ODBhYmZiZC1kMzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqqi33Y88PCDnXSC5aUj5Q/T6TauoMju4pppzcRN3VCiYtYRBoTsxpa9uvVC6 jbCusRJhZBlX+MeeoHIPML0cisYoT4xNehCeLxP++fymQS+mp7xkeb0/48aaZZnM a4FUHXmvDufbToSeo1n9gpcBbWvJfHLPAz0/zCSsjUlvWXxqvLIuU6ZEIOC+CyVt mWvZyrHMBzBqsbOVn3ULj4IyO9OlJr4XppWkzN6vsi9RvgxIir0qnB8XdidGuavV VKZpLHfnrl4788cLf7daRzlYtugqWWM77D8QYvTCJbp2ICZkzWbr0Va6dX9vEiUc LlYBDRycmlwiRk5V/UmlBjvndQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDwOGVs8 cAxpa7Fgj23ysz8d4hnpMB8GA1UdIwQYMBaAFEuaY4gahVYCEFTpS9wyJ07Ht93y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDkwQS8xN0UyQ0Y1MEI1 QzUxMUVCQjU0RTAxNDZDNEY5QUUwMi9TNXBqaUJxRlZnSVFWT2xMM0RJblRzZTMz ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M1cGppQnFGVmdJUVZPbEwzREluVHNlMzNmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDkwQS8xN0UyQ0Y1MEI1QzUxMUVCQjU0RTAxNDZDNEY5QUUwMi9TNXBqaUJxRlZn SVFWT2xMM0RJblRzZTMzZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT49OGt5rbg1KuR3qoJ0QTHld6QWsF1arRcuuXXYIDjNTa4VVZDuTO ZXJFcyl2+WqytVgUMyKMYUr/dzgFpGBiezp094SH8gT8OQcza9ZiMBXi2I7ts5RR RqJq7+e6i3LH8gl3lGDfn2Tm/KbUELyX8BCfgibMMTIsgMjsHpRHh/7ZRU6sSzEf vnN15indFKec+LKpGvwtxnZS0hA3rQb0SUQbOCKcNNNOjhxFVU9JVdoYqNTYPffl gtn+6SOsQf7685LXHeLhWATDME4B7YMmo+tqBcC1JE3eveR+FAhMJDWJ97IhIdgm DLGD0AVIXZN5fl2s9z/n2AfM+30DrLPk -----END CERTIFICATE-----Generated at Sat Apr 26 04:59:11 2025 by rpki-client