$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft File: 5_fdQJKCmOyeymRGoYSjWaPtXf4.mft (raw, json) Hash identifier: cu5SJfpXD7Cs+MMSnllbr21wiE8UkrxL7nLpEuaE2bQ= Subject key identifier: 26:ED:CA:72:2C:4E:38:0C:6B:27:6E:5E:5F:25:E5:DA:8D:B1:A6:8D Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE Certificate issuer: /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE Certificate serial: 0232 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft Manifest number: 0229 Signing time: Fri 25 Apr 2025 01:43:22 +0000 Manifest this update: Fri 25 Apr 2025 01:43:22 +0000 Manifest next update: Fri 02 May 2025 01:43:22 +0000 Files and hashes: 1: 5_fdQJKCmOyeymRGoYSjWaPtXf4.crl (hash: dgQlp0eKugTtbfv4O7fAD1Zj1TwVz5V3r4CBWYYGiYA=) 2: C578C852218A11EFB28E7B82C4F9AE02.roa (hash: kTzsqNEXZTEaSzrPrWyUs9cD3MM8KSq3zyWoBQVDjyE=) 3: 7B9AF6D818F111F0A3CFBB17C4F9AE02.roa (hash: noXWIw2uCpk5qYLhf+pn+IMp6jTiBvJiADwyhYAjo2I=) 4: AAF361C0D18B11EF810E8B66C4F9AE02.roa (hash: w12orzg2QI/DnMwGWqRtnSkszoQETfTmbyGE/vvJi2w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:43:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 562 (0x232) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE7DF, serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE Validity Not Before: Apr 25 01:43:22 2025 GMT Not After : May 2 01:43:22 2025 GMT Subject: CN=680ae8ba-8592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9b:b4:ca:42:35:ad:1b:e8:0e:b2:15:cb:93: df:42:93:76:e1:10:99:41:4f:9e:9b:b0:56:5a:9a: 94:b5:f0:0f:07:b8:14:fb:45:8b:84:de:47:f8:26: 4c:f3:ec:4e:8c:19:db:52:32:9e:17:99:2d:f3:cc: 6d:ae:56:f1:61:9d:49:ce:f8:0d:e2:21:ee:ea:87: dc:eb:d0:d1:60:1b:f7:31:eb:e5:19:de:fe:6f:6e: d7:fb:52:79:13:63:07:58:89:27:fa:dd:2d:e4:26: 06:1e:c9:63:cb:ec:4a:c7:bc:5c:6b:c0:0c:f0:21: 96:6f:f7:44:69:26:01:32:09:05:f3:c6:2c:14:32: 55:3a:ce:8b:cd:cc:c8:fd:de:b7:2c:ab:cd:22:53: 80:55:6f:7b:12:bc:57:a5:f1:b1:a8:53:54:ff:4b: 8b:f8:2a:0b:99:bd:9d:d7:ba:01:72:95:05:e3:2d: cc:71:76:8c:3a:ec:49:00:46:cf:e2:53:92:c6:21: d2:46:45:c5:ef:e8:04:60:c1:0a:6d:97:52:01:a1: e3:55:23:c0:81:b3:4a:79:ed:3b:b5:d6:67:0d:94: cd:18:43:7e:e1:3b:df:99:95:57:1d:ca:6e:38:bc: fe:2f:ba:1f:8b:b0:5d:7e:03:e8:0a:28:fb:41:57: 02:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:ED:CA:72:2C:4E:38:0C:6B:27:6E:5E:5F:25:E5:DA:8D:B1:A6:8D X509v3 Authority Key Identifier: keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:8f:94:37:78:c4:17:ae:f5:20:6d:0f:80:a4:6f:60:35:07: 23:7b:d8:f9:0b:d9:55:75:93:44:66:e2:1e:ea:f4:a4:b7:d5: 69:2d:14:0d:a0:26:9f:27:af:ec:a8:2e:a8:55:2e:b5:2f:89: 09:3d:a6:a7:4b:23:b8:e4:bd:be:ef:c7:61:9a:ac:6d:d0:ee: 9a:75:03:db:30:c9:fb:ea:a7:e0:11:d4:29:b0:a6:5a:85:40: e8:a8:6b:05:e6:d5:e8:03:81:b3:2f:35:f1:15:c4:81:84:5e: 2e:40:85:a6:ed:54:d9:15:e1:72:e9:c3:24:4b:be:6a:35:16: 6d:14:58:ae:0a:0a:35:15:63:b4:5e:47:bd:74:e5:10:3d:9b: ef:85:a4:37:9d:5b:7b:11:57:be:7d:fd:fb:a3:3a:23:ae:c0: 3d:49:93:de:74:97:c8:c7:2d:ab:13:df:51:5b:4d:c5:64:92: 9c:38:96:ff:b7:3d:ad:da:b0:34:2a:37:81:17:0a:65:9f:e5: dc:b4:b1:9a:8b:04:4f:ce:bd:f0:e1:a4:cb:3b:ad:2f:98:09: ac:60:e6:57:6f:87:7b:7a:c5:eb:d8:ef:3c:10:7f:f7:b1:6d: c6:e0:61:bd:5b:9c:3c:bf:63:2d:66:51:d1:77:9b:09:59:58: b3:ac:5f:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU3REYxMTAvBgNVBAUTKEU3RjdERDQwOTI4Mjk4RUM5RUNBNjQ0NkExODRBMzU5 QTNFRDVERkUwHhcNMjUwNDI1MDE0MzIyWhcNMjUwNTAyMDE0MzIyWjAYMRYwFAYD VQQDEw02ODBhZThiYS04NTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2pu0ykI1rRvoDrIVy5PfQpN24RCZQU+em7BWWpqUtfAPB7gU+0WLhN5H+CZM 8+xOjBnbUjKeF5kt88xtrlbxYZ1JzvgN4iHu6ofc69DRYBv3MevlGd7+b27X+1J5 E2MHWIkn+t0t5CYGHsljy+xKx7xca8AM8CGWb/dEaSYBMgkF88YsFDJVOs6LzczI /d63LKvNIlOAVW97ErxXpfGxqFNU/0uL+CoLmb2d17oBcpUF4y3McXaMOuxJAEbP 4lOSxiHSRkXF7+gEYMEKbZdSAaHjVSPAgbNKee07tdZnDZTNGEN+4TvfmZVXHcpu OLz+L7ofi7BdfgPoCij7QVcCTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCbtynIs TjgMayduXl8l5dqNsaaNMB8GA1UdIwQYMBaAFOf33UCSgpjsnspkRqGEo1mj7V3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTdERi82RDU1MkQ3MDI3 N0ExMUVEQTZCMUE4MjZDNEY5QUUwMi81X2ZkUUpLQ21PeWV5bVJHb1lTaldhUHRY ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVfZmRRSktDbU95ZXltUkdvWVNqV2FQdFhmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTdERi82RDU1MkQ3MDI3N0ExMUVEQTZCMUE4MjZDNEY5QUUwMi81X2ZkUUpLQ21P eWV5bVJHb1lTaldhUHRYZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkj5Q3eMQXrvUgbQ+ApG9gNQcje9j5C9lVdZNEZuIe6vSkt9VpLRQN oCafJ6/sqC6oVS61L4kJPaanSyO45L2+78dhmqxt0O6adQPbMMn76qfgEdQpsKZa hUDoqGsF5tXoA4GzLzXxFcSBhF4uQIWm7VTZFeFy6cMkS75qNRZtFFiuCgo1FWO0 Xke9dOUQPZvvhaQ3nVt7EVe+ff37ozojrsA9SZPedJfIxy2rE99RW03FZJKcOJb/ tz2t2rA0KjeBFwpln+XctLGaiwRPzr3w4aTLO60vmAmsYOZXb4d7esXr2O88EH/3 sW3G4GG9W5w8v2MtZlHRd5sJWVizrF9E -----END CERTIFICATE-----Generated at Sat Apr 26 13:36:30 2025 by rpki-client