$ rpki-client -vvf rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft File: 5jLTjFoywhfG7nHVLe-fOMoWbFE.mft (raw, json) Hash identifier: XEAm/rd9GTPDVAIVnYjQWNMgrXmqpiUHfLn1NJlxRW8= Subject key identifier: E4:35:4B:35:38:43:EE:8C:49:37:0E:05:4D:60:06:59:44:5C:90:1A Authority key identifier: E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51 Certificate issuer: /CN=A911486F/serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft Manifest number: 01BB Signing time: Thu 03 Apr 2025 02:35:02 +0000 Manifest this update: Thu 03 Apr 2025 02:35:02 +0000 Manifest next update: Thu 10 Apr 2025 02:35:01 +0000 Files and hashes: 1: 5jLTjFoywhfG7nHVLe-fOMoWbFE.crl (hash: a1Bbj+kSk2igohE/XaFZHC3+iZUe7tko4JbxTyA8xE4=) 2: 32D8E190D0CB11EEAB1CAF34C4F9AE02.roa (hash: I6cFYaTwrscj9Do0u5LBBtA5etRJeCEnBRWA8YbVDTo=) 3: 4D554D70D0CA11EE9DCDFA83C4F9AE02.roa (hash: 6yZMYTHYRpP2MH6PChCYijNkjUxZFdtlKAJWlJtdpuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911486F Validity Not Before: Apr 3 02:35:02 2025 GMT Not After : Apr 10 02:35:01 2025 GMT Subject: CN=67edf3d6-8927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9c:74:17:32:bb:46:fe:13:fe:97:b0:1d:23: 14:20:9a:5b:c9:00:8d:8d:7f:9f:5b:0b:0d:2b:fe: 54:b8:d7:50:e7:a4:77:e7:2b:c7:b1:68:6b:50:e6: c8:9d:ad:f2:0f:ba:54:0e:20:83:61:cd:0b:f4:7a: 88:55:30:ff:3f:a9:25:ac:6b:8a:80:8a:6b:59:7b: 53:f3:b2:f8:cf:83:2f:55:42:8a:70:ff:42:00:66: 17:04:af:ec:bd:86:a8:eb:b4:3d:74:7e:10:13:2d: d3:31:d8:d8:74:ae:3e:7c:1e:94:b7:c7:c3:d8:c2: bc:a7:b4:3e:f6:a6:1e:88:6a:f1:33:de:bb:c3:79: d9:6e:30:70:42:ad:46:35:c2:13:75:49:56:54:88: a0:69:a0:25:80:e1:b4:3c:dd:ae:f6:aa:1c:63:77: b7:63:ff:bb:0d:7a:6c:f9:2b:5d:e1:ec:66:7b:5f: 24:7c:d8:02:bc:4c:f5:79:ee:d6:14:93:de:fd:fd: cb:72:c4:b7:4e:b4:93:62:c0:9e:15:a5:d8:98:a2: fa:59:13:47:56:41:e1:5b:af:75:22:e9:e5:aa:b2: 59:54:99:aa:14:ab:7a:e7:0b:a1:96:84:37:75:82: 4d:17:98:8e:24:2a:fd:77:08:3e:9e:5e:d9:c8:88: e5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:35:4B:35:38:43:EE:8C:49:37:0E:05:4D:60:06:59:44:5C:90:1A X509v3 Authority Key Identifier: keyid:E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:1c:2c:1a:db:c3:20:a5:45:cd:59:3f:55:1e:d5:05:02:d9: 20:2a:5e:2c:65:07:e5:48:f3:e8:a2:75:b4:84:fa:30:58:19: c3:88:c0:0b:e6:3c:c4:1a:96:fb:e7:ff:2f:cf:04:71:71:d2: b1:a0:b4:cf:e0:73:ca:a4:4e:e4:2b:d4:39:bf:99:28:5e:58: a5:9d:78:5c:48:02:b6:5b:8f:b9:6a:fb:1e:1e:8c:41:3f:76: f5:99:bd:e6:03:fe:8d:c5:9e:29:34:34:fd:94:57:3a:a0:a6: d6:5d:d9:12:0a:9f:dd:3a:3a:d8:bd:23:ec:ea:5f:2b:12:c1: 28:e8:1f:0f:a8:04:af:d0:12:f9:0d:8d:d0:06:68:93:10:d9: 43:26:8b:78:ef:15:09:cb:b1:67:ee:d5:98:e4:97:c8:c4:5c: 94:99:7a:38:09:fc:20:78:d7:a8:36:ce:1c:7c:7a:a3:18:b7: 5c:e1:a9:83:fd:c7:92:fc:29:7e:1f:e8:0d:fb:7b:c4:7e:d9: cc:ef:02:19:a9:7f:6e:d6:25:e0:96:8b:97:b9:83:6a:07:28: 4b:19:6b:e8:1a:5a:9e:9d:74:5d:9c:ba:4b:ad:89:8b:75:48: 8f:9a:c3:53:3c:fa:d9:2c:31:d6:f7:6d:6a:cd:79:60:e4:ee: c1:69:e9:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ4NkYxMTAvBgNVBAUTKEU2MzJEMzhDNUEzMkMyMTdDNkVFNzFENTJERUY5RjM4 Q0ExNjZDNTEwHhcNMjUwNDAzMDIzNTAyWhcNMjUwNDEwMDIzNTAxWjAYMRYwFAYD VQQDEw02N2VkZjNkNi04OTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5x0FzK7Rv4T/pewHSMUIJpbyQCNjX+fWwsNK/5UuNdQ56R35yvHsWhrUObI na3yD7pUDiCDYc0L9HqIVTD/P6klrGuKgIprWXtT87L4z4MvVUKKcP9CAGYXBK/s vYao67Q9dH4QEy3TMdjYdK4+fB6Ut8fD2MK8p7Q+9qYeiGrxM967w3nZbjBwQq1G NcITdUlWVIigaaAlgOG0PN2u9qocY3e3Y/+7DXps+Std4exme18kfNgCvEz1ee7W FJPe/f3LcsS3TrSTYsCeFaXYmKL6WRNHVkHhW691IunlqrJZVJmqFKt65wuhloQ3 dYJNF5iOJCr9dwg+nl7ZyIjlyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQ1SzU4 Q+6MSTcOBU1gBllEXJAaMB8GA1UdIwQYMBaAFOYy04xaMsIXxu5x1S3vnzjKFmxR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDg2Ri8yMkNGMzQ0ODg2 NkMxMUVEQUZBNUE0NzFDNEY5QUUwMi81akxUakZveXdoZkc3bkhWTGUtZk9Nb1di RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVqTFRqRm95d2hmRzduSFZMZS1mT01vV2JGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDg2Ri8yMkNGMzQ0ODg2NkMxMUVEQUZBNUE0NzFDNEY5QUUwMi81akxUakZveXdo Zkc3bkhWTGUtZk9Nb1diRkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAHCwa28MgpUXNWT9VHtUFAtkgKl4sZQflSPPoonW0hPowWBnDiMAL 5jzEGpb75/8vzwRxcdKxoLTP4HPKpE7kK9Q5v5koXlilnXhcSAK2W4+5avseHoxB P3b1mb3mA/6NxZ4pNDT9lFc6oKbWXdkSCp/dOjrYvSPs6l8rEsEo6B8PqASv0BL5 DY3QBmiTENlDJot47xUJy7Fn7tWY5JfIxFyUmXo4CfwgeNeoNs4cfHqjGLdc4amD /ceS/Cl+H+gN+3vEftnM7wIZqX9u1iXglouXuYNqByhLGWvoGlqenXRdnLpLrYmL dUiPmsNTPPrZLDHW921qzXlg5O7BaenG -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:37 2025 by rpki-client