$ rpki-client -vvf rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft File: 5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft (raw, json) Hash identifier: aYZ6Qf3WNYmr+5/c7YiVS4T70Jy5PO3+qfovcRfSL0c= Subject key identifier: 9B:C8:A1:CB:16:DA:63:4B:96:10:2F:37:B5:73:45:42:AD:EC:58:BB Authority key identifier: E5:06:93:CA:18:5B:B6:5D:92:CA:FB:30:E3:76:F5:1B:95:9A:D2:D8 Certificate issuer: /CN=A9115122/serialNumber=E50693CA185BB65D92CAFB30E376F51B959AD2D8 Certificate serial: 0171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft Manifest number: 016E Signing time: Sat 19 Apr 2025 03:05:23 +0000 Manifest this update: Sat 19 Apr 2025 03:05:23 +0000 Manifest next update: Sat 26 Apr 2025 03:05:23 +0000 Files and hashes: 1: 5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl (hash: RnTqygGFAym2uiWEyCOUYwjxycEjLbj85XlBJ1PQauw=) 2: D4B97082EF2211EDB7EFE882C4F9AE02.roa (hash: hB47ivnW+fJgf8IJJ0l6aDuxJFT7bxRrB7EorTuGqJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 03:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115122, serialNumber=E50693CA185BB65D92CAFB30E376F51B959AD2D8 Validity Not Before: Apr 19 03:05:23 2025 GMT Not After : Apr 26 03:05:23 2025 GMT Subject: CN=680312f3-db2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cb:18:7d:e1:10:28:3d:1c:a8:2e:56:3b:10: 6f:1d:b4:69:65:7d:2d:ef:9c:44:17:a8:22:55:6d: 86:8f:2d:10:0e:5a:d2:d2:30:a3:15:a1:ef:ba:a4: ca:7b:57:f4:c1:e6:91:76:fe:c9:da:ca:1f:ff:72: 3e:e7:2d:1d:ef:9c:fe:37:73:d6:8e:fa:6a:ec:73: 4e:d4:41:63:91:c0:41:0a:88:31:d2:c0:82:b4:d4: 1d:19:9c:f8:57:94:2c:50:50:74:d6:73:8b:06:14: 15:fe:3d:81:1b:f8:75:18:43:cf:c8:75:0a:95:db: e4:7d:58:e1:48:63:ae:fe:a2:f4:cf:50:70:21:3a: fa:80:89:71:38:ee:21:cf:59:02:09:f2:b9:4d:bb: e2:1b:bd:26:aa:33:0b:ee:32:aa:44:28:75:e7:22: 13:f3:48:08:29:39:10:b7:ee:92:31:1d:6d:d4:87: c7:27:52:d1:bd:cd:67:63:54:b5:c7:b6:31:4a:7b: a3:d6:12:ad:62:00:de:75:54:73:e7:ed:24:c6:3d: 97:be:17:db:bd:77:e9:53:39:44:7d:2e:48:06:b3: 77:6a:92:32:4e:99:f4:5d:ff:87:b1:89:32:39:5d: 91:ff:88:6b:e9:4b:20:66:d9:a8:a4:41:2e:67:4d: 5e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C8:A1:CB:16:DA:63:4B:96:10:2F:37:B5:73:45:42:AD:EC:58:BB X509v3 Authority Key Identifier: keyid:E5:06:93:CA:18:5B:B6:5D:92:CA:FB:30:E3:76:F5:1B:95:9A:D2:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:02:b4:a5:2a:14:a1:4e:ae:04:22:70:36:41:ab:4a:5e:80: 1d:67:89:72:6d:20:b2:d6:9d:43:59:0e:fd:3e:18:a5:3f:08: ec:15:8c:66:39:2f:69:8f:58:42:d0:de:8e:67:06:a1:cc:fd: df:52:1a:3c:f0:0c:04:03:e7:eb:f3:58:a9:fe:63:12:d5:9f: 33:51:07:4e:be:82:a7:3b:4c:58:74:67:00:9a:fb:b9:1b:86: 85:ae:a5:45:4f:a7:fd:51:2e:ff:96:24:91:d9:0b:c9:73:7c: ed:4b:86:21:d9:77:6b:af:f8:82:db:a8:c5:27:88:03:07:76: b0:fc:31:82:19:c6:3b:7b:a2:31:0f:9f:fd:2f:0c:53:3f:6e: e7:49:48:ab:12:a6:1d:6a:18:a8:b8:16:18:50:1b:b9:b3:a8: 08:75:90:55:15:1f:5e:e2:e8:69:bd:e9:fe:a7:bc:6c:5a:70: db:84:a8:9e:be:f2:2e:78:37:7a:48:f4:66:ab:b0:48:71:c3: f8:18:2f:7c:cf:3e:5e:28:31:8c:4f:af:20:0c:9e:41:9c:3c: 8f:39:ea:a8:f8:c1:a5:17:21:36:e3:6d:64:70:ae:c0:3e:48: d0:51:6a:8d:ef:1b:b5:7d:7e:ed:89:e5:05:09:16:d9:ae:fb: c1:86:e2:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTUxMjIxMTAvBgNVBAUTKEU1MDY5M0NBMTg1QkI2NUQ5MkNBRkIzMEUzNzZGNTFC OTU5QUQyRDgwHhcNMjUwNDE5MDMwNTIzWhcNMjUwNDI2MDMwNTIzWjAYMRYwFAYD VQQDEw02ODAzMTJmMy1kYjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8sYfeEQKD0cqC5WOxBvHbRpZX0t75xEF6giVW2Gjy0QDlrS0jCjFaHvuqTK e1f0weaRdv7J2sof/3I+5y0d75z+N3PWjvpq7HNO1EFjkcBBCogx0sCCtNQdGZz4 V5QsUFB01nOLBhQV/j2BG/h1GEPPyHUKldvkfVjhSGOu/qL0z1BwITr6gIlxOO4h z1kCCfK5TbviG70mqjML7jKqRCh15yIT80gIKTkQt+6SMR1t1IfHJ1LRvc1nY1S1 x7YxSnuj1hKtYgDedVRz5+0kxj2XvhfbvXfpUzlEfS5IBrN3apIyTpn0Xf+HsYky OV2R/4hr6UsgZtmopEEuZ01e5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvIocsW 2mNLlhAvN7VzRUKt7Fi7MB8GA1UdIwQYMBaAFOUGk8oYW7Zdksr7MON29RuVmtLY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTEyMi8zMEM3QTM4RUVG MUYxMUVEQkY3MUNDODBDNEY5QUUwMi81UWFUeWhoYnRsMlN5dnN3NDNiMUc1V2Ew dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRYVR5aGhidGwyU3l2c3c0M2IxRzVXYTB0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTEyMi8zMEM3QTM4RUVGMUYxMUVEQkY3MUNDODBDNEY5QUUwMi81UWFUeWhoYnRs MlN5dnN3NDNiMUc1V2EwdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6ArSlKhShTq4EInA2QatKXoAdZ4lybSCy1p1DWQ79PhilPwjsFYxm OS9pj1hC0N6OZwahzP3fUho88AwEA+fr81ip/mMS1Z8zUQdOvoKnO0xYdGcAmvu5 G4aFrqVFT6f9US7/liSR2QvJc3ztS4Yh2Xdrr/iC26jFJ4gDB3aw/DGCGcY7e6Ix D5/9LwxTP27nSUirEqYdahiouBYYUBu5s6gIdZBVFR9e4uhpven+p7xsWnDbhKie vvIueDd6SPRmq7BIccP4GC98zz5eKDGMT68gDJ5BnDyPOeqo+MGlFyE2421kcK7A PkjQUWqN7xu1fX7tieUFCRbZrvvBhuLn -----END CERTIFICATE-----Generated at Sat Apr 19 10:50:37 2025 by rpki-client