$ rpki-client -vvf rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft File: 5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft (raw, json) Hash identifier: 4iI2zJRVbQQ9ZfJywrzSUT64wm1EP3YwjzjPNrpqHEk= Subject key identifier: 15:EB:76:C2:24:BA:E3:CE:50:0D:EB:17:16:EF:B2:FA:00:45:9A:87 Authority key identifier: E6:A5:4B:AD:7D:17:6E:44:47:A9:E9:4F:24:48:03:27:C1:B4:0C:9E Certificate issuer: /CN=A91293F4/serialNumber=E6A54BAD7D176E4447A9E94F24480327C1B40C9E Certificate serial: 096C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft Manifest number: 0965 Signing time: Fri 28 Mar 2025 20:26:52 +0000 Manifest this update: Fri 28 Mar 2025 20:26:51 +0000 Manifest next update: Fri 04 Apr 2025 20:26:51 +0000 Files and hashes: 1: 5qVLrX0XbkRHqelPJEgDJ8G0DJ4.crl (hash: 7TjSfhKC5EUruVwxB60yT99e6HY9YXEh8832+pQ0aRk=) 2: 3E730FA28E8111EAB2038B6BC4F9AE02.roa (hash: daPv+SX5G+t+lBu/9eE3wzv1kdiunichnFivR9qNxI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.crl rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2412 (0x96c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91293F4 Validity Not Before: Mar 28 20:26:51 2025 GMT Not After : Apr 4 20:26:51 2025 GMT Subject: CN=67e7060c-ef70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8f:6c:44:de:80:84:e3:3e:d3:29:e2:f2:37: af:de:b7:be:db:ed:f7:50:81:85:a0:2a:24:17:0c: 12:7b:d2:0c:04:ea:59:ae:97:ea:67:6b:81:5e:5a: 46:a4:92:f7:4c:f6:c4:5e:43:45:23:77:26:6d:f4: 8d:89:c2:8c:67:55:4e:11:d0:39:5f:e5:99:fe:9c: 70:b4:5b:ae:7e:fb:aa:37:6d:af:48:7a:8c:1b:a0: b8:72:26:0f:17:e5:8b:3b:87:d4:84:3f:73:c0:d8: f2:bc:3f:fd:c6:48:e2:9a:dd:15:e0:be:89:11:fa: b7:45:cf:ef:b9:3a:3c:77:0a:a2:75:31:8d:f3:62: 37:da:ee:2b:2a:e7:96:79:21:20:c1:a4:ee:14:94: 2a:6c:6a:19:c4:86:75:8d:50:b5:32:63:97:e0:09: 46:48:0c:04:11:e2:75:1d:14:71:9b:68:a8:ba:88: 54:ff:79:f0:43:d2:71:92:2f:fe:f3:90:6b:53:fe: 17:74:f0:1f:7d:7b:7a:c4:66:45:e8:8d:67:6d:ab: 92:65:1d:b4:da:9a:d1:81:b4:c0:15:ab:a7:0a:2c: 29:d8:c6:de:90:91:31:7c:20:b3:d7:57:78:24:f0: 00:a9:81:51:c0:a8:d0:c9:5d:d0:fc:e3:07:5d:55: 1d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:EB:76:C2:24:BA:E3:CE:50:0D:EB:17:16:EF:B2:FA:00:45:9A:87 X509v3 Authority Key Identifier: keyid:E6:A5:4B:AD:7D:17:6E:44:47:A9:E9:4F:24:48:03:27:C1:B4:0C:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:47:bb:d1:ef:7e:a1:de:b5:22:35:f8:2c:08:81:4b:d7:3e: cc:78:ec:a5:40:78:b7:b8:9f:69:a8:6c:14:e5:7e:62:a7:3e: a6:c1:b5:b9:a3:1a:71:dc:9f:6a:77:93:33:b7:bb:2c:7f:bc: ff:c8:6c:f4:30:23:8f:1d:2f:0e:0e:be:e7:cd:36:66:65:1e: fd:a2:ae:02:87:a3:23:1d:44:4c:b6:7b:7c:8b:cc:0b:82:5b: 99:bd:bd:00:a6:bc:10:35:83:b7:92:70:b1:b9:da:a6:67:c3: 0a:f1:cd:22:23:ef:c5:7a:64:ac:c0:41:0f:c8:c0:13:91:14: 10:ff:a6:01:1d:3f:37:14:80:a8:b0:31:16:f5:f9:9a:42:d6: 6d:f1:af:ef:7e:de:cc:9a:42:3e:15:34:75:82:aa:dd:94:33: f7:ce:9b:bc:8a:ae:5f:81:58:09:e8:a7:42:06:0a:dd:4f:5a: 17:64:63:fc:b6:6b:6c:9e:94:9d:0c:d7:2b:8c:7e:39:f3:7d: 63:3b:09:8a:14:d1:ea:77:04:e5:e0:a8:4a:5e:cb:a2:a1:8f: 23:84:c6:5d:dc:66:c3:fc:11:1d:67:bd:2e:e0:6f:57:49:26: 22:08:c8:9f:dc:d6:9e:af:5c:bd:7d:cf:ca:47:93:ad:4a:6b: 4e:81:b5:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkzRjQxMTAvBgNVBAUTKEU2QTU0QkFEN0QxNzZFNDQ0N0E5RTk0RjI0NDgwMzI3 QzFCNDBDOUUwHhcNMjUwMzI4MjAyNjUxWhcNMjUwNDA0MjAyNjUxWjAYMRYwFAYD VQQDEw02N2U3MDYwYy1lZjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp49sRN6AhOM+0yni8jev3re+2+33UIGFoCokFwwSe9IMBOpZrpfqZ2uBXlpG pJL3TPbEXkNFI3cmbfSNicKMZ1VOEdA5X+WZ/pxwtFuufvuqN22vSHqMG6C4ciYP F+WLO4fUhD9zwNjyvD/9xkjimt0V4L6JEfq3Rc/vuTo8dwqidTGN82I32u4rKueW eSEgwaTuFJQqbGoZxIZ1jVC1MmOX4AlGSAwEEeJ1HRRxm2iouohU/3nwQ9Jxki/+ 85BrU/4XdPAffXt6xGZF6I1nbauSZR202prRgbTAFaunCiwp2MbekJExfCCz11d4 JPAAqYFRwKjQyV3Q/OMHXVUdcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXrdsIk uuPOUA3rFxbvsvoARZqHMB8GA1UdIwQYMBaAFOalS619F25ER6npTyRIAyfBtAye MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTNGNC8xRjY5NUVFQzhF N0YxMUVBQTk1ODRDNjdDNEY5QUUwMi81cVZMclgwWGJrUkhxZWxQSkVnREo4RzBE SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVxVkxyWDBYYmtSSHFlbFBKRWdESjhHMERKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTNGNC8xRjY5NUVFQzhFN0YxMUVBQTk1ODRDNjdDNEY5QUUwMi81cVZMclgwWGJr UkhxZWxQSkVnREo4RzBESjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzR7vR736h3rUiNfgsCIFL1z7MeOylQHi3uJ9pqGwU5X5ipz6mwbW5 oxpx3J9qd5Mzt7ssf7z/yGz0MCOPHS8ODr7nzTZmZR79oq4Ch6MjHURMtnt8i8wL gluZvb0AprwQNYO3knCxudqmZ8MK8c0iI+/FemSswEEPyMATkRQQ/6YBHT83FICo sDEW9fmaQtZt8a/vft7MmkI+FTR1gqrdlDP3zpu8iq5fgVgJ6KdCBgrdT1oXZGP8 tmtsnpSdDNcrjH45831jOwmKFNHqdwTl4KhKXsuioY8jhMZd3GbD/BEdZ70u4G9X SSYiCMif3Naer1y9fc/KR5OtSmtOgbWM -----END CERTIFICATE-----Generated at Fri Apr 4 18:45:33 2025 by rpki-client