$ rpki-client -vvf rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft File: Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft (raw, json) Hash identifier: Tyluz24pkcUwcXxGizFdv9Wvb+niv6bT3/2PdIhjbfs= Subject key identifier: 55:DB:05:5E:17:B2:01:77:2B:28:84:7B:F1:48:29:F0:C9:37:66:68 Authority key identifier: 36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF Certificate issuer: /CN=A913647F/serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft Manifest number: 5E Signing time: Sat 05 Apr 2025 06:21:52 +0000 Manifest this update: Sat 05 Apr 2025 06:21:52 +0000 Manifest next update: Sat 12 Apr 2025 06:21:52 +0000 Files and hashes: 1: Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl (hash: cWYhdKTQibEYqC0t6WIX7ecCc3oIwP2b0cbIno+x0p8=) 2: FD3934BC86E211EF8CF27626C4F9AE02.roa (hash: q92cRpTpYuTn7sZTn7J75VBEAOI5W+lV4dg/tHrggGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 06:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913647F Validity Not Before: Apr 5 06:21:52 2025 GMT Not After : Apr 12 06:21:52 2025 GMT Subject: CN=67f0cc00-4379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b7:bd:da:05:1e:b8:1d:5d:27:e5:d6:3f:8f: d1:34:fc:eb:2b:63:9a:01:49:19:b5:9a:49:20:56: 17:58:ed:32:fa:21:58:f3:44:d9:fe:69:cf:1d:56: be:db:a1:72:44:bf:ae:11:3e:06:2b:d9:36:bf:8a: 39:5b:ca:ed:64:af:ed:c7:6b:f8:1a:d7:ad:1b:d2: bc:bc:c6:d0:94:ab:f4:6f:83:3d:e6:92:da:29:dd: 49:e6:4b:6f:2c:5a:a5:1e:5b:4e:8e:ef:93:1a:c8: ee:b7:18:44:b9:00:10:a4:98:5c:3e:7e:a2:19:08: be:00:21:a7:a6:2d:1c:bd:64:75:6f:04:29:34:1a: dc:9c:51:ac:c6:ce:4f:f2:87:a0:18:dd:10:91:d7: fe:66:12:29:73:0e:48:f3:c7:d0:3d:be:f0:87:8c: 68:3b:75:0e:97:ca:ea:7b:2c:71:d9:6c:38:27:ff: 5e:b9:ab:e5:3e:7c:a3:79:85:c2:69:07:3a:06:a5: ee:19:fb:09:5d:7b:12:9b:39:01:34:dc:2c:7c:c6: f0:1c:0d:b9:15:d7:cc:ea:c0:b5:24:63:bb:a4:00: 16:ad:69:7c:88:77:08:f2:07:89:af:aa:cd:5f:9a: 51:c4:7f:7a:7f:40:dd:90:49:da:37:81:bb:36:27: d4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:DB:05:5E:17:B2:01:77:2B:28:84:7B:F1:48:29:F0:C9:37:66:68 X509v3 Authority Key Identifier: keyid:36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:d6:90:27:94:91:5a:99:c6:0d:41:31:99:c1:7f:67:f6:f7: d1:53:fa:48:54:1d:11:42:9d:38:32:e9:7f:f5:ab:15:d1:77: 5b:ee:99:55:a3:f6:55:bd:27:39:49:2b:f2:d1:2e:b8:ab:d4: 6f:c2:3b:6c:d4:75:84:35:d2:d7:c1:35:e9:b8:20:90:59:c9: fb:09:be:ed:3f:f3:08:a1:57:86:ce:2b:14:9f:63:7e:05:cb: 19:f7:eb:91:8b:b3:c6:49:ab:51:a8:c4:4c:fc:a6:e2:7d:94: ac:fd:79:bd:84:d6:12:70:94:1d:40:98:32:72:0d:03:8e:73: f3:b0:a1:ae:67:3a:60:ed:1b:29:7e:1c:e8:af:68:50:b9:17: 96:a4:00:b5:5e:10:9f:a2:18:de:2d:63:64:f4:50:c9:05:9b: b8:46:b8:0a:19:38:bf:44:d2:33:d0:ce:05:c2:da:b0:e5:e9: ea:42:ae:c4:20:35:78:34:2c:63:47:71:81:79:b7:65:39:68: e3:2a:12:07:95:8b:70:eb:ba:fc:0b:a1:05:b8:5c:39:67:4d: 52:6a:66:e8:ca:59:55:6f:19:d9:9d:81:87:08:ca:c6:2b:4e: 47:54:26:34:0e:09:80:e7:5f:7e:ad:24:28:1a:59:2e:87:d6: 6d:e5:f0:2e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NjQ3RjExMC8GA1UEBRMoMzY3ODc5QTBCODVERDgzNzM2Mzc4ODM3OTNGNTVFRUIz QjIyMURDRjAeFw0yNTA0MDUwNjIxNTJaFw0yNTA0MTIwNjIxNTJaMBgxFjAUBgNV BAMTDTY3ZjBjYzAwLTQzNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCut73aBR64HV0n5dY/j9E0/OsrY5oBSRm1mkkgVhdY7TL6IVjzRNn+ac8dVr7b oXJEv64RPgYr2Ta/ijlbyu1kr+3Ha/ga160b0ry8xtCUq/Rvgz3mktop3UnmS28s WqUeW06O75MayO63GES5ABCkmFw+fqIZCL4AIaemLRy9ZHVvBCk0GtycUazGzk/y h6AY3RCR1/5mEilzDkjzx9A9vvCHjGg7dQ6Xyup7LHHZbDgn/165q+U+fKN5hcJp BzoGpe4Z+wldexKbOQE03Cx8xvAcDbkV18zqwLUkY7ukABataXyIdwjyB4mvqs1f mlHEf3p/QN2QSdo3gbs2J9S1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVdsFXhey AXcrKIR78Ugp8Mk3ZmgwHwYDVR0jBBgwFoAUNnh5oLhd2Dc2N4g3k/Ve6zsiHc8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2NDdGL0MyMUM3Q0Y2ODZE QjExRUZCQTRENUYyNkM0RjlBRTAyL05uaDVvTGhkMkRjMk40ZzNrX1ZlNnpzaUhj OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTm5oNW9MaGQyRGMyTjRnM2tfVmU2enNpSGM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 NDdGL0MyMUM3Q0Y2ODZEQjExRUZCQTRENUYyNkM0RjlBRTAyL05uaDVvTGhkMkRj Mk40ZzNrX1ZlNnpzaUhjOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACnWkCeUkVqZxg1BMZnBf2f299FT+khUHRFCnTgy6X/1qxXRd1vumVWj 9lW9JzlJK/LRLrir1G/CO2zUdYQ10tfBNem4IJBZyfsJvu0/8wihV4bOKxSfY34F yxn365GLs8ZJq1GoxEz8puJ9lKz9eb2E1hJwlB1AmDJyDQOOc/Owoa5nOmDtGyl+ HOivaFC5F5akALVeEJ+iGN4tY2T0UMkFm7hGuAoZOL9E0jPQzgXC2rDl6epCrsQg NXg0LGNHcYF5t2U5aOMqEgeVi3DruvwLoQW4XDlnTVJqZujKWVVvGdmdgYcIysYr TkdUJjQOCYDnX36tJCgaWS6H1m3l8C4= -----END CERTIFICATE-----Generated at Sun Apr 6 03:33:59 2025 by rpki-client