$ rpki-client -vvf rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft File: 5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft (raw, json) Hash identifier: LCA+SF6M6jGmckIlkGIBF8GABg90MuxE/obZXWdka+0= Subject key identifier: 5F:51:21:8E:BE:92:7E:51:4D:69:27:44:79:9E:6F:DC:4E:F0:D8:28 Authority key identifier: E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18 Certificate issuer: /CN=A91367E0/serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft Manifest number: 012F Signing time: Sat 05 Apr 2025 03:54:27 +0000 Manifest this update: Sat 05 Apr 2025 03:54:26 +0000 Manifest next update: Sat 12 Apr 2025 03:54:26 +0000 Files and hashes: 1: 5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl (hash: UDlDHs4E2q/yFmBOvCrLlzpMx4sd5uBM7NpyESJfIYQ=) 2: 444EB35A459D11EEA8758641C4F9AE02.roa (hash: HFjFUtVHPNW7Qd56uS2rL+sndelmlhgFQUxhT/KgfFM=) 3: 57F3935045A011EEA9A5215EC4F9AE02.roa (hash: uVCsPTEKvx7XpzG0ppDtvL1K8RxPyB9GI7QJ+Zk5c9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 03:54:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91367E0 Validity Not Before: Apr 5 03:54:26 2025 GMT Not After : Apr 12 03:54:26 2025 GMT Subject: CN=67f0a972-200d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:eb:28:60:51:92:0e:7d:42:88:1e:43:aa:91: ee:f1:93:cb:d1:b6:11:e2:b9:96:41:19:a5:43:67: e3:cf:c7:ac:57:1d:43:34:49:80:81:12:9b:67:75: 99:83:4a:87:47:fb:cc:6e:e0:26:fd:01:48:17:d6: 9a:bb:da:3a:25:df:e6:6c:4b:d4:06:93:01:5b:1a: c5:88:a1:48:05:5d:3f:0c:b6:42:86:d7:c9:7a:36: bd:b4:bf:d5:4e:da:6f:de:36:a4:9c:7c:07:e4:9f: c7:7e:1b:91:18:ba:1f:c2:aa:21:66:e2:83:ac:9c: 7e:12:f1:fd:97:bf:91:bd:ca:da:7b:f0:b5:a6:51: 02:94:cf:62:6e:6f:48:dc:0f:9e:a7:00:35:7c:b5: f7:d6:d5:3d:72:61:4f:db:77:60:21:7d:a6:79:38: 0d:20:36:d1:b9:20:f5:42:f7:bf:db:f9:e6:8e:58: 55:c7:eb:b0:17:3a:cd:9f:61:1b:75:1c:b5:83:2c: 8c:a2:10:3a:d9:53:41:ad:e4:ff:3f:da:8e:27:73: 92:40:a9:15:8d:2a:d9:4c:17:f1:cf:60:fe:4e:a3: fd:5d:8f:09:1d:5f:19:51:ff:74:12:24:88:ed:f3: 8a:b4:75:35:4f:e9:f7:a0:a5:e0:e7:1f:f1:d9:a2: 23:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:51:21:8E:BE:92:7E:51:4D:69:27:44:79:9E:6F:DC:4E:F0:D8:28 X509v3 Authority Key Identifier: keyid:E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:c0:f2:11:29:3f:15:64:b7:3e:66:99:dd:54:b0:88:0f:74: 38:b4:61:9c:18:94:03:a4:73:48:6c:89:b9:50:83:11:00:6c: 56:92:92:3c:32:9f:a7:97:76:ca:4d:8b:0f:07:6e:53:5f:8e: 5a:67:3f:60:aa:2c:74:af:7a:84:e9:65:21:5b:47:f3:da:4d: 13:83:88:90:bd:1b:62:43:3d:71:8a:9f:d9:a4:fe:33:9e:b0: b4:4b:c1:19:2e:65:52:5a:9e:dc:96:18:80:b6:fa:be:67:13: 77:5f:91:78:51:c1:d2:3b:57:9c:0e:9d:18:aa:c8:8a:a8:e2: 03:cf:10:77:66:51:6b:f4:38:4a:b4:4d:f1:73:7b:19:d9:59: 99:59:9f:04:6c:e5:6c:57:1a:e6:5f:75:51:90:e8:ea:61:7c: c7:76:51:56:02:f1:95:8a:a3:6b:3e:2a:38:60:22:0f:f3:fa: a2:e3:30:22:f5:57:95:d3:da:5c:87:b1:24:fa:e1:13:a4:71: 88:38:69:6a:a3:f8:2f:4d:5c:14:45:02:86:5c:d6:76:82:b4: c0:c6:59:dc:04:b8:8f:5c:18:38:6c:9a:fb:c2:c9:cc:da:9b: 9f:e7:7c:5d:8b:f2:ce:a8:0c:54:a5:a0:e6:4e:ef:32:74:46: 3f:d1:9c:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY3RTAxMTAvBgNVBAUTKEU2MUJFQzEzOTI4NjMyODNEQzk5RTJGRjkzMTU3NUEz MTgxQzI4MTgwHhcNMjUwNDA1MDM1NDI2WhcNMjUwNDEyMDM1NDI2WjAYMRYwFAYD VQQDEw02N2YwYTk3Mi0yMDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+soYFGSDn1CiB5DqpHu8ZPL0bYR4rmWQRmlQ2fjz8esVx1DNEmAgRKbZ3WZ g0qHR/vMbuAm/QFIF9aau9o6Jd/mbEvUBpMBWxrFiKFIBV0/DLZChtfJeja9tL/V Ttpv3jaknHwH5J/HfhuRGLofwqohZuKDrJx+EvH9l7+Rvcrae/C1plEClM9ibm9I 3A+epwA1fLX31tU9cmFP23dgIX2meTgNIDbRuSD1Qve/2/nmjlhVx+uwFzrNn2Eb dRy1gyyMohA62VNBreT/P9qOJ3OSQKkVjSrZTBfxz2D+TqP9XY8JHV8ZUf90EiSI 7fOKtHU1T+n3oKXg5x/x2aIjGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9RIY6+ kn5RTWknRHmeb9xO8NgoMB8GA1UdIwQYMBaAFOYb7BOShjKD3Jni/5MVdaMYHCgY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjdFMC9FNDE4OTkxMDQ1 OUMxMUVFQjY5RDY4MzFDNEY5QUUwMi81aHZzRTVLR01vUGNtZUxfa3hWMW94Z2NL QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVodnNFNUtHTW9QY21lTF9reFYxb3hnY0tCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjdFMC9FNDE4OTkxMDQ1OUMxMUVFQjY5RDY4MzFDNEY5QUUwMi81aHZzRTVLR01v UGNtZUxfa3hWMW94Z2NLQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUwPIRKT8VZLc+ZpndVLCID3Q4tGGcGJQDpHNIbIm5UIMRAGxWkpI8 Mp+nl3bKTYsPB25TX45aZz9gqix0r3qE6WUhW0fz2k0Tg4iQvRtiQz1xip/ZpP4z nrC0S8EZLmVSWp7clhiAtvq+ZxN3X5F4UcHSO1ecDp0YqsiKqOIDzxB3ZlFr9DhK tE3xc3sZ2VmZWZ8EbOVsVxrmX3VRkOjqYXzHdlFWAvGViqNrPio4YCIP8/qi4zAi 9VeV09pch7Ek+uETpHGIOGlqo/gvTVwURQKGXNZ2grTAxlncBLiPXBg4bJr7wsnM 2puf53xdi/LOqAxUpaDmTu8ydEY/0Zzb -----END CERTIFICATE-----Generated at Sat Apr 5 23:07:23 2025 by rpki-client