$ rpki-client -vvf rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft File: A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft (raw, json) Hash identifier: 6S+2MbkIJrARCyoECTMdQP4oWd2eHU4BI6QHDVm55YY= Subject key identifier: 87:37:B8:89:1A:98:CB:51:13:59:63:35:8A:33:71:0F:B3:43:1C:57 Authority key identifier: 03:91:D9:A7:0E:89:3E:75:1B:C6:12:89:C5:44:17:B8:7A:10:45:59 Certificate issuer: /CN=A91380F7/serialNumber=0391D9A70E893E751BC61289C54417B87A104559 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft Manifest number: 4D Signing time: Thu 17 Apr 2025 06:07:14 +0000 Manifest this update: Thu 17 Apr 2025 06:07:14 +0000 Manifest next update: Thu 24 Apr 2025 06:07:14 +0000 Files and hashes: 1: A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl (hash: xU9+jIhmWu+4P2k/yEY/nyJP5LYFbOlB+HfSAZO1pfo=) 2: 9B3FE178A7FA11EFA7886875C4F9AE02.roa (hash: wskyOCDE340iqc6+xbxJBMsRJGfe9vODWh/hz8Ga1HM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 06:07:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91380F7, serialNumber=0391D9A70E893E751BC61289C54417B87A104559 Validity Not Before: Apr 17 06:07:14 2025 GMT Not After : Apr 24 06:07:14 2025 GMT Subject: CN=68009a92-fa50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:0a:ca:23:f5:ce:03:d5:24:de:28:29:15:11: ac:82:45:47:03:de:72:ef:50:69:bf:4a:4e:b0:25: d7:58:18:36:c9:70:3b:be:be:ef:7a:90:43:39:d1: e1:59:e3:1f:9d:62:37:85:6d:09:a7:a4:c2:3f:14: 0b:01:7b:d4:47:53:42:19:bf:a0:6d:65:c8:0d:89: 20:b7:3b:83:f5:50:c9:49:19:da:ce:29:7b:a1:89: 00:40:42:0c:0a:93:8e:ae:20:a8:9a:0c:05:e9:73: 3a:0d:67:52:d7:89:c0:e3:28:b8:03:88:b2:39:e1: a3:01:e2:d1:01:b4:21:4c:10:cf:13:9f:79:57:37: 50:6c:a6:90:35:33:d6:88:af:8a:99:1f:23:54:d7: 0b:18:8d:a4:b2:11:69:27:ca:e1:14:72:7d:36:cf: b1:5e:fa:6f:78:6a:73:f2:ff:49:df:b1:14:10:74: 08:68:9f:ac:42:d0:a6:2a:5a:d6:39:e5:d0:41:c0: a3:f2:f3:64:c4:ad:d0:d2:cb:ba:55:3e:53:c8:30: 3a:40:97:00:83:8e:4b:78:2a:75:01:66:9f:12:c4: 0a:29:ea:08:da:aa:af:85:18:d9:88:e3:06:7b:e0: 1c:61:5e:eb:39:31:57:f3:7b:ca:cb:a5:e9:c1:5e: e7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:37:B8:89:1A:98:CB:51:13:59:63:35:8A:33:71:0F:B3:43:1C:57 X509v3 Authority Key Identifier: keyid:03:91:D9:A7:0E:89:3E:75:1B:C6:12:89:C5:44:17:B8:7A:10:45:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:9b:7d:8e:ef:dc:c4:34:62:e5:27:80:2b:d8:58:fa:da:07: 1b:f3:1e:bb:8c:4c:11:43:60:40:b3:1f:3a:0e:bd:11:ec:83: 80:7f:59:05:a7:99:97:ba:e8:0c:3d:ec:c9:78:0d:dc:b9:c5: d2:83:e3:f6:d4:7b:f8:63:79:b8:04:f7:cc:b1:00:88:6f:58: 06:b5:bb:5c:10:44:72:7f:a7:82:32:d8:4f:00:e9:a5:a6:25: cb:73:1e:fb:02:ae:b1:71:fd:f4:8f:92:53:71:6b:f1:50:bc: ce:b9:8a:22:af:c0:fc:4b:bd:ea:af:49:be:54:a1:a4:93:ea: e2:ce:bf:77:a1:b8:8a:7f:d4:0d:c3:5e:48:96:5c:09:85:90: 6f:87:ee:25:c8:bf:06:94:2c:4f:37:53:a1:53:01:b2:a1:82: ba:02:c3:10:e1:e3:59:2f:fb:a0:7f:ab:cc:d5:31:40:80:a6: 62:e2:aa:4f:3a:8b:95:93:96:19:3a:93:79:f4:41:18:07:ba: d7:d6:24:9f:6b:bd:39:93:5e:83:ed:8f:fe:c2:6d:67:87:78: 0a:10:ab:84:1c:f3:d3:ce:7e:ca:63:4d:14:7d:3f:4a:99:ba: 45:80:8c:05:fd:24:b9:bd:cf:a4:b3:60:cc:9b:fb:bc:0b:29: 04:28:e1:8c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODBGNzExMC8GA1UEBRMoMDM5MUQ5QTcwRTg5M0U3NTFCQzYxMjg5QzU0NDE3Qjg3 QTEwNDU1OTAeFw0yNTA0MTcwNjA3MTRaFw0yNTA0MjQwNjA3MTRaMBgxFjAUBgNV BAMTDTY4MDA5YTkyLWZhNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD1Csoj9c4D1STeKCkVEayCRUcD3nLvUGm/Sk6wJddYGDbJcDu+vu96kEM50eFZ 4x+dYjeFbQmnpMI/FAsBe9RHU0IZv6BtZcgNiSC3O4P1UMlJGdrOKXuhiQBAQgwK k46uIKiaDAXpczoNZ1LXicDjKLgDiLI54aMB4tEBtCFMEM8Tn3lXN1BsppA1M9aI r4qZHyNU1wsYjaSyEWknyuEUcn02z7Fe+m94anPy/0nfsRQQdAhon6xC0KYqWtY5 5dBBwKPy82TErdDSy7pVPlPIMDpAlwCDjkt4KnUBZp8SxAop6gjaqq+FGNmI4wZ7 4BxhXus5MVfze8rLpenBXufJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhze4iRqY y1ETWWM1ijNxD7NDHFcwHwYDVR0jBBgwFoAUA5HZpw6JPnUbxhKJxUQXuHoQRVkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4MEY3L0E3RUJDMUQyQTdG ODExRUZCQjQ0RjM3MUM0RjlBRTAyL0E1SFpwdzZKUG5VYnhoS0p4VVFYdUhvUVJW ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQTVIWnB3NkpQblVieGhLSnhVUVh1SG9RUlZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 MEY3L0E3RUJDMUQyQTdGODExRUZCQjQ0RjM3MUM0RjlBRTAyL0E1SFpwdzZKUG5V YnhoS0p4VVFYdUhvUVJWay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMSbfY7v3MQ0YuUngCvYWPraBxvzHruMTBFDYECzHzoOvRHsg4B/WQWn mZe66Aw97Ml4Ddy5xdKD4/bUe/hjebgE98yxAIhvWAa1u1wQRHJ/p4Iy2E8A6aWm JctzHvsCrrFx/fSPklNxa/FQvM65iiKvwPxLveqvSb5UoaST6uLOv3ehuIp/1A3D XkiWXAmFkG+H7iXIvwaULE83U6FTAbKhgroCwxDh41kv+6B/q8zVMUCApmLiqk86 i5WTlhk6k3n0QRgHutfWJJ9rvTmTXoPtj/7CbWeHeAoQq4Qc89POfspjTRR9P0qZ ukWAjAX9JLm9z6SzYMyb+7wLKQQo4Yw= -----END CERTIFICATE-----Generated at Sat Apr 19 01:05:00 2025 by rpki-client