$ rpki-client -vvf rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft File: 5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft (raw, json) Hash identifier: /WlU+9yKYZ8sS1RbILwtN1wSRBtKqT82cDytcXirBOU= Subject key identifier: C6:87:4C:EF:0A:2A:A4:1D:39:66:76:02:8F:67:FA:7B:49:95:F0:D8 Authority key identifier: E5:88:C7:3E:6C:B4:FD:B3:8B:84:EE:40:F8:F9:B6:4C:50:BE:4B:73 Certificate issuer: /CN=A913ABFE/serialNumber=E588C73E6CB4FDB38B84EE40F8F9B64C50BE4B73 Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft Manifest number: 014F Signing time: Sat 29 Mar 2025 03:48:01 +0000 Manifest this update: Sat 29 Mar 2025 03:48:00 +0000 Manifest next update: Sat 05 Apr 2025 03:48:00 +0000 Files and hashes: 1: 5YjHPmy0_bOLhO5A-Pm2TFC-S3M.crl (hash: pCb3k/ZjporVSfHYVXKEzzhl0yfLZAY5fvd660GAxDI=) 2: F4C13F18066811F0B521BF2FC4F9AE02.roa (hash: epExzgPr36sDhlRxRH5MQNOpHIGT7+cJfb/YyVTxfcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.crl rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913ABFE Validity Not Before: Mar 29 03:48:00 2025 GMT Not After : Apr 5 03:48:00 2025 GMT Subject: CN=67e76d71-1b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b6:21:5d:50:f4:b3:03:85:fa:3c:c1:ef:c5: f8:df:94:bf:ee:e7:63:b9:d8:77:9a:0a:7c:46:cc: 0d:6f:f5:b4:7c:9e:82:10:a6:37:17:50:20:4f:fa: fd:61:97:f2:5f:f0:eb:17:29:0f:35:ef:19:45:6c: 4b:c7:1c:a4:10:7a:4e:24:e6:d0:ee:f2:cd:3b:74: 57:1f:00:89:d0:6b:70:fb:a5:ed:56:9b:5f:27:5f: 15:cb:94:75:8c:40:32:01:79:59:25:2b:83:b0:dd: b8:1c:02:dd:9d:72:a5:b0:90:e3:05:98:34:4d:d5: 4e:98:05:aa:41:58:6b:53:e3:4f:0a:ef:84:3f:66: e5:98:30:4d:fc:6c:23:f3:f4:dd:3a:01:66:e4:ba: d6:d4:d4:4c:56:97:8e:e0:41:e7:5d:85:2a:76:3d: 44:66:d9:e3:72:67:ea:38:1b:ad:cb:4d:20:62:79: 2b:a0:f0:94:c7:66:6f:d5:21:71:36:54:9f:09:72: 16:61:3c:cf:82:2d:e4:00:af:d5:12:cf:f1:07:44: 72:03:f7:b6:95:a9:2f:15:c7:19:2f:3b:f0:53:0a: d7:ff:71:a4:d9:a6:9c:48:a6:3a:d9:fa:5d:37:06: b4:d8:96:5f:bf:b0:8d:67:78:de:30:a7:5c:12:47: 2e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:87:4C:EF:0A:2A:A4:1D:39:66:76:02:8F:67:FA:7B:49:95:F0:D8 X509v3 Authority Key Identifier: keyid:E5:88:C7:3E:6C:B4:FD:B3:8B:84:EE:40:F8:F9:B6:4C:50:BE:4B:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:45:0b:bb:a4:5f:81:c3:06:e1:51:b6:02:04:21:da:35:e3: e9:82:78:23:fc:d9:8e:71:26:f9:a4:e3:8e:4d:b3:e3:51:4e: 6f:12:be:62:ae:3b:e5:48:a8:af:5c:93:10:09:d9:0f:72:bc: 4a:9c:3f:85:cd:0b:b9:ab:e0:b2:8f:08:bc:06:94:31:99:d5: 77:b2:94:d5:d4:73:6d:57:95:20:4c:4c:2d:0b:b5:9a:53:30: 89:74:a0:6e:01:ec:98:dd:29:22:e6:db:20:5c:11:21:3f:42: 23:9f:01:60:a2:e9:cd:86:34:99:7b:04:16:f1:f7:80:65:54: 72:d8:27:66:d3:53:f0:c4:94:ac:8e:87:4e:34:9d:00:40:bf: fb:49:fd:fe:f6:0d:c4:8a:97:b1:84:37:fa:3f:bb:a7:f6:35: 57:fa:86:d5:05:33:85:c7:af:74:7d:c7:6e:74:d4:08:df:c1: ea:6e:06:3c:92:11:7d:b2:ac:78:e6:05:c2:e8:51:5c:0f:cd: 1b:22:85:08:32:55:04:a8:60:a5:40:63:ac:49:97:16:50:07: b3:4c:ec:84:39:53:fb:ed:aa:d7:23:20:82:9e:fc:48:0e:b7: f7:64:69:84:fb:83:64:d6:91:03:be:6f:9d:88:00:04:44:9c: cc:8f:dc:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FCRkUxMTAvBgNVBAUTKEU1ODhDNzNFNkNCNEZEQjM4Qjg0RUU0MEY4RjlCNjRD NTBCRTRCNzMwHhcNMjUwMzI5MDM0ODAwWhcNMjUwNDA1MDM0ODAwWjAYMRYwFAYD VQQDEw02N2U3NmQ3MS0xYjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rYhXVD0swOF+jzB78X435S/7udjudh3mgp8RswNb/W0fJ6CEKY3F1AgT/r9 YZfyX/DrFykPNe8ZRWxLxxykEHpOJObQ7vLNO3RXHwCJ0Gtw+6XtVptfJ18Vy5R1 jEAyAXlZJSuDsN24HALdnXKlsJDjBZg0TdVOmAWqQVhrU+NPCu+EP2blmDBN/Gwj 8/TdOgFm5LrW1NRMVpeO4EHnXYUqdj1EZtnjcmfqOButy00gYnkroPCUx2Zv1SFx NlSfCXIWYTzPgi3kAK/VEs/xB0RyA/e2lakvFccZLzvwUwrX/3Gk2aacSKY62fpd Nwa02JZfv7CNZ3jeMKdcEkcumwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMaHTO8K KqQdOWZ2Ao9n+ntJlfDYMB8GA1UdIwQYMBaAFOWIxz5stP2zi4TuQPj5tkxQvktz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUJGRS9GMUQ1NTg3RTI1 RjExMUVFQjdCNDgwNThDNEY5QUUwMi81WWpIUG15MF9iT0xoTzVBLVBtMlRGQy1T M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVZakhQbXkwX2JPTGhPNUEtUG0yVEZDLVMzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUJGRS9GMUQ1NTg3RTI1RjExMUVFQjdCNDgwNThDNEY5QUUwMi81WWpIUG15MF9i T0xoTzVBLVBtMlRGQy1TM00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuRQu7pF+BwwbhUbYCBCHaNePpgngj/NmOcSb5pOOOTbPjUU5vEr5i rjvlSKivXJMQCdkPcrxKnD+FzQu5q+Cyjwi8BpQxmdV3spTV1HNtV5UgTEwtC7Wa UzCJdKBuAeyY3Ski5tsgXBEhP0IjnwFgounNhjSZewQW8feAZVRy2Cdm01PwxJSs jodONJ0AQL/7Sf3+9g3EipexhDf6P7un9jVX+obVBTOFx690fcdudNQI38HqbgY8 khF9sqx45gXC6FFcD80bIoUIMlUEqGClQGOsSZcWUAezTOyEOVP77arXIyCCnvxI Drf3ZGmE+4Nk1pEDvm+diAAERJzMj9wn -----END CERTIFICATE-----Generated at Fri Apr 4 22:01:46 2025 by rpki-client