$ rpki-client -vvf rpki.apnic.net/member_repository/A913F680/E1FBFA067F1311EC93FC5C5FC4F9AE02/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.mft File: 5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.mft (raw, json) Hash identifier: EddCADuNo67oc4sT2cfhCN70KrHuosrLKN88g9HbAjo= Subject key identifier: 34:4F:44:80:3F:94:7C:98:BF:32:F9:B5:79:83:59:94:B1:A6:8D:58 Authority key identifier: E7:F8:C2:23:61:A9:EC:B7:61:EB:FB:01:E8:B9:77:C9:07:A4:F1:F4 Certificate issuer: /CN=A913F680/serialNumber=E7F8C22361A9ECB761EBFB01E8B977C907A4F1F4 Certificate serial: 03CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F680/E1FBFA067F1311EC93FC5C5FC4F9AE02/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.mft Manifest number: 03CA Signing time: Sat 05 Apr 2025 00:43:22 +0000 Manifest this update: Sat 05 Apr 2025 00:43:21 +0000 Manifest next update: Sat 12 Apr 2025 00:43:21 +0000 Files and hashes: 1: 5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.crl (hash: Lz8VtLrAJs2FaXtFRdSTFlIQRBmfN9urXIQi3JtgYG8=) 2: 019A77BC7F1811ECA6613535C4F9AE02.roa (hash: TYgGuCEN99XGmSfrnTADvpJpaIXgCSABomnSKWfx4Gw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F680/E1FBFA067F1311EC93FC5C5FC4F9AE02/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.crl rsync://rpki.apnic.net/member_repository/A913F680/E1FBFA067F1311EC93FC5C5FC4F9AE02/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:43:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 974 (0x3ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F680 Validity Not Before: Apr 5 00:43:21 2025 GMT Not After : Apr 12 00:43:21 2025 GMT Subject: CN=67f07caa-e2cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:72:31:28:94:56:01:8b:90:2a:c6:78:00:13: 9d:4b:0f:96:c1:ad:40:14:16:e3:54:8c:e5:61:e3: 9a:48:74:11:0f:ba:33:08:f2:e8:5f:ea:8d:16:ae: 5c:5f:c1:d5:e3:70:ba:72:f1:4a:f0:2f:2b:ce:93: 94:cd:97:c4:55:fd:bf:74:87:e2:00:a5:c1:e9:db: 6d:87:36:19:88:05:0d:ab:0f:8a:ff:07:74:79:a4: af:6a:ef:b6:4b:32:31:5c:81:b0:b4:cb:fe:32:17: 89:37:73:62:e7:3c:13:2b:41:7e:ce:c6:f5:08:32: 78:d4:0e:d3:2e:bb:f6:ee:89:87:fc:18:98:d7:ad: 5b:70:eb:bf:18:bf:6b:7d:98:51:dc:94:91:6c:41: 42:59:9d:15:f7:c7:00:6b:a6:69:87:b8:a2:7d:75: d5:92:0e:f7:4a:b7:7d:a9:35:44:8a:62:5f:70:23: 43:43:3c:09:3f:d0:03:f5:28:28:72:3b:f1:64:7a: 8e:ee:ce:f1:e9:6b:f0:bc:e5:97:e9:1d:4d:68:24: 80:dc:52:91:48:ca:e5:4f:94:43:40:2f:4b:f6:af: 57:2e:9e:77:9a:41:fb:1f:91:d7:aa:a1:cd:0e:ee: 6a:2c:6d:f9:f4:3e:4d:28:67:75:b5:c1:5c:58:90: be:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:4F:44:80:3F:94:7C:98:BF:32:F9:B5:79:83:59:94:B1:A6:8D:58 X509v3 Authority Key Identifier: keyid:E7:F8:C2:23:61:A9:EC:B7:61:EB:FB:01:E8:B9:77:C9:07:A4:F1:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F680/E1FBFA067F1311EC93FC5C5FC4F9AE02/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F680/E1FBFA067F1311EC93FC5C5FC4F9AE02/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:aa:b0:f6:5f:f9:75:d9:3e:05:5e:7a:85:f5:e5:fa:20:c1: 55:61:37:7c:5c:22:a1:94:d7:5e:9c:00:60:8f:ec:55:88:59: 7e:31:56:1c:de:1b:b4:85:a7:f1:38:e5:56:cb:69:09:75:50: fe:a1:20:04:c6:36:3a:4c:ba:b4:83:fd:1d:b1:4d:28:da:82: 61:68:1b:9f:5d:57:81:d3:93:08:e4:0c:a0:95:8e:55:14:db: 5e:b1:ce:b9:21:1d:2f:29:7a:99:a2:75:dc:5f:c9:e8:a6:f6: 38:11:0e:1e:63:c5:88:01:84:bb:33:e7:d8:11:db:c8:31:94: 85:6a:7e:2a:b0:cd:65:e1:ab:95:e0:04:18:27:ef:b8:7d:c3: 61:d1:c1:d7:c7:1e:3b:89:0c:e7:31:e7:48:66:cd:f2:0e:1e: 53:55:04:5f:4b:e0:b8:bd:ab:50:1e:b8:cd:b2:41:03:89:dd: 10:77:49:32:c4:33:b3:6c:78:33:81:51:3f:8e:19:55:a6:fb: 01:cb:50:d9:99:27:11:5c:23:d0:32:c8:7f:6c:2e:c3:3b:29: e2:9d:95:cf:3c:ff:1f:38:ad:6a:b7:95:81:cf:8b:53:8e:30: 0b:1e:a2:d9:b2:4c:da:e3:a6:2b:38:e1:88:34:0e:b2:d8:2a: 42:9b:53:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y2ODAxMTAvBgNVBAUTKEU3RjhDMjIzNjFBOUVDQjc2MUVCRkIwMUU4Qjk3N0M5 MDdBNEYxRjQwHhcNMjUwNDA1MDA0MzIxWhcNMjUwNDEyMDA0MzIxWjAYMRYwFAYD VQQDEw02N2YwN2NhYS1lMmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3IxKJRWAYuQKsZ4ABOdSw+Wwa1AFBbjVIzlYeOaSHQRD7ozCPLoX+qNFq5c X8HV43C6cvFK8C8rzpOUzZfEVf2/dIfiAKXB6dtthzYZiAUNqw+K/wd0eaSvau+2 SzIxXIGwtMv+MheJN3Ni5zwTK0F+zsb1CDJ41A7TLrv27omH/BiY161bcOu/GL9r fZhR3JSRbEFCWZ0V98cAa6Zph7iifXXVkg73Srd9qTVEimJfcCNDQzwJP9AD9Sgo cjvxZHqO7s7x6WvwvOWX6R1NaCSA3FKRSMrlT5RDQC9L9q9XLp53mkH7H5HXqqHN Du5qLG359D5NKGd1tcFcWJC+EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRPRIA/ lHyYvzL5tXmDWZSxpo1YMB8GA1UdIwQYMBaAFOf4wiNhqey3Yev7Aei5d8kHpPH0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjY4MC9FMUZCRkEwNjdG MTMxMUVDOTNGQzVDNUZDNEY5QUUwMi81X2pDSTJHcDdMZGg2X3NCNkxsM3lRZWs4 ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVfakNJMkdwN0xkaDZfc0I2TGwzeVFlazhmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjY4MC9FMUZCRkEwNjdGMTMxMUVDOTNGQzVDNUZDNEY5QUUwMi81X2pDSTJHcDdM ZGg2X3NCNkxsM3lRZWs4ZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnqrD2X/l12T4FXnqF9eX6IMFVYTd8XCKhlNdenABgj+xViFl+MVYc 3hu0hafxOOVWy2kJdVD+oSAExjY6TLq0g/0dsU0o2oJhaBufXVeB05MI5AyglY5V FNtesc65IR0vKXqZonXcX8nopvY4EQ4eY8WIAYS7M+fYEdvIMZSFan4qsM1l4auV 4AQYJ++4fcNh0cHXxx47iQznMedIZs3yDh5TVQRfS+C4vatQHrjNskEDid0Qd0ky xDOzbHgzgVE/jhlVpvsBy1DZmScRXCPQMsh/bC7DOyninZXPPP8fOK1qt5WBz4tT jjALHqLZskza46YrOOGINA6y2CpCm1Pm -----END CERTIFICATE-----Generated at Sat Apr 5 16:20:11 2025 by rpki-client