$ rpki-client -vvf rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft File: 5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft (raw, json) Hash identifier: ZgkBXLty88wUsTi1WZwX/Bb58urkq6ihvDEyjrb4yKE= Subject key identifier: 03:88:64:F3:D9:05:1E:A8:D4:B6:8B:AE:A0:11:56:20:80:D0:86:2D Authority key identifier: E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1 Certificate issuer: /CN=A914C7F8/serialNumber=E50963D70468727356B78B7FC4380974429B64E1 Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft Manifest number: 0155 Signing time: Sat 29 Mar 2025 03:41:10 +0000 Manifest this update: Sat 29 Mar 2025 03:41:09 +0000 Manifest next update: Sat 05 Apr 2025 03:41:09 +0000 Files and hashes: 1: 5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl (hash: jwUzaGWezXTWIuKx30mi+w3vuZmX+ccDiYh1b2bDcuo=) 2: 47862E7E129C11EEA43CFD46C4F9AE02.roa (hash: M9MqZsVmz62prCxeOcSq9CpUw3/czHK+Un3uXWoG0WQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:41:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C7F8 Validity Not Before: Mar 29 03:41:09 2025 GMT Not After : Apr 5 03:41:09 2025 GMT Subject: CN=67e76bd5-02cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ed:ec:a9:8a:8d:fd:42:db:de:7a:7d:b7:7c: 53:20:b9:76:1a:5b:a2:ab:5c:f2:4f:be:45:79:0d: 33:62:49:bd:41:1e:64:aa:79:db:a3:5c:f5:af:a5: d4:59:b4:5d:18:c5:ae:a8:10:47:32:ed:4b:a4:aa: e6:fd:2b:59:02:14:d5:d8:a4:86:95:b2:74:20:da: 93:f0:87:e1:3f:25:fe:8d:ad:f0:e4:45:80:25:db: 23:fa:34:b5:36:ea:f3:57:70:73:e8:2a:d6:20:b9: be:3a:43:5d:a9:88:98:79:01:be:26:80:49:fd:5e: 80:0e:d7:fd:46:bf:85:94:08:e9:27:53:71:5b:45: 8f:83:ea:25:8c:ad:3e:e8:ac:31:d3:bf:63:b1:80: 6b:b0:f7:d2:da:2b:a5:13:dc:f7:6f:91:99:f3:21: 29:fb:7c:f9:bf:40:ff:50:78:08:26:81:f9:73:43: 8c:9c:64:fb:f9:24:30:cf:93:1f:d9:02:39:e6:a0: 03:20:f6:1f:61:7a:b2:70:70:ca:26:a9:20:fd:da: 18:5f:15:ad:47:03:a8:29:98:10:52:b7:77:be:c6: 7b:ae:f2:81:4c:c4:95:fc:e3:00:b9:09:c0:38:70: 13:bf:fa:6e:f6:96:69:38:ef:85:e6:f4:90:38:5b: 6e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:88:64:F3:D9:05:1E:A8:D4:B6:8B:AE:A0:11:56:20:80:D0:86:2D X509v3 Authority Key Identifier: keyid:E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:5c:08:3b:48:7f:a8:05:77:0e:44:9c:67:05:fb:9a:4e:bc: 00:19:3c:79:72:b4:9b:ad:86:43:14:97:9c:c4:9d:17:7b:5c: 0d:39:36:37:5b:a3:a8:55:fa:40:ad:de:8a:a8:04:73:49:5d: f4:15:e6:3c:17:c0:11:00:98:b9:6b:a0:55:f3:85:ef:58:c4: 7f:58:79:7a:db:f1:d0:da:6d:33:e1:f3:c8:92:5b:50:90:27: 5a:ab:02:49:e6:88:d5:34:51:d5:a1:81:ae:9c:74:6e:0b:c3: 52:50:ad:66:ee:13:86:6d:55:30:a7:f9:17:02:96:d6:41:dd: 89:31:b1:7c:fb:a1:16:2d:54:05:4b:ac:dd:98:13:9a:d3:52: 49:88:14:35:61:16:15:b9:14:d4:fb:83:a7:8e:8f:ae:80:94: 43:6e:5f:75:38:23:ff:ae:65:27:50:7d:9f:97:de:2c:b2:17: c3:47:0f:26:f6:d0:89:23:24:13:69:40:2b:6f:db:c5:f4:ff: 3e:79:ef:74:5d:6d:eb:b3:78:ff:ca:a2:6d:cc:dd:55:df:53: 11:e9:fa:e5:54:a8:3d:25:ec:72:75:ae:96:8e:97:72:ea:cf: c8:d0:f1:aa:d7:3d:fe:bb:38:f7:65:17:c2:e7:9c:76:fc:c6: 68:a1:03:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM3RjgxMTAvBgNVBAUTKEU1MDk2M0Q3MDQ2ODcyNzM1NkI3OEI3RkM0MzgwOTc0 NDI5QjY0RTEwHhcNMjUwMzI5MDM0MTA5WhcNMjUwNDA1MDM0MTA5WjAYMRYwFAYD VQQDEw02N2U3NmJkNS0wMmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwO3sqYqN/ULb3np9t3xTILl2Gluiq1zyT75FeQ0zYkm9QR5kqnnbo1z1r6XU WbRdGMWuqBBHMu1LpKrm/StZAhTV2KSGlbJ0INqT8IfhPyX+ja3w5EWAJdsj+jS1 NurzV3Bz6CrWILm+OkNdqYiYeQG+JoBJ/V6ADtf9Rr+FlAjpJ1NxW0WPg+oljK0+ 6Kwx079jsYBrsPfS2iulE9z3b5GZ8yEp+3z5v0D/UHgIJoH5c0OMnGT7+SQwz5Mf 2QI55qADIPYfYXqycHDKJqkg/doYXxWtRwOoKZgQUrd3vsZ7rvKBTMSV/OMAuQnA OHATv/pu9pZpOO+F5vSQOFtuBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAOIZPPZ BR6o1LaLrqARViCA0IYtMB8GA1UdIwQYMBaAFOUJY9cEaHJzVreLf8Q4CXRCm2Th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzdGOC9FMjUxMEUxQzEy OTUxMUVFODRCQUQ3NDZDNEY5QUUwMi81UWxqMXdSb2NuTld0NHRfeERnSmRFS2Ja T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRbGoxd1JvY25OV3Q0dF94RGdKZEVLYlpPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzdGOC9FMjUxMEUxQzEyOTUxMUVFODRCQUQ3NDZDNEY5QUUwMi81UWxqMXdSb2Nu Tld0NHRfeERnSmRFS2JaT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFXAg7SH+oBXcORJxnBfuaTrwAGTx5crSbrYZDFJecxJ0Xe1wNOTY3 W6OoVfpArd6KqARzSV30FeY8F8ARAJi5a6BV84XvWMR/WHl62/HQ2m0z4fPIkltQ kCdaqwJJ5ojVNFHVoYGunHRuC8NSUK1m7hOGbVUwp/kXApbWQd2JMbF8+6EWLVQF S6zdmBOa01JJiBQ1YRYVuRTU+4Onjo+ugJRDbl91OCP/rmUnUH2fl94sshfDRw8m 9tCJIyQTaUArb9vF9P8+ee90XW3rs3j/yqJtzN1V31MR6frlVKg9Jexyda6Wjpdy 6s/I0PGq1z3+uzj3ZRfC55x2/MZooQOt -----END CERTIFICATE-----Generated at Fri Apr 4 22:40:15 2025 by rpki-client