$ rpki-client -vvf rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft File: 5r9G5TDfkimPrAMq-8mECcRDBDk.mft (raw, json) Hash identifier: lTthST8YEyxZcINXQNU7Hy5lOHf5OIKBLIvrZAVxzrs= Subject key identifier: 28:3A:59:AE:AD:31:59:F0:F1:48:3A:5C:83:8C:D1:96:D5:FE:76:E3 Authority key identifier: E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39 Certificate issuer: /CN=A91527F9/serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439 Certificate serial: 3492 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft Manifest number: 347E Signing time: Sat 12 Apr 2025 14:54:54 +0000 Manifest this update: Sat 12 Apr 2025 14:54:53 +0000 Manifest next update: Sat 19 Apr 2025 14:54:53 +0000 Files and hashes: 1: 5r9G5TDfkimPrAMq-8mECcRDBDk.crl (hash: dlu6zioaOjIWRqV81IGXq8a3ny7RZpkwX3g14vMd9mg=) 2: 909C5126F0A711EEA6150174C4F9AE02.roa (hash: HW9R1Ep56SryGIz4W6P5CqXSgSxlXz4KavtGaF387a4=) 3: AD5BA998D85D11EB8E31070BC4F9AE02.roa (hash: AqcTvl3JE8iQmp2mHhzhnxH+2xnTnNkhAQ8gJbtZg+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13458 (0x3492) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91527F9, serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439 Validity Not Before: Apr 12 14:54:53 2025 GMT Not After : Apr 19 14:54:53 2025 GMT Subject: CN=67fa7ebe-2216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6c:50:15:8c:46:03:77:84:c4:5f:df:da:6b: 9a:0a:11:bc:53:26:32:00:37:41:49:f4:e9:03:c9: 96:01:2c:b5:59:28:25:19:13:b6:32:e5:60:ff:3e: 54:28:93:f2:16:56:43:2a:90:8b:b7:04:60:e2:61: 57:00:84:d5:c1:32:7c:5c:58:ca:1c:70:3c:c3:7e: 4c:8d:3c:cc:f9:65:73:c1:e8:98:95:29:94:7f:ec: 83:60:13:81:96:a1:ed:4f:aa:cf:1f:f9:6c:77:76: 29:b4:a0:68:12:d9:20:af:b7:c8:ca:14:be:36:bc: f4:94:91:3a:3b:4f:76:e7:88:55:dd:77:01:4b:40: 63:2e:17:1e:78:1e:bb:da:e5:83:8b:2a:01:dc:a1: fa:37:1a:fc:b0:26:b5:29:26:fc:ea:c2:d8:10:c2: a8:4d:29:01:03:64:4b:23:25:3b:a8:95:76:d1:8f: db:82:ac:c0:fc:37:b1:91:37:8e:7e:5d:13:f4:04: 52:f8:73:98:c0:0d:00:ea:f7:cd:be:43:ff:a9:7e: 72:11:af:b9:0f:a9:ab:ed:7d:1b:3c:92:47:ab:c9: 06:68:28:41:53:31:37:92:da:e8:12:45:87:84:1a: 59:41:44:ef:9f:d5:bd:e1:96:11:21:e5:5c:3e:96: da:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3A:59:AE:AD:31:59:F0:F1:48:3A:5C:83:8C:D1:96:D5:FE:76:E3 X509v3 Authority Key Identifier: keyid:E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:3a:ef:5a:f7:51:ed:07:54:97:77:c3:56:79:a2:7c:70:d1: 43:1d:f1:db:fa:3f:02:c9:ab:fe:67:b0:1c:cb:ba:2c:e8:ee: 43:61:0a:6f:0b:15:7b:14:9d:64:b6:b9:3b:a4:30:c6:63:d3: 56:92:9f:5d:c4:30:4c:3c:eb:75:49:2e:4a:87:1c:7d:e7:0f: 89:dd:32:78:af:10:8b:45:45:84:b8:a4:4c:1f:b5:69:57:18: 14:85:bb:b0:3f:91:f4:92:ee:0b:b2:76:d8:fe:d5:09:98:1d: 81:c5:83:65:f4:3b:1c:a8:3b:5a:17:94:0f:99:1d:64:ed:6e: d8:d9:61:69:30:c0:77:b6:82:68:19:65:94:f2:3b:47:08:79: 51:81:c8:f8:eb:01:a7:e1:34:03:a5:b7:30:54:46:d6:23:67: 54:f2:eb:89:f8:45:24:28:a8:d0:21:d9:17:e5:17:e7:fb:cb: d0:d0:a1:6e:bb:7d:9a:a3:33:7a:0f:fb:d6:e9:5a:79:69:b6: ec:d5:d5:ba:f7:4b:17:d4:f9:a6:12:e8:16:dc:1b:7a:23:30: e9:74:5e:68:24:0e:6f:15:71:7e:37:66:57:fa:33:80:24:9c: a8:95:9f:46:9a:af:d0:f6:f4:b5:0f:f3:48:13:7c:c7:eb:bd: 1f:a9:70:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI3RjkxMTAvBgNVBAUTKEU2QkY0NkU1MzBERjkyMjk4RkFDMDMyQUZCQzk4NDA5 QzQ0MzA0MzkwHhcNMjUwNDEyMTQ1NDUzWhcNMjUwNDE5MTQ1NDUzWjAYMRYwFAYD VQQDEw02N2ZhN2ViZS0yMjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWxQFYxGA3eExF/f2muaChG8UyYyADdBSfTpA8mWASy1WSglGRO2MuVg/z5U KJPyFlZDKpCLtwRg4mFXAITVwTJ8XFjKHHA8w35MjTzM+WVzweiYlSmUf+yDYBOB lqHtT6rPH/lsd3YptKBoEtkgr7fIyhS+Nrz0lJE6O09254hV3XcBS0BjLhceeB67 2uWDiyoB3KH6Nxr8sCa1KSb86sLYEMKoTSkBA2RLIyU7qJV20Y/bgqzA/DexkTeO fl0T9ARS+HOYwA0A6vfNvkP/qX5yEa+5D6mr7X0bPJJHq8kGaChBUzE3ktroEkWH hBpZQUTvn9W94ZYRIeVcPpbaEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCg6Wa6t MVnw8Ug6XIOM0ZbV/nbjMB8GA1UdIwQYMBaAFOa/RuUw35Ipj6wDKvvJhAnEQwQ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjdGOS82RUQyRUJBQTFE OUExMUUyQUU5M0FEODcwOEIwMkNEMi81cjlHNVREZmtpbVByQU1xLThtRUNjUkRC RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyOUc1VERma2ltUHJBTXEtOG1FQ2NSREJEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjdGOS82RUQyRUJBQTFEOUExMUUyQUU5M0FEODcwOEIwMkNEMi81cjlHNVREZmtp bVByQU1xLThtRUNjUkRCRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVOu9a91HtB1SXd8NWeaJ8cNFDHfHb+j8Cyav+Z7Acy7os6O5DYQpv CxV7FJ1ktrk7pDDGY9NWkp9dxDBMPOt1SS5Khxx95w+J3TJ4rxCLRUWEuKRMH7Vp VxgUhbuwP5H0ku4LsnbY/tUJmB2BxYNl9DscqDtaF5QPmR1k7W7Y2WFpMMB3toJo GWWU8jtHCHlRgcj46wGn4TQDpbcwVEbWI2dU8uuJ+EUkKKjQIdkX5Rfn+8vQ0KFu u32aozN6D/vW6Vp5abbs1dW690sX1PmmEugW3Bt6IzDpdF5oJA5vFXF+N2ZX+jOA JJyolZ9Gmq/Q9vS1D/NIE3zH670fqXAP -----END CERTIFICATE-----Generated at Sat Apr 12 18:29:54 2025 by rpki-client