$ rpki-client -vvf rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft File: S5R0cysQASlff10ywBNpOhk3aBM.mft (raw, json) Hash identifier: h+x7Snq9ycwKJzR90c2dp+F0G4UGhPAQMjpa/MdV4Is= Subject key identifier: 7B:BC:04:21:68:91:45:8B:CE:E1:79:43:88:5B:38:CF:6B:F8:1D:B6 Authority key identifier: 4B:94:74:73:2B:10:01:29:5F:7F:5D:32:C0:13:69:3A:19:37:68:13 Certificate issuer: /CN=A915393C/serialNumber=4B9474732B1001295F7F5D32C013693A19376813 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft Manifest number: 73 Signing time: Sat 05 Apr 2025 06:05:10 +0000 Manifest this update: Sat 05 Apr 2025 06:05:09 +0000 Manifest next update: Sat 12 Apr 2025 06:05:09 +0000 Files and hashes: 1: S5R0cysQASlff10ywBNpOhk3aBM.crl (hash: U+dun6wPTkkxASHmy5p2ZXodB8jb4DsJ04QY7ELvJFU=) 2: D970354A640E11EF93D18659C4F9AE02.roa (hash: k3HZpqynszzvTxkVmhHqGRdf/ZQZ2uvnxZO8lo9Yzko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.crl rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 06:05:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915393C Validity Not Before: Apr 5 06:05:09 2025 GMT Not After : Apr 12 06:05:09 2025 GMT Subject: CN=67f0c816-1942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c5:6c:9f:f1:5f:e0:94:2b:49:ba:fb:3b:a3: 00:44:3e:81:c0:5d:86:c3:8a:d0:5c:2a:83:c9:a9: e6:cc:5c:19:7f:ac:7a:b0:7b:d4:7b:b7:63:e8:52: 59:b9:cd:35:10:b6:16:bd:d1:38:43:4c:4f:87:1a: 2a:aa:af:a1:b4:96:ce:7e:46:94:e4:91:51:5a:1f: 3f:4d:58:9d:90:d0:3c:de:d5:d7:f6:56:0d:cf:b0: 79:f8:04:df:be:1b:90:3a:99:63:7f:c7:73:63:41: 06:cd:7b:84:f2:ad:3f:90:2d:7d:8a:0c:2a:1e:a1: cc:f8:3e:6b:ea:5d:45:47:22:5e:c4:72:17:e9:c3: 35:f3:2f:52:96:e0:e6:ba:28:44:de:2d:0d:78:83: 02:4d:ba:ed:ac:da:b0:03:74:70:17:23:20:76:a2: 29:ec:ab:1b:73:d6:2f:9d:d7:e8:63:92:ce:94:d0: 70:20:09:8c:22:30:5a:f4:da:cf:a4:a3:9c:92:e3: 83:58:1e:33:60:ad:ed:2d:38:c4:7e:28:8f:73:3b: 2b:05:50:e2:56:29:7d:4f:30:af:62:55:7d:66:59: a3:17:8a:ca:75:6c:4e:04:d6:44:6c:b4:94:8b:5d: 9f:df:a9:5b:57:49:77:92:aa:0a:d8:60:1b:f1:c3: de:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:BC:04:21:68:91:45:8B:CE:E1:79:43:88:5B:38:CF:6B:F8:1D:B6 X509v3 Authority Key Identifier: keyid:4B:94:74:73:2B:10:01:29:5F:7F:5D:32:C0:13:69:3A:19:37:68:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:46:73:2b:ce:0a:d4:5b:dd:55:0a:80:ef:0a:16:29:b4:81: a3:23:df:17:83:77:e3:cb:c4:e9:53:dc:cb:cd:a9:23:e6:c3: 11:04:02:de:9a:70:6e:17:91:e1:f2:ef:eb:97:89:e9:d3:9b: 9c:fa:19:39:52:cb:67:41:17:46:69:19:a1:64:65:76:64:72: d4:c3:73:c1:e7:c2:f5:43:1d:91:8b:fe:33:a7:ed:13:9e:35: 56:87:1f:22:17:7a:5a:2c:fb:a4:6c:2f:dd:e9:b5:9f:7f:81: ef:14:f6:94:14:15:14:bc:6d:91:3d:39:b3:c0:80:02:fb:4d: 0f:90:ca:5e:88:73:d2:e4:88:7d:9f:a8:17:f1:98:b8:27:c5: f1:61:82:78:33:64:62:5e:79:88:1a:f5:a6:be:bf:23:ae:3d: d5:da:64:a8:88:44:c9:d5:fc:74:26:20:09:4f:4a:11:3e:81: d6:a8:ec:cb:b7:a8:e8:aa:1f:75:35:00:93:73:81:3b:24:72: c2:3f:e8:2d:80:31:72:6d:79:f9:9b:ed:c3:e5:6c:74:8c:f8: ac:ca:14:1b:57:3c:ee:b7:b1:01:43:66:c0:d0:b3:df:56:62: 92:61:38:92:bb:d3:4e:db:cb:ec:fc:c8:26:94:df:53:2c:8f: d6:64:ad:c3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzkzQzExMC8GA1UEBRMoNEI5NDc0NzMyQjEwMDEyOTVGN0Y1RDMyQzAxMzY5M0Ex OTM3NjgxMzAeFw0yNTA0MDUwNjA1MDlaFw0yNTA0MTIwNjA1MDlaMBgxFjAUBgNV BAMTDTY3ZjBjODE2LTE5NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtxWyf8V/glCtJuvs7owBEPoHAXYbDitBcKoPJqebMXBl/rHqwe9R7t2PoUlm5 zTUQtha90ThDTE+HGiqqr6G0ls5+RpTkkVFaHz9NWJ2Q0Dze1df2Vg3PsHn4BN++ G5A6mWN/x3NjQQbNe4TyrT+QLX2KDCoeocz4PmvqXUVHIl7EchfpwzXzL1KW4Oa6 KETeLQ14gwJNuu2s2rADdHAXIyB2oinsqxtz1i+d1+hjks6U0HAgCYwiMFr02s+k o5yS44NYHjNgre0tOMR+KI9zOysFUOJWKX1PMK9iVX1mWaMXisp1bE4E1kRstJSL XZ/fqVtXSXeSqgrYYBvxw94FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUe7wEIWiR RYvO4XlDiFs4z2v4HbYwHwYDVR0jBBgwFoAUS5R0cysQASlff10ywBNpOhk3aBMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzOTNDLzZEMDQzMTVFNjQw RTExRUZCNTQ0NjQ1OEM0RjlBRTAyL1M1UjBjeXNRQVNsZmYxMHl3Qk5wT2hrM2FC TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUzVSMGN5c1FBU2xmZjEweXdCTnBPaGszYUJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz OTNDLzZEMDQzMTVFNjQwRTExRUZCNTQ0NjQ1OEM0RjlBRTAyL1M1UjBjeXNRQVNs ZmYxMHl3Qk5wT2hrM2FCTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACNGcyvOCtRb3VUKgO8KFim0gaMj3xeDd+PLxOlT3MvNqSPmwxEEAt6a cG4XkeHy7+uXienTm5z6GTlSy2dBF0ZpGaFkZXZkctTDc8HnwvVDHZGL/jOn7ROe NVaHHyIXelos+6RsL93ptZ9/ge8U9pQUFRS8bZE9ObPAgAL7TQ+Qyl6Ic9LkiH2f qBfxmLgnxfFhgngzZGJeeYga9aa+vyOuPdXaZKiIRMnV/HQmIAlPShE+gdao7Mu3 qOiqH3U1AJNzgTskcsI/6C2AMXJtefmb7cPlbHSM+KzKFBtXPO63sQFDZsDQs99W YpJhOJK7007by+z8yCaU31Msj9ZkrcM= -----END CERTIFICATE-----Generated at Sun Apr 6 10:09:52 2025 by rpki-client