$ rpki-client -vvf rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft File: 5C5CACqDeHpnr4y5qFH5OZdGwTI.mft (raw, json) Hash identifier: LKpv619J8EzOu0k1tD9CGiDb+KmymS2lfhQ1DJumK3U= Subject key identifier: 8E:97:14:23:61:AA:2A:D0:31:D4:E1:19:96:EC:92:57:A2:3F:26:36 Authority key identifier: E4:2E:42:00:2A:83:78:7A:67:AF:8C:B9:A8:51:F9:39:97:46:C1:32 Certificate issuer: /CN=A91566DC/serialNumber=E42E42002A83787A67AF8CB9A851F9399746C132 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft Manifest number: 62 Signing time: Fri 11 Apr 2025 06:12:40 +0000 Manifest this update: Fri 11 Apr 2025 06:12:39 +0000 Manifest next update: Fri 18 Apr 2025 06:12:39 +0000 Files and hashes: 1: 5C5CACqDeHpnr4y5qFH5OZdGwTI.crl (hash: /E47hDCIEQjNdv/wMyjXQqu8n2noXp9zLluQ+7z7oXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.crl rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 06:12:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91566DC, serialNumber=E42E42002A83787A67AF8CB9A851F9399746C132 Validity Not Before: Apr 11 06:12:39 2025 GMT Not After : Apr 18 06:12:39 2025 GMT Subject: CN=67f8b2d7-adc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:0a:62:a8:4b:a0:bf:56:7a:23:6c:e2:a6:bc: 1d:d2:60:de:89:0b:e0:9a:ca:18:32:35:71:e7:d1: ca:b7:61:9d:d0:6c:ae:92:fc:88:1f:c3:6b:67:23: f9:77:4a:33:f1:41:08:1a:ae:3f:cf:5b:60:47:66: 70:74:d1:25:5d:02:21:cc:e0:64:a6:1e:de:f9:d0: 6b:30:48:16:95:51:13:d6:0e:5f:e3:fe:20:1f:69: 8e:da:f4:2b:f0:b2:48:87:1c:09:9b:ad:fc:43:a0: 0e:d3:8b:f2:74:96:74:1a:36:76:64:73:af:ce:9a: 62:48:9d:11:bc:17:2e:6c:60:eb:73:97:d5:38:ae: b2:02:35:3c:65:87:f5:52:be:54:f3:73:87:f8:30: 66:20:10:e8:e9:51:e2:e5:29:55:f7:f3:b0:41:89: dc:81:c3:cb:e9:df:9d:d2:50:89:22:ec:1a:e8:93: 64:08:bf:5a:70:63:26:67:ae:4d:76:e7:51:6f:a8: b4:85:f3:a6:26:48:e1:d7:a9:22:02:b2:eb:53:1e: b5:77:80:2d:cd:53:e1:dc:9c:c3:35:8c:eb:d3:2b: 5b:16:75:01:ac:8d:b0:5a:55:81:b7:45:be:72:b1: 60:a7:15:a4:d1:15:1a:92:04:de:1d:65:aa:30:e1: e4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:97:14:23:61:AA:2A:D0:31:D4:E1:19:96:EC:92:57:A2:3F:26:36 X509v3 Authority Key Identifier: keyid:E4:2E:42:00:2A:83:78:7A:67:AF:8C:B9:A8:51:F9:39:97:46:C1:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:28:4a:c1:cc:bc:d2:76:7f:da:43:74:e8:e6:fe:5a:0f:20: d3:70:91:3c:1a:b9:03:c6:6f:df:3e:5c:1c:0f:5d:2b:7c:76: a8:e9:af:03:8e:ad:dd:2f:a4:5f:87:0a:12:09:72:96:56:62: 20:c2:6c:27:3c:af:d7:00:35:b9:07:51:9b:f7:c1:0b:d4:3f: 73:fd:01:ea:48:03:71:c8:36:a7:c0:8d:1c:7c:bc:58:80:89: 02:6e:47:bb:20:c4:b0:73:03:e3:1d:1e:65:11:75:e0:9a:cb: 63:d9:f4:6f:ff:2a:85:24:0e:bb:30:3b:68:a6:18:6b:f6:1f: 72:c1:f8:2f:68:71:09:2b:f7:1e:d3:f5:8a:27:44:57:f2:32: 94:2a:54:4e:ff:67:8f:b4:26:2c:c7:1c:1f:d6:fd:7c:18:4c: 17:5b:40:cc:4d:ac:2c:35:19:83:17:a7:1e:02:be:44:51:4e: 6a:5b:03:c0:c2:2f:be:9f:04:3f:76:7d:e5:37:3d:7d:73:b2: e3:ee:d9:f3:ce:e6:ac:3f:4b:7c:8b:e7:c8:b5:4d:5c:86:35: 9f:4d:b3:dc:43:5c:d2:25:92:9b:67:db:c5:76:f9:a8:ed:73: ae:be:a9:df:98:4f:39:14:53:60:ef:ee:ff:4a:4b:5c:53:d4: 7d:84:72:5c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjZEQzExMC8GA1UEBRMoRTQyRTQyMDAyQTgzNzg3QTY3QUY4Q0I5QTg1MUY5Mzk5 NzQ2QzEzMjAeFw0yNTA0MTEwNjEyMzlaFw0yNTA0MTgwNjEyMzlaMBgxFjAUBgNV BAMTDTY3ZjhiMmQ3LWFkYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqCmKoS6C/VnojbOKmvB3SYN6JC+CayhgyNXHn0cq3YZ3QbK6S/Igfw2tnI/l3 SjPxQQgarj/PW2BHZnB00SVdAiHM4GSmHt750GswSBaVURPWDl/j/iAfaY7a9Cvw skiHHAmbrfxDoA7Ti/J0lnQaNnZkc6/OmmJInRG8Fy5sYOtzl9U4rrICNTxlh/VS vlTzc4f4MGYgEOjpUeLlKVX387BBidyBw8vp353SUIki7Brok2QIv1pwYyZnrk12 51FvqLSF86YmSOHXqSICsutTHrV3gC3NU+HcnMM1jOvTK1sWdQGsjbBaVYG3Rb5y sWCnFaTRFRqSBN4dZaow4eTrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjpcUI2Gq KtAx1OEZluySV6I/JjYwHwYDVR0jBBgwFoAU5C5CACqDeHpnr4y5qFH5OZdGwTIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2NkRDLzgwQ0UyNzhBODQ2 QjExRUY5QzQyNEQzQUM0RjlBRTAyLzVDNUNBQ3FEZUhwbnI0eTVxRkg1T1pkR3dU SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNUM1Q0FDcURlSHBucjR5NXFGSDVPWmRHd1RJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 NkRDLzgwQ0UyNzhBODQ2QjExRUY5QzQyNEQzQUM0RjlBRTAyLzVDNUNBQ3FEZUhw bnI0eTVxRkg1T1pkR3dUSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB0oSsHMvNJ2f9pDdOjm/loPINNwkTwauQPGb98+XBwPXSt8dqjprwOO rd0vpF+HChIJcpZWYiDCbCc8r9cANbkHUZv3wQvUP3P9AepIA3HINqfAjRx8vFiA iQJuR7sgxLBzA+MdHmURdeCay2PZ9G//KoUkDrswO2imGGv2H3LB+C9ocQkr9x7T 9YonRFfyMpQqVE7/Z4+0JizHHB/W/XwYTBdbQMxNrCw1GYMXpx4CvkRRTmpbA8DC L76fBD92feU3PX1zsuPu2fPO5qw/S3yL58i1TVyGNZ9Ns9xDXNIlkptn28V2+ajt c66+qd+YTzkUU2Dv7v9KS1xT1H2Eclw= -----END CERTIFICATE-----Generated at Sat Apr 12 17:16:07 2025 by rpki-client