$ rpki-client -vvf rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft File: u5dqWY5eywXjf6wApbeIjlf1HFI.mft (raw, json) Hash identifier: 1kB8K0SEmmxKqg/GD+P0W2OfbJpzkKgMbN0SXgbtuN4= Subject key identifier: 1E:4D:69:F2:A4:32:93:5E:1A:3C:02:C5:CC:A7:D5:69:7E:80:78:75 Authority key identifier: BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52 Certificate issuer: /CN=A91590E3/serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52 Certificate serial: 18CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft Manifest number: 189E Signing time: Fri 04 Apr 2025 16:35:28 +0000 Manifest this update: Fri 04 Apr 2025 16:35:28 +0000 Manifest next update: Fri 11 Apr 2025 16:35:28 +0000 Files and hashes: 1: u5dqWY5eywXjf6wApbeIjlf1HFI.crl (hash: rgejB9dgzO3MBhimdCfOrGUSEJ5Cokzn1MEScIYBx5E=) 2: 4A4CE204D49A11EEAB1AF055C4F9AE02.roa (hash: EzHzSCDlBlC4veKW1Q3W/qzMLdRqyApJm4hY8qe4PS0=) 3: 463C9F0C025611F0A2421B35C4F9AE02.roa (hash: yAuPj+57M0XrwOdB+8UFUTPpS+ROuj1x9AgSYokTDwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:35:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6350 (0x18ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91590E3 Validity Not Before: Apr 4 16:35:28 2025 GMT Not After : Apr 11 16:35:28 2025 GMT Subject: CN=67f00a50-f205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:70:89:93:88:30:9e:1b:31:15:5d:6d:a1:d8: 55:90:7d:a1:b3:61:aa:6c:f1:7d:9a:f8:87:18:b0: e2:c4:da:e0:54:24:7a:ba:52:3f:e8:b3:6d:06:b5: 8f:c9:21:f9:4a:13:f9:d8:15:21:bc:7b:a7:42:08: 00:57:4a:79:0e:f7:82:7a:05:12:ce:4a:8c:41:d6: 48:de:8e:a5:87:9c:09:7c:fc:c6:b3:fc:d0:4b:a3: 35:c7:ae:2a:9a:86:d3:78:72:4d:65:6b:80:58:27: c4:6c:7b:00:54:fa:f1:b0:bf:11:92:f4:5f:6a:81: a1:df:b0:45:9c:d8:7b:ef:62:45:36:dd:41:8a:72: 9a:b3:1d:16:62:09:09:0c:a2:3b:b0:35:ba:50:7b: e5:1e:af:a6:ac:2d:07:de:f7:d2:89:36:ab:c6:cc: 29:75:3c:be:e0:43:d5:27:f8:27:46:e6:0a:49:25: 08:9c:27:c6:ee:d4:47:0f:ab:7f:d9:fc:fe:c0:5e: 2a:f9:81:c3:c6:8e:59:08:0c:13:89:dd:f0:38:1c: f1:91:22:c2:e3:d4:c6:59:87:f7:9c:25:20:47:1b: 9c:4f:c1:46:33:d1:b1:20:66:c7:1c:95:ce:0d:86: 52:12:b7:24:b9:b9:a4:92:c2:44:06:42:3a:cb:fc: dd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4D:69:F2:A4:32:93:5E:1A:3C:02:C5:CC:A7:D5:69:7E:80:78:75 X509v3 Authority Key Identifier: keyid:BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:e4:3f:f5:fb:f9:0d:de:d2:e3:7e:54:c2:76:7a:50:66:67: 41:4d:ab:d5:47:39:82:23:6d:b9:8a:72:10:bf:14:4e:ce:32: a3:e5:51:51:fa:d0:e4:ed:30:3f:91:18:38:b6:e2:1b:ed:b5: 4c:4a:e3:95:bb:8b:7b:f1:64:2a:e9:d3:48:de:f1:c8:89:6a: c5:48:e7:6e:e7:bf:70:10:24:00:54:82:15:6d:91:a1:1c:f0: ed:36:1c:81:58:5d:c7:e8:05:1b:6c:d8:93:ba:29:59:0c:20: 2d:8d:85:aa:07:de:63:e8:32:cf:1b:84:e5:d0:9d:93:fa:98: 12:d7:9e:19:43:d9:f8:77:93:59:f6:1e:c2:49:f7:6b:3b:d0: a5:60:a5:5c:12:8f:96:e0:cf:ea:4b:af:91:75:05:7a:ee:1f: f5:f5:c6:1c:ab:15:76:69:67:13:3c:25:77:01:29:0f:80:1d: 83:c6:b9:36:1f:57:2f:ad:dc:0f:b8:a8:4b:45:bb:30:09:5e: f7:7e:95:e8:8d:88:c6:d2:57:cc:bb:bf:1a:17:99:08:59:ac: 68:a6:37:fd:63:96:87:5a:70:25:7c:26:59:18:a9:8e:07:bb: 70:fe:0e:e5:b0:de:1b:7c:2b:44:e6:98:ba:15:67:1c:d8:1e: 69:8a:9f:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkwRTMxMTAvBgNVBAUTKEJCOTc2QTU5OEU1RUNCMDVFMzdGQUMwMEE1Qjc4ODhF NTdGNTFDNTIwHhcNMjUwNDA0MTYzNTI4WhcNMjUwNDExMTYzNTI4WjAYMRYwFAYD VQQDEw02N2YwMGE1MC1mMjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4HCJk4gwnhsxFV1todhVkH2hs2GqbPF9mviHGLDixNrgVCR6ulI/6LNtBrWP ySH5ShP52BUhvHunQggAV0p5DveCegUSzkqMQdZI3o6lh5wJfPzGs/zQS6M1x64q mobTeHJNZWuAWCfEbHsAVPrxsL8RkvRfaoGh37BFnNh772JFNt1BinKasx0WYgkJ DKI7sDW6UHvlHq+mrC0H3vfSiTarxswpdTy+4EPVJ/gnRuYKSSUInCfG7tRHD6t/ 2fz+wF4q+YHDxo5ZCAwTid3wOBzxkSLC49TGWYf3nCUgRxucT8FGM9GxIGbHHJXO DYZSErckubmkksJEBkI6y/zdOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5NafKk MpNeGjwCxcyn1Wl+gHh1MB8GA1UdIwQYMBaAFLuXalmOXssF43+sAKW3iI5X9RxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTBFMy9EQTE4QjE4NDlB NDkxMUU3OUE5RjMwMzBDNEY5QUUwMi91NWRxV1k1ZXl3WGpmNndBcGJlSWpsZjFI RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U1ZHFXWTVleXdYamY2d0FwYmVJamxmMUhGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTBFMy9EQTE4QjE4NDlBNDkxMUU3OUE5RjMwMzBDNEY5QUUwMi91NWRxV1k1ZXl3 WGpmNndBcGJlSWpsZjFIRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT5D/1+/kN3tLjflTCdnpQZmdBTavVRzmCI225inIQvxROzjKj5VFR +tDk7TA/kRg4tuIb7bVMSuOVu4t78WQq6dNI3vHIiWrFSOdu579wECQAVIIVbZGh HPDtNhyBWF3H6AUbbNiTuilZDCAtjYWqB95j6DLPG4Tl0J2T+pgS154ZQ9n4d5NZ 9h7CSfdrO9ClYKVcEo+W4M/qS6+RdQV67h/19cYcqxV2aWcTPCV3ASkPgB2Dxrk2 H1cvrdwPuKhLRbswCV73fpXojYjG0lfMu78aF5kIWaxopjf9Y5aHWnAlfCZZGKmO B7tw/g7lsN4bfCtE5pi6FWcc2B5pip9G -----END CERTIFICATE-----Generated at Fri Apr 4 18:30:47 2025 by rpki-client