$ rpki-client -vvf rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.mft File: F5SMh3nFnmXK_OLv3LHLUJEThEw.mft (raw, json) Hash identifier: 2v82WjiYiR84TlBbAp94SNogGXCbaOHLmomhVSS4NAw= Subject key identifier: A1:BD:95:B3:B8:98:B9:88:31:2A:01:C2:49:AC:40:3C:84:60:EB:A8 Authority key identifier: 17:94:8C:87:79:C5:9E:65:CA:FC:E2:EF:DC:B1:CB:50:91:13:84:4C Certificate issuer: /CN=A915FC0B/serialNumber=17948C8779C59E65CAFCE2EFDCB1CB509113844C Certificate serial: 06EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F5SMh3nFnmXK_OLv3LHLUJEThEw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.mft Manifest number: 06E5 Signing time: Wed 02 Apr 2025 22:02:09 +0000 Manifest this update: Wed 02 Apr 2025 22:02:08 +0000 Manifest next update: Wed 09 Apr 2025 22:02:08 +0000 Files and hashes: 1: F5SMh3nFnmXK_OLv3LHLUJEThEw.crl (hash: 46wTKkbveE163Cq3skwL/4/MRYZmXDGl8zegLaK4lj4=) 2: 7A75D42E45B211EB99335867C4F9AE02.roa (hash: NsZ4F3z/UkG4nWlQYLX7FdM8TeLtW3jisug+AwHpPsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.crl rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F5SMh3nFnmXK_OLv3LHLUJEThEw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 22:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1771 (0x6eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FC0B Validity Not Before: Apr 2 22:02:08 2025 GMT Not After : Apr 9 22:02:08 2025 GMT Subject: CN=67edb3e0-4be1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d2:4b:d9:f8:0a:51:a1:cb:73:e3:67:1a:6e: 4f:10:c1:7e:08:83:db:4a:55:f3:e3:a9:84:58:8f: 26:10:e7:47:23:8f:09:13:f3:27:5d:f2:85:6e:4b: 6a:51:6c:12:84:c0:47:8b:19:e9:33:1a:8b:34:64: 3f:11:d1:02:46:46:e8:60:47:9b:2a:32:12:66:8c: 5a:7f:5e:fa:a4:21:e1:ea:a6:b5:91:65:3f:17:d1: 26:1b:7e:6d:09:0f:1d:6d:51:57:70:ce:64:4f:f6: 48:1e:df:13:74:bf:61:b4:4f:fa:c9:48:80:3d:a9: 1d:cc:57:b0:f9:88:66:7e:5c:7f:fa:2f:9b:7a:be: bc:a7:db:b2:aa:e8:a1:68:32:a8:68:3d:ff:68:be: 60:d5:41:b5:1a:6c:17:7d:8a:e2:2b:12:d8:d5:ff: 8e:3d:b8:7c:cc:1b:74:d6:a3:44:9e:30:f3:dd:73: bc:af:c6:e4:b9:b8:44:da:b0:d4:52:fc:5f:9d:d6: 57:41:31:cb:96:d6:cb:78:62:28:e4:4a:07:ba:2e: 12:14:ed:a3:7f:71:aa:f8:56:f8:43:7a:e7:24:c7: 50:62:b4:16:51:7e:1e:36:03:2d:b2:e3:45:c6:42: 45:de:5d:1b:c2:b0:fb:4d:5f:dc:59:a2:af:4a:84: 2b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:BD:95:B3:B8:98:B9:88:31:2A:01:C2:49:AC:40:3C:84:60:EB:A8 X509v3 Authority Key Identifier: keyid:17:94:8C:87:79:C5:9E:65:CA:FC:E2:EF:DC:B1:CB:50:91:13:84:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F5SMh3nFnmXK_OLv3LHLUJEThEw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:68:24:7a:3a:3e:b3:01:4e:52:e6:05:f9:ee:f4:4a:20:80: 64:44:14:b8:17:0c:e7:48:df:38:ae:1e:44:e1:41:36:96:1e: 4d:f5:19:f8:fc:66:45:a5:9d:27:00:33:ac:e8:d9:60:69:47: 18:54:a0:d4:1a:4b:a9:5b:ca:dc:3f:65:4d:b7:eb:4f:5c:75: d5:35:3f:6d:11:7e:a6:cb:57:37:3c:e2:38:7c:e3:37:c2:51: 13:63:12:16:42:c4:cd:89:2e:49:c0:96:01:c0:f9:b2:ea:53: 36:53:1f:bc:52:9c:39:1b:28:ac:91:98:e9:d1:6f:10:d5:38: ca:fe:60:ae:d4:b2:d6:4f:c5:f9:bf:1a:a0:c1:35:0a:71:2b: e2:a7:a4:5c:65:10:db:83:0a:be:f4:22:7c:47:bb:8a:16:35: 03:b7:12:d8:bb:1a:a2:01:03:70:d7:08:9a:81:77:8b:2d:26: 3f:54:8a:e1:f7:08:d0:56:1b:8c:4c:5b:0c:a5:26:51:76:dd: fe:8b:39:dc:e6:be:17:26:56:cc:ab:a1:fc:3f:8e:68:2a:25: 09:b3:2a:b7:a6:74:b1:8e:c6:02:37:e7:c0:86:19:9e:1f:a0: 4b:5e:01:09:aa:fe:f9:81:a1:ba:6f:18:6c:24:9b:37:75:3b: 35:84:54:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZDMEIxMTAvBgNVBAUTKDE3OTQ4Qzg3NzlDNTlFNjVDQUZDRTJFRkRDQjFDQjUw OTExMzg0NEMwHhcNMjUwNDAyMjIwMjA4WhcNMjUwNDA5MjIwMjA4WjAYMRYwFAYD VQQDEw02N2VkYjNlMC00YmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdJL2fgKUaHLc+NnGm5PEMF+CIPbSlXz46mEWI8mEOdHI48JE/MnXfKFbktq UWwShMBHixnpMxqLNGQ/EdECRkboYEebKjISZoxaf176pCHh6qa1kWU/F9EmG35t CQ8dbVFXcM5kT/ZIHt8TdL9htE/6yUiAPakdzFew+Yhmflx/+i+ber68p9uyquih aDKoaD3/aL5g1UG1GmwXfYriKxLY1f+OPbh8zBt01qNEnjDz3XO8r8bkubhE2rDU UvxfndZXQTHLltbLeGIo5EoHui4SFO2jf3Gq+Fb4Q3rnJMdQYrQWUX4eNgMtsuNF xkJF3l0bwrD7TV/cWaKvSoQr9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKG9lbO4 mLmIMSoBwkmsQDyEYOuoMB8GA1UdIwQYMBaAFBeUjId5xZ5lyvzi79yxy1CRE4RM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkMwQi9CRUU3NTU4MDQ1 QjAxMUVCQTM2OTZENjNDNEY5QUUwMi9GNVNNaDNuRm5tWEtfT0x2M0xITFVKRVRo RXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y1U01oM25Gbm1YS19PTHYzTEhMVUpFVGhFdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkMwQi9CRUU3NTU4MDQ1QjAxMUVCQTM2OTZENjNDNEY5QUUwMi9GNVNNaDNuRm5t WEtfT0x2M0xITFVKRVRoRXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHaCR6Oj6zAU5S5gX57vRKIIBkRBS4FwznSN84rh5E4UE2lh5N9Rn4 /GZFpZ0nADOs6NlgaUcYVKDUGkupW8rcP2VNt+tPXHXVNT9tEX6my1c3POI4fOM3 wlETYxIWQsTNiS5JwJYBwPmy6lM2Ux+8Upw5GyiskZjp0W8Q1TjK/mCu1LLWT8X5 vxqgwTUKcSvip6RcZRDbgwq+9CJ8R7uKFjUDtxLYuxqiAQNw1wiagXeLLSY/VIrh 9wjQVhuMTFsMpSZRdt3+iznc5r4XJlbMq6H8P45oKiUJsyq3pnSxjsYCN+fAhhme H6BLXgEJqv75gaG6bxhsJJs3dTs1hFQ3 -----END CERTIFICATE-----Generated at Fri Apr 4 18:11:12 2025 by rpki-client