$ rpki-client -vvf rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft File: 5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft (raw, json) Hash identifier: LwqX6IYRmtMH+0iv8+swdrWNazDR9xn5/EkMUcYKTBI= Subject key identifier: FB:D6:B6:8D:EE:A5:33:B0:44:DA:AC:4F:5A:9C:36:72:16:5F:4F:77 Authority key identifier: E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69 Certificate issuer: /CN=A916148F/serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569 Certificate serial: 0275 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft Manifest number: 0271 Signing time: Sun 13 Apr 2025 01:19:00 +0000 Manifest this update: Sun 13 Apr 2025 01:18:59 +0000 Manifest next update: Sun 20 Apr 2025 01:18:59 +0000 Files and hashes: 1: 5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl (hash: a+wJwsGW+iPybiUM4KWP0Z59lUL4Dv7O88nkVkkKr6A=) 2: E757164C074511EDB229157DC4F9AE02.roa (hash: onRdgGkpkgbRrilTwhd//fNz2yNBz6ru8beWXJE4ohY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 00:57:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 629 (0x275) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916148F, serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569 Validity Not Before: Apr 13 01:18:59 2025 GMT Not After : Apr 20 01:18:59 2025 GMT Subject: CN=67fb1103-ad8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:73:09:6e:f7:65:e5:a1:9c:e7:55:e3:07:e7: 66:5b:1b:43:a5:46:21:ef:0b:3c:c6:02:14:25:23: 22:f8:c8:6f:64:d5:0d:5e:5c:56:68:62:16:a7:a5: 0e:77:40:7d:1d:48:a8:19:3f:3b:22:fd:43:89:f6: 75:23:f3:91:cf:7d:97:c1:1f:18:47:c6:cf:50:f8: 47:0b:fc:51:1c:8b:c9:67:71:c5:86:13:b9:61:c2: c6:e2:ee:86:b3:3e:59:f2:aa:e7:2a:45:84:83:d6: b9:31:fa:8e:e1:83:9c:8e:f2:e1:d3:ef:db:39:7b: a5:6e:b1:89:55:1d:45:c2:00:30:57:d5:da:cb:fc: a0:c2:de:a7:2c:13:d7:ee:28:5a:85:37:78:5e:7f: bb:c6:20:17:32:5c:2d:02:6d:00:ad:9e:7b:a4:96: cb:30:8e:51:15:f0:b7:8e:f1:c2:6b:ce:ae:2b:5c: 40:94:dd:56:00:72:71:e8:37:fa:1a:f5:68:87:de: c7:a3:39:fc:cd:d6:c2:ab:4a:f0:96:35:42:9d:df: a7:dd:25:9c:13:1a:b3:0f:6d:e1:42:15:f5:3d:71: 99:65:d1:1f:d2:19:2f:3f:28:6a:f9:d4:6f:31:aa: 7d:6c:b4:c9:5a:98:ec:d2:e8:e1:88:a3:dc:f1:b7: e0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D6:B6:8D:EE:A5:33:B0:44:DA:AC:4F:5A:9C:36:72:16:5F:4F:77 X509v3 Authority Key Identifier: keyid:E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:cc:20:46:80:16:75:f8:7c:df:ea:17:24:43:b6:71:29:88: 85:23:ed:76:07:34:00:64:db:69:56:ab:eb:1d:5e:3c:5b:11: 31:cc:d4:b1:f1:05:8c:57:3d:78:4d:0a:ff:60:75:7f:07:7d: 25:f8:ff:52:99:78:8b:6e:b7:cd:f8:18:5b:bc:e9:88:3c:f5: 77:38:ad:ef:b1:84:26:b2:a7:7a:21:ab:28:d9:8f:f7:08:57: 6b:43:a3:d3:3e:2e:67:b0:58:0f:7c:04:64:67:dc:0c:a1:d9: 22:76:44:9a:21:16:1a:6a:65:37:62:0f:70:e7:9f:47:73:0e: 8d:23:a7:55:e2:f5:b6:ee:f1:ee:41:fa:3a:58:57:99:1e:8b: a6:b8:95:b6:d5:f7:55:84:f4:aa:e0:f8:32:f9:f9:a7:3f:17: 60:15:b8:ea:06:86:92:e9:96:90:a0:75:c8:8f:9a:ee:af:00: 9b:32:72:9e:c8:6f:a3:30:03:2e:19:d8:b0:31:0d:63:f7:23: 14:fd:9a:68:5e:41:ce:c1:21:57:4f:ad:95:45:0d:be:db:b4: 81:2c:7f:84:56:79:1f:ea:a5:64:23:31:6b:ff:13:e1:9c:b9: 6d:46:7f:0a:99:82:b5:81:ec:85:9b:6b:e4:e0:82:44:6e:3c: a8:37:7a:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE0OEYxMTAvBgNVBAUTKEU1MDg3M0FGNDc1RUQ2RUVCN0NCOTYzQzY1RThEOTgw NUI4QkI1NjkwHhcNMjUwNDEzMDExODU5WhcNMjUwNDIwMDExODU5WjAYMRYwFAYD VQQDEw02N2ZiMTEwMy1hZDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHMJbvdl5aGc51XjB+dmWxtDpUYh7ws8xgIUJSMi+MhvZNUNXlxWaGIWp6UO d0B9HUioGT87Iv1DifZ1I/ORz32XwR8YR8bPUPhHC/xRHIvJZ3HFhhO5YcLG4u6G sz5Z8qrnKkWEg9a5MfqO4YOcjvLh0+/bOXulbrGJVR1FwgAwV9Xay/ygwt6nLBPX 7ihahTd4Xn+7xiAXMlwtAm0ArZ57pJbLMI5RFfC3jvHCa86uK1xAlN1WAHJx6Df6 GvVoh97Hozn8zdbCq0rwljVCnd+n3SWcExqzD23hQhX1PXGZZdEf0hkvPyhq+dRv Map9bLTJWpjs0ujhiKPc8bfgxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPvWto3u pTOwRNqsT1qcNnIWX093MB8GA1UdIwQYMBaAFOUIc69HXtbut8uWPGXo2YBbi7Vp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTQ4Ri82ODg0ODI2ODA3 NDExMUVEQUIxOUQ0NDdDNEY5QUUwMi81UWh6cjBkZTF1NjN5NVk4WmVqWmdGdUx0 V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRaHpyMGRlMXU2M3k1WThaZWpaZ0Z1THRXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTQ4Ri82ODg0ODI2ODA3NDExMUVEQUIxOUQ0NDdDNEY5QUUwMi81UWh6cjBkZTF1 NjN5NVk4WmVqWmdGdUx0V2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFzCBGgBZ1+Hzf6hckQ7ZxKYiFI+12BzQAZNtpVqvrHV48WxExzNSx 8QWMVz14TQr/YHV/B30l+P9SmXiLbrfN+BhbvOmIPPV3OK3vsYQmsqd6Iaso2Y/3 CFdrQ6PTPi5nsFgPfARkZ9wModkidkSaIRYaamU3Yg9w559Hcw6NI6dV4vW27vHu Qfo6WFeZHoumuJW21fdVhPSq4Pgy+fmnPxdgFbjqBoaS6ZaQoHXIj5rurwCbMnKe yG+jMAMuGdiwMQ1j9yMU/ZpoXkHOwSFXT62VRQ2+27SBLH+EVnkf6qVkIzFr/xPh nLltRn8KmYK1geyFm2vk4IJEbjyoN3pq -----END CERTIFICATE-----Generated at Sun Apr 13 04:47:46 2025 by rpki-client