$ rpki-client -vvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft File: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft (raw, json) Hash identifier: eH/Cg6yp2fZpYf/EXk3jKaFKOIgJFg456g9GKO2rY4U= Subject key identifier: 18:C2:2F:E2:00:B1:C1:72:A6:4F:A5:C6:1A:E9:5B:DD:85:C3:DB:C8 Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 Certificate issuer: /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Certificate serial: 088D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft Manifest number: 0882 Signing time: Fri 04 Apr 2025 20:46:05 +0000 Manifest this update: Fri 04 Apr 2025 20:46:05 +0000 Manifest next update: Fri 11 Apr 2025 20:46:05 +0000 Files and hashes: 1: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl (hash: I9P3tSYc4Fc2R3ZOJ3AgjxAlyx3emmzQaEa+GHQHSv0=) 2: A12DD18E2F1C11EDA3E29B09C4F9AE02.roa (hash: JY394gUy9qqM6BqtEt3A+TeeEC3ZSaP+KRzIxp12INs=) 3: A29A66FE2F1C11EDA3E29B09C4F9AE02.roa (hash: pwrQo06SW1WaZHmpSMN3Di6drTMadsg0IhrZWaRW7r4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2189 (0x88d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91652F7 Validity Not Before: Apr 4 20:46:05 2025 GMT Not After : Apr 11 20:46:05 2025 GMT Subject: CN=67f0450d-f28d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:97:e9:3c:79:89:0a:da:c0:cc:2b:3e:91:02: 0e:fd:08:34:f5:27:5d:67:07:c5:a8:05:ed:c2:5f: 57:a2:b8:a2:4b:52:45:b5:06:51:52:07:97:b3:10: 1f:95:51:ea:0f:07:97:5d:1b:98:a3:8d:17:7f:48: 39:ab:7b:75:c2:0a:29:a2:54:9d:a5:eb:60:f4:a0: 15:f5:3c:f6:3c:19:30:95:8c:de:6b:db:7c:93:c3: cd:20:34:f3:3c:48:a0:03:c5:6f:37:ee:0e:87:e9: da:e3:af:3a:18:6c:df:90:d4:14:e4:ac:21:6e:15: 25:88:35:ab:08:a7:ab:f4:4c:0c:f9:14:43:9e:07: ec:b5:f9:ea:7c:ca:66:ad:78:e1:b0:e2:32:f6:8e: 75:56:64:54:1b:cb:a5:eb:7a:a8:9b:c0:d9:88:d0: 03:2b:96:b6:b5:f1:cd:ae:df:ec:dc:66:e4:20:41: 45:6f:b3:88:da:d4:9a:cc:54:3d:20:99:b6:9f:4d: 53:86:a8:ef:ed:b8:8e:62:19:0f:62:41:ba:45:44: f3:80:9b:cd:06:a5:98:bc:ff:f5:fe:02:3a:b6:05: 40:18:18:ef:32:1a:97:ea:87:c9:fc:d7:46:24:04: fb:e6:ff:f1:89:b1:93:9d:6a:88:62:a7:bb:9a:bf: 34:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C2:2F:E2:00:B1:C1:72:A6:4F:A5:C6:1A:E9:5B:DD:85:C3:DB:C8 X509v3 Authority Key Identifier: keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:04:54:5d:29:69:07:b9:25:dc:ca:d6:6a:0b:cc:8d:98:d7: 30:30:ae:6d:8b:23:9c:d6:0a:05:b4:fa:9d:ac:4a:7d:ac:85: 0d:22:78:5f:00:16:3f:54:21:b2:63:8c:5c:2d:b3:09:6f:6e: 8d:22:47:72:d9:45:48:ef:81:dc:5a:ad:1b:66:89:49:46:22: 49:93:3e:68:28:c3:36:7c:89:7a:2f:06:9c:cd:6f:9f:0b:b9: 54:0f:ca:f3:23:cb:ef:75:eb:4e:c8:a3:7a:63:ee:8f:90:19: b7:00:2c:a4:14:43:02:d9:dd:ea:29:51:c2:a6:86:46:a0:2f: f9:e2:b9:c8:4e:1b:f5:e0:fc:5a:de:ff:11:d0:9e:fe:64:f3: e3:da:95:b9:19:4e:09:bc:ec:48:81:e2:a8:28:e2:92:a2:db: 6b:21:50:ed:7a:83:8b:1b:0e:cb:76:b8:71:24:48:e4:94:74: ee:68:78:53:3d:2a:48:41:56:60:11:68:f4:69:36:8c:c3:b7: 9f:f2:fe:9e:cb:6d:98:13:a9:a8:3b:24:cc:ba:c5:38:b0:dd: e4:8a:b7:7a:03:54:9e:2e:2c:4c:70:d0:29:09:c4:27:0f:f9: 4b:88:10:76:91:c0:0d:ca:ad:a5:01:45:94:28:c9:98:fa:10: de:be:c4:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyRjcxMTAvBgNVBAUTKEU1MDI3NTdDNjE3QzIxRDQ3QjFCMzU1OUMwOUQ2RUE3 QzNBRkU0MDMwHhcNMjUwNDA0MjA0NjA1WhcNMjUwNDExMjA0NjA1WjAYMRYwFAYD VQQDEw02N2YwNDUwZC1mMjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5fpPHmJCtrAzCs+kQIO/Qg09SddZwfFqAXtwl9XoriiS1JFtQZRUgeXsxAf lVHqDweXXRuYo40Xf0g5q3t1wgopolSdpetg9KAV9Tz2PBkwlYzea9t8k8PNIDTz PEigA8VvN+4Oh+na4686GGzfkNQU5KwhbhUliDWrCKer9EwM+RRDngfstfnqfMpm rXjhsOIy9o51VmRUG8ul63qom8DZiNADK5a2tfHNrt/s3GbkIEFFb7OI2tSazFQ9 IJm2n01Thqjv7biOYhkPYkG6RUTzgJvNBqWYvP/1/gI6tgVAGBjvMhqX6ofJ/NdG JAT75v/xibGTnWqIYqe7mr80JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBjCL+IA scFypk+lxhrpW92Fw9vIMB8GA1UdIwQYMBaAFOUCdXxhfCHUexs1WcCdbqfDr+QD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTJGNy83Q0M0NUZBRUJB QUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElkUjdHelZad0oxdXA4T3Y1 QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRSjFmR0Y4SWRSN0d6Vlp3SjF1cDhPdjVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTJGNy83Q0M0NUZBRUJBQUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElk UjdHelZad0oxdXA4T3Y1QU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6BFRdKWkHuSXcytZqC8yNmNcwMK5tiyOc1goFtPqdrEp9rIUNInhf ABY/VCGyY4xcLbMJb26NIkdy2UVI74HcWq0bZolJRiJJkz5oKMM2fIl6LwaczW+f C7lUD8rzI8vvdetOyKN6Y+6PkBm3ACykFEMC2d3qKVHCpoZGoC/54rnIThv14Pxa 3v8R0J7+ZPPj2pW5GU4JvOxIgeKoKOKSottrIVDteoOLGw7LdrhxJEjklHTuaHhT PSpIQVZgEWj0aTaMw7ef8v6ey22YE6moOyTMusU4sN3kird6A1SeLixMcNApCcQn D/lLiBB2kcANyq2lAUWUKMmY+hDevsQP -----END CERTIFICATE-----Generated at Fri Apr 4 22:15:05 2025 by rpki-client