$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft File: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft (raw, json) Hash identifier: B4NUXr8ybu71IM8L2LkcbeViXGLyQ8iCOtCTlZrcb2M= Subject key identifier: E1:8D:09:D9:D5:0B:D0:D0:90:58:D0:15:87:E7:E7:98:09:38:80:89 Authority key identifier: E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79 Certificate issuer: /CN=A91698EC/serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79 Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft Manifest number: A6 Signing time: Sat 05 Apr 2025 05:31:39 +0000 Manifest this update: Sat 05 Apr 2025 05:31:39 +0000 Manifest next update: Sat 12 Apr 2025 05:31:39 +0000 Files and hashes: 1: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl (hash: 8Sqgj4dUMU3OVocxprqRj/3pQaun1BmMF33rroblGQ4=) 2: 1FCE5CE0214F11EFAB245D49C4F9AE02.roa (hash: MjGt04itAcx8gNx2WflFnwPVZOKhZPX7R3K5xPavI28=) 3: 02BCE50286AF11EF9EFFD52FC4F9AE02.roa (hash: erN7f1B2CkGS1+dEWje+lQKXL/zVRbw1MSrnrEP1M7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 05:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91698EC Validity Not Before: Apr 5 05:31:39 2025 GMT Not After : Apr 12 05:31:39 2025 GMT Subject: CN=67f0c03b-9c80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:23:dc:4f:c1:d4:dd:8c:3f:3d:1f:fb:43:bd: 8d:15:e5:fb:b5:b4:7a:7f:b7:3c:58:50:48:2e:44: 62:00:90:8d:91:7d:85:69:d9:55:4d:3a:b3:3a:63: 8d:f8:22:d9:c8:db:b0:92:39:3a:9b:51:36:e9:d7: 97:6e:3f:2c:9d:65:d0:35:3c:08:57:4a:75:40:b1: fd:b0:1b:06:3d:8e:ec:f4:51:59:fd:ef:49:b9:fe: b2:e0:73:b0:42:85:a6:08:5e:22:31:4c:f1:40:ed: 20:b5:75:3f:86:7e:a5:30:be:5f:eb:e7:ab:f5:84: 15:53:8e:1d:6b:61:ed:00:a4:0b:9c:11:69:32:aa: 49:b0:f4:eb:6f:12:83:71:22:5d:1a:99:a3:0d:16: 6e:51:a9:53:09:a2:cf:cd:08:60:3c:38:21:bf:8a: 39:1c:60:d3:2d:ae:7a:81:9c:d7:9a:da:33:e4:e3: 4a:68:eb:b3:bc:07:2d:43:28:8e:95:55:d0:f6:e0: 8a:77:f2:bf:05:7e:6e:ac:5e:f2:31:50:e1:1f:7d: 10:65:ab:69:cb:d0:91:9d:ff:d7:1e:a9:ed:ad:1c: d5:9a:53:15:ac:8c:f4:b2:71:ce:78:e6:b4:96:23: fd:22:d4:91:7b:20:30:8c:7a:1d:3d:77:9a:a9:1b: ec:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8D:09:D9:D5:0B:D0:D0:90:58:D0:15:87:E7:E7:98:09:38:80:89 X509v3 Authority Key Identifier: keyid:E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:5c:6d:32:fd:4e:2c:eb:a5:07:db:0e:dc:46:d5:e5:c5:bb: 04:6b:7e:36:0e:a5:21:cb:44:7e:5c:a0:64:1f:99:fb:a8:4d: 88:25:6b:3c:e2:61:d9:48:23:8f:c6:c5:e7:29:55:bf:d1:db: 5a:2f:59:3d:41:4e:b5:df:1e:2a:2c:ab:0f:e2:0c:cd:98:43: eb:9c:12:92:d9:cb:64:4f:69:e3:4c:20:c8:f7:1a:30:ad:a3: cd:22:61:21:14:71:19:04:a1:33:a5:64:52:58:22:af:4d:e1: 0d:f4:da:51:be:80:af:7e:07:07:c9:75:b0:63:7f:c7:20:f9: 2e:8d:ff:23:e8:e8:c2:d3:a0:15:6b:ba:21:94:77:e2:65:4c: 32:82:b7:b5:ed:e1:ed:fd:04:d9:dc:08:2d:2d:72:8e:b5:e1: 5b:16:ab:26:fd:53:81:8d:f3:d1:f2:39:37:b9:8e:66:a0:29: 0b:4c:73:7e:a8:e7:42:70:ab:2e:6c:19:7a:77:07:26:1a:f6: f5:81:5e:d5:03:b6:e4:e1:a1:e0:58:e6:d0:cf:a2:00:e3:1c: 73:ea:63:0b:6e:ce:3d:19:a7:f6:13:15:0d:24:c7:ab:41:db: 67:d6:a6:cd:92:8e:8b:4b:a7:9b:1b:6b:dd:65:f3:b1:5f:82: ff:92:f5:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4RUMxMTAvBgNVBAUTKEU1OEYwRjUyQTREMkQxREU0NDY3NUFDQTE3NTU3QkY5 ODJFQzdENzkwHhcNMjUwNDA1MDUzMTM5WhcNMjUwNDEyMDUzMTM5WjAYMRYwFAYD VQQDEw02N2YwYzAzYi05YzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyPcT8HU3Yw/PR/7Q72NFeX7tbR6f7c8WFBILkRiAJCNkX2FadlVTTqzOmON +CLZyNuwkjk6m1E26deXbj8snWXQNTwIV0p1QLH9sBsGPY7s9FFZ/e9Juf6y4HOw QoWmCF4iMUzxQO0gtXU/hn6lML5f6+er9YQVU44da2HtAKQLnBFpMqpJsPTrbxKD cSJdGpmjDRZuUalTCaLPzQhgPDghv4o5HGDTLa56gZzXmtoz5ONKaOuzvActQyiO lVXQ9uCKd/K/BX5urF7yMVDhH30QZatpy9CRnf/XHqntrRzVmlMVrIz0snHOeOa0 liP9ItSReyAwjHodPXeaqRvsBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGNCdnV C9DQkFjQFYfn55gJOICJMB8GA1UdIwQYMBaAFOWPD1Kk0tHeRGdayhdVe/mC7H15 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OThFQy8yMUU1QTMwQTFF RTExMUVGOTNGOTg1M0RDNEY5QUUwMi81WThQVXFUUzBkNUVaMXJLRjFWNy1ZTHNm WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVZOFBVcVRTMGQ1RVoxcktGMVY3LVlMc2ZYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OThFQy8yMUU1QTMwQTFFRTExMUVGOTNGOTg1M0RDNEY5QUUwMi81WThQVXFUUzBk NUVaMXJLRjFWNy1ZTHNmWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5XG0y/U4s66UH2w7cRtXlxbsEa342DqUhy0R+XKBkH5n7qE2IJWs8 4mHZSCOPxsXnKVW/0dtaL1k9QU613x4qLKsP4gzNmEPrnBKS2ctkT2njTCDI9xow raPNImEhFHEZBKEzpWRSWCKvTeEN9NpRvoCvfgcHyXWwY3/HIPkujf8j6OjC06AV a7ohlHfiZUwygre17eHt/QTZ3AgtLXKOteFbFqsm/VOBjfPR8jk3uY5moCkLTHN+ qOdCcKsubBl6dwcmGvb1gV7VA7bk4aHgWObQz6IA4xxz6mMLbs49Gaf2ExUNJMer Qdtn1qbNko6LS6ebG2vdZfOxX4L/kvX6 -----END CERTIFICATE-----Generated at Sat Apr 5 20:52:01 2025 by rpki-client