$ rpki-client -vvf rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft File: 5K6ANyqGeYe7Kgq74RCrgENw1eM.mft (raw, json) Hash identifier: fsaEo9u5e0UjaZDbYvd8tk63wj8qwfVgiyw1rN758S8= Subject key identifier: 9D:32:0B:02:9E:E2:99:A5:71:60:AE:9C:C4:45:5D:42:90:E2:8B:BE Authority key identifier: E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3 Certificate issuer: /CN=A917452D/serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3 Certificate serial: 02EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft Manifest number: 027A Signing time: Thu 03 Apr 2025 01:58:49 +0000 Manifest this update: Thu 03 Apr 2025 01:58:49 +0000 Manifest next update: Thu 10 Apr 2025 01:58:49 +0000 Files and hashes: 1: 5K6ANyqGeYe7Kgq74RCrgENw1eM.crl (hash: g9GvGE5jbS2Qv5LFfivEJ/6bqjn6X+0y3+dMr+pulAk=) 2: 10B04C9853D411EFB53AD61CC4F9AE02.roa (hash: Go+fcAH12BxWvxt8qaSo8+7Glvp6WIQoRE1nDrD2I4U=) 3: A43C91FC53D311EFBB77311CC4F9AE02.roa (hash: 4WSAf6xypZ5HWhgdXeCXvRjrHIEEGUTbiqnsvFNaCQ4=) 4: AA71F05C60EF11EF8D645D72C4F9AE02.roa (hash: tFX2mHpCejE1T1hhbkEHTKBu8FY85bbr60BmVvCm9y8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.crl rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 747 (0x2eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917452D Validity Not Before: Apr 3 01:58:49 2025 GMT Not After : Apr 10 01:58:49 2025 GMT Subject: CN=67edeb59-e42e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:56:71:fd:21:7b:b2:1d:ce:6b:a7:8d:98:10: a2:04:17:c1:44:de:60:93:a3:33:4c:19:71:e3:89: b3:96:27:a9:a7:6d:98:90:28:c8:ad:49:ad:68:13: ac:51:12:67:17:28:03:cc:cf:d9:5e:fd:21:e1:43: c4:e2:61:6b:55:e7:d1:c6:68:f4:23:6b:d8:47:53: 30:0c:e1:6c:5d:a3:32:35:77:0d:a4:5b:8a:92:a1: 54:72:25:37:33:ab:28:33:0d:8e:7e:b3:86:e8:60: 42:33:db:f9:07:fd:d7:53:27:18:7e:a8:be:ce:1c: d6:6b:89:5d:2a:ce:f4:ee:12:95:2b:76:d9:e9:c5: 37:74:82:7b:d8:cb:a5:06:a4:58:ba:3e:b2:2a:f4: 70:3d:c5:a3:d6:20:bb:49:26:09:cc:08:f3:f6:60: d0:f5:f6:98:b0:b7:f9:78:51:79:d1:cb:b7:5a:64: 00:8c:19:d3:43:84:2b:27:b0:7d:1f:b3:9f:13:63: eb:08:67:81:ae:a7:56:27:e3:58:7a:52:2b:ad:29: e2:d1:4d:f3:be:bc:10:13:74:30:4d:c2:5a:da:23: 36:c2:d0:db:43:64:9c:20:5a:16:e7:0b:0b:a6:a5: f6:88:83:ad:b1:0d:4d:76:29:5c:88:c8:4d:d5:7d: 83:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:32:0B:02:9E:E2:99:A5:71:60:AE:9C:C4:45:5D:42:90:E2:8B:BE X509v3 Authority Key Identifier: keyid:E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ef:9a:dc:e4:ee:eb:e2:9f:8d:76:ae:60:95:ce:0d:b3:09:4e: 47:35:aa:29:1f:77:5b:0f:54:dd:71:ee:eb:18:d8:d3:6d:18: a8:8e:cc:f1:66:59:45:84:98:9a:8a:51:a8:bb:55:0e:fa:20: a8:3f:d6:d1:bd:20:72:f0:9e:04:70:a2:18:a2:70:6c:0b:ce: 9c:3a:c9:7d:19:c7:f0:47:c2:e5:80:52:45:c9:18:9d:8c:68: a4:47:11:0a:cf:5d:c7:bf:ea:76:74:99:d7:21:48:f5:08:43: 83:77:66:2a:77:fa:92:19:bf:55:3e:aa:31:ab:9c:00:e7:a7: 84:62:68:27:3a:78:77:c7:97:b2:1a:08:7e:dc:d1:32:27:18: 1e:05:84:d5:c5:2c:f0:68:ec:75:2c:13:1b:7d:d0:d5:35:a8: ce:09:28:20:6e:ed:9c:e0:7d:63:e9:c8:e5:6e:90:93:22:22: ed:72:e0:4e:48:e1:d2:a2:66:2d:a4:56:20:0a:fc:2d:e4:e8: 3d:a1:e8:9a:89:86:07:19:6f:df:c4:7e:5f:11:8d:4c:b5:27: 0e:c1:f7:09:46:bb:0f:ce:19:e3:4c:94:ac:b3:20:24:09:b0: 0d:83:c9:8c:4f:5a:6e:ef:d4:5d:ea:fa:85:70:a2:9b:2b:27: f1:a5:cb:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ1MkQxMTAvBgNVBAUTKEU0QUU4MDM3MkE4Njc5ODdCQjJBMEFCQkUxMTBBQjgw NDM3MEQ1RTMwHhcNMjUwNDAzMDE1ODQ5WhcNMjUwNDEwMDE1ODQ5WjAYMRYwFAYD VQQDEw02N2VkZWI1OS1lNDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1lZx/SF7sh3Oa6eNmBCiBBfBRN5gk6MzTBlx44mzliepp22YkCjIrUmtaBOs URJnFygDzM/ZXv0h4UPE4mFrVefRxmj0I2vYR1MwDOFsXaMyNXcNpFuKkqFUciU3 M6soMw2OfrOG6GBCM9v5B/3XUycYfqi+zhzWa4ldKs707hKVK3bZ6cU3dIJ72Mul BqRYuj6yKvRwPcWj1iC7SSYJzAjz9mDQ9faYsLf5eFF50cu3WmQAjBnTQ4QrJ7B9 H7OfE2PrCGeBrqdWJ+NYelIrrSni0U3zvrwQE3QwTcJa2iM2wtDbQ2ScIFoW5wsL pqX2iIOtsQ1NdilciMhN1X2DeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0yCwKe 4pmlcWCunMRFXUKQ4ou+MB8GA1UdIwQYMBaAFOSugDcqhnmHuyoKu+EQq4BDcNXj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDUyRC9BQTQyMTcxRTI3 NjgxMUVEOUEyMjE3MzBDNEY5QUUwMi81SzZBTnlxR2VZZTdLZ3E3NFJDcmdFTncx ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVLNkFOeXFHZVllN0tncTc0UkNyZ0VOdzFlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDUyRC9BQTQyMTcxRTI3NjgxMUVEOUEyMjE3MzBDNEY5QUUwMi81SzZBTnlxR2VZ ZTdLZ3E3NFJDcmdFTncxZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDvmtzk7uvin412rmCVzg2zCU5HNaopH3dbD1Tdce7rGNjTbRiojszx ZllFhJiailGou1UO+iCoP9bRvSBy8J4EcKIYonBsC86cOsl9GcfwR8LlgFJFyRid jGikRxEKz13Hv+p2dJnXIUj1CEODd2Yqd/qSGb9VPqoxq5wA56eEYmgnOnh3x5ey Ggh+3NEyJxgeBYTVxSzwaOx1LBMbfdDVNajOCSggbu2c4H1j6cjlbpCTIiLtcuBO SOHSomYtpFYgCvwt5Og9oeiaiYYHGW/fxH5fEY1MtScOwfcJRrsPzhnjTJSssyAk CbANg8mMT1pu79Rd6vqFcKKbKyfxpctz -----END CERTIFICATE-----Generated at Fri Apr 4 22:30:07 2025 by rpki-client