$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft File: s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft (raw, json) Hash identifier: kA4WvCPNuXQpU72q0gxLeU8oXz/P1YtyXgPJR2Po42w= Subject key identifier: AC:8B:81:11:6F:47:94:7B:D7:4A:22:60:E6:A9:5E:12:0E:7D:95:BB Authority key identifier: B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44 Certificate issuer: /CN=A917530D/serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft Manifest number: F6 Signing time: Wed 09 Apr 2025 04:19:11 +0000 Manifest this update: Wed 09 Apr 2025 04:19:10 +0000 Manifest next update: Wed 16 Apr 2025 04:19:10 +0000 Files and hashes: 1: s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl (hash: rarldep6xDrf7ZS2NRUr4X35kw9qHGnyAWoB41pPz4A=) 2: 762CACD0B04311EF95390327C4F9AE02.roa (hash: 7lH097TnqT2Frr0JL7F0/A/6TnFN0hBEwwqzvbNC3Tc=) 3: A97CBD42A06611EFA888B57DC4F9AE02.roa (hash: iA4PiBqhCGu6j+QREktQJZZ0YDevgINmDR162rqZIpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 04:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917530D Validity Not Before: Apr 9 04:19:10 2025 GMT Not After : Apr 16 04:19:10 2025 GMT Subject: CN=67f5f53f-b630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:46:b8:62:1e:05:32:a9:83:e2:40:bf:ff:66: 1a:48:bd:18:3d:b3:51:7c:2c:d0:8e:cc:e6:90:0f: 43:81:e1:23:b2:0c:13:15:55:62:a7:60:d9:63:a8: 33:d1:9e:60:6e:eb:00:3c:a7:f8:79:2f:3e:17:06: 9e:c5:b5:59:85:51:03:b5:8f:99:81:eb:44:29:4c: ca:f9:43:47:7e:87:22:bf:bf:d6:fe:2c:83:63:3e: 7b:6b:5c:77:c0:a6:ea:b0:da:4f:67:4f:da:48:1e: c2:49:e9:08:8e:78:03:d2:14:92:be:54:bf:2c:88: b6:0f:1a:4b:1e:b7:fa:40:b7:7f:d3:ad:38:40:0b: 53:93:28:77:3f:14:ab:01:5f:e6:4d:3f:09:fb:4e: 52:b1:f5:a4:3b:ba:25:ee:3f:55:d5:15:40:8c:42: 7c:16:60:5f:15:ce:de:86:c2:77:17:39:c4:82:e4: 2d:71:22:b4:b1:28:b1:cb:40:8e:35:f9:81:36:19: f7:fa:b6:3b:6b:3c:86:ee:83:bc:db:a1:f0:4d:37: 2c:fc:f9:39:90:a1:d3:3e:43:d1:9c:c3:22:50:d9: ba:49:a9:fc:47:63:64:8f:0f:c7:8e:26:db:c6:de: d3:00:8e:9b:04:d7:ef:97:a7:14:e1:de:c5:0f:cd: 95:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:8B:81:11:6F:47:94:7B:D7:4A:22:60:E6:A9:5E:12:0E:7D:95:BB X509v3 Authority Key Identifier: keyid:B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:c0:5c:9e:87:eb:35:c6:9c:db:4d:32:39:85:b7:8d:db:13: 80:33:2b:dc:78:c0:4c:40:14:9e:ec:a0:20:71:7b:9e:42:dd: 38:40:fe:a8:68:ae:72:80:42:3f:a2:b1:ec:ac:fe:23:37:22: c0:9c:e8:ca:36:9d:e0:68:d6:c5:98:2b:e7:46:85:e8:e3:f1: ef:8a:5f:ae:06:34:43:9f:af:3b:2f:da:c5:fc:d2:f1:ae:72: 44:57:07:3c:da:8a:90:38:f6:15:e8:1a:cb:0e:98:dc:cc:73: 8b:f4:b4:b1:ac:bb:aa:82:d3:3c:b7:94:9c:cb:ba:1b:a2:8b: ac:ce:30:b2:04:b2:35:a5:a7:af:82:dc:fa:b3:c4:fd:c1:0b: 63:6b:0b:33:42:c2:1e:e4:43:3c:9f:0b:28:3d:84:b2:8e:d2: ac:5e:b5:18:17:cf:21:a9:98:c5:77:fd:09:28:ef:08:06:97: 54:8f:e8:2a:3c:80:5b:b4:1a:3b:e9:3f:8a:5c:0c:1a:cf:e7: 5b:5f:a6:78:c5:8a:b1:78:75:b5:3e:eb:99:19:05:c0:e2:cf: 67:c0:1e:36:80:e8:75:76:6d:b4:d2:ee:3f:49:06:17:2c:f6: b3:fe:ed:e2:b2:51:e5:d4:b9:df:cb:8a:35:70:9a:49:3f:2b: 09:a3:1e:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMEQxMTAvBgNVBAUTKEIzOTkyRjBENDlCQUY2QTM2RkRBNjU4RTVCNDU5NDY5 NTIxRTVCNDQwHhcNMjUwNDA5MDQxOTEwWhcNMjUwNDE2MDQxOTEwWjAYMRYwFAYD VQQDEw02N2Y1ZjUzZi1iNjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Ua4Yh4FMqmD4kC//2YaSL0YPbNRfCzQjszmkA9DgeEjsgwTFVVip2DZY6gz 0Z5gbusAPKf4eS8+FwaexbVZhVEDtY+ZgetEKUzK+UNHfociv7/W/iyDYz57a1x3 wKbqsNpPZ0/aSB7CSekIjngD0hSSvlS/LIi2DxpLHrf6QLd/0604QAtTkyh3PxSr AV/mTT8J+05SsfWkO7ol7j9V1RVAjEJ8FmBfFc7ehsJ3FznEguQtcSK0sSixy0CO NfmBNhn3+rY7azyG7oO826HwTTcs/Pk5kKHTPkPRnMMiUNm6San8R2Nkjw/Hjibb xt7TAI6bBNfvl6cU4d7FD82VpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKyLgRFv R5R710oiYOapXhIOfZW7MB8GA1UdIwQYMBaAFLOZLw1Juvajb9pljltFlGlSHltE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwRC9ERDdFMDkxQ0I2 NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi9zNWt2RFVtNjlxTnYybVdPVzBXVWFWSWVX MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3M1a3ZEVW02OXFOdjJtV09XMFdVYVZJZVcwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTMwRC9ERDdFMDkxQ0I2NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi9zNWt2RFVtNjlx TnYybVdPVzBXVWFWSWVXMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApwFyeh+s1xpzbTTI5hbeN2xOAMyvceMBMQBSe7KAgcXueQt04QP6o aK5ygEI/orHsrP4jNyLAnOjKNp3gaNbFmCvnRoXo4/Hvil+uBjRDn687L9rF/NLx rnJEVwc82oqQOPYV6BrLDpjczHOL9LSxrLuqgtM8t5Scy7oboouszjCyBLI1paev gtz6s8T9wQtjawszQsIe5EM8nwsoPYSyjtKsXrUYF88hqZjFd/0JKO8IBpdUj+gq PIBbtBo76T+KXAwaz+dbX6Z4xYqxeHW1PuuZGQXA4s9nwB42gOh1dm200u4/SQYX LPaz/u3islHl1Lnfy4o1cJpJPysJox4j -----END CERTIFICATE-----Generated at Thu Apr 10 23:19:41 2025 by rpki-client