$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft File: l_m5BihHZTCOwmiFXVY9q5GGMFs.mft (raw, json) Hash identifier: QDTVIG7zXo47Ha4tittDdJmzcM+2nkBAJizKC3tXc4Y= Subject key identifier: 14:78:64:FC:57:17:50:1E:54:C8:AF:CA:96:52:CE:09:AC:72:FB:42 Authority key identifier: 97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B Certificate issuer: /CN=A918E4E6/serialNumber=97F9B906284765308EC268855D563DAB9186305B Certificate serial: 0C5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft Manifest number: 0C59 Signing time: Fri 18 Apr 2025 18:24:21 +0000 Manifest this update: Fri 18 Apr 2025 18:24:21 +0000 Manifest next update: Fri 25 Apr 2025 18:24:21 +0000 Files and hashes: 1: l_m5BihHZTCOwmiFXVY9q5GGMFs.crl (hash: ddDswgB52266e3wUfHzoTnXhoTMGh+xZ1amEUaIM9sY=) 2: 9C9660D4FC6E11E9BC6D4822C4F9AE02.roa (hash: xyYlJncaSUNWmGDmUFY6Ptm1YpyAyeIUKxqpTgZgQ8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 18:24:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3167 (0xc5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4E6, serialNumber=97F9B906284765308EC268855D563DAB9186305B Validity Not Before: Apr 18 18:24:21 2025 GMT Not After : Apr 25 18:24:21 2025 GMT Subject: CN=680298d5-9b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6d:8b:66:25:17:eb:a8:e7:16:b5:43:91:c6: de:3d:7c:fb:1d:75:50:c2:ec:c2:f1:45:3f:45:21: cd:a5:46:21:95:e3:8a:c0:4d:97:2a:37:41:92:f5: d1:41:8d:56:cf:35:ba:56:85:00:46:c4:8f:85:f5: 83:67:79:72:17:ec:5b:98:ef:66:47:7d:0e:b5:4e: 40:8a:bf:a0:f4:5d:2a:9e:d0:21:8d:45:03:8e:a1: e4:b3:2b:b6:84:f6:61:37:74:59:11:8b:43:64:c5: b0:35:b9:e5:70:0c:c5:b1:fa:71:56:f6:f7:1a:0e: a5:32:5f:1a:ef:a0:10:6c:c3:8f:b2:f9:02:76:3e: 83:12:80:b7:e1:38:91:bd:0d:f1:e2:5a:d3:85:40: 45:5f:74:0a:69:44:e0:ce:f0:8a:7c:61:ee:68:f1: f5:08:52:47:cd:d4:b2:27:a9:ab:92:0f:9d:eb:9d: ea:52:8f:37:ae:94:74:8a:88:5e:72:82:b0:18:27: 5f:03:c3:20:c3:28:78:75:eb:3b:46:cc:16:2a:1f: 1c:24:db:78:1d:cc:1e:0a:90:fc:dc:78:c9:82:70: 79:e8:ba:44:d7:a9:0d:ae:9b:7c:bf:f7:82:a6:d8: 0e:b6:50:d6:4e:42:95:9a:f6:e7:ff:e1:5d:a5:b5: 64:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:78:64:FC:57:17:50:1E:54:C8:AF:CA:96:52:CE:09:AC:72:FB:42 X509v3 Authority Key Identifier: keyid:97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:85:da:54:d8:5d:19:47:f4:e8:8f:c7:08:91:8e:99:1a:85: 93:e7:5c:d8:e3:58:8b:9e:a8:a6:f7:86:0b:05:b8:8e:e8:ff: 01:8c:b1:75:30:0c:61:ce:e2:1a:de:62:99:1a:e2:58:18:00: 5d:7d:d0:84:b6:9e:96:95:68:39:9a:35:cb:3d:06:5e:ae:cb: b5:ea:57:ca:bf:5e:79:29:0d:48:2a:8e:e6:2f:a2:c7:72:ac: 7b:0c:af:d9:71:e2:f8:9c:3e:41:f3:f3:f2:7b:1a:78:0f:be: 0c:9a:3b:1d:0d:ff:b0:a3:50:cf:8d:83:7b:98:5e:12:01:bb: 1a:61:58:4a:53:7a:68:b2:8a:31:74:ee:0c:9e:53:af:82:a9: ae:8c:f8:3d:13:50:9f:bd:69:80:79:e5:bd:0e:51:14:80:d4: a0:c5:4b:2c:8b:64:b6:46:29:78:cc:96:d2:af:25:0e:3a:66: 54:ab:dd:0d:6a:ee:61:3f:f1:32:0b:f4:6d:1b:e2:28:37:47: 02:75:65:3b:57:ac:d0:af:43:e0:75:06:5b:d2:8d:f6:47:b8: be:9e:71:0f:e5:86:d8:47:24:ef:70:ac:1e:9d:42:23:6d:9b: 17:44:4e:a9:df:44:40:41:52:1a:2d:08:56:85:f4:d4:8b:91: ed:20:89:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0RTYxMTAvBgNVBAUTKDk3RjlCOTA2Mjg0NzY1MzA4RUMyNjg4NTVENTYzREFC OTE4NjMwNUIwHhcNMjUwNDE4MTgyNDIxWhcNMjUwNDI1MTgyNDIxWjAYMRYwFAYD VQQDEw02ODAyOThkNS05YjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5G2LZiUX66jnFrVDkcbePXz7HXVQwuzC8UU/RSHNpUYhleOKwE2XKjdBkvXR QY1WzzW6VoUARsSPhfWDZ3lyF+xbmO9mR30OtU5Air+g9F0qntAhjUUDjqHksyu2 hPZhN3RZEYtDZMWwNbnlcAzFsfpxVvb3Gg6lMl8a76AQbMOPsvkCdj6DEoC34TiR vQ3x4lrThUBFX3QKaUTgzvCKfGHuaPH1CFJHzdSyJ6mrkg+d653qUo83rpR0iohe coKwGCdfA8Mgwyh4des7RswWKh8cJNt4HcweCpD83HjJgnB56LpE16kNrpt8v/eC ptgOtlDWTkKVmvbn/+FdpbVkuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBR4ZPxX F1AeVMivypZSzgmscvtCMB8GA1UdIwQYMBaAFJf5uQYoR2UwjsJohV1WPauRhjBb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRFNi8yQjNCMkZDRUZD NkQxMUU5OEZDMkM5MUNDNEY5QUUwMi9sX201QmloSFpUQ093bWlGWFZZOXE1R0dN RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xfbTVCaWhIWlRDT3dtaUZYVlk5cTVHR01Gcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTRFNi8yQjNCMkZDRUZDNkQxMUU5OEZDMkM5MUNDNEY5QUUwMi9sX201QmloSFpU Q093bWlGWFZZOXE1R0dNRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUhdpU2F0ZR/Toj8cIkY6ZGoWT51zY41iLnqim94YLBbiO6P8BjLF1 MAxhzuIa3mKZGuJYGABdfdCEtp6WlWg5mjXLPQZersu16lfKv155KQ1IKo7mL6LH cqx7DK/ZceL4nD5B8/Pyexp4D74MmjsdDf+wo1DPjYN7mF4SAbsaYVhKU3posoox dO4MnlOvgqmujPg9E1CfvWmAeeW9DlEUgNSgxUssi2S2Ril4zJbSryUOOmZUq90N au5hP/EyC/RtG+IoN0cCdWU7V6zQr0PgdQZb0o32R7i+nnEP5YbYRyTvcKwenUIj bZsXRE6p30RAQVIaLQhWhfTUi5HtIIlp -----END CERTIFICATE-----Generated at Sat Apr 19 00:53:56 2025 by rpki-client