$ rpki-client -vvf rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft File: 5wYdsiKDjeaKk84h7ykbBVQthyY.mft (raw, json) Hash identifier: NXNMTRPm9cjbnA/l2uavErebRZfN0mi3skcxQACj5uc= Subject key identifier: 5E:E7:79:05:4D:33:E4:2D:EA:5A:DA:F4:80:EA:6B:DA:25:79:7B:1E Authority key identifier: E7:06:1D:B2:22:83:8D:E6:8A:93:CE:21:EF:29:1B:05:54:2D:87:26 Certificate issuer: /CN=A919D3C2/serialNumber=E7061DB222838DE68A93CE21EF291B05542D8726 Certificate serial: 1ADE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wYdsiKDjeaKk84h7ykbBVQthyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft Manifest number: 1AD4 Signing time: Fri 04 Apr 2025 16:21:39 +0000 Manifest this update: Fri 04 Apr 2025 16:21:39 +0000 Manifest next update: Fri 11 Apr 2025 16:21:39 +0000 Files and hashes: 1: 5wYdsiKDjeaKk84h7ykbBVQthyY.crl (hash: hUiAGeaIP+EGNPEUjhkVgTwskdvG4aK/76nJ8LOy6k0=) 2: A6B5F55C23F911E79BE44454C4F9AE02.roa (hash: F2ak73nonVZ20QRrcSfPPZHYy8EZQeLDHTDgpyvlwUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.crl rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wYdsiKDjeaKk84h7ykbBVQthyY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6878 (0x1ade) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D3C2 Validity Not Before: Apr 4 16:21:39 2025 GMT Not After : Apr 11 16:21:39 2025 GMT Subject: CN=67f00713-7caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:10:c9:a5:28:32:ad:32:7c:b9:a2:08:09:86: 12:08:d9:81:e1:74:aa:01:92:3e:a3:5c:6b:54:9d: db:02:53:56:1f:96:d0:34:0c:79:18:c3:e0:1f:64: 2b:98:d4:a2:46:25:87:83:2e:e8:ad:45:1e:48:83: 77:38:aa:57:a0:4a:f6:b3:ac:84:17:a3:52:7b:0e: 94:47:74:f3:9e:18:36:0e:96:d0:57:5b:d6:fe:c0: 6f:36:f9:b0:e0:cc:f5:de:6e:5c:f2:d0:09:1c:cf: f7:42:3c:18:88:2e:a0:55:0c:97:9e:fd:7b:d2:de: 63:c7:dc:cf:ed:8c:70:f0:5d:25:c2:4b:bc:d4:22: 76:d1:e1:c2:a0:f4:c1:37:21:2e:51:37:9a:8a:30: b5:0b:83:ab:55:6f:57:6c:92:2a:2e:02:48:0d:7f: e1:22:a5:5d:eb:44:33:95:cd:17:7c:d7:76:db:99: 07:d3:50:cf:db:62:4c:7f:da:66:e1:05:a3:f2:6b: 7e:85:80:a9:23:16:ab:c3:75:e6:dc:3b:57:44:63: 53:38:2b:97:fe:dd:85:eb:51:33:74:f4:f3:1d:e1: 22:c3:44:83:c5:30:7d:46:1a:15:3c:11:2d:dd:82: 8d:a3:0f:8a:68:f0:8f:0d:e0:45:94:bb:db:f9:57: 71:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E7:79:05:4D:33:E4:2D:EA:5A:DA:F4:80:EA:6B:DA:25:79:7B:1E X509v3 Authority Key Identifier: keyid:E7:06:1D:B2:22:83:8D:E6:8A:93:CE:21:EF:29:1B:05:54:2D:87:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wYdsiKDjeaKk84h7ykbBVQthyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:44:27:41:39:ef:f3:0e:d0:54:ff:52:c4:12:a9:84:fb:c5: e9:a7:18:c9:7f:f5:ec:0c:10:5b:c1:71:87:25:35:11:eb:d0: a8:96:6e:f0:ec:f8:9b:83:2b:da:08:5b:f8:40:ac:bc:62:44: f2:5e:b2:f7:7b:8a:3a:c4:86:bc:93:74:3e:98:6d:5e:43:b2: d8:5e:f2:03:ad:33:68:09:01:cd:2d:3e:e4:30:59:86:7e:6d: a5:74:00:3c:8c:08:ae:b6:b6:18:b6:c6:b8:06:b5:dc:2f:e9: c2:fe:a1:93:ca:0d:8b:20:da:b9:85:b0:99:0d:36:0a:1f:d3: 2b:b0:9d:40:1a:6e:a1:f7:d8:c9:7b:36:e7:0c:48:37:8e:df: e0:f8:e7:3d:43:9f:48:3d:33:ad:98:65:bb:ea:58:ed:04:6a: 61:74:d2:d5:81:f8:49:4c:a2:12:08:8c:b5:d2:ae:32:8a:57: 6a:a8:41:39:7a:99:06:58:eb:f0:a6:09:82:69:e4:09:56:f8: 0b:6b:40:13:42:90:83:7a:64:24:63:01:5b:80:57:76:86:80: 62:d9:4f:d2:9d:4a:c0:04:41:30:d8:7b:79:ee:1e:ae:d4:35: b5:37:48:3b:62:98:17:68:26:79:22:7f:a6:2b:b7:12:b1:35: b6:51:98:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQzQzIxMTAvBgNVBAUTKEU3MDYxREIyMjI4MzhERTY4QTkzQ0UyMUVGMjkxQjA1 NTQyRDg3MjYwHhcNMjUwNDA0MTYyMTM5WhcNMjUwNDExMTYyMTM5WjAYMRYwFAYD VQQDEw02N2YwMDcxMy03Y2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRDJpSgyrTJ8uaIICYYSCNmB4XSqAZI+o1xrVJ3bAlNWH5bQNAx5GMPgH2Qr mNSiRiWHgy7orUUeSIN3OKpXoEr2s6yEF6NSew6UR3Tznhg2DpbQV1vW/sBvNvmw 4Mz13m5c8tAJHM/3QjwYiC6gVQyXnv170t5jx9zP7Yxw8F0lwku81CJ20eHCoPTB NyEuUTeaijC1C4OrVW9XbJIqLgJIDX/hIqVd60Qzlc0XfNd225kH01DP22JMf9pm 4QWj8mt+hYCpIxarw3Xm3DtXRGNTOCuX/t2F61EzdPTzHeEiw0SDxTB9RhoVPBEt 3YKNow+KaPCPDeBFlLvb+VdxhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7neQVN M+Qt6lra9IDqa9oleXseMB8GA1UdIwQYMBaAFOcGHbIig43mipPOIe8pGwVULYcm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDNDMi83MkQ3Q0ZENjIz RjgxMUU3OTU4OUQ3NTJDNEY5QUUwMi81d1lkc2lLRGplYUtrODRoN3lrYkJWUXRo eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV3WWRzaUtEamVhS2s4NGg3eWtiQlZRdGh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDNDMi83MkQ3Q0ZENjIzRjgxMUU3OTU4OUQ3NTJDNEY5QUUwMi81d1lkc2lLRGpl YUtrODRoN3lrYkJWUXRoeVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYRCdBOe/zDtBU/1LEEqmE+8XppxjJf/XsDBBbwXGHJTUR69Colm7w 7PibgyvaCFv4QKy8YkTyXrL3e4o6xIa8k3Q+mG1eQ7LYXvIDrTNoCQHNLT7kMFmG fm2ldAA8jAiutrYYtsa4BrXcL+nC/qGTyg2LINq5hbCZDTYKH9MrsJ1AGm6h99jJ ezbnDEg3jt/g+Oc9Q59IPTOtmGW76ljtBGphdNLVgfhJTKISCIy10q4yildqqEE5 epkGWOvwpgmCaeQJVvgLa0ATQpCDemQkYwFbgFd2hoBi2U/SnUrABEEw2Ht57h6u 1DW1N0g7YpgXaCZ5In+mK7cSsTW2UZi7 -----END CERTIFICATE-----Generated at Fri Apr 4 22:32:14 2025 by rpki-client