$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft File: 5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft (raw, json) Hash identifier: NozG3+W83aQ427thWLQ9PtWo/zTfLNQl25MwvIhCAsg= Subject key identifier: FF:A1:C8:66:92:E9:27:20:C9:3A:04:93:38:33:B3:38:77:99:C4:F5 Authority key identifier: E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E Certificate issuer: /CN=A91A7169/serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft Manifest number: C3 Signing time: Sat 29 Mar 2025 05:16:47 +0000 Manifest this update: Sat 29 Mar 2025 05:16:46 +0000 Manifest next update: Sat 05 Apr 2025 05:16:46 +0000 Files and hashes: 1: 5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl (hash: yT9ejM4dVly3dWBpsRxZ8aj4ZNc4MoGwrKR4btCZ/mI=) 2: C27C0758916B11EF81BBB521C4F9AE02.roa (hash: 0diVW8dy9wFSEzk96glJFk8zdqR8H6Y/olMf4xxS0Yk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7169 Validity Not Before: Mar 29 05:16:46 2025 GMT Not After : Apr 5 05:16:46 2025 GMT Subject: CN=67e7823f-059d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ac:d2:85:9a:08:92:12:69:b9:cc:97:4d:a8: ae:cc:77:bd:29:75:3e:07:ad:92:78:8a:70:9c:4d: 4c:ab:f0:d0:61:a9:68:4b:dd:e4:f8:29:c1:a1:dc: 60:15:14:57:ef:6f:1e:a7:0c:c8:05:eb:ce:38:d1: 28:8f:21:73:44:10:9b:0c:b1:b8:3e:11:27:04:d0: 14:a3:89:b6:76:48:72:8e:7f:05:0f:60:a0:eb:c7: 68:0d:82:12:3a:6f:71:fe:7d:0c:70:61:dc:8c:76: 59:e4:69:73:6c:cb:4a:e2:3e:6e:0f:a7:0b:e4:7b: d1:65:37:0e:3a:2f:3d:fd:f9:c4:87:47:df:80:34: 95:c6:de:76:fc:bc:ac:a1:5d:75:90:1d:b6:fd:6a: 19:02:00:dc:6a:42:e8:39:40:69:86:0a:a1:35:72: fb:91:a6:1c:1b:1e:52:18:73:7f:11:b4:bf:ec:97: 72:0c:26:6c:5f:da:ff:a3:1c:6f:68:1e:03:d0:2e: 6c:af:3a:1f:be:0c:38:59:e2:ad:63:45:ca:1b:65: fe:9d:ce:bf:16:33:d8:af:8f:0d:0c:b7:a9:29:d3: 87:05:d0:a8:75:d2:d0:75:12:13:ba:17:38:93:0d: 18:44:5a:65:d6:6d:c6:74:43:b8:63:6e:23:67:bf: a2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A1:C8:66:92:E9:27:20:C9:3A:04:93:38:33:B3:38:77:99:C4:F5 X509v3 Authority Key Identifier: keyid:E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:8f:e7:f2:e2:f8:c6:81:99:5c:1e:ff:fd:08:28:a6:84:6a: a5:b0:b4:21:98:20:c8:85:d1:9c:91:c9:85:1c:bf:66:70:d4: df:4a:74:d3:ce:59:8e:77:bf:7b:16:47:aa:8f:0d:59:2e:e2: 70:9f:a0:41:56:c1:0a:44:e1:1f:56:65:48:22:f8:d6:4f:15: 48:20:d6:13:81:dc:52:d2:02:3f:f9:91:26:2f:78:78:e4:76: ed:52:7f:db:fd:e5:70:cc:d8:1c:62:03:07:51:73:4e:a9:db: 9b:3e:b2:7a:3b:24:8e:33:91:0a:6e:0e:f2:24:5a:8a:cc:df: 52:e5:f8:a7:51:25:c8:6a:1e:a7:56:e5:d9:04:e1:68:92:b8: 62:fd:9a:bc:6a:c3:1b:ff:55:a0:a7:3e:b6:99:5e:63:3f:72: fa:a3:91:79:24:84:6f:49:4a:d9:12:ae:53:c3:5d:04:aa:b4: 24:ab:c8:ab:04:68:df:4f:63:5c:5c:1f:72:6b:97:da:9b:fb: ba:ee:26:e6:4f:cd:2d:31:ce:87:d2:64:61:ea:af:d6:a0:7c: 80:39:d1:82:1f:86:47:6b:4d:bb:e0:f9:cc:c9:29:c2:5b:a3: d7:fc:41:d5:2c:d3:47:63:ff:a2:af:8b:d1:c3:6a:6c:cf:18: a3:77:d7:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcxNjkxMTAvBgNVBAUTKEU1MENCMjUwQkZBRDA4NjNFODVDMjkwMkVBMDIxOUQ1 M0NDMDgxMkUwHhcNMjUwMzI5MDUxNjQ2WhcNMjUwNDA1MDUxNjQ2WjAYMRYwFAYD VQQDEw02N2U3ODIzZi0wNTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3azShZoIkhJpucyXTaiuzHe9KXU+B62SeIpwnE1Mq/DQYaloS93k+CnBodxg FRRX728epwzIBevOONEojyFzRBCbDLG4PhEnBNAUo4m2dkhyjn8FD2Cg68doDYIS Om9x/n0McGHcjHZZ5GlzbMtK4j5uD6cL5HvRZTcOOi89/fnEh0ffgDSVxt52/Lys oV11kB22/WoZAgDcakLoOUBphgqhNXL7kaYcGx5SGHN/EbS/7JdyDCZsX9r/oxxv aB4D0C5srzofvgw4WeKtY0XKG2X+nc6/FjPYr48NDLepKdOHBdCoddLQdRITuhc4 kw0YRFpl1m3GdEO4Y24jZ7+i/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+hyGaS 6ScgyToEkzgzszh3mcT1MB8GA1UdIwQYMBaAFOUMslC/rQhj6FwpAuoCGdU8wIEu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzE2OS82QjdGOTkzQ0VC QUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi81UXl5VUwtdENHUG9YQ2tDNmdJWjFUekFn UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVReXlVTC10Q0dQb1hDa0M2Z0laMVR6QWdTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzE2OS82QjdGOTkzQ0VCQUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi81UXl5VUwtdENH UG9YQ2tDNmdJWjFUekFnUzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBij+fy4vjGgZlcHv/9CCimhGqlsLQhmCDIhdGckcmFHL9mcNTfSnTT zlmOd797Fkeqjw1ZLuJwn6BBVsEKROEfVmVIIvjWTxVIINYTgdxS0gI/+ZEmL3h4 5HbtUn/b/eVwzNgcYgMHUXNOqdubPrJ6OySOM5EKbg7yJFqKzN9S5finUSXIah6n VuXZBOFokrhi/Zq8asMb/1Wgpz62mV5jP3L6o5F5JIRvSUrZEq5Tw10EqrQkq8ir BGjfT2NcXB9ya5fam/u67ibmT80tMc6H0mRh6q/WoHyAOdGCH4ZHa0274PnMySnC W6PX/EHVLNNHY/+ir4vRw2pszxijd9dx -----END CERTIFICATE-----Generated at Fri Apr 4 18:28:38 2025 by rpki-client