$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft File: 5Otd-leSQpC7j-xFuZd_xsf2-jc.mft (raw, json) Hash identifier: uFBe8WkyBJbyxoV7/lUPbx3I8qDRxeq4MhqHf/lrf1M= Subject key identifier: CC:E4:E2:00:D4:FE:D8:28:FD:42:EC:B5:A2:E1:AF:A1:08:0A:45:C2 Authority key identifier: E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 Certificate issuer: /CN=A91A8B0B/serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Certificate serial: 0C70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft Manifest number: 0C5E Signing time: Fri 04 Apr 2025 18:24:31 +0000 Manifest this update: Fri 04 Apr 2025 18:24:31 +0000 Manifest next update: Fri 11 Apr 2025 18:24:31 +0000 Files and hashes: 1: 5Otd-leSQpC7j-xFuZd_xsf2-jc.crl (hash: /uVPO+Atrhc8fzpQReoBWfa5qfYJedVDjnVsR3CBnRU=) 2: 5842DDF0FCE511E9BFA4B27AC4F9AE02.roa (hash: kJqESF4QlMyVG/2/vUjwGWXp6ZiWLKmRChQ5GeCT1ak=) 3: EA17F65E6C6711ECB7C0925AC4F9AE02.roa (hash: n6K4eFBQQStBGPjOWI9UjtqimxuSa7JV9+htrnKW+a4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:24:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3184 (0xc70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8B0B Validity Not Before: Apr 4 18:24:31 2025 GMT Not After : Apr 11 18:24:31 2025 GMT Subject: CN=67f023df-4902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b6:76:85:14:3a:36:a1:e8:9b:23:c5:61:2c: 4f:98:d7:6b:6d:9c:fb:58:76:b2:dd:95:c8:23:08: 30:19:f9:5f:58:e4:b1:47:10:3e:48:0b:bd:81:f2: 5f:11:ee:4d:bd:03:89:ef:ce:10:ae:23:20:3e:3d: 1c:a5:05:d9:cd:a7:2e:2c:95:b2:2f:a0:b8:5a:e9: 8d:0c:8d:09:51:a6:a9:f0:4c:54:60:4b:a5:56:59: 9e:7a:22:95:6d:96:35:6d:b9:b4:2d:2a:ab:23:7f: 6d:3c:d1:56:82:79:cc:fd:62:34:cc:0a:54:95:1c: 36:cc:2f:98:38:01:fe:74:63:f6:10:23:9c:4d:04: b7:70:28:d6:54:fd:a7:6a:78:fb:f9:8b:62:df:e7: eb:c3:5c:cf:0c:2d:19:74:a6:b2:f3:ab:dc:92:b8: fb:9a:5c:4d:ab:f5:78:a4:17:c3:7e:43:b9:a6:85: 93:f4:dc:1b:ac:31:c9:6e:d3:53:fb:60:30:56:af: a0:1f:0a:3d:90:94:c2:b9:f8:b4:03:d3:d6:b1:a5: 4f:33:e1:27:d0:52:8f:c7:29:4b:0a:10:90:b1:9f: 5c:56:63:a9:e4:84:84:15:ae:ff:a1:10:fb:27:d3: 7f:d9:b2:c5:7c:e4:0a:4c:fa:2a:55:95:ff:5c:53: 94:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E4:E2:00:D4:FE:D8:28:FD:42:EC:B5:A2:E1:AF:A1:08:0A:45:C2 X509v3 Authority Key Identifier: keyid:E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:d8:1e:57:f4:89:0c:ca:aa:1c:21:76:42:96:2a:72:6f:2a: c7:b0:2f:39:09:f5:52:f4:f3:7e:29:1a:71:59:63:1d:2e:93: 1f:35:57:00:a2:73:70:53:98:2b:87:07:68:81:04:2f:9c:35: 83:f1:d4:1d:2d:28:63:77:4c:59:eb:df:d7:4a:68:b3:e7:f7: 76:19:e7:bf:89:b5:78:fb:1b:9f:f4:0e:e6:35:8c:0c:2f:a6: 4e:41:b4:e4:40:a6:19:ad:75:fd:80:1b:f1:46:de:0d:c9:26: 2b:d0:e6:97:16:de:89:40:57:78:2e:28:b1:97:04:38:46:3b: 27:20:60:1d:e8:91:24:c0:4c:24:a2:3d:a7:48:37:19:79:1d: 35:3f:e6:77:d1:0a:4e:d1:80:fc:bc:0c:1c:8d:17:1f:da:5a: e5:c5:76:58:94:fc:19:de:3e:db:be:f3:18:76:a2:6e:98:a4: c5:63:17:3c:ad:69:08:c2:a5:14:e1:99:6a:61:bf:03:8a:21: 32:80:81:f4:d2:28:94:2b:4c:9a:c4:45:65:83:3c:7f:f0:f1: 97:3a:fd:a1:7f:9c:ff:fb:0e:a7:cc:17:43:53:01:1b:9f:ef: 39:5f:ff:93:4d:51:e8:67:d0:7e:fd:96:d5:00:cb:5d:d3:6b: 76:04:b4:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThCMEIxMTAvBgNVBAUTKEU0RUI1REZBNTc5MjQyOTBCQjhGRUM0NUI5OTc3RkM2 QzdGNkZBMzcwHhcNMjUwNDA0MTgyNDMxWhcNMjUwNDExMTgyNDMxWjAYMRYwFAYD VQQDEw02N2YwMjNkZi00OTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bZ2hRQ6NqHomyPFYSxPmNdrbZz7WHay3ZXIIwgwGflfWOSxRxA+SAu9gfJf Ee5NvQOJ784QriMgPj0cpQXZzacuLJWyL6C4WumNDI0JUaap8ExUYEulVlmeeiKV bZY1bbm0LSqrI39tPNFWgnnM/WI0zApUlRw2zC+YOAH+dGP2ECOcTQS3cCjWVP2n anj7+Yti3+frw1zPDC0ZdKay86vckrj7mlxNq/V4pBfDfkO5poWT9NwbrDHJbtNT +2AwVq+gHwo9kJTCufi0A9PWsaVPM+En0FKPxylLChCQsZ9cVmOp5ISEFa7/oRD7 J9N/2bLFfOQKTPoqVZX/XFOUswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzk4gDU /tgo/ULstaLhr6EICkXCMB8GA1UdIwQYMBaAFOTrXfpXkkKQu4/sRbmXf8bH9vo3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEIwQi81QUVCNUVCMkZD QzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1FwQzdqLXhGdVpkX3hzZjIt amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPdGQtbGVTUXBDN2oteEZ1WmRfeHNmMi1qYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEIwQi81QUVCNUVCMkZDQzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1Fw QzdqLXhGdVpkX3hzZjItamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz2B5X9IkMyqocIXZClipybyrHsC85CfVS9PN+KRpxWWMdLpMfNVcA onNwU5grhwdogQQvnDWD8dQdLShjd0xZ69/XSmiz5/d2Gee/ibV4+xuf9A7mNYwM L6ZOQbTkQKYZrXX9gBvxRt4NySYr0OaXFt6JQFd4LiixlwQ4RjsnIGAd6JEkwEwk oj2nSDcZeR01P+Z30QpO0YD8vAwcjRcf2lrlxXZYlPwZ3j7bvvMYdqJumKTFYxc8 rWkIwqUU4ZlqYb8DiiEygIH00iiUK0yaxEVlgzx/8PGXOv2hf5z/+w6nzBdDUwEb n+85X/+TTVHoZ9B+/ZbVAMtd02t2BLQ/ -----END CERTIFICATE-----Generated at Sat Apr 5 19:05:49 2025 by rpki-client