$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft File: t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft (raw, json) Hash identifier: 2h64y4IA7a2szONkI0xyTiodoE1C2kRGAxoja8IljSo= Subject key identifier: 58:CD:F0:D8:CB:29:67:FC:03:C5:9C:C1:63:F7:57:D1:A3:73:C6:BE Authority key identifier: B7:94:F9:97:33:EE:FC:3F:A0:00:3F:68:8F:64:C9:C3:53:92:66:B5 Certificate issuer: /CN=A91B4E11/serialNumber=B794F99733EEFC3FA0003F688F64C9C3539266B5 Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft Manifest number: A5 Signing time: Fri 11 Apr 2025 05:22:19 +0000 Manifest this update: Fri 11 Apr 2025 05:22:19 +0000 Manifest next update: Fri 18 Apr 2025 05:22:19 +0000 Files and hashes: 1: t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl (hash: gO1r16xxYh+6Zh18B0n+bplG870sK23Qybu8FJSJkZc=) 2: A2939A381CB711EF8F98240CC4F9AE02.roa (hash: AIIOALhmpVgtbG/Y3VLxrUnP8fQ71eZKv8RmFzdHCHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 05:22:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4E11, serialNumber=B794F99733EEFC3FA0003F688F64C9C3539266B5 Validity Not Before: Apr 11 05:22:19 2025 GMT Not After : Apr 18 05:22:19 2025 GMT Subject: CN=67f8a70b-4dce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:77:1e:cd:dc:1b:4d:a0:26:e3:63:0e:39:a8: 90:4e:25:cd:db:a3:9b:7b:8a:19:c4:10:2b:58:02: 56:b1:60:a0:f7:eb:eb:7b:da:6a:7b:18:99:04:85: dc:74:30:ff:7b:80:bf:53:5b:15:7a:e5:a5:b9:70: 94:da:ad:ce:ba:3d:dc:1d:cf:ab:e6:f0:88:5e:94: 0d:95:70:7e:15:f1:e6:50:be:ef:d5:c9:41:0c:06: a2:4c:29:91:d7:43:31:24:23:8b:ac:62:f4:74:77: 1b:df:b7:8b:97:66:53:75:5d:b5:25:db:d6:a5:12: b8:c8:1a:80:82:5b:ec:2d:45:7a:7f:72:f1:56:ca: cc:40:25:c2:80:d2:89:74:18:de:6f:b8:37:c6:48: 17:2f:ff:7e:c3:ed:1c:e1:ef:a8:c7:18:40:ed:4e: 5b:cf:6b:e8:b8:1f:af:32:6e:c7:1e:8b:bf:0e:33: ea:8a:4a:e5:58:d4:e5:f7:f1:64:98:fc:b1:94:35: 29:4c:19:0f:bb:e7:9b:9c:15:49:b3:ac:aa:91:6c: f7:7e:a7:11:1a:f8:52:31:54:fa:49:d1:7d:18:d0: ca:ec:9e:e9:b9:7b:e1:23:62:84:e0:64:cb:1f:3a: ad:bb:85:a0:1f:fe:1d:13:7e:1f:bc:ec:68:0d:cb: 9f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:CD:F0:D8:CB:29:67:FC:03:C5:9C:C1:63:F7:57:D1:A3:73:C6:BE X509v3 Authority Key Identifier: keyid:B7:94:F9:97:33:EE:FC:3F:A0:00:3F:68:8F:64:C9:C3:53:92:66:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:fa:b2:f4:62:a8:f1:c6:b1:c2:c8:86:97:37:c1:32:3a:ce: 84:7c:79:fc:ae:64:83:77:9e:18:ad:56:b2:cc:ae:62:6d:f1: 65:36:cf:33:72:69:9c:70:8f:f4:5c:6a:fb:f6:ab:4f:3e:0a: 09:b1:57:23:55:d5:ac:35:05:71:de:3d:99:34:03:f4:9d:8f: b6:29:a9:c3:0d:7d:4a:b0:55:dc:9b:60:fe:f9:b0:c1:35:68: 34:be:4f:70:36:e3:98:69:8c:fe:b2:43:e4:0a:64:1e:72:01: 47:f3:76:ec:f0:34:d9:d6:07:33:d2:0d:91:ac:04:d9:98:61: d8:c3:05:39:0e:5b:21:bb:78:87:e4:5e:ca:3f:51:05:1b:2b: c2:11:d6:80:e2:06:b9:f9:0f:54:4e:5c:a1:06:05:cc:55:47: 94:c0:9b:64:21:32:69:30:4c:ff:91:9f:03:6d:4a:5d:27:67: 26:d7:65:6b:4c:52:3a:cf:34:fd:6e:39:e3:0e:60:66:68:2c: 14:2b:1c:3a:87:22:35:18:97:67:85:3b:77:f3:f7:98:b4:d2: 6c:d2:50:c3:b5:13:14:65:a3:70:7e:c9:49:21:e3:ba:29:78: c0:cf:54:49:df:cd:db:c0:a2:cf:5d:2c:7c:dd:4d:35:55:a6: d6:4a:82:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRFMTExMTAvBgNVBAUTKEI3OTRGOTk3MzNFRUZDM0ZBMDAwM0Y2ODhGNjRDOUMz NTM5MjY2QjUwHhcNMjUwNDExMDUyMjE5WhcNMjUwNDE4MDUyMjE5WjAYMRYwFAYD VQQDEw02N2Y4YTcwYi00ZGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2HcezdwbTaAm42MOOaiQTiXN26Obe4oZxBArWAJWsWCg9+vre9pqexiZBIXc dDD/e4C/U1sVeuWluXCU2q3Ouj3cHc+r5vCIXpQNlXB+FfHmUL7v1clBDAaiTCmR 10MxJCOLrGL0dHcb37eLl2ZTdV21JdvWpRK4yBqAglvsLUV6f3LxVsrMQCXCgNKJ dBjeb7g3xkgXL/9+w+0c4e+oxxhA7U5bz2vouB+vMm7HHou/DjPqikrlWNTl9/Fk mPyxlDUpTBkPu+ebnBVJs6yqkWz3fqcRGvhSMVT6SdF9GNDK7J7puXvhI2KE4GTL Hzqtu4WgH/4dE34fvOxoDcufAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjN8NjL KWf8A8WcwWP3V9Gjc8a+MB8GA1UdIwQYMBaAFLeU+Zcz7vw/oAA/aI9kycNTkma1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEUxMS83QkNGODEyODFD QTgxMUVGQTUwMzBCNERDNEY5QUUwMi90NVQ1bHpQdV9ELWdBRDlvajJUSncxT1Na clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q1VDVselB1X0QtZ0FEOW9qMlRKdzFPU1pyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEUxMS83QkNGODEyODFDQTgxMUVGQTUwMzBCNERDNEY5QUUwMi90NVQ1bHpQdV9E LWdBRDlvajJUSncxT1NaclUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI+rL0YqjxxrHCyIaXN8EyOs6EfHn8rmSDd54YrVayzK5ibfFlNs8z cmmccI/0XGr79qtPPgoJsVcjVdWsNQVx3j2ZNAP0nY+2KanDDX1KsFXcm2D++bDB NWg0vk9wNuOYaYz+skPkCmQecgFH83bs8DTZ1gcz0g2RrATZmGHYwwU5Dlshu3iH 5F7KP1EFGyvCEdaA4ga5+Q9UTlyhBgXMVUeUwJtkITJpMEz/kZ8DbUpdJ2cm12Vr TFI6zzT9bjnjDmBmaCwUKxw6hyI1GJdnhTt38/eYtNJs0lDDtRMUZaNwfslJIeO6 KXjAz1RJ383bwKLPXSx83U01VabWSoIT -----END CERTIFICATE-----Generated at Sat Apr 12 19:14:38 2025 by rpki-client