$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft File: 5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft (raw, json) Hash identifier: /M0fFBpeMvYd2BDHqX7GBn6lZVnbGB+eTaQq1XfJoQU= Subject key identifier: 87:61:A0:E0:1D:CB:F7:AE:83:31:63:93:2E:45:76:F6:D1:A7:19:56 Authority key identifier: E6:AC:F4:F5:94:A4:43:8F:89:7A:ED:AA:B4:A3:D3:8C:86:5C:CE:22 Certificate issuer: /CN=A91B6395/serialNumber=E6ACF4F594A4438F897AEDAAB4A3D38C865CCE22 Certificate serial: 0766 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft Manifest number: 075C Signing time: Wed 02 Apr 2025 21:33:36 +0000 Manifest this update: Wed 02 Apr 2025 21:33:36 +0000 Manifest next update: Wed 09 Apr 2025 21:33:36 +0000 Files and hashes: 1: 5qz09ZSkQ4-Jeu2qtKPTjIZcziI.crl (hash: H7EktKdmfc+SzVQzzWtgYbtirrAfpYrcwBhlF33zp+c=) 2: 09664BCE144D11EBA0AF3555C4F9AE02.roa (hash: rdUSXytbXM84CWenGOGoRob5nCuOJZnNVIkvDgmUqS4=) 3: 08CE75A6144D11EBA0AF3555C4F9AE02.roa (hash: Ey+1oSHacaQI23omTKC4i8oGovoWsEThpx7tq0kzMuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.crl rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:33:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1894 (0x766) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6395 Validity Not Before: Apr 2 21:33:36 2025 GMT Not After : Apr 9 21:33:36 2025 GMT Subject: CN=67edad30-aacb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f6:65:f6:3d:7c:fb:98:c3:71:ff:59:dc:1e: 30:50:ce:bc:04:74:85:d4:3a:30:d2:9d:8a:31:90: 51:04:7c:c6:62:ed:74:70:73:70:8c:46:bd:f3:92: dc:4c:11:da:49:ef:e7:35:35:8e:00:87:b1:3c:18: 28:96:75:39:05:5d:2d:d0:29:71:7f:51:0f:65:ff: 65:61:b8:0e:0d:8b:5e:55:98:07:ff:70:01:c8:5c: 15:ba:8f:03:00:ce:5d:24:24:dd:ed:25:1c:58:59: 89:d4:05:34:b2:e6:4d:12:a8:2d:a1:22:09:c7:f7: 1d:bd:41:73:48:c4:6f:c3:40:fe:fd:4c:69:a3:a2: d9:ba:c9:08:7c:f9:43:87:30:94:0e:1b:38:9e:0b: 0a:3f:fd:25:a7:e0:c2:90:2b:6d:9d:6d:83:da:ea: 6b:f8:1e:3c:22:70:69:f9:d5:14:58:23:ce:a7:fc: ff:2e:11:42:ca:31:18:4a:6a:25:24:8f:42:4f:eb: 6b:9a:e5:af:12:4f:07:0e:5c:4b:d0:89:7a:6c:bf: 8c:1d:01:c0:09:6e:45:f2:f8:35:6a:16:40:23:dd: 33:29:cc:31:3b:ea:95:d5:ef:18:16:76:80:c2:18: a6:47:1c:e4:9b:e3:77:b1:7b:e1:e7:03:a5:62:f6: 7e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:61:A0:E0:1D:CB:F7:AE:83:31:63:93:2E:45:76:F6:D1:A7:19:56 X509v3 Authority Key Identifier: keyid:E6:AC:F4:F5:94:A4:43:8F:89:7A:ED:AA:B4:A3:D3:8C:86:5C:CE:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:97:d7:8b:f3:e0:ee:e7:ac:7e:e8:b0:da:ad:51:f5:51:74: 70:b1:93:ea:0c:e1:20:34:bc:76:a3:1a:34:a8:ce:52:dd:a5: af:c0:34:c0:07:70:c2:92:dd:d2:05:ce:8b:cb:55:54:d3:a4: 7f:cb:c5:ec:f4:35:ee:7a:97:a7:25:85:54:e5:0f:aa:f4:8e: bd:65:d1:25:df:11:52:ef:b5:94:69:0a:92:28:60:52:44:f3: d3:b7:57:99:77:83:86:a8:d5:1a:31:b3:dc:31:d0:5b:f7:d1: 09:a4:6e:4d:84:51:ef:93:fb:84:41:b7:e0:1d:40:e1:25:24: bc:41:35:28:a2:ba:45:29:3c:8f:a5:4b:13:e8:12:1e:6d:46: c8:c1:54:4d:bb:96:d2:4d:f9:f7:cb:4a:ea:06:53:1b:75:de: 74:f4:93:d5:34:1f:29:44:82:dd:91:16:ae:4e:68:ac:ea:6e: 8d:fc:18:84:37:11:c9:1e:b8:92:41:24:ea:af:76:f6:39:e3: e6:0b:f3:42:ec:15:85:84:64:55:14:37:c3:21:c8:b3:91:63: 44:ec:0c:6d:fb:9d:04:89:16:60:2f:1c:82:d9:8b:bc:0b:31: d1:ad:a7:0e:a4:63:3d:b9:d0:1c:22:54:8a:ac:ef:25:99:1c: f2:d5:e6:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYzOTUxMTAvBgNVBAUTKEU2QUNGNEY1OTRBNDQzOEY4OTdBRURBQUI0QTNEMzhD ODY1Q0NFMjIwHhcNMjUwNDAyMjEzMzM2WhcNMjUwNDA5MjEzMzM2WjAYMRYwFAYD VQQDEw02N2VkYWQzMC1hYWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfZl9j18+5jDcf9Z3B4wUM68BHSF1Dow0p2KMZBRBHzGYu10cHNwjEa985Lc TBHaSe/nNTWOAIexPBgolnU5BV0t0Clxf1EPZf9lYbgODYteVZgH/3AByFwVuo8D AM5dJCTd7SUcWFmJ1AU0suZNEqgtoSIJx/cdvUFzSMRvw0D+/Uxpo6LZuskIfPlD hzCUDhs4ngsKP/0lp+DCkCttnW2D2upr+B48InBp+dUUWCPOp/z/LhFCyjEYSmol JI9CT+trmuWvEk8HDlxL0Il6bL+MHQHACW5F8vg1ahZAI90zKcwxO+qV1e8YFnaA whimRxzkm+N3sXvh5wOlYvZ+QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdhoOAd y/eugzFjky5FdvbRpxlWMB8GA1UdIwQYMBaAFOas9PWUpEOPiXrtqrSj04yGXM4i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjM5NS9EQzQ1NjU3ODE0 NEExMUVCOTQwNzY2NTJDNEY5QUUwMi81cXowOVpTa1E0LUpldTJxdEtQVGpJWmN6 aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVxejA5WlNrUTQtSmV1MnF0S1BUaklaY3ppSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjM5NS9EQzQ1NjU3ODE0NEExMUVCOTQwNzY2NTJDNEY5QUUwMi81cXowOVpTa1E0 LUpldTJxdEtQVGpJWmN6aUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJl9eL8+Du56x+6LDarVH1UXRwsZPqDOEgNLx2oxo0qM5S3aWvwDTA B3DCkt3SBc6Ly1VU06R/y8Xs9DXuepenJYVU5Q+q9I69ZdEl3xFS77WUaQqSKGBS RPPTt1eZd4OGqNUaMbPcMdBb99EJpG5NhFHvk/uEQbfgHUDhJSS8QTUoorpFKTyP pUsT6BIebUbIwVRNu5bSTfn3y0rqBlMbdd509JPVNB8pRILdkRauTmis6m6N/BiE NxHJHriSQSTqr3b2OePmC/NC7BWFhGRVFDfDIcizkWNE7Axt+50EiRZgLxyC2Yu8 CzHRracOpGM9udAcIlSKrO8lmRzy1eaV -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:27 2025 by rpki-client