$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft File: 5CnUKeZreXs9ihy-JJFXetw4pI4.mft (raw, json) Hash identifier: GqQVKzL3NU0lo/VpMx094l4l1D7Zh+FnR6/b/jUcFK8= Subject key identifier: 54:08:09:09:63:6D:C7:2A:85:DB:CA:11:35:5F:95:79:F0:EC:A0:DF Authority key identifier: E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E Certificate issuer: /CN=A91CC711/serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft Manifest number: C3 Signing time: Thu 03 Apr 2025 05:30:34 +0000 Manifest this update: Thu 03 Apr 2025 05:30:34 +0000 Manifest next update: Thu 10 Apr 2025 05:30:34 +0000 Files and hashes: 1: 5CnUKeZreXs9ihy-JJFXetw4pI4.crl (hash: 1daJ+Rf4d6Ef+u+WjoN+IEEMTZzMLiRAqRut9eFP/xs=) 2: 06FA65A81F2711EF98DA2926C4F9AE02.roa (hash: oS4PRK+VFwkVhFqqmzFtlUlVZ/0tESve4AVvdpaS7tg=) 3: 25ED44B41EE411EFA62B1335C4F9AE02.roa (hash: zb91MkoqcDkuzuZwD7VYBRLCNDf9oSeL0ikN94ozVn8=) 4: A7FC5DEE8D0411EFBD7A0057C4F9AE02.roa (hash: TGsIq74Qma+U6c7Ey8qeEz04VjG5STVU5SpvAS46Q6U=) 5: 359CBDB28D0D11EF90882959C4F9AE02.roa (hash: qdwbcsIyL1f3wI2tO7dwB6BR0n7SfSV/G7xRpNDHqtU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC711 Validity Not Before: Apr 3 05:30:34 2025 GMT Not After : Apr 10 05:30:34 2025 GMT Subject: CN=67ee1cfa-93a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d5:ce:c8:98:63:76:02:67:e4:d8:ac:b5:f5: 2b:01:49:c6:0d:a9:56:2d:49:8d:de:1d:bd:42:31: 66:66:9a:00:13:a0:2d:86:c7:f9:de:8d:5b:ab:16: 27:5f:53:ee:07:55:b5:04:38:2a:17:34:42:f7:ad: 33:64:b2:92:9f:51:ae:57:af:8b:c3:d2:27:a9:54: e6:19:04:a5:3b:9f:82:f9:c2:2b:9a:bd:ff:eb:e3: 24:8b:f9:9b:df:86:37:10:a1:d8:d7:34:de:46:74: 9b:8d:3b:55:1e:40:8d:9c:a7:0a:09:33:77:8d:67: 5a:0d:f8:b6:47:e9:f9:a0:dd:2e:85:5a:a6:7d:b8: bb:4d:81:d4:2a:2e:3a:55:6c:4d:99:b8:90:a6:6c: d1:07:30:c4:d7:0c:ea:26:6f:c6:a9:0f:33:db:7e: 34:84:be:8d:cd:24:01:c7:40:1e:ef:87:ab:22:e3: 28:f2:fa:df:84:a8:d7:dd:17:03:3a:1d:25:a1:89: a1:7f:97:fc:93:f6:63:5b:5d:b0:85:e2:0e:55:93: 86:09:1b:13:c8:8f:f2:8c:d3:29:12:58:36:09:4b: d1:f5:c2:de:ac:46:3f:85:17:61:1e:75:25:74:a8: ef:87:98:2c:33:3e:a8:b3:82:66:30:06:39:1f:e0: c3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:08:09:09:63:6D:C7:2A:85:DB:CA:11:35:5F:95:79:F0:EC:A0:DF X509v3 Authority Key Identifier: keyid:E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:77:c7:ea:81:6a:10:8e:a7:0f:cc:87:a0:07:76:0e:02:fa: 75:0e:06:3f:c0:e0:c3:9c:3b:f0:e3:be:03:e2:62:3c:68:96: b4:4c:a3:28:31:27:6a:48:96:ab:c0:a3:84:32:a9:0a:30:7f: cf:3f:ff:2f:49:19:2d:cb:1a:a1:a0:e5:b7:d6:91:70:3d:99: 98:8f:c8:27:c8:b7:d2:97:03:e9:e1:cf:0d:b4:ab:76:3b:a4: 5e:1e:4f:ab:1c:71:3c:fc:b8:c6:db:55:1b:99:33:fc:45:e5: 78:4a:60:7d:ac:5e:8d:cb:06:8c:ab:1f:e1:4d:4a:a1:d9:18: 16:51:bd:c6:97:af:e2:be:63:93:5e:26:38:4a:65:c1:2a:f0: b2:32:f5:85:36:b5:a0:6f:24:74:bf:00:d8:31:0c:57:ac:8b: cf:de:0f:4c:62:5f:5e:ef:81:ff:32:13:a6:c8:46:f7:83:78: f6:33:9d:6d:ef:91:37:e6:ff:06:25:57:e8:05:6c:4b:13:32: 0b:41:d9:ca:d6:99:52:68:c5:c4:99:90:81:53:70:df:fa:c7: ea:c1:db:b6:7e:db:4d:df:2b:be:7b:ff:5b:98:1c:24:11:5f: 42:9b:68:cb:82:cc:35:28:77:96:e1:50:e0:eb:a1:37:d9:4c: 00:dd:6e:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M3MTExMTAvBgNVBAUTKEU0MjlENDI5RTY2Qjc5N0IzRDhBMUNCRTI0OTE1NzdB REMzOEE0OEUwHhcNMjUwNDAzMDUzMDM0WhcNMjUwNDEwMDUzMDM0WjAYMRYwFAYD VQQDEw02N2VlMWNmYS05M2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdXOyJhjdgJn5NistfUrAUnGDalWLUmN3h29QjFmZpoAE6Athsf53o1bqxYn X1PuB1W1BDgqFzRC960zZLKSn1GuV6+Lw9InqVTmGQSlO5+C+cIrmr3/6+Mki/mb 34Y3EKHY1zTeRnSbjTtVHkCNnKcKCTN3jWdaDfi2R+n5oN0uhVqmfbi7TYHUKi46 VWxNmbiQpmzRBzDE1wzqJm/GqQ8z2340hL6NzSQBx0Ae74erIuMo8vrfhKjX3RcD Oh0loYmhf5f8k/ZjW12wheIOVZOGCRsTyI/yjNMpElg2CUvR9cLerEY/hRdhHnUl dKjvh5gsMz6os4JmMAY5H+DDkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQICQlj bccqhdvKETVflXnw7KDfMB8GA1UdIwQYMBaAFOQp1Cnma3l7PYocviSRV3rcOKSO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzcxMS9DN0QxQjA1NDFF RTMxMUVGOTBEMjEyMzRDNEY5QUUwMi81Q25VS2VacmVYczlpaHktSkpGWGV0dzRw STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDblVLZVpyZVhzOWloeS1KSkZYZXR3NHBJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzcxMS9DN0QxQjA1NDFFRTMxMUVGOTBEMjEyMzRDNEY5QUUwMi81Q25VS2VacmVY czlpaHktSkpGWGV0dzRwSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCed8fqgWoQjqcPzIegB3YOAvp1DgY/wODDnDvw474D4mI8aJa0TKMo MSdqSJarwKOEMqkKMH/PP/8vSRktyxqhoOW31pFwPZmYj8gnyLfSlwPp4c8NtKt2 O6ReHk+rHHE8/LjG21UbmTP8ReV4SmB9rF6NywaMqx/hTUqh2RgWUb3Gl6/ivmOT XiY4SmXBKvCyMvWFNrWgbyR0vwDYMQxXrIvP3g9MYl9e74H/MhOmyEb3g3j2M51t 75E35v8GJVfoBWxLEzILQdnK1plSaMXEmZCBU3Df+sfqwdu2fttN3yu+e/9bmBwk EV9Cm2jLgsw1KHeW4VDg66E32UwA3W5M -----END CERTIFICATE-----Generated at Fri Apr 4 22:14:55 2025 by rpki-client