$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft File: 5TfQw0j9fcSfX8OwBmoxxYT64as.mft (raw, json) Hash identifier: gmw62Y97VNcU3yCOV1ifMzizpn4FIKi1kF3jRKdOE8I= Subject key identifier: 6F:5B:CF:81:8E:52:E2:35:95:AC:7F:BB:16:54:65:FF:31:88:1A:3C Authority key identifier: E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB Certificate issuer: /CN=A91D4345/serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB Certificate serial: 0C3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft Manifest number: 0C2E Signing time: Fri 04 Apr 2025 18:36:34 +0000 Manifest this update: Fri 04 Apr 2025 18:36:33 +0000 Manifest next update: Fri 11 Apr 2025 18:36:33 +0000 Files and hashes: 1: 5TfQw0j9fcSfX8OwBmoxxYT64as.crl (hash: ksd1EayOCOlA2ssleesWwHgtNAqWw7hj/MEJ/Run+UU=) 2: F3529CDCAE1511EE92D99E46C4F9AE02.roa (hash: hTD7DjMK2EnPCWqJypUdiJk7jUHRPt10GcfYU8sN4po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3131 (0xc3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4345 Validity Not Before: Apr 4 18:36:33 2025 GMT Not After : Apr 11 18:36:33 2025 GMT Subject: CN=67f026b2-a588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d2:f6:50:ff:3c:56:2c:75:90:8c:87:d1:ac: eb:43:0c:7e:91:97:59:f3:0f:ec:4d:1b:45:6c:35: f2:a4:85:87:0f:ad:03:4f:e8:06:f6:1f:1d:28:53: 9d:1c:3d:4d:3f:fe:41:c7:f6:47:c8:62:eb:87:e2: 94:89:1b:4f:e8:52:c0:6f:e7:a1:ca:06:72:3a:0d: f2:a3:7f:79:7e:64:bb:5c:54:ac:1f:7d:ed:0e:e9: 9e:c9:9a:6f:19:c3:22:72:b8:22:09:4e:ff:07:e7: 6c:59:55:99:4b:75:50:a7:6a:1a:b0:64:9a:dd:ab: f2:89:13:b4:e9:2e:59:40:5d:d1:4c:3c:6a:8d:67: 93:96:c5:a5:81:15:82:f5:8d:b2:43:4a:e0:12:4d: da:87:61:38:2e:1b:71:0f:91:88:7e:8a:8a:11:63: 29:19:11:9d:ec:bb:12:2d:8e:93:86:89:d2:df:8c: d2:5c:f0:10:51:ce:e4:5e:e9:1f:42:78:9b:90:86: 97:ac:d4:bf:64:73:5a:ee:9e:7b:7a:8e:41:f3:e0: d4:52:0f:1a:58:8e:e1:3a:06:00:52:21:e6:9e:d0: 64:3c:20:10:75:e1:75:3c:8b:c2:ce:71:ff:92:9e: dc:86:17:bc:24:33:44:30:42:6d:a9:45:12:0f:10: 7f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:5B:CF:81:8E:52:E2:35:95:AC:7F:BB:16:54:65:FF:31:88:1A:3C X509v3 Authority Key Identifier: keyid:E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:a2:41:36:f9:b2:2b:94:7c:df:8d:cc:05:c4:86:93:3c:e9: ac:14:84:b2:12:a3:d6:b7:cf:f5:88:4a:16:e7:b9:d8:8d:4e: 12:5b:c1:da:25:d0:a2:09:6a:56:25:cc:2b:5a:bc:4b:82:db: ab:b1:df:b1:5b:90:ce:94:a4:6e:bd:25:f0:71:87:90:73:4c: 83:2e:f5:b5:31:77:56:09:c0:34:72:4b:dc:85:c9:6b:7a:bc: f7:b7:ec:26:59:c1:b5:59:32:83:76:4b:66:e9:35:bd:cc:de: 60:59:d1:f9:29:bc:7e:51:9e:2d:4d:d6:fc:8f:01:62:d6:57: 64:ec:df:b3:7c:ee:1d:7c:91:bc:ed:94:0e:96:cb:c9:01:1c: a0:74:c6:1a:e8:ec:2a:cd:cb:2a:54:10:7c:44:76:ee:83:c3: 3e:7e:4d:23:24:a8:7b:c8:39:b2:40:ea:23:f3:69:30:11:5a: 1d:78:c4:72:d9:9a:61:93:30:4e:db:5e:56:38:dc:f5:e0:72: 35:b5:07:81:5e:10:82:95:a3:f6:55:42:ee:f1:38:f9:82:69: ae:fd:46:e5:59:8a:e0:6a:69:2a:0f:59:f4:27:cb:3e:9f:54: 7c:98:ec:18:d5:d3:3f:30:63:8f:f7:10:84:b8:d4:fe:90:6a: ff:be:f8:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQzNDUxMTAvBgNVBAUTKEU1MzdEMEMzNDhGRDdEQzQ5RjVGQzNCMDA2NkEzMUM1 ODRGQUUxQUIwHhcNMjUwNDA0MTgzNjMzWhcNMjUwNDExMTgzNjMzWjAYMRYwFAYD VQQDEw02N2YwMjZiMi1hNTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0tL2UP88Vix1kIyH0azrQwx+kZdZ8w/sTRtFbDXypIWHD60DT+gG9h8dKFOd HD1NP/5Bx/ZHyGLrh+KUiRtP6FLAb+ehygZyOg3yo395fmS7XFSsH33tDumeyZpv GcMicrgiCU7/B+dsWVWZS3VQp2oasGSa3avyiRO06S5ZQF3RTDxqjWeTlsWlgRWC 9Y2yQ0rgEk3ah2E4LhtxD5GIfoqKEWMpGRGd7LsSLY6ThonS34zSXPAQUc7kXukf QnibkIaXrNS/ZHNa7p57eo5B8+DUUg8aWI7hOgYAUiHmntBkPCAQdeF1PIvCznH/ kp7chhe8JDNEMEJtqUUSDxB/rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG9bz4GO UuI1lax/uxZUZf8xiBo8MB8GA1UdIwQYMBaAFOU30MNI/X3En1/DsAZqMcWE+uGr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDM0NS9FQzc4Q0REQTA1 MzgxMUVBQjU4OTc2NjhDNEY5QUUwMi81VGZRdzBqOWZjU2ZYOE93Qm1veHhZVDY0 YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVUZlF3MGo5ZmNTZlg4T3dCbW94eFlUNjRhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDM0NS9FQzc4Q0REQTA1MzgxMUVBQjU4OTc2NjhDNEY5QUUwMi81VGZRdzBqOWZj U2ZYOE93Qm1veHhZVDY0YXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOokE2+bIrlHzfjcwFxIaTPOmsFISyEqPWt8/1iEoW57nYjU4SW8Ha JdCiCWpWJcwrWrxLgtursd+xW5DOlKRuvSXwcYeQc0yDLvW1MXdWCcA0ckvchclr erz3t+wmWcG1WTKDdktm6TW9zN5gWdH5Kbx+UZ4tTdb8jwFi1ldk7N+zfO4dfJG8 7ZQOlsvJARygdMYa6OwqzcsqVBB8RHbug8M+fk0jJKh7yDmyQOoj82kwEVodeMRy 2ZphkzBO215WONz14HI1tQeBXhCClaP2VULu8Tj5gmmu/UblWYrgamkqD1n0J8s+ n1R8mOwY1dM/MGOP9xCEuNT+kGr/vvg8 -----END CERTIFICATE-----Generated at Sat Apr 5 18:46:40 2025 by rpki-client