$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft File: b5wj5AN3j-Ace8lQiL_R5rMoqps.mft (raw, json) Hash identifier: WIaFeroceJQ5XMASksHVOAR9id40AX55AdPLo/Bg3oc= Subject key identifier: 60:1C:5D:EC:51:95:36:BD:0E:7B:D4:73:F7:3B:66:4B:D7:B6:BB:26 Authority key identifier: 6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B Certificate issuer: /CN=A91DB6FB/serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft Manifest number: 011E Signing time: Tue 15 Apr 2025 03:40:28 +0000 Manifest this update: Tue 15 Apr 2025 03:40:28 +0000 Manifest next update: Tue 22 Apr 2025 03:40:28 +0000 Files and hashes: 1: b5wj5AN3j-Ace8lQiL_R5rMoqps.crl (hash: jV3xYXj6pgDDGxHDVPNsYvf8qSC5W3dTU/YLLaNaaUA=) 2: 512CFEFE68BD11EE87942B4EC4F9AE02.roa (hash: wxzifKiO/1duDLAOqG/EgJqXNOBnq5EBtgG/0AK/VlY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 03:40:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB6FB, serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B Validity Not Before: Apr 15 03:40:28 2025 GMT Not After : Apr 22 03:40:28 2025 GMT Subject: CN=67fdd52c-133e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:db:b7:8f:d2:6d:05:2e:c8:d6:15:63:65:7c: 95:b4:32:98:e9:a4:28:ec:72:29:46:e5:f9:eb:db: 73:82:71:8a:6a:2f:48:de:2b:03:84:6a:26:4c:f0: 28:19:ce:68:b1:31:87:40:0c:ab:4f:9e:29:1b:91: 38:c7:e4:81:73:59:85:5b:01:6b:3b:77:f4:f9:9f: 0b:91:11:f4:12:a9:36:64:07:19:9e:7f:43:86:6d: a1:01:51:c5:e6:da:c3:be:92:4d:77:65:da:d2:7f: 7c:b0:9b:17:36:fa:fd:52:a7:fd:21:e2:95:e1:63: 1f:d8:dd:46:ae:ba:6b:c4:e2:47:9d:13:fa:77:0f: 20:54:bd:8e:91:1e:18:ce:2e:a7:8f:fa:3e:28:97: e9:a5:68:9d:d9:06:d1:de:25:97:cc:4a:6a:40:e5: 26:66:60:1c:e5:59:5a:01:5e:7d:0d:8a:e3:d2:5b: f5:66:97:9b:7d:c3:ee:55:92:81:a5:da:81:d1:a1: e7:f8:62:aa:48:3c:db:69:6e:3c:d0:7f:e9:a7:bb: f6:f0:28:17:7a:12:91:2c:2d:4c:0d:e2:fa:e1:95: a6:12:96:2f:48:6e:96:3f:7b:96:b7:a6:ab:e5:48: 6a:88:2b:87:d3:01:df:18:a9:fe:49:1e:19:19:a4: a2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1C:5D:EC:51:95:36:BD:0E:7B:D4:73:F7:3B:66:4B:D7:B6:BB:26 X509v3 Authority Key Identifier: keyid:6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:74:16:85:a4:77:fb:e1:e0:8f:96:11:b1:bf:cf:51:e0:62: 49:c9:4c:92:2c:ea:d8:d4:5c:77:11:91:26:e8:e4:df:e2:83: 3d:57:75:c3:cc:5d:5f:a8:2c:b0:5c:10:95:4d:9f:4a:48:b3: c5:7e:74:10:a2:3a:f8:e0:c4:c2:62:ef:dc:b1:e5:88:70:24: a1:95:b0:a7:d9:00:08:3d:c2:2a:ca:38:c1:e5:d4:61:e5:db: dd:84:54:13:5f:9a:28:a8:17:fb:b5:ce:8e:50:e7:9b:67:24: bf:4a:78:05:e0:f3:43:a0:7b:2b:1b:6c:cf:5f:2b:f8:07:16: 61:9f:e4:3b:37:92:a9:b8:41:a8:c5:9a:04:ac:48:2d:15:49: d2:fb:1c:38:6c:79:cc:80:8f:8c:4d:23:00:0b:22:44:90:73: b8:2e:bb:f0:d6:e0:3d:77:46:78:5f:c5:47:60:a6:5b:e4:5a: 18:87:f2:0e:de:c5:7e:eb:37:a4:0f:9c:81:ef:84:bd:86:fe: d4:a4:d7:4f:17:f7:99:b4:27:28:bd:96:82:00:9e:72:af:90: bc:0d:05:17:00:29:d9:c7:39:52:37:56:d8:64:54:35:f4:14: 5d:86:c3:90:f2:eb:b0:e6:a0:8c:93:7c:b6:47:a8:a1:61:2a: 9a:7b:31:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2RkIxMTAvBgNVBAUTKDZGOUMyM0U0MDM3NzhGRTAxQzdCQzk1MDg4QkZEMUU2 QjMyOEFBOUIwHhcNMjUwNDE1MDM0MDI4WhcNMjUwNDIyMDM0MDI4WjAYMRYwFAYD VQQDEw02N2ZkZDUyYy0xMzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA09u3j9JtBS7I1hVjZXyVtDKY6aQo7HIpRuX569tzgnGKai9I3isDhGomTPAo Gc5osTGHQAyrT54pG5E4x+SBc1mFWwFrO3f0+Z8LkRH0Eqk2ZAcZnn9Dhm2hAVHF 5trDvpJNd2Xa0n98sJsXNvr9Uqf9IeKV4WMf2N1GrrprxOJHnRP6dw8gVL2OkR4Y zi6nj/o+KJfppWid2QbR3iWXzEpqQOUmZmAc5VlaAV59DYrj0lv1ZpebfcPuVZKB pdqB0aHn+GKqSDzbaW480H/pp7v28CgXehKRLC1MDeL64ZWmEpYvSG6WP3uWt6ar 5UhqiCuH0wHfGKn+SR4ZGaSi9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGAcXexR lTa9DnvUc/c7ZkvXtrsmMB8GA1UdIwQYMBaAFG+cI+QDd4/gHHvJUIi/0eazKKqb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjZGQi8xMUNEMUI2RTY4 QkMxMUVFOTIwRURCNERDNEY5QUUwMi9iNXdqNUFOM2otQWNlOGxRaUxfUjVyTW9x cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I1d2o1QU4zai1BY2U4bFFpTF9SNXJNb3Fwcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjZGQi8xMUNEMUI2RTY4QkMxMUVFOTIwRURCNERDNEY5QUUwMi9iNXdqNUFOM2ot QWNlOGxRaUxfUjVyTW9xcHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhdBaFpHf74eCPlhGxv89R4GJJyUySLOrY1Fx3EZEm6OTf4oM9V3XD zF1fqCywXBCVTZ9KSLPFfnQQojr44MTCYu/cseWIcCShlbCn2QAIPcIqyjjB5dRh 5dvdhFQTX5ooqBf7tc6OUOebZyS/SngF4PNDoHsrG2zPXyv4BxZhn+Q7N5KpuEGo xZoErEgtFUnS+xw4bHnMgI+MTSMACyJEkHO4Lrvw1uA9d0Z4X8VHYKZb5FoYh/IO 3sV+6zekD5yB74S9hv7UpNdPF/eZtCcovZaCAJ5yr5C8DQUXACnZxzlSN1bYZFQ1 9BRdhsOQ8uuw5qCMk3y2R6ihYSqaezEt -----END CERTIFICATE-----Generated at Wed Apr 16 16:54:49 2025 by rpki-client