$ rpki-client -vvf rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft File: k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft (raw, json) Hash identifier: Dd7nbIC9nJ5XSJdg7Eo1WbfTpeiqqfX+tgYMw9GTTcE= Subject key identifier: 6D:02:A1:44:08:38:F0:5A:C5:4F:65:22:C4:DE:8A:6C:B2:0D:19:FA Authority key identifier: 93:41:F9:B7:0F:71:4F:13:1C:52:E1:FE:4B:E5:E5:AB:8C:26:EB:EA Certificate issuer: /CN=A91E473F/serialNumber=9341F9B70F714F131C52E1FE4BE5E5AB8C26EBEA Certificate serial: 0602 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft Manifest number: 05FE Signing time: Wed 02 Apr 2025 22:52:34 +0000 Manifest this update: Wed 02 Apr 2025 22:52:33 +0000 Manifest next update: Wed 09 Apr 2025 22:52:33 +0000 Files and hashes: 1: k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl (hash: 2Uw/6w/Hk9ZUy7g4TwZ7IGeE9xgW3Q+IoWmgK40xPW0=) 2: 4816D7F0327A11EEA132B74CC4F9AE02.roa (hash: vwAWNkOECPjjWatP7CXVkY05vRy7dP/taTedzApQJgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 22:52:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1538 (0x602) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E473F Validity Not Before: Apr 2 22:52:33 2025 GMT Not After : Apr 9 22:52:33 2025 GMT Subject: CN=67edbfb2-d89b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:db:3e:d2:74:54:75:67:52:77:88:0d:d0:38: 65:67:75:5d:26:b0:9f:82:6a:87:d7:c8:79:93:57: 65:c4:aa:bf:c9:ff:ee:bc:91:c3:e1:a1:2f:04:e3: 11:0b:5c:b2:d1:78:7c:84:4a:25:02:a1:6f:0b:34: e6:2b:29:65:08:80:35:b4:10:c5:c7:b3:55:2e:64: 91:31:c8:ce:19:cf:92:14:8c:f0:d1:79:6f:02:24: 8f:23:15:1b:9d:5c:0f:58:43:6c:ad:0e:5b:6b:fd: 70:2f:81:25:56:76:72:ab:aa:15:49:39:71:56:cb: 59:43:d0:83:63:d1:b0:3b:f0:99:1e:3e:99:77:49: 7e:5b:76:b7:6a:41:86:86:74:d4:d7:67:da:65:67: 4a:25:f2:b0:5f:34:5e:e4:32:7e:fb:a2:d2:19:e9: f0:6d:65:51:48:03:fe:b7:8e:99:3c:ce:b5:8b:99: df:34:47:8b:f5:d6:30:6b:43:a5:cf:e1:87:09:c5: 83:db:ce:7f:09:e0:ca:90:bf:ca:91:ba:e7:16:46: 72:95:5a:b9:43:7c:80:a1:46:92:28:fa:70:1c:5b: b1:29:4b:25:12:a2:c4:95:f8:14:8f:c0:c5:cb:67: e2:63:f3:51:66:b1:1c:7c:1d:a0:32:ad:1f:e1:b4: 3e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:02:A1:44:08:38:F0:5A:C5:4F:65:22:C4:DE:8A:6C:B2:0D:19:FA X509v3 Authority Key Identifier: keyid:93:41:F9:B7:0F:71:4F:13:1C:52:E1:FE:4B:E5:E5:AB:8C:26:EB:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:b1:66:07:a0:fd:05:d5:3c:c9:ca:f0:ad:7b:cf:5e:b2:9b: 88:34:b7:92:99:56:b5:4d:72:16:06:05:e8:4e:90:cc:cd:ce: 06:70:9d:e3:77:87:99:f6:d9:73:2a:78:1d:c5:7c:12:40:a1: 10:b9:f2:15:3d:57:8a:bd:52:69:91:a1:b1:ca:61:73:cd:dd: 0f:91:4d:59:73:bc:3b:65:54:66:f8:fb:65:70:f3:e5:ad:56: 4e:ec:01:0b:a4:66:e0:77:3d:05:35:ff:86:8b:d7:5d:a3:cd: 28:6b:48:09:29:c6:68:b0:04:06:71:22:8e:de:b8:03:5a:5c: 39:f0:35:2c:47:0f:a2:8e:c5:ea:b9:92:c9:6b:0e:ad:a9:c4: a4:dd:73:e2:5f:1a:4d:12:6a:67:e1:72:dc:1c:88:c2:e9:13: 8b:2f:92:2c:34:5c:f8:68:ac:06:26:c5:52:bd:28:71:a1:5e: 2f:c8:ff:64:74:77:b8:c6:8d:a5:72:34:d8:01:8c:fc:bc:27: 0e:cc:c5:2f:1f:5a:b3:23:26:14:62:ae:e3:8f:be:c4:29:6d: 98:20:9b:dd:45:3f:55:4c:5a:cb:9b:c4:62:3f:cd:5e:5f:8b: d2:65:14:c7:d2:59:0c:1c:9a:d2:78:dd:b6:50:f4:88:c9:a5: 9c:9a:61:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ3M0YxMTAvBgNVBAUTKDkzNDFGOUI3MEY3MTRGMTMxQzUyRTFGRTRCRTVFNUFC OEMyNkVCRUEwHhcNMjUwNDAyMjI1MjMzWhcNMjUwNDA5MjI1MjMzWjAYMRYwFAYD VQQDEw02N2VkYmZiMi1kODliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNs+0nRUdWdSd4gN0DhlZ3VdJrCfgmqH18h5k1dlxKq/yf/uvJHD4aEvBOMR C1yy0Xh8hEolAqFvCzTmKyllCIA1tBDFx7NVLmSRMcjOGc+SFIzw0XlvAiSPIxUb nVwPWENsrQ5ba/1wL4ElVnZyq6oVSTlxVstZQ9CDY9GwO/CZHj6Zd0l+W3a3akGG hnTU12faZWdKJfKwXzRe5DJ++6LSGenwbWVRSAP+t46ZPM61i5nfNEeL9dYwa0Ol z+GHCcWD285/CeDKkL/KkbrnFkZylVq5Q3yAoUaSKPpwHFuxKUslEqLElfgUj8DF y2fiY/NRZrEcfB2gMq0f4bQ+DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0CoUQI OPBaxU9lIsTeimyyDRn6MB8GA1UdIwQYMBaAFJNB+bcPcU8THFLh/kvl5auMJuvq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDczRi9ENkU1NDAzODlE QjMxMUVCQjAzMkIwNENDNEY5QUUwMi9rMEg1dHc5eFR4TWNVdUgtUy1YbHE0d202 LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2swSDV0dzl4VHhNY1V1SC1TLVhscTR3bTYtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDczRi9ENkU1NDAzODlEQjMxMUVCQjAzMkIwNENDNEY5QUUwMi9rMEg1dHc5eFR4 TWNVdUgtUy1YbHE0d202LW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpsWYHoP0F1TzJyvCte89espuINLeSmVa1TXIWBgXoTpDMzc4GcJ3j d4eZ9tlzKngdxXwSQKEQufIVPVeKvVJpkaGxymFzzd0PkU1Zc7w7ZVRm+PtlcPPl rVZO7AELpGbgdz0FNf+Gi9ddo80oa0gJKcZosAQGcSKO3rgDWlw58DUsRw+ijsXq uZLJaw6tqcSk3XPiXxpNEmpn4XLcHIjC6ROLL5IsNFz4aKwGJsVSvShxoV4vyP9k dHe4xo2lcjTYAYz8vCcOzMUvH1qzIyYUYq7jj77EKW2YIJvdRT9VTFrLm8RiP81e X4vSZRTH0lkMHJrSeN22UPSIyaWcmmFs -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:49 2025 by rpki-client