$ rpki-client -vvf rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft File: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft (raw, json) Hash identifier: ZFd3rGLBIr12yAZQ9OVYW8Q/X45uB/BBxyvS2p6YX4E= Subject key identifier: 1D:DF:18:6E:3C:9E:AF:15:E1:C2:9C:8C:CB:93:A1:19:84:B3:56:8E Authority key identifier: E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80 Certificate issuer: /CN=A91E554A/serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft Manifest number: 56 Signing time: Thu 03 Apr 2025 06:27:31 +0000 Manifest this update: Thu 03 Apr 2025 06:27:30 +0000 Manifest next update: Thu 10 Apr 2025 06:27:30 +0000 Files and hashes: 1: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl (hash: NF1beZDR0p1WhHw/0dxE2PizlrSUoHfBYxddtYf5FZg=) 2: 388A91E0985A11EFA6912B0EC4F9AE02.roa (hash: JjgqoANmsusAqQnFWaBmauCJuNgw+HQl/ZcBjvaDkfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:27:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E554A Validity Not Before: Apr 3 06:27:30 2025 GMT Not After : Apr 10 06:27:30 2025 GMT Subject: CN=67ee2a52-04fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:66:23:7f:96:d0:4b:89:ea:af:93:61:e8:60: 33:b8:02:b5:eb:37:ff:30:36:f2:81:8d:2c:05:17: 96:c5:e9:63:53:95:86:0c:ba:34:5c:17:35:fa:1f: ca:51:5a:76:29:bf:71:6a:90:3e:6b:ed:39:e1:de: 30:7d:6a:b4:31:b4:b5:12:e4:74:6b:ea:d2:cf:39: 2b:86:6a:59:5c:8d:26:2b:ae:b6:88:b9:63:31:92: ff:7a:a2:70:12:1e:cf:c6:97:05:89:61:36:a9:0a: cf:f4:26:a5:cb:60:07:c6:6c:79:2b:89:f2:96:70: ee:21:03:81:e0:79:77:4a:b3:c9:84:bb:d6:3a:5b: d8:45:46:f8:e1:76:6c:98:48:52:27:6a:67:d0:08: 86:08:c2:04:0b:ad:e6:3f:23:e1:0f:cc:74:33:a9: 1c:2c:61:a0:62:9c:9a:cc:b9:92:f5:0e:61:14:de: 1a:e7:3a:a5:22:f3:f7:83:45:0e:10:76:39:0d:be: a8:ca:be:5b:f8:c2:ba:94:83:d7:78:bb:19:ce:ae: 86:72:51:25:9e:b0:85:d5:33:f0:f9:cd:4e:08:2b: 46:ee:c3:ac:6f:88:d1:5e:85:36:04:79:29:fb:a8: 2b:24:b4:ab:2b:21:2f:30:f8:98:83:7e:56:3b:86: 4c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DF:18:6E:3C:9E:AF:15:E1:C2:9C:8C:CB:93:A1:19:84:B3:56:8E X509v3 Authority Key Identifier: keyid:E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:ad:ef:b5:83:81:8d:9e:a1:53:2b:ba:ba:b4:c3:a4:14:a8: 77:45:fe:03:2d:a7:39:87:80:d7:8e:e2:46:f6:1a:2f:2f:e3: fe:09:60:0e:77:f2:d1:43:1c:e7:30:ca:31:ff:57:09:f0:3f: ff:2f:ab:f4:19:b2:73:f3:db:1b:58:68:c0:17:86:bd:90:e5: 59:87:b6:eb:94:68:08:5e:cc:e4:f0:e7:a4:d3:1c:c6:56:ea: c0:41:b2:36:47:a6:0b:cb:22:a7:d2:01:a6:cd:b2:66:76:e5: 34:10:67:79:52:df:44:3a:a6:7b:7c:91:18:6c:60:3e:9e:02: 14:64:43:a6:b9:5b:c0:0f:52:be:51:58:7b:eb:e1:26:21:8d: 98:d1:0e:88:6f:af:68:68:52:69:8d:d7:6b:e4:74:47:a4:f0: 12:0c:92:42:fb:2d:81:04:41:c1:90:91:8f:18:2d:f2:ff:bf: f9:46:c6:e2:32:d1:66:5c:de:c9:f4:b5:35:75:71:f7:0b:d8: bb:cc:56:b0:df:b8:9c:78:01:03:7d:bf:95:2e:7a:41:66:50: d8:c4:7a:8e:2f:97:ae:ef:3b:4e:9e:cc:ae:f5:55:ba:a7:09: 12:19:c7:f7:ec:00:30:30:2a:2d:7e:ba:77:de:c5:11:19:00: d0:e5:69:26 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NTU0QTExMC8GA1UEBRMoRTY3NThCOUEzNzU5ODJDMkM0RDFDNzY0OUEzMUU0Q0Yy N0Q1QTY4MDAeFw0yNTA0MDMwNjI3MzBaFw0yNTA0MTAwNjI3MzBaMBgxFjAUBgNV BAMTDTY3ZWUyYTUyLTA0ZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeZiN/ltBLieqvk2HoYDO4ArXrN/8wNvKBjSwFF5bF6WNTlYYMujRcFzX6H8pR WnYpv3FqkD5r7Tnh3jB9arQxtLUS5HRr6tLPOSuGallcjSYrrraIuWMxkv96onAS Hs/GlwWJYTapCs/0JqXLYAfGbHkrifKWcO4hA4HgeXdKs8mEu9Y6W9hFRvjhdmyY SFInamfQCIYIwgQLreY/I+EPzHQzqRwsYaBinJrMuZL1DmEU3hrnOqUi8/eDRQ4Q djkNvqjKvlv4wrqUg9d4uxnOroZyUSWesIXVM/D5zU4IK0buw6xviNFehTYEeSn7 qCsktKsrIS8w+JiDflY7hkwPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHd8Ybjye rxXhwpyMy5OhGYSzVo4wHwYDVR0jBBgwFoAU5nWLmjdZgsLE0cdkmjHkzyfVpoAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1NTRBLzgyMkZDMjIwOTFG NzExRUZBREUxMTI2NkM0RjlBRTAyLzVuV0xtamRaZ3NMRTBjZGttakhrenlmVnBv QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNW5XTG1qZFpnc0xFMGNka21qSGt6eWZWcG9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 NTRBLzgyMkZDMjIwOTFGNzExRUZBREUxMTI2NkM0RjlBRTAyLzVuV0xtamRaZ3NM RTBjZGttakhrenlmVnBvQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABGt77WDgY2eoVMrurq0w6QUqHdF/gMtpzmHgNeO4kb2Gi8v4/4JYA53 8tFDHOcwyjH/VwnwP/8vq/QZsnPz2xtYaMAXhr2Q5VmHtuuUaAhezOTw56TTHMZW 6sBBsjZHpgvLIqfSAabNsmZ25TQQZ3lS30Q6pnt8kRhsYD6eAhRkQ6a5W8APUr5R WHvr4SYhjZjRDohvr2hoUmmN12vkdEek8BIMkkL7LYEEQcGQkY8YLfL/v/lGxuIy 0WZc3sn0tTV1cfcL2LvMVrDfuJx4AQN9v5UuekFmUNjEeo4vl67vO06ezK71Vbqn CRIZx/fsADAwKi1+unfexREZANDlaSY= -----END CERTIFICATE-----Generated at Fri Apr 4 22:04:20 2025 by rpki-client