$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft File: 5xqfIU6Aybw7LSOf-LmqtxP27bc.mft (raw, json) Hash identifier: RcG2AgITTQQ2FCK4f4a8yIxCJQKU+8IVzK4Jvn7/XyI= Subject key identifier: 4F:9F:44:43:7D:F0:24:9E:71:9C:DA:00:6C:8F:F7:8D:43:EF:6B:92 Authority key identifier: E7:1A:9F:21:4E:80:C9:BC:3B:2D:23:9F:F8:B9:AA:B7:13:F6:ED:B7 Certificate issuer: /CN=A91E8525/serialNumber=E71A9F214E80C9BC3B2D239FF8B9AAB713F6EDB7 Certificate serial: 19BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft Manifest number: 19A8 Signing time: Sat 12 Apr 2025 16:20:36 +0000 Manifest this update: Sat 12 Apr 2025 16:20:35 +0000 Manifest next update: Sat 19 Apr 2025 16:20:35 +0000 Files and hashes: 1: 5xqfIU6Aybw7LSOf-LmqtxP27bc.crl (hash: gKxfO9jLHZveNK5D54kKTLajzJX8wtVkPqP47JbE1kY=) 2: 3A21C144E51211EBB1225278C4F9AE02.roa (hash: 72UJY4qW+1X6PGltHkH0J24hlzlOfouYDMNRAXq28vY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.crl rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 16:20:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6586 (0x19ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8525, serialNumber=E71A9F214E80C9BC3B2D239FF8B9AAB713F6EDB7 Validity Not Before: Apr 12 16:20:35 2025 GMT Not After : Apr 19 16:20:35 2025 GMT Subject: CN=67fa92d3-e02e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d3:82:de:22:95:18:07:bf:11:cb:81:50:21: 15:56:af:ef:51:ed:54:53:33:39:98:d5:39:05:66: 66:ca:3f:18:51:d5:97:d5:90:56:39:2f:ec:f5:fc: 76:2a:56:22:46:7f:65:20:af:a5:1c:a6:79:79:06: 3a:bc:fa:93:10:11:9b:41:44:8e:91:d6:33:63:c0: 0e:87:02:44:d1:30:9e:c3:b9:86:cb:9f:4f:68:9b: a6:2e:ec:0e:f2:fe:e7:96:35:ff:b0:5f:e1:35:f9: 4a:b4:14:f2:9f:29:c1:3f:cc:8a:a8:c4:e2:3a:4e: e4:6b:ff:5d:35:3c:8b:96:94:7b:26:cc:dc:80:a5: b3:9b:47:b2:9a:e9:01:ba:6e:ba:39:cc:2b:ac:1a: 3a:34:51:c6:12:11:4f:bb:05:c7:d0:46:eb:24:b2: b7:a3:0e:73:53:57:de:3f:99:af:bf:7e:b8:07:f5: cf:ff:a3:7f:dc:50:0e:f6:8b:0f:a9:91:7e:0f:04: 67:2c:ca:ba:1d:11:50:b2:2b:7c:fb:95:32:44:4b: 34:37:f1:05:9e:8a:1e:fe:cb:0d:99:6e:1a:81:e6: a5:e7:21:c2:45:85:79:2d:da:a2:17:88:18:34:5a: 48:38:e0:61:e3:52:02:d4:90:c7:4a:66:d2:a5:b2: 6c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:9F:44:43:7D:F0:24:9E:71:9C:DA:00:6C:8F:F7:8D:43:EF:6B:92 X509v3 Authority Key Identifier: keyid:E7:1A:9F:21:4E:80:C9:BC:3B:2D:23:9F:F8:B9:AA:B7:13:F6:ED:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:fe:0f:fc:6b:28:7a:3b:4b:c2:b4:2e:e9:c2:71:55:77:40: 12:54:aa:03:69:aa:22:7d:9d:3a:3c:20:d8:fa:eb:f7:d0:0f: 0a:03:68:0e:f4:bb:c3:cc:d4:5c:eb:7c:64:67:f4:ee:d0:dc: 5b:7f:68:9a:a1:58:0a:67:a4:c4:1f:58:5f:96:ce:0c:76:73: 6c:f3:9c:c3:6a:97:8e:4f:41:d3:0f:c0:34:65:52:19:da:7f: 6f:9b:6e:b3:1c:0a:7d:24:7a:4e:c7:78:45:59:f3:d3:20:25: 49:d7:de:7b:b2:ea:1f:08:57:e9:32:a9:a2:ef:5a:cf:f5:ea: 4f:f7:b7:01:9c:2d:8f:2a:b9:61:20:15:ba:87:17:5a:4b:9f: d4:da:4f:ea:69:b3:34:e1:63:a7:47:5a:c7:68:8e:ef:ba:9f: 8c:ea:f9:a2:74:c8:5e:85:de:b1:26:95:89:a2:47:62:a1:8f: 46:da:55:e4:c4:dc:0c:f1:6e:a4:f8:80:77:49:8e:da:48:38: 1f:8a:68:a2:1f:41:45:a1:da:35:99:46:56:6a:91:96:c3:c9: 6f:5c:eb:6b:2b:fd:66:03:58:a5:9b:c5:9d:b6:fe:86:c8:2c: f2:ef:e7:b2:90:22:d8:99:9c:42:cc:e6:8f:68:75:cf:c0:81: 14:2a:7e:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg1MjUxMTAvBgNVBAUTKEU3MUE5RjIxNEU4MEM5QkMzQjJEMjM5RkY4QjlBQUI3 MTNGNkVEQjcwHhcNMjUwNDEyMTYyMDM1WhcNMjUwNDE5MTYyMDM1WjAYMRYwFAYD VQQDEw02N2ZhOTJkMy1lMDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2NOC3iKVGAe/EcuBUCEVVq/vUe1UUzM5mNU5BWZmyj8YUdWX1ZBWOS/s9fx2 KlYiRn9lIK+lHKZ5eQY6vPqTEBGbQUSOkdYzY8AOhwJE0TCew7mGy59PaJumLuwO 8v7nljX/sF/hNflKtBTynynBP8yKqMTiOk7ka/9dNTyLlpR7JszcgKWzm0eymukB um66OcwrrBo6NFHGEhFPuwXH0EbrJLK3ow5zU1feP5mvv364B/XP/6N/3FAO9osP qZF+DwRnLMq6HRFQsit8+5UyREs0N/EFnooe/ssNmW4ageal5yHCRYV5LdqiF4gY NFpIOOBh41IC1JDHSmbSpbJsDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+fREN9 8CSecZzaAGyP941D72uSMB8GA1UdIwQYMBaAFOcanyFOgMm8Oy0jn/i5qrcT9u23 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODUyNS81MjIxMjYxMDYx MkYxMUU3QkQyRURBMEJDNEY5QUUwMi81eHFmSVU2QXlidzdMU09mLUxtcXR4UDI3 YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV4cWZJVTZBeWJ3N0xTT2YtTG1xdHhQMjdiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODUyNS81MjIxMjYxMDYxMkYxMUU3QkQyRURBMEJDNEY5QUUwMi81eHFmSVU2QXli dzdMU09mLUxtcXR4UDI3YmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF/g/8ayh6O0vCtC7pwnFVd0ASVKoDaaoifZ06PCDY+uv30A8KA2gO 9LvDzNRc63xkZ/Tu0Nxbf2iaoVgKZ6TEH1hfls4MdnNs85zDapeOT0HTD8A0ZVIZ 2n9vm26zHAp9JHpOx3hFWfPTICVJ1957suofCFfpMqmi71rP9epP97cBnC2PKrlh IBW6hxdaS5/U2k/qabM04WOnR1rHaI7vup+M6vmidMhehd6xJpWJokdioY9G2lXk xNwM8W6k+IB3SY7aSDgfimiiH0FFodo1mUZWapGWw8lvXOtrK/1mA1ilm8Wdtv6G yCzy7+eykCLYmZxCzOaPaHXPwIEUKn6X -----END CERTIFICATE-----Generated at Sun Apr 13 06:00:08 2025 by rpki-client