$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft File: 5GuTGFhaweBs84Ti7swh9HQzibs.mft (raw, json) Hash identifier: WpSz20xOebxE8VCFf+EL7ezd8PUK+CUy81kgwy3Xivo= Subject key identifier: CC:0C:FD:41:45:2B:91:EA:6F:AE:E4:97:0B:26:85:81:38:0C:B7:3F Authority key identifier: E4:6B:93:18:58:5A:C1:E0:6C:F3:84:E2:EE:CC:21:F4:74:33:89:BB Certificate issuer: /CN=A91F83B6/serialNumber=E46B9318585AC1E06CF384E2EECC21F4743389BB Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft Manifest number: 15 Signing time: Sat 05 Apr 2025 07:17:17 +0000 Manifest this update: Sat 05 Apr 2025 07:17:16 +0000 Manifest next update: Sat 12 Apr 2025 07:17:16 +0000 Files and hashes: 1: 5GuTGFhaweBs84Ti7swh9HQzibs.crl (hash: FgpJtXMdN/fZ/Q7aMeTPphbcWoXt/vt7O4XyFEyMThg=) 2: 79FEDD7CF73F11EF864B4012C4F9AE02.roa (hash: lJx6MpSn+tcKnkFsLtMJCIqcEDChvrW3/fY/O155JxY=) 3: 3CA27876F73F11EF95C5F011C4F9AE02.roa (hash: N43S8PomeMoOc73XP6mqN9NeUSUDTrEwlo9H3GKtmMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.crl rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F83B6 Validity Not Before: Apr 5 07:17:16 2025 GMT Not After : Apr 12 07:17:16 2025 GMT Subject: CN=67f0d8fc-01d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9d:0b:d1:54:15:7b:77:c5:94:23:c4:2d:5d: 75:5c:4e:dd:c2:c1:fa:e6:f6:21:e2:d7:aa:40:8d: e5:aa:ee:46:1b:f2:cd:8b:49:f4:09:40:5a:9b:97: 73:50:cd:1b:59:37:36:03:35:07:a8:ab:35:ad:cc: e9:9f:be:5a:d8:f7:17:4f:27:fc:60:1a:40:7e:fe: b2:c6:7c:b7:e2:c5:c7:76:0c:b9:a6:3e:27:35:41: 9a:a5:da:66:23:1a:e9:03:54:2a:13:2a:cf:61:f5: c7:09:df:59:1a:e0:d1:65:9e:c9:08:69:3f:52:9e: 6d:38:79:f8:a5:24:b1:97:18:fd:8f:f3:69:b8:37: 71:3c:b0:14:e0:b1:ba:a8:8e:af:bd:cb:e1:f2:a0: 92:ae:39:39:ee:68:94:fb:db:9d:96:dd:ee:f7:13: ef:ee:94:12:d4:be:46:99:51:8f:cb:0a:71:4a:76: a8:9d:e1:ca:a6:7c:ae:49:48:27:0f:bb:08:31:c2: ca:4a:d3:73:e6:9e:ac:05:15:75:1e:3b:a6:91:7b: 25:d4:c0:b0:74:31:0f:2d:77:d4:cd:51:ef:ce:b0: 14:f6:a3:4d:db:34:6e:5f:f6:64:65:4e:d5:8e:24: b5:ba:9d:f8:a2:d1:2c:74:19:24:ba:67:e6:c5:52: a0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:0C:FD:41:45:2B:91:EA:6F:AE:E4:97:0B:26:85:81:38:0C:B7:3F X509v3 Authority Key Identifier: keyid:E4:6B:93:18:58:5A:C1:E0:6C:F3:84:E2:EE:CC:21:F4:74:33:89:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:ab:7a:b8:d3:b7:30:7b:3e:44:6a:e9:af:c1:94:33:c9:ba: f5:0c:00:f2:f5:6b:88:d5:30:31:91:91:5a:5a:ca:56:8f:34: ae:85:43:7c:24:0c:58:2c:1a:19:b6:62:d0:a9:c4:fc:3e:20: d4:36:59:14:7e:7e:29:19:f5:3a:a2:9d:91:67:22:f8:82:59: 83:f4:b2:79:8c:ba:86:9e:48:79:51:bf:ec:92:ab:ed:c2:ad: de:b7:82:34:cb:c2:0d:25:7f:ba:c1:f4:80:4b:17:ea:e6:e4: 88:72:bc:f2:5e:63:73:eb:ac:de:4a:5f:32:88:4d:79:c7:9e: d2:65:8b:4c:8a:9f:c2:d4:1e:a3:de:56:d2:3b:f0:5b:f0:a6: e5:38:6d:46:01:75:fb:a5:ea:1c:0c:4f:f7:c4:3d:33:ea:98: 46:37:39:0e:b0:e4:49:70:fa:9a:ab:05:00:45:d7:dc:9d:d6: 8f:3a:2f:de:21:28:dc:28:29:61:46:d6:23:20:de:49:ef:27: d2:f3:38:ab:87:76:d2:ac:ba:1d:04:80:d8:30:35:9e:81:a9: b7:31:4e:e9:41:24:2c:76:b6:95:16:cb:e5:92:b8:cf:ee:20: f8:e1:41:91:c9:f1:c7:07:5b:7b:26:d4:59:1e:e1:7a:da:23: b3:95:91:56 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODNCNjExMC8GA1UEBRMoRTQ2QjkzMTg1ODVBQzFFMDZDRjM4NEUyRUVDQzIxRjQ3 NDMzODlCQjAeFw0yNTA0MDUwNzE3MTZaFw0yNTA0MTIwNzE3MTZaMBgxFjAUBgNV BAMTDTY3ZjBkOGZjLTAxZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNnQvRVBV7d8WUI8QtXXVcTt3Cwfrm9iHi16pAjeWq7kYb8s2LSfQJQFqbl3NQ zRtZNzYDNQeoqzWtzOmfvlrY9xdPJ/xgGkB+/rLGfLfixcd2DLmmPic1QZql2mYj GukDVCoTKs9h9ccJ31ka4NFlnskIaT9Snm04efilJLGXGP2P82m4N3E8sBTgsbqo jq+9y+HyoJKuOTnuaJT7252W3e73E+/ulBLUvkaZUY/LCnFKdqid4cqmfK5JSCcP uwgxwspK03PmnqwFFXUeO6aReyXUwLB0MQ8td9TNUe/OsBT2o03bNG5f9mRlTtWO JLW6nfii0Sx0GSS6Z+bFUqC3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzAz9QUUr kepvruSXCyaFgTgMtz8wHwYDVR0jBBgwFoAU5GuTGFhaweBs84Ti7swh9HQzibsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4M0I2L0U4RjE4QjIyRjcz RTExRUY5Njg3MzcwREM0RjlBRTAyLzVHdVRHRmhhd2VCczg0VGk3c3doOUhRemli cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNUd1VEdGaGF3ZUJzODRUaTdzd2g5SFF6aWJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 M0I2L0U4RjE4QjIyRjczRTExRUY5Njg3MzcwREM0RjlBRTAyLzVHdVRHRmhhd2VC czg0VGk3c3doOUhRemlicy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANWrerjTtzB7PkRq6a/BlDPJuvUMAPL1a4jVMDGRkVpaylaPNK6FQ3wk DFgsGhm2YtCpxPw+INQ2WRR+fikZ9TqinZFnIviCWYP0snmMuoaeSHlRv+ySq+3C rd63gjTLwg0lf7rB9IBLF+rm5IhyvPJeY3PrrN5KXzKITXnHntJli0yKn8LUHqPe VtI78FvwpuU4bUYBdful6hwMT/fEPTPqmEY3OQ6w5Elw+pqrBQBF19yd1o86L94h KNwoKWFG1iMg3knvJ9LzOKuHdtKsuh0EgNgwNZ6BqbcxTulBJCx2tpUWy+WSuM/u IPjhQZHJ8ccHW3sm1Fke4XraI7OVkVY= -----END CERTIFICATE-----Generated at Sat Apr 5 11:16:35 2025 by rpki-client