$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft File: 5_fdQJKCmOyeymRGoYSjWaPtXf4.mft (raw, json) Hash identifier: uIuf7wXCatp7zYeFSJqCX9JdvdyQHTEpiOm48+AlYkQ= Subject key identifier: 68:43:E5:27:46:24:00:D9:00:D0:6D:9A:B5:94:94:65:C3:5B:CC:B5 Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE Certificate issuer: /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE Certificate serial: 0225 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft Manifest number: 021D Signing time: Thu 03 Apr 2025 01:59:05 +0000 Manifest this update: Thu 03 Apr 2025 01:59:05 +0000 Manifest next update: Thu 10 Apr 2025 01:59:05 +0000 Files and hashes: 1: 5_fdQJKCmOyeymRGoYSjWaPtXf4.crl (hash: gbppD6qhi/pKx/Hk5osWpqf+sVP74LblIkRx+Us43JY=) 2: C578C852218A11EFB28E7B82C4F9AE02.roa (hash: kTzsqNEXZTEaSzrPrWyUs9cD3MM8KSq3zyWoBQVDjyE=) 3: AAF361C0D18B11EF810E8B66C4F9AE02.roa (hash: w12orzg2QI/DnMwGWqRtnSkszoQETfTmbyGE/vvJi2w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 549 (0x225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE7DF Validity Not Before: Apr 3 01:59:05 2025 GMT Not After : Apr 10 01:59:05 2025 GMT Subject: CN=67edeb69-9a49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b3:36:fc:95:eb:56:c6:f1:68:8d:de:ac:4e: 9e:83:ee:07:8b:86:c9:21:42:b0:19:be:26:c9:61: c2:07:9d:85:a9:73:71:92:9d:cf:45:87:93:e8:7f: f3:25:23:2c:21:03:5c:51:7d:0f:93:0c:3b:34:0e: ee:ed:5b:a9:7b:2b:bb:5d:2e:90:71:77:ac:27:fc: 93:33:24:49:21:32:5d:69:27:40:2b:1e:29:a3:9f: 65:58:9f:61:90:c6:cc:d8:68:f6:b4:7e:9a:53:5c: 0e:75:ed:7a:e4:98:e6:d9:72:28:2f:6a:36:03:c2: f9:15:ac:ca:a4:09:f0:c1:3d:57:04:60:55:86:fa: ce:38:3a:63:6d:7f:86:98:e4:6f:aa:21:cb:f5:22: 74:8b:34:92:f2:b7:05:f8:e4:c6:a8:eb:e7:d7:fb: 25:91:df:2a:03:40:27:b6:31:96:0b:28:fb:af:cc: 30:44:18:ea:ef:3e:2c:bb:66:c1:9a:ae:04:f0:8b: 36:2a:53:e0:51:e6:40:36:3f:3d:39:c3:d5:84:17: f4:5f:54:68:8e:1e:ed:a4:64:fa:6f:73:54:9c:4d: d0:92:03:89:6d:f2:d2:90:25:5b:62:11:10:aa:e9: ec:6b:a7:9a:3c:06:7d:a0:08:f2:28:56:d2:ad:05: 62:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:43:E5:27:46:24:00:D9:00:D0:6D:9A:B5:94:94:65:C3:5B:CC:B5 X509v3 Authority Key Identifier: keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:1f:44:5d:45:4e:83:24:1b:82:f1:04:df:5a:8a:21:f7:e8: ea:0d:1e:aa:be:3d:49:9f:26:4d:57:b5:ea:c7:8b:e7:dd:27: 1e:33:bb:3e:1c:88:69:5d:a9:e5:0c:25:b4:2a:a0:36:4d:53: 40:8c:96:be:90:58:b7:e6:6b:78:38:e0:7b:3a:41:19:74:37: 50:72:6e:05:ea:04:2c:4c:a3:70:aa:05:e6:96:3c:e6:f8:66: 23:70:7d:19:c3:5a:b5:81:65:6d:aa:88:87:d7:1a:14:f9:59: 18:e3:e2:b9:7a:4d:af:48:4f:ea:6c:85:6d:e3:b3:62:d3:57: 9b:6c:0f:56:cf:20:d5:22:f8:97:72:37:44:82:42:a2:da:78: 4b:0c:b5:d4:ea:f4:20:7c:34:dc:d5:29:f8:76:bf:a8:26:ce: 54:1e:82:66:18:cf:e9:4d:27:30:d2:dc:1f:f8:c0:1e:7d:cb: fc:f9:69:bd:8c:3d:f7:e8:c5:08:35:d1:30:d4:42:3d:6d:09: 39:cb:ad:f6:2f:d5:b3:02:25:dc:a6:cc:a0:04:cb:06:f5:0e: 29:35:97:72:be:8b:e9:ea:67:d2:dd:3c:ed:a6:e0:46:5c:56: 7f:ac:9f:04:54:74:e7:02:59:23:7b:7c:e4:f0:fb:56:a0:b8: f9:8a:04:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU3REYxMTAvBgNVBAUTKEU3RjdERDQwOTI4Mjk4RUM5RUNBNjQ0NkExODRBMzU5 QTNFRDVERkUwHhcNMjUwNDAzMDE1OTA1WhcNMjUwNDEwMDE1OTA1WjAYMRYwFAYD VQQDEw02N2VkZWI2OS05YTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7M2/JXrVsbxaI3erE6eg+4Hi4bJIUKwGb4myWHCB52FqXNxkp3PRYeT6H/z JSMsIQNcUX0Pkww7NA7u7Vupeyu7XS6QcXesJ/yTMyRJITJdaSdAKx4po59lWJ9h kMbM2Gj2tH6aU1wOde165Jjm2XIoL2o2A8L5FazKpAnwwT1XBGBVhvrOODpjbX+G mORvqiHL9SJ0izSS8rcF+OTGqOvn1/slkd8qA0AntjGWCyj7r8wwRBjq7z4su2bB mq4E8Is2KlPgUeZANj89OcPVhBf0X1Rojh7tpGT6b3NUnE3QkgOJbfLSkCVbYhEQ qunsa6eaPAZ9oAjyKFbSrQVi8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhD5SdG JADZANBtmrWUlGXDW8y1MB8GA1UdIwQYMBaAFOf33UCSgpjsnspkRqGEo1mj7V3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTdERi82RDU1MkQ3MDI3 N0ExMUVEQTZCMUE4MjZDNEY5QUUwMi81X2ZkUUpLQ21PeWV5bVJHb1lTaldhUHRY ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVfZmRRSktDbU95ZXltUkdvWVNqV2FQdFhmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTdERi82RDU1MkQ3MDI3N0ExMUVEQTZCMUE4MjZDNEY5QUUwMi81X2ZkUUpLQ21P eWV5bVJHb1lTaldhUHRYZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCH0RdRU6DJBuC8QTfWooh9+jqDR6qvj1JnyZNV7Xqx4vn3SceM7s+ HIhpXanlDCW0KqA2TVNAjJa+kFi35mt4OOB7OkEZdDdQcm4F6gQsTKNwqgXmljzm +GYjcH0Zw1q1gWVtqoiH1xoU+VkY4+K5ek2vSE/qbIVt47Ni01ebbA9WzyDVIviX cjdEgkKi2nhLDLXU6vQgfDTc1Sn4dr+oJs5UHoJmGM/pTScw0twf+MAefcv8+Wm9 jD336MUINdEw1EI9bQk5y632L9WzAiXcpsygBMsG9Q4pNZdyvovp6mfS3TztpuBG XFZ/rJ8EVHTnAlkje3zk8PtWoLj5igRE -----END CERTIFICATE-----Generated at Fri Apr 4 21:55:30 2025 by rpki-client