$ rpki-client -vvf rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft File: 5jLTjFoywhfG7nHVLe-fOMoWbFE.mft (raw, json) Hash identifier: cn4dt5kSQ22bYCrhD9ZFDwymKua1Ip+hJ86h/1y3umM= Subject key identifier: A7:CA:20:E3:CC:70:9A:58:B3:13:92:E0:99:99:7A:A2:0F:34:81:0F Authority key identifier: E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51 Certificate issuer: /CN=A911486F/serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51 Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft Manifest number: 01D7 Signing time: Sat 31 May 2025 02:41:21 +0000 Manifest this update: Sat 31 May 2025 02:41:21 +0000 Manifest next update: Sat 07 Jun 2025 02:41:21 +0000 Files and hashes: 1: 5jLTjFoywhfG7nHVLe-fOMoWbFE.crl (hash: 0WQ+P6vOmFn8nFVnIapTaWksJ0w5pFgc+GcdaDMaC1w=) 2: 32D8E190D0CB11EEAB1CAF34C4F9AE02.roa (hash: I6cFYaTwrscj9Do0u5LBBtA5etRJeCEnBRWA8YbVDTo=) 3: 4D554D70D0CA11EE9DCDFA83C4F9AE02.roa (hash: 6yZMYTHYRpP2MH6PChCYijNkjUxZFdtlKAJWlJtdpuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:41:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911486F, serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51 Validity Not Before: May 31 02:41:21 2025 GMT Not After : Jun 7 02:41:21 2025 GMT Subject: CN=683a6c51-e567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0e:18:59:a4:d2:a5:c2:dc:81:72:18:40:c1: ba:e3:1e:5f:50:08:c5:38:eb:67:1d:c3:22:66:28: 4f:ea:5f:65:d9:63:d3:80:f0:b1:73:43:c8:0e:3f: e3:47:7e:98:a1:3b:8f:b9:a8:d7:33:0c:6c:f5:e8: 9c:89:d2:fe:78:ff:39:e7:74:12:85:76:3e:7b:77: 2e:04:0b:d6:d8:04:e0:f8:1e:ad:72:ef:42:26:e6: f3:ad:ee:aa:55:df:d1:4d:7b:75:9e:b5:f5:a3:0b: 0a:a8:e5:c0:22:9e:3a:51:96:ce:df:01:6a:76:99: 43:18:c8:3d:4a:97:f8:41:46:b3:2a:63:f1:82:69: 34:5f:c6:9c:2b:28:92:c4:51:79:2c:39:a5:4a:e6: 71:8d:ec:5d:72:74:e8:34:5c:37:26:59:35:51:d7: 13:38:ed:99:85:69:1f:81:97:65:78:c8:a0:5c:a7: c3:2e:ca:34:1d:b2:4a:1d:49:c8:aa:e5:30:99:a9: f2:df:49:88:96:5d:de:fe:e8:fb:29:7d:61:f1:e5: 94:2d:c2:8f:8c:c7:85:22:72:d0:89:47:93:3f:08: aa:65:67:fc:3f:30:ce:bd:a1:ab:ca:7d:36:3d:df: 75:c0:8d:27:b9:76:4b:59:0d:74:ff:35:fd:24:7b: 52:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:CA:20:E3:CC:70:9A:58:B3:13:92:E0:99:99:7A:A2:0F:34:81:0F X509v3 Authority Key Identifier: keyid:E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d8:92:20:78:ac:e7:28:34:84:73:e1:36:7f:24:2c:e6:bd: 22:2d:b2:de:e4:d2:18:a0:ee:c3:7c:ed:9d:23:ff:a0:f9:3f: 86:47:61:3c:19:2f:b3:1a:8c:79:8a:91:82:b7:0e:58:b6:97: 53:00:f7:3b:dc:1b:09:28:ee:36:1a:a0:85:e9:4f:ce:98:10: cf:15:d3:82:a7:e1:ea:11:4d:e8:84:f6:2e:3a:4e:9f:d8:26: de:8d:d5:b3:71:ae:55:b6:c5:4e:fc:44:ea:62:17:1d:f4:46: d7:7a:da:a6:a4:7f:85:4e:0e:ab:ff:fd:db:3b:03:c3:bd:dc: 8b:51:0b:5a:ed:b1:31:f4:68:3f:61:14:46:5b:94:0d:41:d8: 2e:fa:1b:d7:88:37:34:60:47:0a:34:fe:d9:70:51:a5:de:c2: ff:b5:86:4f:e4:96:50:d9:d4:f0:47:1b:31:f0:29:d6:f7:03: 98:42:2d:94:5f:eb:c8:70:db:d5:dd:6c:35:c6:d2:ad:93:e3: ec:d9:ce:28:4f:ae:33:a1:66:e2:f5:19:9c:74:f7:09:56:7b: ef:c0:dc:4f:e2:5c:28:01:05:9e:d3:86:87:1d:37:a4:e2:e8: 78:1c:a4:b4:9a:73:ab:cd:04:6c:54:32:9c:bf:30:7b:30:0e: 68:6a:1a:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ4NkYxMTAvBgNVBAUTKEU2MzJEMzhDNUEzMkMyMTdDNkVFNzFENTJERUY5RjM4 Q0ExNjZDNTEwHhcNMjUwNTMxMDI0MTIxWhcNMjUwNjA3MDI0MTIxWjAYMRYwFAYD VQQDEw02ODNhNmM1MS1lNTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQ4YWaTSpcLcgXIYQMG64x5fUAjFOOtnHcMiZihP6l9l2WPTgPCxc0PIDj/j R36YoTuPuajXMwxs9eicidL+eP8553QShXY+e3cuBAvW2ATg+B6tcu9CJubzre6q Vd/RTXt1nrX1owsKqOXAIp46UZbO3wFqdplDGMg9Spf4QUazKmPxgmk0X8acKyiS xFF5LDmlSuZxjexdcnToNFw3Jlk1UdcTOO2ZhWkfgZdleMigXKfDLso0HbJKHUnI quUwmany30mIll3e/uj7KX1h8eWULcKPjMeFInLQiUeTPwiqZWf8PzDOvaGryn02 Pd91wI0nuXZLWQ10/zX9JHtS/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfKIOPM cJpYsxOS4JmZeqIPNIEPMB8GA1UdIwQYMBaAFOYy04xaMsIXxu5x1S3vnzjKFmxR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDg2Ri8yMkNGMzQ0ODg2 NkMxMUVEQUZBNUE0NzFDNEY5QUUwMi81akxUakZveXdoZkc3bkhWTGUtZk9Nb1di RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVqTFRqRm95d2hmRzduSFZMZS1mT01vV2JGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDg2Ri8yMkNGMzQ0ODg2NkMxMUVEQUZBNUE0NzFDNEY5QUUwMi81akxUakZveXdo Zkc3bkhWTGUtZk9Nb1diRkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd2JIgeKznKDSEc+E2fyQs5r0iLbLe5NIYoO7DfO2dI/+g+T+GR2E8 GS+zGox5ipGCtw5YtpdTAPc73BsJKO42GqCF6U/OmBDPFdOCp+HqEU3ohPYuOk6f 2CbejdWzca5VtsVO/ETqYhcd9EbXetqmpH+FTg6r//3bOwPDvdyLUQta7bEx9Gg/ YRRGW5QNQdgu+hvXiDc0YEcKNP7ZcFGl3sL/tYZP5JZQ2dTwRxsx8CnW9wOYQi2U X+vIcNvV3Ww1xtKtk+Ps2c4oT64zoWbi9RmcdPcJVnvvwNxP4lwoAQWe04aHHTek 4uh4HKS0mnOrzQRsVDKcvzB7MA5oahqm -----END CERTIFICATE-----Generated at Sat May 31 17:20:35 2025 by rpki-client