$ rpki-client -vvf rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft File: 5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft (raw, json) Hash identifier: QZlmIabB4RmlTyk4upQw7pBsKn+I9h6QEsuD4CWbK/E= Subject key identifier: 44:5F:9A:C7:DC:6F:F8:83:84:57:E0:1D:2D:1C:03:67:8D:E2:E7:53 Authority key identifier: E6:F0:81:9C:59:FD:C6:41:E4:5B:CC:33:CB:50:F3:CD:85:4A:C2:F5 Certificate issuer: /CN=A9119363/serialNumber=E6F0819C59FDC641E45BCC33CB50F3CD854AC2F5 Certificate serial: 044F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCBnFn9xkHkW8wzy1DzzYVKwvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft Manifest number: 05DD Signing time: Sat 31 May 2025 00:29:31 +0000 Manifest this update: Sat 31 May 2025 00:29:31 +0000 Manifest next update: Sat 07 Jun 2025 00:29:31 +0000 Files and hashes: 1: 5vCBnFn9xkHkW8wzy1DzzYVKwvU.crl (hash: Bj/ykVOOhJf+k1SiI+MsmoyrGc+5eiX/5ETIwp0V7Gg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.crl rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCBnFn9xkHkW8wzy1DzzYVKwvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1103 (0x44f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119363, serialNumber=E6F0819C59FDC641E45BCC33CB50F3CD854AC2F5 Validity Not Before: May 31 00:29:31 2025 GMT Not After : Jun 7 00:29:31 2025 GMT Subject: CN=683a4d6b-c891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:96:8d:87:0d:03:19:9e:a0:ce:59:b0:1d:0f: 88:51:58:3d:0a:9d:c6:04:3f:fc:26:71:55:d4:55: 19:20:ba:e2:b8:fa:a7:fc:e4:16:33:98:7f:ca:78: 77:f7:06:74:3e:c1:5d:73:c1:a5:ae:8f:40:12:48: e8:2f:17:6b:7b:a5:5b:75:34:06:5e:aa:1d:50:83: 09:9d:a0:97:93:b1:9b:a3:15:d4:75:ca:94:e6:19: 1f:a5:a3:46:d7:57:10:21:77:21:d8:ff:16:36:51: 12:a2:8d:27:ac:6f:d5:2e:8f:25:64:07:33:08:62: a3:d3:71:4a:0f:6c:be:11:e3:79:46:6b:11:52:b9: b4:50:79:d1:96:7c:0a:1f:5b:9d:c0:04:22:ed:39: aa:63:7b:ea:20:3c:8d:41:32:e1:81:ff:41:18:0b: 08:4b:99:5e:c1:58:d9:63:fe:f7:bf:af:6e:e4:fc: 7f:cf:e3:30:8c:df:c8:bd:ca:16:c1:c7:c2:f5:1f: c7:e6:50:b8:f0:e8:79:ab:40:66:dd:54:c0:20:17: 40:f7:e4:8a:e9:4f:78:4c:4e:f9:26:d6:07:7b:ed: 76:aa:5d:92:89:ce:65:5e:58:70:64:19:66:27:38: d0:48:04:b4:93:b3:0d:49:4d:fa:2f:21:15:29:04: 55:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5F:9A:C7:DC:6F:F8:83:84:57:E0:1D:2D:1C:03:67:8D:E2:E7:53 X509v3 Authority Key Identifier: keyid:E6:F0:81:9C:59:FD:C6:41:E4:5B:CC:33:CB:50:F3:CD:85:4A:C2:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCBnFn9xkHkW8wzy1DzzYVKwvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:97:fd:63:a2:1e:04:69:51:34:7c:67:7f:c4:88:f2:36:84: d6:9e:05:a6:21:ca:8f:81:d2:39:32:9a:e1:9f:52:24:a5:60: 30:50:6a:12:23:fc:3d:5b:4e:99:e1:62:ca:12:91:e6:b8:bd: 88:28:e0:be:e9:f6:cf:2c:9b:32:cb:20:27:aa:91:65:81:40: a0:e0:5e:88:68:e2:21:fd:a8:e2:f1:c1:fb:72:e9:21:00:ad: 1b:66:9a:53:e8:ce:c9:a2:2c:b1:b5:1f:6e:0e:13:f5:a6:14: 5f:16:c2:9d:1b:3b:be:8b:e6:f6:5d:9e:e4:a1:41:48:40:16: 25:48:01:44:5c:0b:6e:84:06:3b:e9:a9:fa:88:93:19:a1:65: 18:17:40:ad:76:e7:0e:7c:4e:d4:d1:1a:a8:e3:fe:41:65:17: c6:0f:e7:dc:4a:c0:82:b4:5f:e1:7d:2e:a2:19:96:5d:36:5b: 77:18:44:3b:f4:19:91:36:93:8a:b2:87:80:f3:80:fa:b8:d9: 69:40:d4:c0:3c:d1:0a:67:02:6a:d4:60:60:72:56:40:08:13: 67:01:df:ef:23:61:c5:0d:22:c8:fa:db:0d:e1:a3:ef:0c:d2: 7d:de:c1:e7:f8:13:26:1f:a0:47:46:b9:94:9a:ab:14:7d:1c: 3a:da:0b:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzNjMxMTAvBgNVBAUTKEU2RjA4MTlDNTlGREM2NDFFNDVCQ0MzM0NCNTBGM0NE ODU0QUMyRjUwHhcNMjUwNTMxMDAyOTMxWhcNMjUwNjA3MDAyOTMxWjAYMRYwFAYD VQQDEw02ODNhNGQ2Yi1jODkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ZaNhw0DGZ6gzlmwHQ+IUVg9Cp3GBD/8JnFV1FUZILriuPqn/OQWM5h/ynh3 9wZ0PsFdc8Glro9AEkjoLxdre6VbdTQGXqodUIMJnaCXk7GboxXUdcqU5hkfpaNG 11cQIXch2P8WNlESoo0nrG/VLo8lZAczCGKj03FKD2y+EeN5RmsRUrm0UHnRlnwK H1udwAQi7TmqY3vqIDyNQTLhgf9BGAsIS5lewVjZY/73v69u5Px/z+MwjN/IvcoW wcfC9R/H5lC48Oh5q0Bm3VTAIBdA9+SK6U94TE75JtYHe+12ql2Sic5lXlhwZBlm JzjQSAS0k7MNSU36LyEVKQRVewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFERfmsfc b/iDhFfgHS0cA2eN4udTMB8GA1UdIwQYMBaAFObwgZxZ/cZB5FvMM8tQ882FSsL1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTM2My8zMUVBREZBNDVD QkExMUVDOEFBMTNFMjRDNEY5QUUwMi81dkNCbkZuOXhrSGtXOHd6eTFEenpZVkt3 dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV2Q0JuRm45eGtIa1c4d3p5MUR6ellWS3d2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTM2My8zMUVBREZBNDVDQkExMUVDOEFBMTNFMjRDNEY5QUUwMi81dkNCbkZuOXhr SGtXOHd6eTFEenpZVkt3dlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcl/1joh4EaVE0fGd/xIjyNoTWngWmIcqPgdI5Mprhn1IkpWAwUGoS I/w9W06Z4WLKEpHmuL2IKOC+6fbPLJsyyyAnqpFlgUCg4F6IaOIh/aji8cH7cukh AK0bZppT6M7JoiyxtR9uDhP1phRfFsKdGzu+i+b2XZ7koUFIQBYlSAFEXAtuhAY7 6an6iJMZoWUYF0CtducOfE7U0Rqo4/5BZRfGD+fcSsCCtF/hfS6iGZZdNlt3GEQ7 9BmRNpOKsoeA84D6uNlpQNTAPNEKZwJq1GBgclZACBNnAd/vI2HFDSLI+tsN4aPv DNJ93sHn+BMmH6BHRrmUmqsUfRw62gvf -----END CERTIFICATE-----Generated at Sat May 31 17:46:26 2025 by rpki-client