$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft File: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft (raw, json) Hash identifier: kHWhRWPd9wgOqbWVihX7+DUnTLUiU79Mo/OuyY7J96M= Subject key identifier: FF:96:F6:53:BC:EC:68:63:0F:55:CF:1C:6C:35:12:C4:67:D6:3B:A4 Authority key identifier: E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 Certificate issuer: /CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Certificate serial: 0362 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft Manifest number: 0352 Signing time: Sat 31 May 2025 01:13:10 +0000 Manifest this update: Sat 31 May 2025 01:13:10 +0000 Manifest next update: Sat 07 Jun 2025 01:13:10 +0000 Files and hashes: 1: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl (hash: qCiZ8MmrUZeXUtg8cH90fHA34ZH32A1lk2f/0B9/kP8=) 2: 44B90434DFA011ED8C895F7CC4F9AE02.roa (hash: OB3c0FOnO7U7Cy2O3WKkzCkZvRGF4Swy8zD33qNbalg=) 3: 0589A4B8DF9511EDAAA7E22AC4F9AE02.roa (hash: PCa5nWLR+HuKgmwdVX9BOmG2ZZvLJrtIyJd8CbPbXng=) 4: 36B1CD340A6D11ED89FD3F13C4F9AE02.roa (hash: JCVj+AscF7hWsvaIqNJTPDabzygkqnGZEfVjCkrIsro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:13:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 866 (0x362) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1D, serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Validity Not Before: May 31 01:13:10 2025 GMT Not After : Jun 7 01:13:10 2025 GMT Subject: CN=683a57a6-52b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:84:05:d5:f5:35:d6:42:dc:33:19:d3:99:86: eb:8e:51:60:88:fe:07:8c:09:a5:22:bc:22:5e:84: 8b:dd:63:eb:f7:e3:4d:f6:0c:11:b0:ea:72:dd:88: 49:62:6a:b4:ad:8d:83:dc:b7:8a:6e:5d:0e:ab:e8: ca:cd:7e:e0:c6:1b:d5:d3:10:22:70:7b:c1:16:f0: 9c:5e:d8:42:78:56:af:ed:c6:44:61:5a:a0:69:5c: 44:37:bb:e4:48:fb:c5:cb:59:bf:0c:be:e1:24:d5: 42:74:f1:19:47:72:db:c5:44:ef:be:a1:07:1d:1b: 85:a0:5e:f8:da:74:64:3f:6c:b6:15:67:14:f2:1a: ff:d2:23:ce:4c:82:89:a7:db:ba:7c:f2:63:62:ef: 2f:e3:4d:99:84:c4:80:e8:7d:cf:99:a3:58:5f:60: 0a:d7:37:55:8b:0f:05:97:4a:c8:5c:06:0a:97:98: ec:4e:c4:4f:63:9f:fa:c5:24:49:fb:82:bc:06:1c: 6b:d6:d7:2c:cf:5b:37:cd:ec:e0:49:c8:3e:7b:67: 69:4f:1a:b4:51:d3:73:3c:b4:9d:fc:1e:d3:56:4d: 3a:6f:36:2d:0b:cd:78:0e:9f:00:18:1e:9f:f3:8b: a0:d1:d1:2c:92:c3:34:a7:a6:57:e5:26:63:ba:6a: 1b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:96:F6:53:BC:EC:68:63:0F:55:CF:1C:6C:35:12:C4:67:D6:3B:A4 X509v3 Authority Key Identifier: keyid:E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:d4:80:6b:0b:9e:31:85:f8:7f:0f:8f:f2:6e:18:a2:b7:0e: 60:81:39:a8:33:0c:3a:9b:4f:7c:14:73:8c:da:2a:a2:32:75: 69:bb:ef:3c:29:83:98:73:dc:c8:99:20:71:8f:d7:ce:13:95: 68:70:97:0e:89:ca:d3:ab:b1:6f:b1:63:8d:3b:7a:e4:4a:e0: 1b:99:fa:0b:99:e4:92:cd:b8:1b:87:52:b9:4f:a4:9c:fa:32: 73:01:f0:f7:d4:a1:de:52:c4:04:c1:2d:d0:e4:71:2d:0d:61: 40:6b:e5:3d:94:0d:dd:d5:51:b9:aa:8d:1e:9b:c7:a5:70:a8: 2f:e7:f9:6d:cd:01:78:86:ac:84:dd:ed:af:e9:b2:10:e8:e6: 79:03:a8:18:05:47:79:d7:8f:c6:c8:75:01:5b:55:d1:f0:6b: b6:45:79:43:cc:11:f2:af:4d:33:50:43:18:ab:65:eb:55:e9: ac:8c:e5:83:da:bf:c7:49:23:33:b8:0f:01:a7:5d:70:2f:79: eb:d6:83:f9:ea:4f:2c:68:5b:c1:0c:d9:54:93:f5:26:65:22: ac:b9:56:98:98:4f:23:07:76:d6:58:a1:ce:02:e8:e8:6f:a5: ca:cf:c7:14:15:24:b3:8e:5a:be:fc:3c:b2:aa:d8:95:21:65: 08:ec:d4:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUQxMTAvBgNVBAUTKEU0MjE0MkUzRTU4NDU3NjJEMEU4RDY4QjAyRkIxMEU4 NzVCQzZCRjIwHhcNMjUwNTMxMDExMzEwWhcNMjUwNjA3MDExMzEwWjAYMRYwFAYD VQQDEw02ODNhNTdhNi01MmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAooQF1fU11kLcMxnTmYbrjlFgiP4HjAmlIrwiXoSL3WPr9+NN9gwRsOpy3YhJ Ymq0rY2D3LeKbl0Oq+jKzX7gxhvV0xAicHvBFvCcXthCeFav7cZEYVqgaVxEN7vk SPvFy1m/DL7hJNVCdPEZR3LbxUTvvqEHHRuFoF742nRkP2y2FWcU8hr/0iPOTIKJ p9u6fPJjYu8v402ZhMSA6H3PmaNYX2AK1zdViw8Fl0rIXAYKl5jsTsRPY5/6xSRJ +4K8Bhxr1tcsz1s3zezgScg+e2dpTxq0UdNzPLSd/B7TVk06bzYtC814Dp8AGB6f 84ug0dEsksM0p6ZX5SZjumobKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+W9lO8 7GhjD1XPHGw1EsRn1jukMB8GA1UdIwQYMBaAFOQhQuPlhFdi0OjWiwL7EOh1vGvy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRC9CNDZFNDJEQUJC MUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYyTFE2TmFMQXZzUTZIVzhh X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDRkM0LVdFVjJMUTZOYUxBdnNRNkhXOGFfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRC9CNDZFNDJEQUJCMUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYy TFE2TmFMQXZzUTZIVzhhX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp1IBrC54xhfh/D4/ybhiitw5ggTmoMww6m098FHOM2iqiMnVpu+88 KYOYc9zImSBxj9fOE5VocJcOicrTq7FvsWONO3rkSuAbmfoLmeSSzbgbh1K5T6Sc +jJzAfD31KHeUsQEwS3Q5HEtDWFAa+U9lA3d1VG5qo0em8elcKgv5/ltzQF4hqyE 3e2v6bIQ6OZ5A6gYBUd514/GyHUBW1XR8Gu2RXlDzBHyr00zUEMYq2XrVemsjOWD 2r/HSSMzuA8Bp11wL3nr1oP56k8saFvBDNlUk/UmZSKsuVaYmE8jB3bWWKHOAujo b6XKz8cUFSSzjlq+/DyyqtiVIWUI7NTI -----END CERTIFICATE-----Generated at Sat May 31 16:42:06 2025 by rpki-client