$ rpki-client -vvf rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft File: l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft (raw, json) Hash identifier: nr/T5Yx1EPgCvZ3XOGufXUyP4tqkOADtvokkBYYnpac= Subject key identifier: 7C:A5:98:5A:08:01:F9:F1:BE:91:1A:90:E3:BC:33:D3:9F:86:AB:70 Authority key identifier: 97:95:8F:FF:E6:96:D8:0C:57:63:65:24:A4:6E:18:23:41:76:FB:C1 Certificate issuer: /CN=A91309C9/serialNumber=97958FFFE696D80C57636524A46E18234176FBC1 Certificate serial: 040A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft Manifest number: 0405 Signing time: Sat 31 May 2025 00:38:25 +0000 Manifest this update: Sat 31 May 2025 00:38:24 +0000 Manifest next update: Sat 07 Jun 2025 00:38:24 +0000 Files and hashes: 1: l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl (hash: r1jW8dgZnMJKaFiwumx+hy29O9NzbNIs31k1NeN7TiI=) 2: 46BFB17C739711ECAD333D27C4F9AE02.roa (hash: 6m2q3lRXLAFrPlHDZxzNnpenf3mKGBo+gMVhi6EnOZk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:38:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1034 (0x40a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91309C9, serialNumber=97958FFFE696D80C57636524A46E18234176FBC1 Validity Not Before: May 31 00:38:24 2025 GMT Not After : Jun 7 00:38:24 2025 GMT Subject: CN=683a4f80-f903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:39:7b:a6:dc:7e:f2:1d:3d:94:7e:6e:05:1f: 2b:87:78:81:fa:19:f2:9a:06:a0:79:7f:03:41:77: a4:02:93:55:37:93:a8:4c:33:49:6f:1e:d2:ba:fb: 4e:e8:f2:e0:49:17:64:b5:e8:98:98:2d:70:7e:e5: af:87:99:53:41:b5:14:80:9c:d9:ca:97:2f:43:5e: 97:04:66:dd:ba:9f:ba:12:fc:1a:c4:6b:64:ba:2c: b6:a3:b6:86:0f:a8:08:7a:b2:08:c5:73:e2:40:c7: 39:5b:9d:49:ec:bc:c0:9f:7a:ea:1b:e1:6f:6a:ec: d4:79:87:5f:04:36:bd:6c:50:a3:79:41:08:fd:94: d5:d3:79:93:28:c0:ec:18:96:bd:06:98:3a:3b:34: 5b:b2:71:cd:d8:ff:a8:9e:fb:88:1b:3b:af:e3:d4: 36:5c:c8:a4:4c:7f:93:de:fc:0b:93:d7:89:1e:5d: 28:45:f0:cb:7c:89:cd:17:e0:d6:4f:f3:8f:3a:5b: 13:f1:e9:ba:f1:6b:c7:30:e6:07:ad:11:8c:a8:1c: 3c:9e:6c:b8:61:46:d2:ec:7a:b7:5c:69:0b:d9:00: d5:b9:d5:7c:67:a5:e4:cb:95:2b:9c:75:48:9c:b7: fc:b7:b2:fc:d6:11:40:d5:02:f2:1e:56:b8:39:8d: 2d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A5:98:5A:08:01:F9:F1:BE:91:1A:90:E3:BC:33:D3:9F:86:AB:70 X509v3 Authority Key Identifier: keyid:97:95:8F:FF:E6:96:D8:0C:57:63:65:24:A4:6E:18:23:41:76:FB:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:d0:a2:4f:6d:c4:9f:9e:37:46:b5:df:5b:a5:6f:94:12:cd: 94:07:ee:83:6d:54:b5:3c:11:9b:41:4a:65:41:6c:6b:fe:41: fc:52:40:15:f5:8d:52:41:30:df:00:3e:41:f3:a9:ad:7c:72: 89:32:b1:7f:31:4c:e4:16:37:93:3e:14:82:66:e2:c8:d0:ab: 0d:bc:ce:bb:9b:d7:98:47:d6:c1:2c:24:74:7c:11:69:e6:a5: c0:cf:86:44:86:62:c7:57:22:45:2d:67:df:1b:70:c3:bb:76: 62:f6:2b:0f:c9:ac:12:7b:63:c3:54:6a:64:32:d3:97:60:90: e4:d0:c0:23:1f:66:a5:b0:2a:99:26:ae:4b:fc:7e:1c:50:2b: ba:b2:3f:b5:f2:d0:99:f9:9c:18:1a:06:6c:da:ad:88:92:77: b7:d4:e7:95:b5:48:18:e9:ea:f2:cc:75:d3:ea:1d:1e:34:f6: 0d:27:e3:dc:4f:68:c9:47:3e:31:b2:d8:98:d1:0f:b5:fa:81: 26:ac:ce:3d:03:02:b6:45:bd:a2:d8:e5:cb:d2:a4:13:fa:96: de:e4:40:b0:c9:1a:db:2e:7c:ec:be:9c:38:4f:0e:58:59:8b: e8:bf:3a:e9:e8:a6:8e:27:a1:48:c9:94:ac:a4:db:35:c2:5e: 36:8f:fc:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA5QzkxMTAvBgNVBAUTKDk3OTU4RkZGRTY5NkQ4MEM1NzYzNjUyNEE0NkUxODIz NDE3NkZCQzEwHhcNMjUwNTMxMDAzODI0WhcNMjUwNjA3MDAzODI0WjAYMRYwFAYD VQQDEw02ODNhNGY4MC1mOTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDl7ptx+8h09lH5uBR8rh3iB+hnymgageX8DQXekApNVN5OoTDNJbx7SuvtO 6PLgSRdkteiYmC1wfuWvh5lTQbUUgJzZypcvQ16XBGbdup+6EvwaxGtkuiy2o7aG D6gIerIIxXPiQMc5W51J7LzAn3rqG+FvauzUeYdfBDa9bFCjeUEI/ZTV03mTKMDs GJa9Bpg6OzRbsnHN2P+onvuIGzuv49Q2XMikTH+T3vwLk9eJHl0oRfDLfInNF+DW T/OPOlsT8em68WvHMOYHrRGMqBw8nmy4YUbS7Hq3XGkL2QDVudV8Z6Xky5UrnHVI nLf8t7L81hFA1QLyHla4OY0tDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHylmFoI AfnxvpEakOO8M9OfhqtwMB8GA1UdIwQYMBaAFJeVj//mltgMV2NlJKRuGCNBdvvB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDlDOS80NkQ3MkRFMjcz NjYxMUVDODk4MkJFMEFDNEY5QUUwMi9sNVdQXy1hVzJBeFhZMlVrcEc0WUkwRjIt OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w1V1BfLWFXMkF4WFkyVWtwRzRZSTBGMi04RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDlDOS80NkQ3MkRFMjczNjYxMUVDODk4MkJFMEFDNEY5QUUwMi9sNVdQXy1hVzJB eFhZMlVrcEc0WUkwRjItOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ0KJPbcSfnjdGtd9bpW+UEs2UB+6DbVS1PBGbQUplQWxr/kH8UkAV 9Y1SQTDfAD5B86mtfHKJMrF/MUzkFjeTPhSCZuLI0KsNvM67m9eYR9bBLCR0fBFp 5qXAz4ZEhmLHVyJFLWffG3DDu3Zi9isPyawSe2PDVGpkMtOXYJDk0MAjH2alsCqZ Jq5L/H4cUCu6sj+18tCZ+ZwYGgZs2q2Ikne31OeVtUgY6eryzHXT6h0eNPYNJ+Pc T2jJRz4xstiY0Q+1+oEmrM49AwK2Rb2i2OXL0qQT+pbe5ECwyRrbLnzsvpw4Tw5Y WYvovzrp6KaOJ6FIyZSspNs1wl42j/yH -----END CERTIFICATE-----Generated at Sat May 31 17:30:23 2025 by rpki-client