$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft File: 5G4YncjpEKGrvi42TdCBd1zkhGA.mft (raw, json) Hash identifier: WaMgos1z1s1f4ONN0L/N1NdfzHcH2HRWGK+Z/J4Xrbo= Subject key identifier: 02:17:BC:D6:1D:CD:19:E8:26:80:BF:14:6C:44:0C:AB:C1:17:64:C4 Authority key identifier: E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60 Certificate issuer: /CN=A9135B44/serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460 Certificate serial: 020C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft Manifest number: 0207 Signing time: Sat 31 May 2025 02:12:42 +0000 Manifest this update: Sat 31 May 2025 02:12:42 +0000 Manifest next update: Sat 07 Jun 2025 02:12:42 +0000 Files and hashes: 1: 5G4YncjpEKGrvi42TdCBd1zkhGA.crl (hash: WHZmW1X+1GKFXwUuAzi19T6FQMuIXIPdPG7hyiuFgz8=) 2: D4B06AAA3A6E11ED8266115DC4F9AE02.roa (hash: rXyXJ/J6rVFIkAmCNmdDPvJdD/VKGdNuveHL3e4vBN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 524 (0x20c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B44, serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460 Validity Not Before: May 31 02:12:42 2025 GMT Not After : Jun 7 02:12:42 2025 GMT Subject: CN=683a659a-b094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:32:98:0f:94:bc:69:95:70:ca:84:a8:c6:bc: f2:a2:b3:74:3a:98:4b:2c:8f:95:af:d9:60:73:2f: ee:6a:c2:67:5e:3d:21:47:fc:63:b1:fe:23:0d:96: 44:b2:f2:06:1b:41:53:91:aa:8e:99:e2:02:c3:d8: 29:7d:ae:bd:8f:1d:09:c7:2a:66:c9:f5:e5:33:33: 92:be:61:26:13:f8:a4:81:37:1c:da:01:da:8d:c9: 1d:dd:91:ca:67:f6:27:01:83:e4:5a:63:c9:75:ec: 1f:d6:8f:2f:fa:94:83:21:b9:3a:74:48:68:f5:28: 3f:49:66:0f:1d:7f:e6:d4:15:cd:af:99:f8:b3:29: ca:3e:d8:c4:34:72:51:a6:96:3e:16:9b:ea:9e:fe: 13:3c:b7:47:e4:4a:49:67:8c:d2:b7:19:7b:54:ec: 05:a8:d9:b1:32:cf:bd:d3:7c:7c:4e:16:d4:b3:4e: 44:96:2a:fc:49:a0:21:a0:a0:6e:79:a1:75:10:2b: b6:73:75:5d:6b:b6:61:84:04:b8:e6:c3:d1:df:ab: 7c:44:dd:43:8c:d0:9c:6d:0e:a4:d1:57:bf:70:9c: 78:31:ff:92:b3:cb:1d:48:6a:18:43:32:cd:ed:7c: c2:0d:c7:49:ab:58:48:fe:ee:5d:dc:b9:25:4d:2a: 63:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:17:BC:D6:1D:CD:19:E8:26:80:BF:14:6C:44:0C:AB:C1:17:64:C4 X509v3 Authority Key Identifier: keyid:E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:e8:45:7e:63:0d:c8:34:75:fa:e9:30:f9:50:07:f1:35:53: 92:26:04:6e:38:bf:a6:d5:7e:65:25:49:4a:46:60:5c:5d:f1: c8:87:2f:59:72:96:16:fd:5a:ea:a3:de:c8:ab:25:b6:76:c5: 16:cf:68:cb:5b:ca:72:ed:e3:ac:36:86:e5:fe:29:d1:54:c2: 26:eb:46:6f:25:58:2f:20:d2:d1:fe:af:16:47:97:95:0c:e5: 40:65:eb:08:1a:05:97:63:ee:9e:37:56:49:0f:cb:0b:f7:f9: aa:60:42:50:75:81:14:5b:d8:2a:75:a3:f2:3d:0c:c8:8d:fd: 8a:b0:17:8e:ba:5a:c6:ce:26:11:dc:b2:d6:8e:a2:59:eb:9b: 09:c1:27:4d:47:54:a1:9e:fe:d3:bf:fe:67:45:60:dc:51:06: dc:11:21:ba:2d:d0:2b:95:0e:b4:a9:24:2c:ed:1a:61:fe:40: 23:2a:b8:0d:ce:37:ff:fa:c6:8d:b6:2b:54:1d:68:cd:62:94: 19:40:d6:eb:c6:ec:c1:3e:85:9c:ef:d4:a6:a0:a0:bf:c0:eb: 66:03:7c:8d:40:9f:bd:56:3e:99:0b:3e:46:07:04:ed:c4:da: 72:6c:1a:52:44:6b:9f:88:52:aa:b4:5c:fc:f3:a4:2d:ec:02: c8:af:59:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCNDQxMTAvBgNVBAUTKEU0NkUxODlEQzhFOTEwQTFBQkJFMkUzNjRERDA4MTc3 NUNFNDg0NjAwHhcNMjUwNTMxMDIxMjQyWhcNMjUwNjA3MDIxMjQyWjAYMRYwFAYD VQQDEw02ODNhNjU5YS1iMDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqTKYD5S8aZVwyoSoxrzyorN0OphLLI+Vr9lgcy/uasJnXj0hR/xjsf4jDZZE svIGG0FTkaqOmeICw9gpfa69jx0JxypmyfXlMzOSvmEmE/ikgTcc2gHajckd3ZHK Z/YnAYPkWmPJdewf1o8v+pSDIbk6dEho9Sg/SWYPHX/m1BXNr5n4synKPtjENHJR ppY+Fpvqnv4TPLdH5EpJZ4zStxl7VOwFqNmxMs+903x8ThbUs05Elir8SaAhoKBu eaF1ECu2c3Vda7ZhhAS45sPR36t8RN1DjNCcbQ6k0Ve/cJx4Mf+Ss8sdSGoYQzLN 7XzCDcdJq1hI/u5d3LklTSpjMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIXvNYd zRnoJoC/FGxEDKvBF2TEMB8GA1UdIwQYMBaAFORuGJ3I6RChq74uNk3QgXdc5IRg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUI0NC9BRDBENjFGODNB NkMxMUVEOTk0MUY1NUNDNEY5QUUwMi81RzRZbmNqcEVLR3J2aTQyVGRDQmQxemto R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVHNFluY2pwRUtHcnZpNDJUZENCZDF6a2hHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUI0NC9BRDBENjFGODNBNkMxMUVEOTk0MUY1NUNDNEY5QUUwMi81RzRZbmNqcEVL R3J2aTQyVGRDQmQxemtoR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC36EV+Yw3INHX66TD5UAfxNVOSJgRuOL+m1X5lJUlKRmBcXfHIhy9Z cpYW/Vrqo97IqyW2dsUWz2jLW8py7eOsNobl/inRVMIm60ZvJVgvINLR/q8WR5eV DOVAZesIGgWXY+6eN1ZJD8sL9/mqYEJQdYEUW9gqdaPyPQzIjf2KsBeOulrGziYR 3LLWjqJZ65sJwSdNR1Shnv7Tv/5nRWDcUQbcESG6LdArlQ60qSQs7Rph/kAjKrgN zjf/+saNtitUHWjNYpQZQNbrxuzBPoWc79SmoKC/wOtmA3yNQJ+9Vj6ZCz5GBwTt xNpybBpSRGufiFKqtFz886Qt7ALIr1lf -----END CERTIFICATE-----Generated at Sat May 31 17:17:29 2025 by rpki-client