$ rpki-client -vvf rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft File: c5FNFBChzT-FrR4bClD_P4vWDBA.mft (raw, json) Hash identifier: Lvfufn5D6S/Rkw642VcBpHmJ9vg0mm8pb8xFBOQzm60= Subject key identifier: 9C:AF:07:AA:53:14:B8:7B:B2:7F:B8:E9:7F:22:09:22:E8:1F:14:09 Authority key identifier: 73:91:4D:14:10:A1:CD:3F:85:AD:1E:1B:0A:50:FF:3F:8B:D6:0C:10 Certificate issuer: /CN=A91366F8/serialNumber=73914D1410A1CD3F85AD1E1B0A50FF3F8BD60C10 Certificate serial: 0345 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft Manifest number: 0341 Signing time: Sat 31 May 2025 01:13:44 +0000 Manifest this update: Sat 31 May 2025 01:13:44 +0000 Manifest next update: Sat 07 Jun 2025 01:13:44 +0000 Files and hashes: 1: c5FNFBChzT-FrR4bClD_P4vWDBA.crl (hash: zTxSJGmQ23zJ2xTowTG2Bcxz3MbgQVFgcxsM9rtjwsE=) 2: 591A8C06BE4D11EC8DADB22CC4F9AE02.roa (hash: Py8gHJNmqLpByr4I29rw6Mm8G9sMV9RnjA0oEGne9CY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.crl rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:13:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 837 (0x345) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91366F8, serialNumber=73914D1410A1CD3F85AD1E1B0A50FF3F8BD60C10 Validity Not Before: May 31 01:13:44 2025 GMT Not After : Jun 7 01:13:44 2025 GMT Subject: CN=683a57c8-4d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:28:65:ad:76:c3:91:b0:31:20:a2:34:ee:c0: b4:3a:3a:d4:9d:c5:31:c2:bd:78:3a:0c:8b:8a:b7: d4:2c:20:9a:ac:00:46:16:ce:99:2e:8c:93:11:30: c8:ca:1c:78:96:f9:eb:31:ae:c0:5e:fd:10:a0:c0: eb:09:d4:5a:05:f2:c9:f6:bc:02:b3:57:95:eb:bc: 0d:f2:20:f5:43:87:75:e3:66:df:ea:e9:7f:ce:be: c2:2a:8a:8d:c5:c7:88:da:18:b0:0d:2b:2b:ec:04: 85:48:ee:6d:3a:1c:3a:fc:93:be:b9:3b:fb:96:cf: 4c:ec:b0:0f:42:44:a5:17:7e:d1:90:97:ae:46:9c: 55:77:19:2b:98:44:14:5d:77:80:60:6d:a8:7d:f6: 79:4b:ee:d7:74:15:c6:f7:38:bd:bf:65:f9:97:e5: 34:3e:bb:80:de:9d:9c:0f:56:3e:31:bf:a7:02:77: 5e:e5:06:22:7c:29:95:05:d7:bd:74:e9:0c:c7:9e: ab:69:10:12:38:03:77:a9:1b:51:69:cd:98:a5:43: f9:00:8e:f2:5a:9f:18:9b:d2:a3:6d:60:10:32:a8: ea:d5:4a:02:58:17:c9:77:c8:1c:d8:78:f7:da:69: 09:fe:ba:17:ab:fe:fa:36:62:6a:6a:c2:16:87:90: 8b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:AF:07:AA:53:14:B8:7B:B2:7F:B8:E9:7F:22:09:22:E8:1F:14:09 X509v3 Authority Key Identifier: keyid:73:91:4D:14:10:A1:CD:3F:85:AD:1E:1B:0A:50:FF:3F:8B:D6:0C:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:42:5f:1c:55:65:f9:40:d7:66:88:5e:e0:20:fb:d5:2d:95: 86:f0:ef:99:82:92:fc:fa:f2:ae:60:cd:61:57:f3:9e:70:69: ca:bc:55:08:ac:6b:e6:f3:b4:11:f6:6e:d4:18:65:64:52:95: 60:dd:86:55:4f:64:9d:ac:94:f3:bf:45:ed:d3:e8:73:d6:54: b5:a0:c3:e8:b0:08:3d:89:42:95:60:50:2f:f7:3b:f0:7d:f7: b5:e9:d8:16:b2:86:92:6d:c0:2d:89:6d:2d:f3:47:46:77:5d: b2:d9:ec:06:92:07:70:8c:27:63:2f:85:f1:48:ab:e2:fd:b8: af:65:49:4f:da:8d:94:30:4e:09:c9:51:94:de:d4:c4:eb:e3: 41:9e:f2:67:ef:62:d7:8c:d3:ab:d7:a7:6c:39:c5:c9:a7:b7: 18:b5:39:24:61:95:6e:49:49:0b:25:62:62:62:86:b5:8b:7d: 5b:1f:b1:5f:fe:af:74:45:35:8c:38:de:c4:26:34:b7:9f:7f: 43:77:40:ff:f3:da:a7:e5:9a:b6:32:96:f3:b6:99:00:c6:8d: d9:6b:72:fc:50:ea:18:99:77:d3:ce:03:2b:e5:cc:44:71:ab: d1:e9:0a:90:30:85:43:ae:bf:d4:3c:93:de:23:8b:b8:65:a0: 2c:e9:4d:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY2RjgxMTAvBgNVBAUTKDczOTE0RDE0MTBBMUNEM0Y4NUFEMUUxQjBBNTBGRjNG OEJENjBDMTAwHhcNMjUwNTMxMDExMzQ0WhcNMjUwNjA3MDExMzQ0WjAYMRYwFAYD VQQDEw02ODNhNTdjOC00ZDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqihlrXbDkbAxIKI07sC0OjrUncUxwr14OgyLirfULCCarABGFs6ZLoyTETDI yhx4lvnrMa7AXv0QoMDrCdRaBfLJ9rwCs1eV67wN8iD1Q4d142bf6ul/zr7CKoqN xceI2hiwDSsr7ASFSO5tOhw6/JO+uTv7ls9M7LAPQkSlF37RkJeuRpxVdxkrmEQU XXeAYG2offZ5S+7XdBXG9zi9v2X5l+U0PruA3p2cD1Y+Mb+nAnde5QYifCmVBde9 dOkMx56raRASOAN3qRtRac2YpUP5AI7yWp8Ym9KjbWAQMqjq1UoCWBfJd8gc2Hj3 2mkJ/roXq/76NmJqasIWh5CLOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyvB6pT FLh7sn+46X8iCSLoHxQJMB8GA1UdIwQYMBaAFHORTRQQoc0/ha0eGwpQ/z+L1gwQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjZGOC9BNDI0Mzk3MEJF NEExMUVDQjI3OTU1MkFDNEY5QUUwMi9jNUZORkJDaHpULUZyUjRiQ2xEX1A0dldE QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M1Rk5GQkNoelQtRnJSNGJDbERfUDR2V0RCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjZGOC9BNDI0Mzk3MEJFNEExMUVDQjI3OTU1MkFDNEY5QUUwMi9jNUZORkJDaHpU LUZyUjRiQ2xEX1A0dldEQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYQl8cVWX5QNdmiF7gIPvVLZWG8O+ZgpL8+vKuYM1hV/OecGnKvFUI rGvm87QR9m7UGGVkUpVg3YZVT2SdrJTzv0Xt0+hz1lS1oMPosAg9iUKVYFAv9zvw ffe16dgWsoaSbcAtiW0t80dGd12y2ewGkgdwjCdjL4XxSKvi/bivZUlP2o2UME4J yVGU3tTE6+NBnvJn72LXjNOr16dsOcXJp7cYtTkkYZVuSUkLJWJiYoa1i31bH7Ff /q90RTWMON7EJjS3n39Dd0D/89qn5Zq2MpbztpkAxo3Za3L8UOoYmXfTzgMr5cxE cavR6QqQMIVDrr/UPJPeI4u4ZaAs6U3A -----END CERTIFICATE-----Generated at Sat May 31 16:36:53 2025 by rpki-client