$ rpki-client -vvf rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft File: 5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft (raw, json) Hash identifier: eLQ+UaBYRrcUgO43V5dnzhpB1F1jLD+Sc4WcHKEewxo= Subject key identifier: 04:C3:E1:B6:D3:D2:E3:13:17:E3:34:2B:7E:2C:20:6B:BA:92:10:4A Authority key identifier: E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18 Certificate issuer: /CN=A91367E0/serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818 Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft Manifest number: 014C Signing time: Sat 31 May 2025 03:53:12 +0000 Manifest this update: Sat 31 May 2025 03:53:11 +0000 Manifest next update: Sat 07 Jun 2025 03:53:11 +0000 Files and hashes: 1: 5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl (hash: geASE9A7DUAFJd7ITa7jt8yvUEifOdaafpJgJvZyOis=) 2: 444EB35A459D11EEA8758641C4F9AE02.roa (hash: HxWrs2XE/yxdbhgHCsYXC3cP1Nukb/SzqytOwhYHUgs=) 3: 57F3935045A011EEA9A5215EC4F9AE02.roa (hash: zhWHaUx74UFv//O6sI95zwvuuZgRyOVSokAfykLA4G4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:53:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91367E0, serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818 Validity Not Before: May 31 03:53:11 2025 GMT Not After : Jun 7 03:53:11 2025 GMT Subject: CN=683a7d28-43d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:59:7e:80:ef:6e:dc:5e:6e:3d:9a:16:9b:16: 68:87:78:49:26:cc:2f:d4:0c:55:40:05:bb:8b:dd: 3a:0c:88:31:4c:e0:52:7e:49:55:55:5c:55:58:04: 71:f7:c4:08:76:6f:4d:09:d6:f3:ca:10:a8:8a:90: f6:71:bb:6b:4e:e0:23:32:b6:b8:94:8f:97:03:0a: c7:0d:46:a9:6a:24:05:b5:7d:6d:c9:a6:48:78:9b: 62:c5:ff:c6:c2:fb:84:5e:b6:ca:2f:9f:3b:ba:65: 31:f4:8e:c2:e5:f1:a6:7c:dc:69:43:2a:05:00:67: 53:21:2b:cb:4b:a1:2f:d0:6d:88:f1:93:7d:d1:d5: 02:c4:4a:b5:d1:d1:b9:2f:a4:85:02:7c:df:53:a0: 6b:63:47:23:19:fd:2c:bf:7f:97:40:ee:39:21:35: 8e:6b:26:64:d4:63:0f:4c:f8:e0:87:d0:dd:1f:f3: 6c:91:0c:66:1c:7f:3c:43:06:e9:68:af:c0:1f:21: 2f:98:2f:40:14:aa:be:55:db:90:98:af:b4:dd:73: db:6a:23:9f:47:15:21:fa:bd:11:96:72:56:f2:b8: 48:d4:ac:03:8f:21:67:00:4e:6b:9f:f7:bc:0f:52: 7d:5f:91:07:e6:7a:f5:5f:de:7c:91:3d:31:a1:93: 3f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C3:E1:B6:D3:D2:E3:13:17:E3:34:2B:7E:2C:20:6B:BA:92:10:4A X509v3 Authority Key Identifier: keyid:E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:9a:7c:88:50:c4:ba:35:3c:c6:1b:18:18:4d:17:1d:3d:df: a2:8a:ff:1d:48:87:a5:9d:84:35:4e:1d:e3:66:a8:14:c5:df: 8d:cd:a6:17:71:9c:4e:34:13:e8:b6:3a:ab:03:f8:44:88:ca: 33:31:9d:01:a1:54:b5:52:6a:c0:17:67:d4:1a:b2:eb:84:82: 3e:de:a0:e6:8c:67:69:96:3d:6a:24:3e:8c:3b:21:f4:8a:c7: 35:40:20:e5:73:56:ac:44:88:5f:d8:c2:21:1d:97:81:12:52: 05:ba:68:9c:93:df:92:1c:9f:a4:d6:f3:0c:39:b6:1a:65:c1: 8e:28:70:d1:99:1c:12:65:76:3e:84:d6:01:af:9a:ef:70:85: a5:10:a4:98:d7:01:92:f5:ed:46:3f:16:f6:60:02:84:df:df: 09:64:f7:4a:5c:8a:26:c0:4e:9d:a5:41:2f:e1:3a:03:c8:ee: 82:81:47:62:34:22:32:d6:29:09:a5:c8:ed:96:33:8c:94:71: 7c:e2:e6:a5:16:20:0f:bb:16:81:bf:6f:85:9f:07:96:4b:6f: 16:7e:cd:28:0a:d9:66:b2:f1:2e:60:08:4f:21:16:70:34:68: 78:41:90:77:10:90:2b:43:f5:d2:0b:c2:78:92:50:6d:3d:45: 12:63:78:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY3RTAxMTAvBgNVBAUTKEU2MUJFQzEzOTI4NjMyODNEQzk5RTJGRjkzMTU3NUEz MTgxQzI4MTgwHhcNMjUwNTMxMDM1MzExWhcNMjUwNjA3MDM1MzExWjAYMRYwFAYD VQQDEw02ODNhN2QyOC00M2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFl+gO9u3F5uPZoWmxZoh3hJJswv1AxVQAW7i906DIgxTOBSfklVVVxVWARx 98QIdm9NCdbzyhCoipD2cbtrTuAjMra4lI+XAwrHDUapaiQFtX1tyaZIeJtixf/G wvuEXrbKL587umUx9I7C5fGmfNxpQyoFAGdTISvLS6Ev0G2I8ZN90dUCxEq10dG5 L6SFAnzfU6BrY0cjGf0sv3+XQO45ITWOayZk1GMPTPjgh9DdH/NskQxmHH88Qwbp aK/AHyEvmC9AFKq+VduQmK+03XPbaiOfRxUh+r0RlnJW8rhI1KwDjyFnAE5rn/e8 D1J9X5EH5nr1X958kT0xoZM/UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATD4bbT 0uMTF+M0K34sIGu6khBKMB8GA1UdIwQYMBaAFOYb7BOShjKD3Jni/5MVdaMYHCgY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjdFMC9FNDE4OTkxMDQ1 OUMxMUVFQjY5RDY4MzFDNEY5QUUwMi81aHZzRTVLR01vUGNtZUxfa3hWMW94Z2NL QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVodnNFNUtHTW9QY21lTF9reFYxb3hnY0tCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjdFMC9FNDE4OTkxMDQ1OUMxMUVFQjY5RDY4MzFDNEY5QUUwMi81aHZzRTVLR01v UGNtZUxfa3hWMW94Z2NLQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2mnyIUMS6NTzGGxgYTRcdPd+iiv8dSIelnYQ1Th3jZqgUxd+NzaYX cZxONBPotjqrA/hEiMozMZ0BoVS1UmrAF2fUGrLrhII+3qDmjGdplj1qJD6MOyH0 isc1QCDlc1asRIhf2MIhHZeBElIFumick9+SHJ+k1vMMObYaZcGOKHDRmRwSZXY+ hNYBr5rvcIWlEKSY1wGS9e1GPxb2YAKE398JZPdKXIomwE6dpUEv4ToDyO6CgUdi NCIy1ikJpcjtljOMlHF84ualFiAPuxaBv2+FnweWS28Wfs0oCtlmsvEuYAhPIRZw NGh4QZB3EJArQ/XSC8J4klBtPUUSY3jg -----END CERTIFICATE-----Generated at Sat May 31 17:51:33 2025 by rpki-client