$ rpki-client -vvf rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft File: 5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft (raw, json) Hash identifier: SFFAW7yRd9zSsmBkmMPyhH+SvwjdNfT0U4Eq5QFJkIM= Subject key identifier: 1C:7E:F8:4A:65:DD:8A:F4:9E:1E:00:A7:FB:B8:51:D7:F7:C1:59:53 Authority key identifier: E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1 Certificate issuer: /CN=A914C7F8/serialNumber=E50963D70468727356B78B7FC4380974429B64E1 Certificate serial: 017A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft Manifest number: 0174 Signing time: Sat 31 May 2025 03:33:21 +0000 Manifest this update: Sat 31 May 2025 03:33:20 +0000 Manifest next update: Sat 07 Jun 2025 03:33:20 +0000 Files and hashes: 1: 5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl (hash: j6EHcdmeON+8spWuK0nHfY2iP+P8qfiJWTchMeQXz/Y=) 2: 47862E7E129C11EEA43CFD46C4F9AE02.roa (hash: M9MqZsVmz62prCxeOcSq9CpUw3/czHK+Un3uXWoG0WQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 378 (0x17a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C7F8, serialNumber=E50963D70468727356B78B7FC4380974429B64E1 Validity Not Before: May 31 03:33:20 2025 GMT Not After : Jun 7 03:33:20 2025 GMT Subject: CN=683a7881-bf11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:27:15:62:8c:eb:3e:f2:dd:65:a1:b2:47:c5: dd:90:27:a2:48:0d:44:2b:26:e3:ac:86:d1:05:f5: 4e:49:cc:d5:e0:ea:37:86:69:48:06:b8:69:15:a6: 58:f2:78:97:3d:8a:cb:c7:51:36:5b:b2:6d:e1:35: a7:54:3a:0d:9b:55:90:30:38:fd:c6:2f:80:ca:3a: 4c:3c:53:ec:02:19:31:ba:67:c7:bc:48:bd:78:5c: d1:16:92:ff:5b:5d:8e:68:6a:b4:0d:95:b8:9e:71: 1d:f2:10:9a:f4:db:63:e6:34:d6:e8:8b:66:e4:ac: da:7d:3f:f7:c2:74:ce:55:f8:00:2d:ec:83:9e:bd: d1:41:5f:e3:3a:64:19:0f:6d:41:66:10:89:92:c1: ea:82:91:3a:f6:31:1e:f6:9e:22:3b:c7:23:ae:63: 81:50:b8:89:8b:2a:bc:6f:fe:2f:82:c6:00:48:4c: 65:88:ed:11:1f:9c:29:26:4d:30:1e:64:5f:7a:f1: 94:6c:66:49:dc:c6:9b:c9:b9:d2:f8:80:1f:52:30: 4f:34:92:29:e4:a8:0e:2f:2d:3a:16:aa:7b:51:83: 42:d3:fe:d6:77:9a:76:97:e5:a0:dd:4f:97:3e:bd: 9d:45:34:ba:9a:1c:63:df:e8:51:b5:cc:a8:15:a1: 59:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:7E:F8:4A:65:DD:8A:F4:9E:1E:00:A7:FB:B8:51:D7:F7:C1:59:53 X509v3 Authority Key Identifier: keyid:E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:1b:53:68:a0:31:e8:62:1d:3b:c8:45:71:15:42:bf:a5:0c: d3:e5:08:e2:92:0e:09:47:2d:d7:e2:5f:0a:52:65:d5:26:b3: 0d:83:75:4d:36:ac:11:bd:3a:65:0e:80:ff:47:7c:31:66:6f: e4:81:fc:a4:a7:96:9c:f9:26:ba:0a:fc:42:9c:e1:82:12:f2: 54:8d:20:c0:9f:c7:bd:de:9c:ef:c0:eb:a6:1b:40:41:14:1b: 2c:58:b4:5f:2c:5a:e4:cb:84:d0:db:f4:81:eb:75:f9:52:09: 98:ad:e2:4a:f3:e1:c4:ec:d2:1e:9a:8a:f1:30:0a:83:fa:f9: 20:d5:3d:55:37:bc:7f:17:c7:c5:c8:67:50:12:c9:22:ab:81: c2:3a:6e:9d:38:a1:8b:1b:58:5b:0d:ff:2f:f8:9e:99:54:66: 5e:8b:93:6b:e3:a6:20:66:21:a7:e0:3d:7e:c2:58:65:03:65: f2:6e:6c:59:3e:1c:62:a2:0e:2c:f8:8e:ec:06:78:5c:79:df: 25:d5:76:ea:55:97:bb:88:59:eb:65:c6:38:b8:0b:12:63:c4: 67:33:58:95:2b:d9:f0:83:8c:08:33:79:7d:e5:2a:da:71:44: 95:54:68:e2:2e:8d:92:5d:d4:2b:4d:81:f2:f0:1a:96:ff:d4: a0:b2:6c:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM3RjgxMTAvBgNVBAUTKEU1MDk2M0Q3MDQ2ODcyNzM1NkI3OEI3RkM0MzgwOTc0 NDI5QjY0RTEwHhcNMjUwNTMxMDMzMzIwWhcNMjUwNjA3MDMzMzIwWjAYMRYwFAYD VQQDEw02ODNhNzg4MS1iZjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyScVYozrPvLdZaGyR8XdkCeiSA1EKybjrIbRBfVOSczV4Oo3hmlIBrhpFaZY 8niXPYrLx1E2W7Jt4TWnVDoNm1WQMDj9xi+AyjpMPFPsAhkxumfHvEi9eFzRFpL/ W12OaGq0DZW4nnEd8hCa9Ntj5jTW6Itm5KzafT/3wnTOVfgALeyDnr3RQV/jOmQZ D21BZhCJksHqgpE69jEe9p4iO8cjrmOBULiJiyq8b/4vgsYASExliO0RH5wpJk0w HmRfevGUbGZJ3MabybnS+IAfUjBPNJIp5KgOLy06Fqp7UYNC0/7Wd5p2l+Wg3U+X Pr2dRTS6mhxj3+hRtcyoFaFZKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBx++Epl 3Yr0nh4Ap/u4Udf3wVlTMB8GA1UdIwQYMBaAFOUJY9cEaHJzVreLf8Q4CXRCm2Th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzdGOC9FMjUxMEUxQzEy OTUxMUVFODRCQUQ3NDZDNEY5QUUwMi81UWxqMXdSb2NuTld0NHRfeERnSmRFS2Ja T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRbGoxd1JvY25OV3Q0dF94RGdKZEVLYlpPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzdGOC9FMjUxMEUxQzEyOTUxMUVFODRCQUQ3NDZDNEY5QUUwMi81UWxqMXdSb2Nu Tld0NHRfeERnSmRFS2JaT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkG1NooDHoYh07yEVxFUK/pQzT5Qjikg4JRy3X4l8KUmXVJrMNg3VN NqwRvTplDoD/R3wxZm/kgfykp5ac+Sa6CvxCnOGCEvJUjSDAn8e93pzvwOumG0BB FBssWLRfLFrky4TQ2/SB63X5UgmYreJK8+HE7NIemorxMAqD+vkg1T1VN7x/F8fF yGdQEskiq4HCOm6dOKGLG1hbDf8v+J6ZVGZei5Nr46YgZiGn4D1+wlhlA2XybmxZ Phxiog4s+I7sBnhced8l1XbqVZe7iFnrZcY4uAsSY8RnM1iVK9nwg4wIM3l95Sra cUSVVGjiLo2SXdQrTYHy8BqW/9Sgsmx9 -----END CERTIFICATE-----Generated at Sat May 31 17:54:47 2025 by rpki-client