$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft File: 5rsDqligwnDrZrPq6yQI__q6Xsc.mft (raw, json) Hash identifier: XGKVuBOrtwt/TfWipVmkm/+ZjBNdb9gAGYcZ/8CsShg= Subject key identifier: 87:B8:A6:5F:20:57:4C:7C:67:78:1F:2B:AE:47:60:00:05:65:29:D3 Authority key identifier: E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7 Certificate issuer: /CN=A914D2BF/serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7 Certificate serial: 019E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft Manifest number: 019A Signing time: Sat 31 May 2025 03:10:09 +0000 Manifest this update: Sat 31 May 2025 03:10:08 +0000 Manifest next update: Sat 07 Jun 2025 03:10:08 +0000 Files and hashes: 1: 5rsDqligwnDrZrPq6yQI__q6Xsc.crl (hash: PDyLPqwXB8/Rx4L1K2L4012pPYQH4KgvXqyzs+EX+fg=) 2: AEF266ECD34811EDAD96D95DC4F9AE02.roa (hash: KXSCbuQLHG9xWL+hihrwdJUS/R0sgZW/C4dlIANzg14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D2BF, serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7 Validity Not Before: May 31 03:10:08 2025 GMT Not After : Jun 7 03:10:08 2025 GMT Subject: CN=683a7310-aa91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:08:32:e8:30:ea:f5:89:7f:7f:f0:aa:14:d7: 3e:83:96:ac:70:23:60:a7:9e:a7:2b:f5:96:17:37: 30:3b:84:bd:02:54:ff:76:a2:28:a0:36:b5:af:f2: 3c:81:36:e0:ee:f9:dd:60:3a:26:23:14:e3:71:48: 43:bd:f8:60:ff:1b:21:05:21:39:b6:5b:ff:ed:35: 0e:32:4e:75:77:0d:67:c1:75:18:72:fc:be:98:e8: ec:51:d3:ca:ae:4b:59:c2:96:f3:cb:68:25:8f:fd: fa:79:91:b7:9d:4c:c2:03:fd:46:68:05:3f:c5:30: 3b:a9:f9:cc:d1:e3:f6:ec:6a:22:c7:30:75:7d:49: e1:65:ac:fa:9e:53:04:21:0b:49:db:08:c2:ff:5a: d0:80:6e:ba:00:91:b2:c8:4c:36:46:30:c1:b5:c4: f0:e0:33:bd:98:7e:f5:05:70:a4:1b:0b:89:1e:08: bd:b0:bc:b7:c3:e0:3d:46:59:47:52:c5:5f:c6:cb: a3:ef:17:4d:51:bb:3a:8e:e7:37:88:b2:0b:cc:8f: 31:dd:5c:5a:22:37:c7:e7:3a:aa:6d:bb:b9:d2:f0: 83:20:1a:42:5d:49:7e:15:ea:12:b0:ef:91:26:0a: e4:60:ca:97:44:85:4a:d4:01:35:e4:30:7b:2b:e9: 1b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B8:A6:5F:20:57:4C:7C:67:78:1F:2B:AE:47:60:00:05:65:29:D3 X509v3 Authority Key Identifier: keyid:E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:1e:3b:11:e7:84:b8:89:dd:7e:18:4b:f5:26:77:89:00:13: 83:1e:ac:e5:fd:08:10:71:7a:e9:66:0e:d2:5b:c4:64:19:e4: 55:2d:67:9d:08:02:1c:77:4d:7e:f3:a0:c2:cb:7a:e0:7a:4e: 35:12:88:8e:4d:ce:b9:81:3b:9c:be:61:f6:95:08:6d:17:7a: ed:51:88:69:ed:1a:af:71:1e:d9:19:27:51:27:c5:8a:aa:86: 17:e2:af:93:99:96:09:0c:d9:1f:cd:43:3a:25:83:ae:e4:e5: 36:0e:b4:8d:28:22:19:0c:d3:45:29:20:4d:34:18:c0:b8:0f: e6:9e:ca:3f:05:63:cd:c7:a8:0b:7f:18:b4:0a:64:00:53:98: a6:56:17:74:1a:4f:71:39:4c:d4:e9:11:96:ba:6b:e5:3c:f3: 72:d0:0a:8a:8c:66:6a:cd:29:fb:38:55:ac:bf:84:04:17:c1: 68:54:d2:36:09:10:8e:9e:33:b2:eb:e9:53:1b:cd:e4:98:20: 1d:56:a5:05:6d:e7:10:bc:aa:00:11:38:0a:78:d5:f8:8f:4d: 01:a3:5e:cc:7d:85:df:db:cd:b8:d8:0d:5f:b0:de:ba:19:74: 61:1a:49:3e:ca:42:ba:c0:c8:37:d2:40:7d:eb:86:e6:40:95: 26:78:73:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQyQkYxMTAvBgNVBAUTKEU2QkIwM0FBNThBMEMyNzBFQjY2QjNFQUVCMjQwOEZG RkFCQTVFQzcwHhcNMjUwNTMxMDMxMDA4WhcNMjUwNjA3MDMxMDA4WjAYMRYwFAYD VQQDEw02ODNhNzMxMC1hYTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Agy6DDq9Yl/f/CqFNc+g5ascCNgp56nK/WWFzcwO4S9AlT/dqIooDa1r/I8 gTbg7vndYDomIxTjcUhDvfhg/xshBSE5tlv/7TUOMk51dw1nwXUYcvy+mOjsUdPK rktZwpbzy2glj/36eZG3nUzCA/1GaAU/xTA7qfnM0eP27GoixzB1fUnhZaz6nlME IQtJ2wjC/1rQgG66AJGyyEw2RjDBtcTw4DO9mH71BXCkGwuJHgi9sLy3w+A9RllH UsVfxsuj7xdNUbs6juc3iLILzI8x3VxaIjfH5zqqbbu50vCDIBpCXUl+FeoSsO+R JgrkYMqXRIVK1AE15DB7K+kbFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIe4pl8g V0x8Z3gfK65HYAAFZSnTMB8GA1UdIwQYMBaAFOa7A6pYoMJw62az6uskCP/6ul7H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDJCRi8yQTcxRTZCQ0Qz NDQxMUVEOEUyQzU0NjRDNEY5QUUwMi81cnNEcWxpZ3duRHJaclBxNnlRSV9fcTZY c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyc0RxbGlnd25EclpyUHE2eVFJX19xNlhzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDJCRi8yQTcxRTZCQ0QzNDQxMUVEOEUyQzU0NjRDNEY5QUUwMi81cnNEcWxpZ3du RHJaclBxNnlRSV9fcTZYc2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANHjsR54S4id1+GEv1JneJABODHqzl/QgQcXrpZg7SW8RkGeRVLWed CAIcd01+86DCy3rgek41EoiOTc65gTucvmH2lQhtF3rtUYhp7RqvcR7ZGSdRJ8WK qoYX4q+TmZYJDNkfzUM6JYOu5OU2DrSNKCIZDNNFKSBNNBjAuA/mnso/BWPNx6gL fxi0CmQAU5imVhd0Gk9xOUzU6RGWumvlPPNy0AqKjGZqzSn7OFWsv4QEF8FoVNI2 CRCOnjOy6+lTG83kmCAdVqUFbecQvKoAETgKeNX4j00Bo17MfYXf28242A1fsN66 GXRhGkk+ykK6wMg30kB964bmQJUmeHPi -----END CERTIFICATE-----Generated at Sat May 31 17:57:49 2025 by rpki-client