$ rpki-client -vvf rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.mft File: 5MpluNDHsWXZwip6vfgapm-q1NE.mft (raw, json) Hash identifier: rbUsOHTQWLdT8wfS+rumX6cO5pcd1iq8Gmk9dVoPMz8= Subject key identifier: 4C:DE:75:94:64:7F:FC:D2:6D:2B:D3:9A:A8:81:E0:53:8C:A6:9B:0F Authority key identifier: E4:CA:65:B8:D0:C7:B1:65:D9:C2:2A:7A:BD:F8:1A:A6:6F:AA:D4:D1 Certificate issuer: /CN=A915EAAF/serialNumber=E4CA65B8D0C7B165D9C22A7ABDF81AA66FAAD4D1 Certificate serial: 3484 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5MpluNDHsWXZwip6vfgapm-q1NE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.mft Manifest number: 3484 Signing time: Sat 31 May 2025 14:39:01 +0000 Manifest this update: Sat 31 May 2025 14:39:01 +0000 Manifest next update: Sat 07 Jun 2025 14:39:01 +0000 Files and hashes: 1: 5MpluNDHsWXZwip6vfgapm-q1NE.crl (hash: k9btn3VvgVx1ZaHFBaTgOnLt9K5uRKwPk0B2parOK3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.crl rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5MpluNDHsWXZwip6vfgapm-q1NE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:39:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13444 (0x3484) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EAAF, serialNumber=E4CA65B8D0C7B165D9C22A7ABDF81AA66FAAD4D1 Validity Not Before: May 31 14:39:01 2025 GMT Not After : Jun 7 14:39:01 2025 GMT Subject: CN=683b1485-1c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8c:be:30:de:5a:cf:4a:9e:40:60:b1:44:f4: 76:4f:54:04:5e:18:bd:1f:44:4c:58:e0:2c:07:92: ea:6e:5e:e9:5d:20:16:a9:89:4b:f0:56:44:fa:38: c7:7d:82:41:fb:88:3f:ee:db:54:ae:4f:b0:a5:0e: 57:26:6b:92:8a:af:97:4a:ac:37:cc:49:fe:db:fb: fe:cf:4d:f6:87:61:da:d5:d7:04:4b:f2:03:cb:54: c8:47:d0:89:27:8f:da:12:cc:1c:86:8c:7e:fa:8f: c6:2f:85:ef:8f:db:19:33:c9:bd:15:70:0f:3e:86: 9e:c7:0f:28:3c:57:10:0f:8d:fe:57:99:1b:ba:68: 43:ab:6d:45:ea:5f:ef:00:61:c3:56:f1:95:43:8a: b9:b6:18:df:c4:1d:1b:c7:a1:1b:a1:33:8b:84:e0: 8b:d1:4c:6a:ed:03:f2:de:9b:9f:46:32:13:b3:26: ab:d6:7f:ce:90:15:04:29:8c:ec:0b:df:43:4b:1e: 6e:16:08:29:1d:65:22:53:18:a8:05:bd:05:c0:94: 49:b9:72:89:79:57:35:b2:ca:73:31:5b:27:61:a3: 19:ca:58:c6:ac:a8:4c:ac:3a:c1:1f:91:9e:e2:bf: 8b:2c:5c:ee:8b:ec:3f:9a:ec:73:07:63:08:91:30: c3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:DE:75:94:64:7F:FC:D2:6D:2B:D3:9A:A8:81:E0:53:8C:A6:9B:0F X509v3 Authority Key Identifier: keyid:E4:CA:65:B8:D0:C7:B1:65:D9:C2:2A:7A:BD:F8:1A:A6:6F:AA:D4:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5MpluNDHsWXZwip6vfgapm-q1NE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:39:2e:ab:fb:83:fe:69:e9:35:85:c6:d6:2a:52:18:20:6d: 5e:4b:55:ba:40:3a:ae:33:05:b8:77:19:e8:d9:c5:94:96:91: e6:af:16:ba:2c:41:1d:d9:5b:a2:65:2e:1b:09:5e:fc:65:57: 79:b3:0d:fb:08:24:54:34:72:04:1b:a3:80:92:6d:25:8a:8c: 7e:b6:f8:4b:a8:e4:f2:ee:96:aa:8a:a7:3e:a1:54:6b:56:7c: 1a:62:4c:82:4d:21:65:6b:96:1f:88:ec:88:4c:e7:71:48:43: cd:80:30:30:ec:4e:b1:3d:7c:b0:d3:c7:be:c6:ab:27:9c:f3: 48:45:8e:ae:5f:0b:6e:5b:d7:a4:d9:c7:26:d8:31:63:22:2a: d4:ed:f8:62:13:99:23:d0:d0:94:75:b9:03:81:10:ed:b6:ab: e9:7a:26:91:1d:7a:33:55:19:a9:40:7f:db:d2:f7:13:16:2d: d3:52:c4:58:17:a7:b4:d9:30:b2:4c:09:40:24:40:53:e0:3b: 55:36:e8:df:b5:54:95:57:f2:67:8e:96:a0:41:c1:fa:22:02: f1:9d:d5:d4:27:30:4e:6c:45:7d:43:ae:61:92:15:7a:6b:d3: fb:dc:6b:f0:64:bc:ec:2d:57:54:f5:c7:a5:40:f5:e3:5d:b4: 5c:f8:fc:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVBQUYxMTAvBgNVBAUTKEU0Q0E2NUI4RDBDN0IxNjVEOUMyMkE3QUJERjgxQUE2 NkZBQUQ0RDEwHhcNMjUwNTMxMTQzOTAxWhcNMjUwNjA3MTQzOTAxWjAYMRYwFAYD VQQDEw02ODNiMTQ4NS0xYzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYy+MN5az0qeQGCxRPR2T1QEXhi9H0RMWOAsB5Lqbl7pXSAWqYlL8FZE+jjH fYJB+4g/7ttUrk+wpQ5XJmuSiq+XSqw3zEn+2/v+z032h2Ha1dcES/IDy1TIR9CJ J4/aEswchox++o/GL4Xvj9sZM8m9FXAPPoaexw8oPFcQD43+V5kbumhDq21F6l/v AGHDVvGVQ4q5thjfxB0bx6EboTOLhOCL0Uxq7QPy3pufRjITsyar1n/OkBUEKYzs C99DSx5uFggpHWUiUxioBb0FwJRJuXKJeVc1sspzMVsnYaMZyljGrKhMrDrBH5Ge 4r+LLFzui+w/muxzB2MIkTDD8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEzedZRk f/zSbSvTmqiB4FOMppsPMB8GA1UdIwQYMBaAFOTKZbjQx7Fl2cIqer34GqZvqtTR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUFBRi9GM0YxOEIyQzFE OEUxMUUyQTMxNEEyRUQwOEIwMkNEMi81TXBsdU5ESHNXWFp3aXA2dmZnYXBtLXEx TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVNcGx1TkRIc1dYWndpcDZ2ZmdhcG0tcTFORS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUFBRi9GM0YxOEIyQzFEOEUxMUUyQTMxNEEyRUQwOEIwMkNEMi81TXBsdU5ESHNX WFp3aXA2dmZnYXBtLXExTkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5OS6r+4P+aek1hcbWKlIYIG1eS1W6QDquMwW4dxno2cWUlpHmrxa6 LEEd2VuiZS4bCV78ZVd5sw37CCRUNHIEG6OAkm0liox+tvhLqOTy7paqiqc+oVRr VnwaYkyCTSFla5YfiOyITOdxSEPNgDAw7E6xPXyw08e+xqsnnPNIRY6uXwtuW9ek 2ccm2DFjIirU7fhiE5kj0NCUdbkDgRDttqvpeiaRHXozVRmpQH/b0vcTFi3TUsRY F6e02TCyTAlAJEBT4DtVNujftVSVV/JnjpagQcH6IgLxndXUJzBObEV9Q65hkhV6 a9P73GvwZLzsLVdU9celQPXjXbRc+PwC -----END CERTIFICATE-----Generated at Sat May 31 17:54:52 2025 by rpki-client