$ rpki-client -vvf rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft File: 5VbchrlOkc-bLilEqF9xaS2glNI.mft (raw, json) Hash identifier: l+/UKR7wIvmUcwAiICPOu/5h5fHiozYkfSctG2JErQ0= Subject key identifier: 65:8E:B1:68:FE:09:AA:CB:86:D0:9C:CC:E2:79:DD:B7:00:BA:B1:98 Authority key identifier: E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2 Certificate issuer: /CN=A919B20D/serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft Manifest number: 0119 Signing time: Sat 31 May 2025 04:29:55 +0000 Manifest this update: Sat 31 May 2025 04:29:55 +0000 Manifest next update: Sat 07 Jun 2025 04:29:55 +0000 Files and hashes: 1: 5VbchrlOkc-bLilEqF9xaS2glNI.crl (hash: TMhcG7vFZzoFRK05ymujyvWOfXqZjTqWGYga83rIc+s=) 2: 4B3E4A0693DE11EE81D1045FC4F9AE02.roa (hash: KJ0WK2K4oHZZ0XrPq/Vfzr7zXyGgds8k3sXRub+VApA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B20D, serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2 Validity Not Before: May 31 04:29:55 2025 GMT Not After : Jun 7 04:29:55 2025 GMT Subject: CN=683a85c3-a385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4e:d1:8f:c5:0e:5e:8e:90:4c:0a:5f:e0:3b: 3b:42:7b:67:34:7f:4a:40:f7:10:89:a6:42:6f:85: f6:fb:52:df:36:44:50:c4:20:85:77:d0:c9:7f:5b: 43:0e:48:23:09:b7:7a:6d:c7:95:98:93:5b:b8:31: 1c:5b:c3:46:12:52:69:f4:8f:1f:f7:83:3f:90:e6: 6d:2c:21:81:09:41:d6:4c:f1:cc:a0:f7:c3:c4:01: 8a:5f:16:0b:12:f3:7c:99:2e:a7:04:04:81:57:30: 54:a9:76:55:f5:f9:be:34:b1:91:d1:dd:8e:e4:23: 6a:0e:6d:dc:e5:c2:6e:da:b8:a5:92:92:29:73:5d: d5:a5:0c:66:cb:21:84:57:be:de:08:c2:23:3d:e2: 31:6c:47:1c:07:92:8b:83:10:40:d1:b2:19:0b:cc: 0c:92:90:a1:9b:38:4b:25:18:7d:cd:f8:55:62:92: 95:e2:8a:5e:83:e1:d5:5e:bb:0e:18:3f:03:2e:d0: 7a:40:2c:b2:ca:65:7a:00:6e:c4:a2:1e:a1:c4:e5: 3c:07:a0:b6:38:0d:ec:e3:0b:30:81:ee:27:75:6d: b2:f6:82:75:04:6c:03:d5:ed:c4:22:0f:20:fc:4f: 51:6a:e6:c7:b3:ea:94:c8:82:ee:ce:72:19:c8:1c: b7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:8E:B1:68:FE:09:AA:CB:86:D0:9C:CC:E2:79:DD:B7:00:BA:B1:98 X509v3 Authority Key Identifier: keyid:E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:69:f6:1f:d2:5d:10:c4:eb:b7:75:db:34:8d:80:26:c1:12: 97:a7:82:8f:7b:a0:32:5d:b7:ab:72:cd:9d:96:91:45:40:49: f3:ef:96:93:2d:45:f2:ef:43:4e:3c:ed:a7:a3:9b:84:4e:63: 5a:23:17:bb:48:bc:36:c3:0b:b5:e4:25:fd:a6:f2:e0:30:61: 90:87:04:b0:52:c7:9b:47:00:f8:cb:87:f2:83:a7:ca:ea:86: 7b:ab:89:8a:a4:04:a0:cf:9c:53:57:40:76:55:2c:66:c6:b5: 04:e0:80:55:b3:0d:7b:59:11:4f:1a:e7:6d:84:b8:b8:4a:8b: 7f:0f:b9:8f:e3:37:4b:00:54:bc:33:95:51:b3:91:7e:ef:f5: 6a:3a:77:39:74:f0:b0:03:52:85:c2:01:3a:df:bc:11:90:4d: da:cf:65:e7:c6:79:5f:ac:17:c5:66:2b:76:e6:a9:8d:bb:f8: 53:47:54:f6:0a:17:03:13:5b:0e:67:1f:e8:58:46:02:8a:41: b4:38:4b:0f:9d:04:9e:64:56:be:a7:b2:b6:a8:12:88:14:0e: aa:3d:87:50:67:fa:a5:16:24:1d:5c:6d:bc:f2:32:36:4f:1e: a4:8e:0c:32:51:36:c7:95:c4:da:df:02:29:a1:6f:62:1b:2e: 70:e6:5c:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIyMEQxMTAvBgNVBAUTKEU1NTZEQzg2Qjk0RTkxQ0Y5QjJFMjk0NEE4NUY3MTY5 MkRBMDk0RDIwHhcNMjUwNTMxMDQyOTU1WhcNMjUwNjA3MDQyOTU1WjAYMRYwFAYD VQQDEw02ODNhODVjMy1hMzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzk7Rj8UOXo6QTApf4Ds7QntnNH9KQPcQiaZCb4X2+1LfNkRQxCCFd9DJf1tD DkgjCbd6bceVmJNbuDEcW8NGElJp9I8f94M/kOZtLCGBCUHWTPHMoPfDxAGKXxYL EvN8mS6nBASBVzBUqXZV9fm+NLGR0d2O5CNqDm3c5cJu2rilkpIpc13VpQxmyyGE V77eCMIjPeIxbEccB5KLgxBA0bIZC8wMkpChmzhLJRh9zfhVYpKV4opeg+HVXrsO GD8DLtB6QCyyymV6AG7Eoh6hxOU8B6C2OA3s4wswge4ndW2y9oJ1BGwD1e3EIg8g /E9RaubHs+qUyILuznIZyBy3bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWOsWj+ CarLhtCczOJ53bcAurGYMB8GA1UdIwQYMBaAFOVW3Ia5TpHPmy4pRKhfcWktoJTS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjIwRC82MUFDQkY0Njkz QTkxMUVFOTE0OUUzNTRDNEY5QUUwMi81VmJjaHJsT2tjLWJMaWxFcUY5eGFTMmds TkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVWYmNocmxPa2MtYkxpbEVxRjl4YVMyZ2xOSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjIwRC82MUFDQkY0NjkzQTkxMUVFOTE0OUUzNTRDNEY5QUUwMi81VmJjaHJsT2tj LWJMaWxFcUY5eGFTMmdsTkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChafYf0l0QxOu3dds0jYAmwRKXp4KPe6AyXbercs2dlpFFQEnz75aT LUXy70NOPO2no5uETmNaIxe7SLw2wwu15CX9pvLgMGGQhwSwUsebRwD4y4fyg6fK 6oZ7q4mKpASgz5xTV0B2VSxmxrUE4IBVsw17WRFPGudthLi4Sot/D7mP4zdLAFS8 M5VRs5F+7/VqOnc5dPCwA1KFwgE637wRkE3az2XnxnlfrBfFZit25qmNu/hTR1T2 ChcDE1sOZx/oWEYCikG0OEsPnQSeZFa+p7K2qBKIFA6qPYdQZ/qlFiQdXG288jI2 Tx6kjgwyUTbHlcTa3wIpoW9iGy5w5lyG -----END CERTIFICATE-----Generated at Sat May 31 17:23:41 2025 by rpki-client