$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft File: 5JdLhBatO5ndEfOwQFbwx5m3ocs.mft (raw, json) Hash identifier: zRzHIyEt/BRKT8r3HXWGmIx5ESmayi5uUEXshS+lQiE= Subject key identifier: 1E:28:62:76:82:36:C8:D2:26:E5:32:1F:FE:59:2B:8B:EC:B3:E1:61 Authority key identifier: E4:97:4B:84:16:AD:3B:99:DD:11:F3:B0:40:56:F0:C7:99:B7:A1:CB Certificate issuer: /CN=A91D9CA8/serialNumber=E4974B8416AD3B99DD11F3B04056F0C799B7A1CB Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft Manifest number: 3A Signing time: Sat 31 May 2025 07:05:56 +0000 Manifest this update: Sat 31 May 2025 07:05:55 +0000 Manifest next update: Sat 07 Jun 2025 07:05:55 +0000 Files and hashes: 1: 5JdLhBatO5ndEfOwQFbwx5m3ocs.crl (hash: rSGgTKhmxq8k/3l0IqBdz/TWc6Uav4dPJCydE3SEheg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.crl rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:05:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9CA8, serialNumber=E4974B8416AD3B99DD11F3B04056F0C799B7A1CB Validity Not Before: May 31 07:05:55 2025 GMT Not After : Jun 7 07:05:55 2025 GMT Subject: CN=683aaa54-8adb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:18:b0:de:52:2c:4f:f8:b8:94:7c:94:e6:eb: 3a:db:d1:72:ae:da:4a:07:38:7b:b2:a4:b8:9f:e8: 21:44:d0:e8:2a:17:c7:3b:68:36:1a:f4:74:75:af: 2b:a2:ab:f1:f2:54:45:12:f8:86:11:74:f7:e8:38: c3:b5:74:eb:b7:5d:8a:80:d3:f6:60:54:f9:b8:07: 32:e6:8b:e9:d8:26:85:33:27:71:4f:97:d2:9e:3c: a2:79:bb:97:73:4a:a4:d5:fb:8a:2f:e1:53:f7:20: a6:3d:71:20:d7:ef:e1:06:14:ef:10:dd:01:ee:4a: 9c:5d:43:4f:a8:5c:2e:66:6b:03:64:79:54:f1:eb: 96:9e:03:59:3f:43:45:ca:01:f6:1b:22:0d:ae:dd: ba:48:04:c3:55:a9:4e:09:e3:c5:40:06:5d:ec:f1: 1f:fc:ab:f3:8b:f2:29:6e:ed:63:79:b6:1c:94:69: 01:17:7b:f3:e4:2b:02:2f:5e:91:6b:17:ed:57:c9: 4c:63:be:86:35:65:99:a0:f9:b4:c6:35:8f:d8:34: 19:29:00:30:95:61:bf:90:88:92:06:69:a6:a0:e5: 55:75:4e:84:6a:74:cb:e5:b9:3c:82:b1:c7:4e:9d: 6c:8f:a2:83:6c:51:48:c9:80:0f:02:fd:54:46:3f: a4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:28:62:76:82:36:C8:D2:26:E5:32:1F:FE:59:2B:8B:EC:B3:E1:61 X509v3 Authority Key Identifier: keyid:E4:97:4B:84:16:AD:3B:99:DD:11:F3:B0:40:56:F0:C7:99:B7:A1:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:99:f0:35:f0:ba:c7:51:db:47:87:ee:32:69:2f:23:e4:b7: af:80:54:f5:56:39:d6:5a:3a:36:43:f4:f0:29:de:c5:fb:41: 87:3a:62:6b:04:c3:c2:0c:f4:13:6f:9a:96:fc:ab:44:50:a8: fb:23:fe:af:54:bd:bb:98:20:ee:8a:1c:c4:03:87:a0:ba:0a: f9:de:c4:60:ff:9c:9e:83:dd:e3:7f:f0:c2:d4:b0:9f:7d:8d: b5:92:19:6f:f3:76:fc:13:54:f1:ac:32:f6:72:f2:60:82:b7: 06:1d:74:2d:2b:5e:07:d9:65:ca:98:ea:d4:ab:72:7a:dd:af: 85:cb:82:c2:10:f1:60:f0:a1:b0:77:10:ac:19:5a:a1:f5:7c: 02:4c:f3:cc:2f:18:83:a4:42:c4:31:56:b3:0f:a4:e7:35:a1: 22:8f:dd:b4:c4:1d:eb:9b:a8:5d:3c:4b:e6:19:87:ca:bc:96: 9d:65:da:74:77:bf:ed:44:3b:33:f2:ec:4a:2d:5a:73:01:2a: 8a:74:1f:4d:dc:b9:9c:a2:29:92:8e:ba:62:ab:f0:55:ed:80: 6d:92:75:5a:df:0b:b0:40:52:3c:c8:e3:e7:77:68:00:e0:a8: 12:55:ef:d5:a1:88:ca:1c:09:d5:b8:26:97:ad:dc:6a:93:35: 2e:b5:48:15 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OUNBODExMC8GA1UEBRMoRTQ5NzRCODQxNkFEM0I5OUREMTFGM0IwNDA1NkYwQzc5 OUI3QTFDQjAeFw0yNTA1MzEwNzA1NTVaFw0yNTA2MDcwNzA1NTVaMBgxFjAUBgNV BAMTDTY4M2FhYTU0LThhZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAGLDeUixP+LiUfJTm6zrb0XKu2koHOHuypLif6CFE0OgqF8c7aDYa9HR1ryui q/HyVEUS+IYRdPfoOMO1dOu3XYqA0/ZgVPm4BzLmi+nYJoUzJ3FPl9KePKJ5u5dz SqTV+4ov4VP3IKY9cSDX7+EGFO8Q3QHuSpxdQ0+oXC5mawNkeVTx65aeA1k/Q0XK AfYbIg2u3bpIBMNVqU4J48VABl3s8R/8q/OL8ilu7WN5thyUaQEXe/PkKwIvXpFr F+1XyUxjvoY1ZZmg+bTGNY/YNBkpADCVYb+QiJIGaaag5VV1ToRqdMvluTyCscdO nWyPooNsUUjJgA8C/VRGP6TtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHihidoI2 yNIm5TIf/lkri+yz4WEwHwYDVR0jBBgwFoAU5JdLhBatO5ndEfOwQFbwx5m3ocsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5Q0E4LzI5MzJDNTg4RTRG RDExRUZBQzFDRTY3RkM0RjlBRTAyLzVKZExoQmF0TzVuZEVmT3dRRmJ3eDVtM29j cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNUpkTGhCYXRPNW5kRWZPd1FGYnd4NW0zb2NzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5 Q0E4LzI5MzJDNTg4RTRGRDExRUZBQzFDRTY3RkM0RjlBRTAyLzVKZExoQmF0TzVu ZEVmT3dRRmJ3eDVtM29jcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABGZ8DXwusdR20eH7jJpLyPkt6+AVPVWOdZaOjZD9PAp3sX7QYc6YmsE w8IM9BNvmpb8q0RQqPsj/q9UvbuYIO6KHMQDh6C6CvnexGD/nJ6D3eN/8MLUsJ99 jbWSGW/zdvwTVPGsMvZy8mCCtwYddC0rXgfZZcqY6tSrcnrdr4XLgsIQ8WDwobB3 EKwZWqH1fAJM88wvGIOkQsQxVrMPpOc1oSKP3bTEHeubqF08S+YZh8q8lp1l2nR3 v+1EOzPy7EotWnMBKop0H03cuZyiKZKOumKr8FXtgG2SdVrfC7BAUjzI4+d3aADg qBJV79WhiMocCdW4Jpet3GqTNS61SBU= -----END CERTIFICATE-----Generated at Sat May 31 16:52:19 2025 by rpki-client