$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft File: 5_fdQJKCmOyeymRGoYSjWaPtXf4.mft (raw, json) Hash identifier: 1i4tfni0J83p6pe4LcdAsLLV1e+4oPx18MQBCz99IbA= Subject key identifier: A8:D2:94:48:43:6D:F0:24:6B:F8:F0:FB:36:8B:62:5E:7E:34:52:87 Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE Certificate issuer: /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft Manifest number: 0212 Signing time: Thu 13 Mar 2025 01:36:34 +0000 Manifest this update: Thu 13 Mar 2025 01:36:34 +0000 Manifest next update: Thu 20 Mar 2025 01:36:34 +0000 Files and hashes: 1: 5_fdQJKCmOyeymRGoYSjWaPtXf4.crl (hash: sf2wrZZtFZkYvGKtWy9t7njxmtE5jYClMZFHBw4k4yY=) 2: C578C852218A11EFB28E7B82C4F9AE02.roa (hash: kTzsqNEXZTEaSzrPrWyUs9cD3MM8KSq3zyWoBQVDjyE=) 3: AAF361C0D18B11EF810E8B66C4F9AE02.roa (hash: w12orzg2QI/DnMwGWqRtnSkszoQETfTmbyGE/vvJi2w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 01:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE7DF Validity Not Before: Mar 13 01:36:34 2025 GMT Not After : Mar 20 01:36:34 2025 GMT Subject: CN=67d236a2-0015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:03:58:69:94:d7:41:5f:63:e0:06:84:5d:84: 04:3c:57:aa:ab:12:84:3d:23:c1:c8:92:b1:95:18: 83:bf:f6:9f:17:cd:63:ba:48:96:14:37:76:1f:5b: ef:68:85:86:1a:46:a3:a0:05:4f:df:91:93:7b:af: 8d:ed:a2:3c:cf:51:20:de:82:80:6e:2f:f4:2e:ff: 3b:ef:e8:fb:75:f7:a9:f9:7b:24:ca:61:e9:5d:ac: 8e:0a:c0:e6:02:7b:72:b7:99:e1:3f:b9:5d:b6:46: 40:57:62:21:c6:32:ba:95:ec:98:42:da:14:98:72: cf:de:da:12:aa:95:0b:fe:d0:16:97:70:0a:f9:af: 45:32:c8:2c:1f:93:71:4e:91:d5:8e:e7:0f:2f:20: 55:81:74:e6:73:be:a5:95:d8:81:a7:02:12:51:23: 50:f6:87:1f:06:6a:49:f8:66:f9:8a:07:41:df:50: e6:f4:00:3b:b2:e1:96:ae:2c:9d:e9:59:df:93:e0: f9:03:df:d6:db:dc:04:45:75:42:7e:aa:fc:20:c3: d2:4d:39:00:14:c8:9f:5d:f5:2d:6b:72:53:71:bb: bf:7c:fd:2c:84:e8:dd:0f:1f:fd:99:ee:76:7e:ba: d5:dd:03:94:ab:89:23:ef:6f:70:16:29:31:ca:b8: ee:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D2:94:48:43:6D:F0:24:6B:F8:F0:FB:36:8B:62:5E:7E:34:52:87 X509v3 Authority Key Identifier: keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:44:03:94:77:a0:8b:26:71:e5:ef:81:47:50:3d:2c:fd:d3: c7:5b:cc:e8:ea:1d:4e:23:99:33:d6:70:14:b2:0c:27:11:a2: fc:53:56:e8:72:3c:cd:2b:0a:fa:ac:79:b4:f5:e4:73:cd:3f: 60:d8:75:3d:a1:3f:eb:b8:0c:e6:78:b5:fc:8e:81:2c:ca:12: 47:cd:13:80:38:d4:36:37:85:8e:88:6e:25:10:4c:5f:66:31: 11:9c:02:1a:8e:a0:63:d4:eb:12:5d:80:54:5f:76:17:39:3e: 6a:cf:d0:9e:e8:27:64:0f:be:7e:19:56:f5:e4:f0:c2:01:1e: 95:c3:4e:41:24:30:89:7e:0a:fc:e7:fd:70:11:30:98:60:be: e9:5f:95:4d:1b:d4:1b:1a:d1:b2:a4:1c:c1:14:e6:5a:29:d0: 6e:e1:3a:f2:a1:30:81:de:b9:d0:66:47:23:7d:07:c8:10:e1: e1:94:74:55:d5:56:50:30:61:29:cd:fe:b0:d8:bd:ad:53:fd: f0:23:7b:6a:05:63:6f:80:01:20:37:f1:8a:66:be:77:d7:17: 16:c6:d0:c8:2f:17:b5:ff:39:f8:97:c9:75:de:55:6e:62:64: d7:bf:7e:aa:c2:19:d1:1c:c2:26:50:e4:b7:67:0a:48:95:0a: 2c:96:fa:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU3REYxMTAvBgNVBAUTKEU3RjdERDQwOTI4Mjk4RUM5RUNBNjQ0NkExODRBMzU5 QTNFRDVERkUwHhcNMjUwMzEzMDEzNjM0WhcNMjUwMzIwMDEzNjM0WjAYMRYwFAYD VQQDEw02N2QyMzZhMi0wMDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmQNYaZTXQV9j4AaEXYQEPFeqqxKEPSPByJKxlRiDv/afF81jukiWFDd2H1vv aIWGGkajoAVP35GTe6+N7aI8z1Eg3oKAbi/0Lv877+j7dfep+XskymHpXayOCsDm Antyt5nhP7ldtkZAV2IhxjK6leyYQtoUmHLP3toSqpUL/tAWl3AK+a9FMsgsH5Nx TpHVjucPLyBVgXTmc76lldiBpwISUSNQ9ocfBmpJ+Gb5igdB31Dm9AA7suGWriyd 6Vnfk+D5A9/W29wERXVCfqr8IMPSTTkAFMifXfUta3JTcbu/fP0shOjdDx/9me52 frrV3QOUq4kj729wFikxyrjuaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjSlEhD bfAka/jw+zaLYl5+NFKHMB8GA1UdIwQYMBaAFOf33UCSgpjsnspkRqGEo1mj7V3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTdERi82RDU1MkQ3MDI3 N0ExMUVEQTZCMUE4MjZDNEY5QUUwMi81X2ZkUUpLQ21PeWV5bVJHb1lTaldhUHRY ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVfZmRRSktDbU95ZXltUkdvWVNqV2FQdFhmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTdERi82RDU1MkQ3MDI3N0ExMUVEQTZCMUE4MjZDNEY5QUUwMi81X2ZkUUpLQ21P eWV5bVJHb1lTaldhUHRYZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnRAOUd6CLJnHl74FHUD0s/dPHW8zo6h1OI5kz1nAUsgwnEaL8U1bo cjzNKwr6rHm09eRzzT9g2HU9oT/ruAzmeLX8joEsyhJHzROAONQ2N4WOiG4lEExf ZjERnAIajqBj1OsSXYBUX3YXOT5qz9Ce6CdkD75+GVb15PDCAR6Vw05BJDCJfgr8 5/1wETCYYL7pX5VNG9QbGtGypBzBFOZaKdBu4TryoTCB3rnQZkcjfQfIEOHhlHRV 1VZQMGEpzf6w2L2tU/3wI3tqBWNvgAEgN/GKZr531xcWxtDILxe1/zn4l8l13lVu YmTXv36qwhnRHMImUOS3ZwpIlQoslvqs -----END CERTIFICATE-----Generated at Thu Mar 13 21:28:20 2025 by rpki-client