$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft File: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft (raw, json) Hash identifier: nzOfKBwTqnfDiim+LPBFkzD7eWvaZQPbSfMBGAT3wds= Subject key identifier: D6:90:BB:D0:7D:04:76:3F:6F:B6:C3:6E:1D:6B:A8:98:DA:37:DF:03 Authority key identifier: E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 Certificate issuer: /CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Certificate serial: 0359 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft Manifest number: 0349 Signing time: Sun 11 May 2025 00:36:38 +0000 Manifest this update: Sun 11 May 2025 00:36:37 +0000 Manifest next update: Sun 18 May 2025 00:36:37 +0000 Files and hashes: 1: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl (hash: d4UWsOj5eOUTy1y2Lmu1S7i3HxsTSNzn0NaB48wrmHE=) 2: 44B90434DFA011ED8C895F7CC4F9AE02.roa (hash: OB3c0FOnO7U7Cy2O3WKkzCkZvRGF4Swy8zD33qNbalg=) 3: 0589A4B8DF9511EDAAA7E22AC4F9AE02.roa (hash: PCa5nWLR+HuKgmwdVX9BOmG2ZZvLJrtIyJd8CbPbXng=) 4: 36B1CD340A6D11ED89FD3F13C4F9AE02.roa (hash: JCVj+AscF7hWsvaIqNJTPDabzygkqnGZEfVjCkrIsro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 857 (0x359) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1D, serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Validity Not Before: May 11 00:36:37 2025 GMT Not After : May 18 00:36:37 2025 GMT Subject: CN=681ff116-c67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:70:5a:52:38:0b:11:8c:e1:6f:b9:a9:9e:47: 2b:52:2f:93:e4:05:b0:04:56:e4:0c:ba:17:69:d8: 52:83:8f:02:89:62:51:0b:e4:4d:d7:43:d0:49:f8: b5:73:59:a3:9e:d5:69:5a:ff:1c:ac:d0:41:67:8e: 6d:49:ad:71:b9:1c:b0:70:18:f2:22:f6:2a:9c:35: e2:1e:2a:3a:ce:87:30:a4:a1:09:bc:57:4e:e9:bc: f3:00:f1:aa:73:04:60:39:72:4f:69:1f:0a:60:3a: a8:d7:40:e6:39:90:d6:13:d1:20:e4:81:03:60:37: 20:44:dd:b5:26:72:0b:5b:68:47:7b:28:17:f7:ad: 6b:48:77:54:45:81:02:c9:85:d6:aa:b5:b7:cf:a2: f8:45:9f:3f:4c:1b:af:f5:a7:c6:e0:3b:02:d6:b1: e3:7f:d2:94:44:1b:20:64:73:73:29:1e:d2:fd:ae: ae:27:79:c0:90:f5:0a:ed:8a:c9:3e:f9:c0:c2:23: f6:cb:02:c0:61:aa:80:ff:7f:f3:ef:13:1f:70:5d: 3b:79:f2:f3:e6:b9:47:72:dd:a5:f4:fd:de:93:5c: 3e:7b:b8:b6:47:e1:f7:e2:b0:2d:8f:d1:e4:9c:9e: 4e:67:2e:fe:14:e4:ba:40:c9:22:59:17:82:d6:ab: b0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:90:BB:D0:7D:04:76:3F:6F:B6:C3:6E:1D:6B:A8:98:DA:37:DF:03 X509v3 Authority Key Identifier: keyid:E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:c9:f2:a0:18:1a:c2:c6:7e:8a:99:d0:ee:54:13:e0:a0:9f: ae:0a:79:d0:a0:81:d1:b2:00:ec:7c:78:e3:f0:fa:a4:f6:4d: 31:fe:35:7c:f7:2e:04:27:a2:60:24:bd:19:5a:e0:ac:28:eb: f4:74:8d:a2:a7:16:3c:47:42:e7:2d:8d:0a:8c:99:fd:4a:b5: 57:cd:75:cd:e3:92:93:81:f4:7b:80:37:07:37:76:84:79:27: 80:f4:e8:dd:35:77:d2:ee:6d:b5:4f:1b:fe:dc:e9:c2:0f:91: 81:9e:86:0d:ff:24:6a:77:e2:13:f9:77:ff:b8:af:92:1a:db: 91:fc:ec:87:a1:49:cf:80:4e:8a:72:5b:24:34:aa:60:3a:96: ab:f7:38:47:93:37:c7:0d:c3:e3:c5:b1:8e:d7:72:9e:9a:9a: 11:19:72:67:36:23:5e:ad:4e:c1:54:3d:fb:2d:7f:cb:e6:92: 89:5a:3b:e4:bf:90:13:16:2a:4b:0c:e9:c1:ce:04:20:9a:de: c4:bc:1a:e3:2c:ce:68:2f:ec:d8:3e:69:38:a8:9b:16:54:d0: 33:46:06:c3:14:08:14:f0:9f:bb:1b:76:d1:06:6f:d4:1e:06: a5:2e:5e:d9:ac:2b:12:f7:93:87:d7:25:70:0f:56:7e:4f:5e: 5b:8f:34:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUQxMTAvBgNVBAUTKEU0MjE0MkUzRTU4NDU3NjJEMEU4RDY4QjAyRkIxMEU4 NzVCQzZCRjIwHhcNMjUwNTExMDAzNjM3WhcNMjUwNTE4MDAzNjM3WjAYMRYwFAYD VQQDEw02ODFmZjExNi1jNjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnBaUjgLEYzhb7mpnkcrUi+T5AWwBFbkDLoXadhSg48CiWJRC+RN10PQSfi1 c1mjntVpWv8crNBBZ45tSa1xuRywcBjyIvYqnDXiHio6zocwpKEJvFdO6bzzAPGq cwRgOXJPaR8KYDqo10DmOZDWE9Eg5IEDYDcgRN21JnILW2hHeygX961rSHdURYEC yYXWqrW3z6L4RZ8/TBuv9afG4DsC1rHjf9KURBsgZHNzKR7S/a6uJ3nAkPUK7YrJ PvnAwiP2ywLAYaqA/3/z7xMfcF07efLz5rlHct2l9P3ek1w+e7i2R+H34rAtj9Hk nJ5OZy7+FOS6QMkiWReC1quwAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNaQu9B9 BHY/b7bDbh1rqJjaN98DMB8GA1UdIwQYMBaAFOQhQuPlhFdi0OjWiwL7EOh1vGvy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRC9CNDZFNDJEQUJC MUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYyTFE2TmFMQXZzUTZIVzhh X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDRkM0LVdFVjJMUTZOYUxBdnNRNkhXOGFfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRC9CNDZFNDJEQUJCMUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYy TFE2TmFMQXZzUTZIVzhhX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBryfKgGBrCxn6KmdDuVBPgoJ+uCnnQoIHRsgDsfHjj8Pqk9k0x/jV8 9y4EJ6JgJL0ZWuCsKOv0dI2ipxY8R0LnLY0KjJn9SrVXzXXN45KTgfR7gDcHN3aE eSeA9OjdNXfS7m21Txv+3OnCD5GBnoYN/yRqd+IT+Xf/uK+SGtuR/OyHoUnPgE6K clskNKpgOpar9zhHkzfHDcPjxbGO13KempoRGXJnNiNerU7BVD37LX/L5pKJWjvk v5ATFipLDOnBzgQgmt7EvBrjLM5oL+zYPmk4qJsWVNAzRgbDFAgU8J+7G3bRBm/U HgalLl7ZrCsS95OH1yVwD1Z+T15bjzQh -----END CERTIFICATE-----Generated at Sun May 11 13:28:55 2025 by rpki-client