$ rpki-client -vvf rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft File: l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft (raw, json) Hash identifier: brEZMiPLdC3e/ULkm4P3z5xPGgysSxqMGLMKBhMC688= Subject key identifier: 41:69:19:5E:86:2B:95:B4:BB:F6:DD:C8:75:45:D7:62:17:86:2B:29 Authority key identifier: 97:95:8F:FF:E6:96:D8:0C:57:63:65:24:A4:6E:18:23:41:76:FB:C1 Certificate issuer: /CN=A91309C9/serialNumber=97958FFFE696D80C57636524A46E18234176FBC1 Certificate serial: 0403 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft Manifest number: 03FE Signing time: Thu 15 May 2025 00:29:51 +0000 Manifest this update: Thu 15 May 2025 00:29:50 +0000 Manifest next update: Thu 22 May 2025 00:29:50 +0000 Files and hashes: 1: l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl (hash: qTCk/GQPIlqPG7ByVds4IXhMcO+XZd0gdz0a7FsV4AE=) 2: 46BFB17C739711ECAD333D27C4F9AE02.roa (hash: 6m2q3lRXLAFrPlHDZxzNnpenf3mKGBo+gMVhi6EnOZk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1027 (0x403) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91309C9, serialNumber=97958FFFE696D80C57636524A46E18234176FBC1 Validity Not Before: May 15 00:29:50 2025 GMT Not After : May 22 00:29:50 2025 GMT Subject: CN=6825357e-265f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6e:a7:2c:7a:9e:dd:f3:73:8d:ba:a0:da:18: cf:66:9b:c6:94:a2:f7:46:15:9f:08:06:e2:be:e7: ac:b9:61:4b:cb:10:82:b3:22:59:c4:2b:b6:5c:e6: 5e:1a:34:0b:25:58:0b:f7:3a:84:5e:ca:97:34:92: 00:e6:18:3a:a0:28:ef:96:6b:8e:7b:4f:56:c0:88: 49:c3:7b:2e:9d:8b:9a:32:93:e1:43:57:b8:2b:b7: 99:62:7c:2d:01:05:98:08:e0:02:d6:b9:44:6e:fa: 37:57:26:d4:d9:94:9c:e8:d3:3d:9c:e5:68:a8:7c: 5e:bf:9d:8e:57:e7:01:8b:9c:98:a3:94:9e:e5:0f: a2:69:21:c9:9a:f2:a9:04:87:52:22:53:59:7a:c9: db:69:5d:98:10:f2:d1:ee:25:c2:59:7e:18:ce:fd: 3a:5a:a0:70:3f:ab:0e:0d:06:44:1f:7f:9d:d5:d8: c9:b0:5c:06:b7:dd:90:50:40:3c:b2:5f:94:76:5d: de:c6:90:40:22:0f:e3:9f:b1:f3:db:96:eb:87:f5: 74:73:90:3b:fe:b2:39:a7:df:0e:0d:d3:6b:3c:9a: c8:73:d5:94:d8:ce:e8:59:0d:96:28:3d:0d:20:da: 93:2d:5d:84:b8:78:f7:7f:6b:4c:db:1f:6b:ed:1f: 43:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:69:19:5E:86:2B:95:B4:BB:F6:DD:C8:75:45:D7:62:17:86:2B:29 X509v3 Authority Key Identifier: keyid:97:95:8F:FF:E6:96:D8:0C:57:63:65:24:A4:6E:18:23:41:76:FB:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:82:6c:85:9a:5f:5b:67:7e:b3:d8:36:9f:24:9d:3f:cf:1e: 84:5b:f0:63:c1:03:af:d5:41:1a:5c:33:e7:f6:c8:64:09:67: ce:df:e7:95:60:a6:b5:39:a9:26:14:24:a3:cd:cd:b6:03:c4: 7a:b4:18:08:3c:d6:e4:ca:cf:24:03:ff:d4:a1:4a:29:2f:17: a9:ab:f8:3c:54:ea:8a:2a:a6:ef:90:64:63:57:21:4b:da:c1: 2f:cd:0f:cb:3d:74:9c:33:4e:c2:5c:55:68:2d:0e:f7:69:70: a0:aa:69:9b:04:f5:16:7d:74:af:df:de:88:11:4b:ad:f6:9c: 0d:11:d8:5d:ca:d7:60:57:3c:e1:c2:eb:31:60:88:ad:e5:0b: d1:65:a4:be:7e:6d:62:fb:7c:0d:c5:6a:06:f5:85:2b:ad:bd: e3:92:6e:ea:80:ea:f8:2b:f0:16:b9:6e:19:d0:97:61:6c:0a: e6:2e:46:b9:d9:bb:02:02:2c:3d:35:30:3b:b0:38:e4:c7:d9: da:78:9e:d4:88:df:42:22:62:ac:3f:da:50:07:4e:52:ce:8d: 33:57:98:ea:40:29:b4:7d:e0:28:5e:4c:58:a4:b2:cc:78:0a: 68:37:c5:53:33:27:bd:3e:8a:1b:15:86:e7:4e:3e:89:8d:1c: 77:c7:3d:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA5QzkxMTAvBgNVBAUTKDk3OTU4RkZGRTY5NkQ4MEM1NzYzNjUyNEE0NkUxODIz NDE3NkZCQzEwHhcNMjUwNTE1MDAyOTUwWhcNMjUwNTIyMDAyOTUwWjAYMRYwFAYD VQQDEw02ODI1MzU3ZS0yNjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0m6nLHqe3fNzjbqg2hjPZpvGlKL3RhWfCAbivuesuWFLyxCCsyJZxCu2XOZe GjQLJVgL9zqEXsqXNJIA5hg6oCjvlmuOe09WwIhJw3sunYuaMpPhQ1e4K7eZYnwt AQWYCOAC1rlEbvo3VybU2ZSc6NM9nOVoqHxev52OV+cBi5yYo5Se5Q+iaSHJmvKp BIdSIlNZesnbaV2YEPLR7iXCWX4Yzv06WqBwP6sODQZEH3+d1djJsFwGt92QUEA8 sl+Udl3expBAIg/jn7Hz25brh/V0c5A7/rI5p98ODdNrPJrIc9WU2M7oWQ2WKD0N INqTLV2EuHj3f2tM2x9r7R9DcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFpGV6G K5W0u/bdyHVF12IXhispMB8GA1UdIwQYMBaAFJeVj//mltgMV2NlJKRuGCNBdvvB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDlDOS80NkQ3MkRFMjcz NjYxMUVDODk4MkJFMEFDNEY5QUUwMi9sNVdQXy1hVzJBeFhZMlVrcEc0WUkwRjIt OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w1V1BfLWFXMkF4WFkyVWtwRzRZSTBGMi04RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDlDOS80NkQ3MkRFMjczNjYxMUVDODk4MkJFMEFDNEY5QUUwMi9sNVdQXy1hVzJB eFhZMlVrcEc0WUkwRjItOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOgmyFml9bZ36z2DafJJ0/zx6EW/BjwQOv1UEaXDPn9shkCWfO3+eV YKa1OakmFCSjzc22A8R6tBgIPNbkys8kA//UoUopLxepq/g8VOqKKqbvkGRjVyFL 2sEvzQ/LPXScM07CXFVoLQ73aXCgqmmbBPUWfXSv396IEUut9pwNEdhdytdgVzzh wusxYIit5QvRZaS+fm1i+3wNxWoG9YUrrb3jkm7qgOr4K/AWuW4Z0JdhbArmLka5 2bsCAiw9NTA7sDjkx9naeJ7UiN9CImKsP9pQB05Szo0zV5jqQCm0feAoXkxYpLLM eApoN8VTMye9PoobFYbnTj6JjRx3xz1J -----END CERTIFICATE-----Generated at Thu May 15 09:55:28 2025 by rpki-client