$ rpki-client -vvf rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft File: c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft (raw, json) Hash identifier: 2r+RGoFAbJkuonb5d75pqG77gBIpfrLr4i7teoqczG4= Subject key identifier: DE:2E:9D:7C:90:B3:2C:40:BB:44:AF:E4:1F:62:77:D2:67:FE:C8:90 Authority key identifier: 73:98:7E:CC:E7:7E:44:EB:36:65:1E:09:8D:33:75:0F:A8:64:E6:76 Certificate issuer: /CN=A91316E5/serialNumber=73987ECCE77E44EB36651E098D33750FA864E676 Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft Manifest number: 013F Signing time: Fri 09 May 2025 03:27:36 +0000 Manifest this update: Fri 09 May 2025 03:27:35 +0000 Manifest next update: Fri 16 May 2025 03:27:35 +0000 Files and hashes: 1: c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl (hash: 5QtZq674akYt3shsJSnLDb9AGIXFqBtqmjuTj5QdxY4=) 2: C1A8182646D011EE8BE5AE80C4F9AE02.roa (hash: gAXQ6XOA3NODkbVV4z4rY8FPGvcx9W1CdIeenZ4k+xI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 03:27:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91316E5, serialNumber=73987ECCE77E44EB36651E098D33750FA864E676 Validity Not Before: May 9 03:27:35 2025 GMT Not After : May 16 03:27:35 2025 GMT Subject: CN=681d7628-7e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:6e:46:c4:7f:32:15:a3:d9:4e:a9:b6:a6:78: 59:69:d7:c7:22:4e:ca:15:78:92:85:da:76:f2:ea: 66:77:32:cd:0f:e3:c0:67:3b:85:c3:da:1b:e7:f0: e0:df:a3:40:12:a4:c1:da:9c:2f:d9:88:0c:82:5e: c4:c3:9c:af:7c:d5:f7:4d:3e:b2:c5:1c:6d:82:6b: 93:e0:fc:8d:85:5b:64:c4:de:c9:bc:dc:5f:59:94: 20:e7:9d:91:b4:0e:68:d4:46:55:fe:af:e9:0c:58: c8:c2:d6:71:56:9a:2f:82:e9:1b:1b:2e:7e:a4:40: 05:f3:6a:95:f9:11:18:9d:c4:bd:e1:73:77:f5:75: 79:d9:1a:04:31:21:1b:3f:44:96:1f:70:05:80:62: f1:66:e5:1c:58:59:28:5c:95:1e:df:d0:25:9a:17: 16:80:d7:a3:51:a2:22:d5:d0:2e:14:da:67:69:6b: ec:99:e8:a7:fe:12:a6:c7:38:70:ba:75:1b:13:57: 17:ba:96:9d:36:10:dd:9c:e0:71:70:87:90:47:22: 70:93:38:22:b0:3c:bb:5d:87:6a:a5:00:c2:8a:06: 7a:ea:db:91:96:d8:ad:55:d3:29:38:b1:86:18:a2: 53:c7:74:bd:cf:e0:5c:06:6d:2a:a5:fb:0d:2d:79: 3c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:2E:9D:7C:90:B3:2C:40:BB:44:AF:E4:1F:62:77:D2:67:FE:C8:90 X509v3 Authority Key Identifier: keyid:73:98:7E:CC:E7:7E:44:EB:36:65:1E:09:8D:33:75:0F:A8:64:E6:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:95:e4:a1:74:1c:2c:ae:d8:a4:3f:92:f9:de:2d:47:b0:34: d2:ae:70:ab:2a:39:6d:93:29:63:39:93:dc:7c:6c:97:62:d4: 7e:01:3c:63:3d:68:95:34:9f:27:cd:23:63:69:8d:6b:d9:19: 9a:51:e9:82:58:d1:43:a4:14:b9:e6:c1:c4:bd:f2:d3:63:82: 07:0a:62:ed:13:e4:04:1c:bd:c7:eb:1c:6b:29:64:32:0a:6f: 05:54:73:6f:53:e5:0a:ed:fb:fa:1b:5e:f5:ae:74:da:94:34: f6:55:22:dc:c6:2c:54:02:cb:e6:7a:14:b2:9f:ba:ce:02:1f: cc:ec:10:ef:25:b4:b2:e9:9c:13:de:ee:67:b3:57:d3:5e:ce: fc:66:46:07:e1:d0:74:c4:79:a8:cd:bd:74:e6:bc:52:d7:78: 17:a2:2a:06:5e:52:9c:81:94:1d:c6:19:75:14:eb:36:a4:a2: f1:19:29:ae:27:c2:a5:b4:61:89:ad:4e:c6:ab:2f:da:5a:43: 7f:4a:4e:3f:21:17:f1:ec:c3:d1:a7:d2:14:71:52:15:62:51: 6c:4d:a3:4d:48:f1:8e:5a:5b:92:9e:9a:a6:08:36:21:6d:c8: 1c:f5:28:f2:0d:88:ce:0a:42:4e:85:8b:54:c2:18:06:f8:42: 2d:4c:10:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2RTUxMTAvBgNVBAUTKDczOTg3RUNDRTc3RTQ0RUIzNjY1MUUwOThEMzM3NTBG QTg2NEU2NzYwHhcNMjUwNTA5MDMyNzM1WhcNMjUwNTE2MDMyNzM1WjAYMRYwFAYD VQQDEw02ODFkNzYyOC03ZTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA725GxH8yFaPZTqm2pnhZadfHIk7KFXiShdp28upmdzLND+PAZzuFw9ob5/Dg 36NAEqTB2pwv2YgMgl7Ew5yvfNX3TT6yxRxtgmuT4PyNhVtkxN7JvNxfWZQg552R tA5o1EZV/q/pDFjIwtZxVpovgukbGy5+pEAF82qV+REYncS94XN39XV52RoEMSEb P0SWH3AFgGLxZuUcWFkoXJUe39AlmhcWgNejUaIi1dAuFNpnaWvsmein/hKmxzhw unUbE1cXupadNhDdnOBxcIeQRyJwkzgisDy7XYdqpQDCigZ66tuRltitVdMpOLGG GKJTx3S9z+BcBm0qpfsNLXk8IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4unXyQ syxAu0Sv5B9id9Jn/siQMB8GA1UdIwQYMBaAFHOYfsznfkTrNmUeCY0zdQ+oZOZ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTZFNS81MUY5ODM1QzQ2 RDAxMUVFODFGMjA3M0ZDNEY5QUUwMi9jNWgtek9kLVJPczJaUjRKalROMUQ2aGs1 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M1aC16T2QtUk9zMlpSNEpqVE4xRDZoazVuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTZFNS81MUY5ODM1QzQ2RDAxMUVFODFGMjA3M0ZDNEY5QUUwMi9jNWgtek9kLVJP czJaUjRKalROMUQ2aGs1blkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGleShdBwsrtikP5L53i1HsDTSrnCrKjltkyljOZPcfGyXYtR+ATxj PWiVNJ8nzSNjaY1r2RmaUemCWNFDpBS55sHEvfLTY4IHCmLtE+QEHL3H6xxrKWQy Cm8FVHNvU+UK7fv6G171rnTalDT2VSLcxixUAsvmehSyn7rOAh/M7BDvJbSy6ZwT 3u5ns1fTXs78ZkYH4dB0xHmozb105rxS13gXoioGXlKcgZQdxhl1FOs2pKLxGSmu J8KltGGJrU7Gqy/aWkN/Sk4/IRfx7MPRp9IUcVIVYlFsTaNNSPGOWluSnpqmCDYh bcgc9SjyDYjOCkJOhYtUwhgG+EItTBC5 -----END CERTIFICATE-----Generated at Sun May 11 00:35:48 2025 by rpki-client