$ rpki-client -vvf rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft File: a5tdFBgYlY1zBFgvJU6hddhD4_0.mft (raw, json) Hash identifier: i3xd9kxqLDb5AFGtjaf6ONxknrGwCdSHCPyGki09fZo= Subject key identifier: C6:61:8A:4C:4A:F1:AC:52:E5:84:76:D9:F7:2D:F5:35:49:87:15:23 Authority key identifier: 6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD Certificate issuer: /CN=A91359CD/serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Certificate serial: 09BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft Manifest number: 09B5 Signing time: Sat 10 May 2025 19:43:59 +0000 Manifest this update: Sat 10 May 2025 19:43:58 +0000 Manifest next update: Sat 17 May 2025 19:43:58 +0000 Files and hashes: 1: a5tdFBgYlY1zBFgvJU6hddhD4_0.crl (hash: RY+E+P/UpD/x8C+JXmNhaVTz27LguzxwB6virnqcx/U=) 2: 8F467E0082DD11EABD325010C4F9AE02.roa (hash: pqGYncUOZKT5Ae6UAJqJyy2fRgkfmoSyVZAKTooTufw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2492 (0x9bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91359CD, serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Validity Not Before: May 10 19:43:58 2025 GMT Not After : May 17 19:43:58 2025 GMT Subject: CN=681fac7e-5766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ad:3c:50:cf:07:37:85:5c:b1:9b:8e:8e:11: aa:0e:fa:1b:3c:77:09:00:15:cb:ae:14:94:9d:e9: 1f:38:02:8e:08:98:50:fa:3e:b7:50:75:38:b3:66: 7c:af:2e:f8:da:6d:5c:32:31:02:42:76:7f:11:99: 0e:f7:ea:31:fd:98:e7:f0:b0:e0:07:29:5b:f4:24: 64:a5:99:34:ef:4d:c5:24:7d:30:fa:1e:9a:27:c7: 2b:56:30:d7:f2:62:a5:07:8e:8a:b1:d4:e1:2c:ff: 3f:c8:13:f5:dc:db:e7:e5:94:c7:ef:01:8f:79:8e: c2:24:fe:83:38:df:33:f9:60:3d:72:d0:fd:22:8a: 5e:86:fb:2b:b5:57:72:53:71:dd:46:e0:45:85:4d: c4:d6:b3:32:55:f8:97:50:66:11:88:4d:4f:c0:5a: 92:c5:be:cb:0a:ad:14:11:b2:f8:bb:2e:1f:1b:c7: 9f:87:ac:0e:bb:12:3a:05:26:59:d8:62:37:01:80: 66:ad:c9:51:f3:1b:55:83:66:2d:10:30:f2:de:05: 28:97:93:b6:d2:68:c0:9c:d2:9c:ca:62:d8:ea:21: 7b:4d:15:69:c8:a5:e8:1a:32:54:2a:35:c3:4f:3d: b9:a8:6c:58:d4:56:29:e2:13:c8:d2:2e:17:b6:db: fa:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:61:8A:4C:4A:F1:AC:52:E5:84:76:D9:F7:2D:F5:35:49:87:15:23 X509v3 Authority Key Identifier: keyid:6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:60:10:73:7e:01:96:ef:f9:b1:74:73:1a:df:36:2d:bc:06: 4d:44:bb:8f:1f:cd:9b:70:57:2f:2a:4c:50:9d:57:d6:25:2d: e3:37:84:75:67:d9:60:2c:6f:95:65:c0:b9:0d:89:ba:28:87: 03:c7:2b:56:ef:d6:55:f0:18:93:4a:79:13:12:50:b5:95:f1: 78:9a:cd:13:f9:07:80:ae:42:fd:c1:4c:4c:21:94:37:9d:66: c4:e2:6e:87:6c:67:14:5b:d6:54:71:a1:fc:5d:2b:ac:36:a8: b7:f9:50:43:38:28:29:a0:2a:6a:02:14:fb:5b:3c:d4:b9:11: 62:74:d0:3d:aa:fc:da:2c:0d:d4:47:59:b4:47:da:df:41:4b: 7e:10:d1:cd:d9:23:47:88:d6:f7:a0:b5:c0:b8:84:0c:2d:a9: 8e:88:44:a4:8c:34:26:af:4a:74:9d:d9:e5:f3:04:3e:b5:11: 95:33:b1:a0:e3:63:d1:e1:3b:14:d1:1e:13:c1:0c:e2:ce:29: 81:32:e7:51:f5:f9:77:42:cb:1e:90:4e:db:75:ea:10:27:2a: 3d:1e:1e:91:1b:52:93:f0:3d:ee:f9:fa:42:87:2e:c3:47:a7: cc:1b:f1:73:42:e5:7d:99:bd:ec:b9:24:81:98:c5:1e:8e:fa: 4f:bd:d9:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU5Q0QxMTAvBgNVBAUTKDZCOUI1RDE0MTgxODk1OEQ3MzA0NTgyRjI1NEVBMTc1 RDg0M0UzRkQwHhcNMjUwNTEwMTk0MzU4WhcNMjUwNTE3MTk0MzU4WjAYMRYwFAYD VQQDEw02ODFmYWM3ZS01NzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApK08UM8HN4VcsZuOjhGqDvobPHcJABXLrhSUnekfOAKOCJhQ+j63UHU4s2Z8 ry742m1cMjECQnZ/EZkO9+ox/Zjn8LDgBylb9CRkpZk0703FJH0w+h6aJ8crVjDX 8mKlB46KsdThLP8/yBP13Nvn5ZTH7wGPeY7CJP6DON8z+WA9ctD9IopehvsrtVdy U3HdRuBFhU3E1rMyVfiXUGYRiE1PwFqSxb7LCq0UEbL4uy4fG8efh6wOuxI6BSZZ 2GI3AYBmrclR8xtVg2YtEDDy3gUol5O20mjAnNKcymLY6iF7TRVpyKXoGjJUKjXD Tz25qGxY1FYp4hPI0i4Xttv6dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZhikxK 8axS5YR22fct9TVJhxUjMB8GA1UdIwQYMBaAFGubXRQYGJWNcwRYLyVOoXXYQ+P9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTlDRC8xODVGRkMyODgy REIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZMXpCRmd2SlU2aGRkaEQ0 XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E1dGRGQmdZbFkxekJGZ3ZKVTZoZGRoRDRfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTlDRC8xODVGRkMyODgyREIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZ MXpCRmd2SlU2aGRkaEQ0XzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtYBBzfgGW7/mxdHMa3zYtvAZNRLuPH82bcFcvKkxQnVfWJS3jN4R1 Z9lgLG+VZcC5DYm6KIcDxytW79ZV8BiTSnkTElC1lfF4ms0T+QeArkL9wUxMIZQ3 nWbE4m6HbGcUW9ZUcaH8XSusNqi3+VBDOCgpoCpqAhT7WzzUuRFidNA9qvzaLA3U R1m0R9rfQUt+ENHN2SNHiNb3oLXAuIQMLamOiESkjDQmr0p0ndnl8wQ+tRGVM7Gg 42PR4TsU0R4TwQzizimBMudR9fl3QssekE7bdeoQJyo9Hh6RG1KT8D3u+fpChy7D R6fMG/FzQuV9mb3suSSBmMUejvpPvdmH -----END CERTIFICATE-----Generated at Sun May 11 22:37:24 2025 by rpki-client