$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft File: 5G4YncjpEKGrvi42TdCBd1zkhGA.mft (raw, json) Hash identifier: Oj/Vmb9DRhqor0pL/yR/VfuppFA3WxnZSElLWsHcNOA= Subject key identifier: 33:2E:52:E8:82:08:0A:A2:D7:98:79:A7:E2:A5:EC:CA:D5:7F:3C:14 Authority key identifier: E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60 Certificate issuer: /CN=A9135B44/serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460 Certificate serial: 0204 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft Manifest number: 01FF Signing time: Tue 13 May 2025 01:50:51 +0000 Manifest this update: Tue 13 May 2025 01:50:51 +0000 Manifest next update: Tue 20 May 2025 01:50:51 +0000 Files and hashes: 1: 5G4YncjpEKGrvi42TdCBd1zkhGA.crl (hash: jjAneYBH+D/rjuHZGwvR6xK9/o7scSuFpyUjpKClVjk=) 2: D4B06AAA3A6E11ED8266115DC4F9AE02.roa (hash: rXyXJ/J6rVFIkAmCNmdDPvJdD/VKGdNuveHL3e4vBN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:50:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 516 (0x204) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B44, serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460 Validity Not Before: May 13 01:50:51 2025 GMT Not After : May 20 01:50:51 2025 GMT Subject: CN=6822a57b-af36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cb:51:c0:00:31:b0:3b:9c:da:20:50:b2:4e: 78:2a:eb:97:8f:6f:f2:22:f9:7a:65:4c:ba:73:2f: 16:76:19:34:b4:cb:59:ce:01:e8:2d:6a:1b:72:49: ee:5b:84:02:8e:51:0f:04:e2:42:91:2f:9b:30:bc: d0:4c:af:74:42:01:26:25:48:5f:29:41:32:e1:67: 41:59:05:da:d5:e1:d6:85:7a:b0:7c:69:7b:4f:32: f1:c3:cc:e9:7c:29:72:7c:ac:d1:8c:d1:53:c7:4f: 26:fe:ad:c8:5c:cb:91:20:00:cc:00:41:10:a2:b6: e6:d9:b9:a0:1b:5f:b8:a9:0f:e8:b2:55:9d:49:d3: 51:e6:5f:fc:87:5f:1a:c1:ac:97:bc:fa:ef:07:d9: 81:8d:90:a9:af:2a:48:97:17:d0:39:13:4f:ed:b6: 4f:6a:c9:80:13:dc:19:41:54:c3:a0:52:50:3b:40: a2:3a:64:19:35:5c:fb:b0:06:b8:97:c8:c8:7b:2b: 4b:64:27:af:32:a9:43:71:82:b4:b7:4d:68:2e:49: 03:45:2a:8c:5c:6e:bc:a6:c5:71:5b:10:6a:01:7e: 71:23:71:54:5f:79:e3:91:81:0d:4f:ba:1a:d2:dd: 52:21:8c:7a:f2:8a:be:a0:df:4d:9d:10:17:74:f9: ec:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2E:52:E8:82:08:0A:A2:D7:98:79:A7:E2:A5:EC:CA:D5:7F:3C:14 X509v3 Authority Key Identifier: keyid:E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:23:e3:4f:a3:15:7c:a6:05:ea:ad:d5:4e:d1:73:83:3b:b8: 87:1b:5e:7d:12:8d:6f:e8:09:96:53:42:00:e2:bb:8f:3a:42: c8:58:62:3a:16:ea:8e:fd:bc:42:1e:57:32:de:68:01:f5:f6: 6b:68:d3:70:2a:25:ba:fc:c5:f5:36:19:8f:95:8c:2a:9f:f0: 75:a1:bd:5a:39:6d:34:ac:29:0a:52:35:ca:bd:e7:70:4d:b0: 60:b3:1d:55:ab:fe:49:0b:ea:30:b8:7d:37:35:3c:90:93:84: fe:8f:17:ae:94:38:ab:7e:2c:da:29:e8:94:eb:fb:ce:a7:6d: e0:9c:d3:a8:73:60:4d:ff:ca:87:6a:7e:72:5d:5b:39:ff:55: 1d:aa:9e:fb:e9:ab:4e:28:14:e8:ec:7a:6f:3b:0f:a2:4c:00: 03:ae:56:06:8a:63:bb:78:f3:40:a6:df:e5:66:cd:db:c1:8c: 42:a3:fc:10:26:eb:e9:29:c3:a2:35:f0:07:cb:ab:50:a7:73: e0:d0:3d:a2:34:a6:a7:c8:f8:a5:99:fa:10:32:2a:0c:1b:62: e5:d0:c8:8e:0f:9f:10:a3:a7:1d:d2:18:a4:ac:07:59:b9:95: d1:aa:aa:62:54:89:3c:07:19:d1:50:b7:3e:bf:e7:c5:3c:fe: 96:7f:cc:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCNDQxMTAvBgNVBAUTKEU0NkUxODlEQzhFOTEwQTFBQkJFMkUzNjRERDA4MTc3 NUNFNDg0NjAwHhcNMjUwNTEzMDE1MDUxWhcNMjUwNTIwMDE1MDUxWjAYMRYwFAYD VQQDEw02ODIyYTU3Yi1hZjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ctRwAAxsDuc2iBQsk54KuuXj2/yIvl6ZUy6cy8Wdhk0tMtZzgHoLWobcknu W4QCjlEPBOJCkS+bMLzQTK90QgEmJUhfKUEy4WdBWQXa1eHWhXqwfGl7TzLxw8zp fClyfKzRjNFTx08m/q3IXMuRIADMAEEQorbm2bmgG1+4qQ/oslWdSdNR5l/8h18a wayXvPrvB9mBjZCprypIlxfQORNP7bZPasmAE9wZQVTDoFJQO0CiOmQZNVz7sAa4 l8jIeytLZCevMqlDcYK0t01oLkkDRSqMXG68psVxWxBqAX5xI3FUX3njkYENT7oa 0t1SIYx68oq+oN9NnRAXdPnsvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMuUuiC CAqi15h5p+Kl7MrVfzwUMB8GA1UdIwQYMBaAFORuGJ3I6RChq74uNk3QgXdc5IRg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUI0NC9BRDBENjFGODNB NkMxMUVEOTk0MUY1NUNDNEY5QUUwMi81RzRZbmNqcEVLR3J2aTQyVGRDQmQxemto R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVHNFluY2pwRUtHcnZpNDJUZENCZDF6a2hHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUI0NC9BRDBENjFGODNBNkMxMUVEOTk0MUY1NUNDNEY5QUUwMi81RzRZbmNqcEVL R3J2aTQyVGRDQmQxemtoR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNI+NPoxV8pgXqrdVO0XODO7iHG159Eo1v6AmWU0IA4ruPOkLIWGI6 FuqO/bxCHlcy3mgB9fZraNNwKiW6/MX1NhmPlYwqn/B1ob1aOW00rCkKUjXKvedw TbBgsx1Vq/5JC+owuH03NTyQk4T+jxeulDirfizaKeiU6/vOp23gnNOoc2BN/8qH an5yXVs5/1Udqp776atOKBTo7HpvOw+iTAADrlYGimO7ePNApt/lZs3bwYxCo/wQ JuvpKcOiNfAHy6tQp3Pg0D2iNKanyPilmfoQMioMG2Ll0MiOD58Qo6cd0hikrAdZ uZXRqqpiVIk8BxnRULc+v+fFPP6Wf8xG -----END CERTIFICATE-----Generated at Wed May 14 11:47:40 2025 by rpki-client