$ rpki-client -vvf rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft File: c5FNFBChzT-FrR4bClD_P4vWDBA.mft (raw, json) Hash identifier: 57enKn0bJURfw5qb39j8LfJ6fy0hHswPZP3wc/jTgnk= Subject key identifier: 41:62:4D:14:90:A7:EE:FE:52:6B:21:3A:B7:6B:8F:D7:51:3E:DD:C2 Authority key identifier: 73:91:4D:14:10:A1:CD:3F:85:AD:1E:1B:0A:50:FF:3F:8B:D6:0C:10 Certificate issuer: /CN=A91366F8/serialNumber=73914D1410A1CD3F85AD1E1B0A50FF3F8BD60C10 Certificate serial: 033B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft Manifest number: 0337 Signing time: Fri 09 May 2025 00:50:44 +0000 Manifest this update: Fri 09 May 2025 00:50:44 +0000 Manifest next update: Fri 16 May 2025 00:50:44 +0000 Files and hashes: 1: c5FNFBChzT-FrR4bClD_P4vWDBA.crl (hash: UBdjXE4akzV95Jo1DPOW5m3EXJbP1KOClnw5ujbYVrc=) 2: 591A8C06BE4D11EC8DADB22CC4F9AE02.roa (hash: Py8gHJNmqLpByr4I29rw6Mm8G9sMV9RnjA0oEGne9CY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.crl rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 00:50:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 827 (0x33b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91366F8, serialNumber=73914D1410A1CD3F85AD1E1B0A50FF3F8BD60C10 Validity Not Before: May 9 00:50:44 2025 GMT Not After : May 16 00:50:44 2025 GMT Subject: CN=681d5164-c04f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4e:20:69:26:f5:0f:f6:27:b2:24:f1:7c:70: 5a:99:fe:cf:08:a5:d6:a5:5d:17:d9:ba:60:2c:d0: 7a:36:0a:37:86:8b:57:0d:32:7a:ec:69:19:a1:1e: 0f:36:84:08:ae:8c:a3:65:64:5e:cb:8e:88:93:a6: ee:df:40:6b:86:dd:44:04:9c:88:17:22:1a:a4:07: 9f:d8:8a:6a:e1:f1:79:6e:75:a2:8f:9a:9d:fa:e8: 6b:d1:42:16:5d:9a:59:30:e7:f9:03:e0:4f:91:c0: c8:1b:b6:53:13:89:cd:71:cc:21:0b:b9:b1:c8:dd: e4:5c:83:6f:11:4f:27:55:01:20:30:69:9a:75:79: 25:4a:4a:13:f2:d9:10:e0:af:24:db:16:3b:a7:20: 90:b5:14:d1:04:c9:9e:99:9f:a2:bc:6f:db:7e:06: 39:0a:b8:bb:d3:ad:05:36:6c:10:a3:13:89:a3:7f: d4:3c:a8:db:41:8e:03:20:85:5f:b7:79:78:46:45: f1:fa:48:19:19:d9:58:27:09:65:a9:06:7f:a2:7f: 20:0a:c9:d0:6d:10:aa:63:92:7f:5a:f7:7e:d7:85: 91:d0:10:84:9e:0d:60:69:f0:7c:a4:40:83:38:37: 9d:d2:67:85:d0:00:de:96:21:0a:74:fa:91:6d:e7: bd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:62:4D:14:90:A7:EE:FE:52:6B:21:3A:B7:6B:8F:D7:51:3E:DD:C2 X509v3 Authority Key Identifier: keyid:73:91:4D:14:10:A1:CD:3F:85:AD:1E:1B:0A:50:FF:3F:8B:D6:0C:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:c6:ac:2f:b0:e6:63:27:9f:33:be:9a:e0:8d:06:88:50:ed: d9:9b:66:bb:ca:60:bf:39:9b:de:e5:46:2b:d3:f5:68:16:4e: f1:6e:7f:f0:18:cf:ee:9d:cc:4d:38:23:9e:85:4e:62:f9:c4: 1d:e8:f4:90:a8:b6:5f:04:4c:ed:34:04:16:db:ab:08:d3:4a: cf:7e:aa:56:09:fb:93:95:77:26:6d:be:03:62:eb:34:0b:e2: 8b:ff:4b:02:a1:56:17:33:13:0b:db:d5:ff:67:ee:70:ad:cb: 3e:06:f1:e3:28:12:34:f2:e2:99:6f:60:b4:29:aa:6c:71:dc: 46:cc:d7:6d:0b:b0:68:42:41:8c:1b:a2:00:50:67:8b:a3:4c: 53:af:a2:0f:71:26:af:f2:dd:e7:04:a0:04:76:61:6b:ff:e5: d5:bc:e1:02:10:f3:fe:3e:fe:da:0e:c4:84:58:97:2d:1e:07: 6b:ab:7d:67:14:74:43:fc:2c:8e:4f:1a:32:9c:97:5e:7a:6f: 5f:e7:f1:7d:c3:cd:2a:a3:f4:7a:81:9c:76:63:be:79:d3:ed: ad:91:fb:95:41:7a:49:29:0f:01:c1:c7:0b:10:75:01:cf:d0: 98:14:10:90:44:1f:d4:84:27:b2:44:0b:e3:f5:ef:f4:60:99: b4:bf:38:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY2RjgxMTAvBgNVBAUTKDczOTE0RDE0MTBBMUNEM0Y4NUFEMUUxQjBBNTBGRjNG OEJENjBDMTAwHhcNMjUwNTA5MDA1MDQ0WhcNMjUwNTE2MDA1MDQ0WjAYMRYwFAYD VQQDEw02ODFkNTE2NC1jMDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw04gaSb1D/YnsiTxfHBamf7PCKXWpV0X2bpgLNB6Ngo3hotXDTJ67GkZoR4P NoQIroyjZWRey46Ik6bu30Brht1EBJyIFyIapAef2Ipq4fF5bnWij5qd+uhr0UIW XZpZMOf5A+BPkcDIG7ZTE4nNccwhC7mxyN3kXINvEU8nVQEgMGmadXklSkoT8tkQ 4K8k2xY7pyCQtRTRBMmemZ+ivG/bfgY5Cri7060FNmwQoxOJo3/UPKjbQY4DIIVf t3l4RkXx+kgZGdlYJwllqQZ/on8gCsnQbRCqY5J/Wvd+14WR0BCEng1gafB8pECD ODed0meF0ADeliEKdPqRbee9SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFiTRSQ p+7+UmshOrdrj9dRPt3CMB8GA1UdIwQYMBaAFHORTRQQoc0/ha0eGwpQ/z+L1gwQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjZGOC9BNDI0Mzk3MEJF NEExMUVDQjI3OTU1MkFDNEY5QUUwMi9jNUZORkJDaHpULUZyUjRiQ2xEX1A0dldE QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M1Rk5GQkNoelQtRnJSNGJDbERfUDR2V0RCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjZGOC9BNDI0Mzk3MEJFNEExMUVDQjI3OTU1MkFDNEY5QUUwMi9jNUZORkJDaHpU LUZyUjRiQ2xEX1A0dldEQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVxqwvsOZjJ58zvprgjQaIUO3Zm2a7ymC/OZve5UYr0/VoFk7xbn/w GM/uncxNOCOehU5i+cQd6PSQqLZfBEztNAQW26sI00rPfqpWCfuTlXcmbb4DYus0 C+KL/0sCoVYXMxML29X/Z+5wrcs+BvHjKBI08uKZb2C0KapscdxGzNdtC7BoQkGM G6IAUGeLo0xTr6IPcSav8t3nBKAEdmFr/+XVvOECEPP+Pv7aDsSEWJctHgdrq31n FHRD/CyOTxoynJdeem9f5/F9w80qo/R6gZx2Y7550+2tkfuVQXpJKQ8BwccLEHUB z9CYFBCQRB/UhCeyRAvj9e/0YJm0vzgm -----END CERTIFICATE-----Generated at Sun May 11 01:20:40 2025 by rpki-client