$ rpki-client -vvf rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft File: 5B7XVgdLN63ceU-UC9H1Pj9na5M.mft (raw, json) Hash identifier: VM/k6OkaJ+oLuEC/WrRWJLL2ILaNRwZLbc1GfE0hcJY= Subject key identifier: 64:50:2A:3A:C3:A0:92:E2:91:40:3A:87:9E:E8:30:1B:89:E1:DF:5A Authority key identifier: E4:1E:D7:56:07:4B:37:AD:DC:79:4F:94:0B:D1:F5:3E:3F:67:6B:93 Certificate issuer: /CN=A913B5C7/serialNumber=E41ED756074B37ADDC794F940BD1F53E3F676B93 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft Manifest number: D5 Signing time: Sun 11 May 2025 04:26:16 +0000 Manifest this update: Sun 11 May 2025 04:26:15 +0000 Manifest next update: Sun 18 May 2025 04:26:15 +0000 Files and hashes: 1: 5B7XVgdLN63ceU-UC9H1Pj9na5M.crl (hash: A2obua1mugE3Cr8SBKVaB1I5kNCMdDt9eCMWzToUlaE=) 2: B0CE94A0E80911EEADE3420AC4F9AE02.roa (hash: JMqNNeHY27Hx5eJ7SJKoh8TY1qwKjQvReEB44gwMvpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.crl rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:26:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B5C7, serialNumber=E41ED756074B37ADDC794F940BD1F53E3F676B93 Validity Not Before: May 11 04:26:15 2025 GMT Not After : May 18 04:26:15 2025 GMT Subject: CN=682026e7-54f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:69:63:43:8d:26:55:3e:ac:f7:a5:0c:0f:28: 0d:bd:ac:97:48:d5:18:7f:5c:61:d1:0e:2c:b8:08: 72:62:d4:3c:d2:95:ee:12:1e:c1:11:12:27:56:a5: f3:e8:e9:06:73:f8:fd:a7:0b:ae:df:79:ba:fc:76: d7:9e:a1:b3:1f:6b:84:3c:e2:a7:0e:93:e3:41:18: 08:80:eb:36:c9:0d:a6:8d:8a:8f:7f:12:d9:b0:ca: cd:b4:bc:d4:7d:66:17:b2:a2:5d:a6:fa:41:b7:e3: e7:b2:a0:a5:27:b0:75:a2:bc:51:45:b8:2d:69:01: 37:5d:18:a1:0f:d7:76:c8:f6:9a:50:af:33:9d:2a: f6:8d:1e:bd:d7:1e:76:b5:60:d6:f2:57:a6:77:39: 52:db:99:39:ec:32:92:d3:cf:58:c8:5b:85:83:ff: 21:08:16:56:ef:a3:3b:1c:32:29:4f:03:5d:42:19: 59:76:0c:1d:e7:f4:c9:ce:f8:a9:46:92:58:83:f9: d8:21:42:b4:56:eb:3f:1c:5b:c8:9a:6b:b3:88:b7: b5:35:d2:8f:98:db:6f:6c:75:f7:82:da:c7:13:38: 14:3e:71:02:bc:98:d4:c3:04:5c:e3:6f:01:98:28: fd:8c:b1:db:c8:d7:00:69:f3:ee:f0:ee:e4:1e:58: 94:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:50:2A:3A:C3:A0:92:E2:91:40:3A:87:9E:E8:30:1B:89:E1:DF:5A X509v3 Authority Key Identifier: keyid:E4:1E:D7:56:07:4B:37:AD:DC:79:4F:94:0B:D1:F5:3E:3F:67:6B:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:f5:84:77:de:7b:c1:0b:20:8a:e4:15:fb:dc:a5:29:f3:d8: a4:0b:c0:3c:ab:d7:cc:d1:11:77:c4:a6:d9:b1:33:c7:46:54: c0:68:2c:50:b5:61:36:48:95:63:c1:73:64:1e:cb:88:85:db: 4b:9b:a9:e5:7b:d4:e9:ef:2d:06:4b:84:3d:d6:81:68:5f:9d: 9d:b4:66:d5:6e:7e:7d:52:f1:9c:b7:fc:d1:d7:e1:ad:80:c1: ab:0a:ab:23:09:f1:15:fc:4a:36:35:da:2e:1c:da:53:24:c8: 17:f6:2c:2c:6b:83:95:61:c4:75:b9:21:ff:b1:ec:88:b2:de: 83:63:29:56:96:de:18:0f:c1:ef:dd:ff:b6:c9:81:c4:d8:87: 65:f9:4f:6e:a3:f2:7f:cd:8f:ca:54:07:79:66:57:7d:ba:3e: 90:ab:39:a4:ff:ad:c5:95:e9:c0:f0:29:6d:f8:f2:ae:d8:4b: 07:5f:7d:a0:d1:55:de:8c:bd:db:32:df:71:06:14:c9:bd:21: fa:23:53:a1:2f:79:e6:c2:ee:9d:89:0b:15:23:dc:c4:42:ed: ff:44:5b:17:c6:1a:66:be:77:97:fc:e7:aa:a8:fc:f6:06:3c: 79:aa:99:72:df:94:7a:aa:55:3e:ea:3b:f1:70:70:16:ff:af: 00:e0:ad:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I1QzcxMTAvBgNVBAUTKEU0MUVENzU2MDc0QjM3QUREQzc5NEY5NDBCRDFGNTNF M0Y2NzZCOTMwHhcNMjUwNTExMDQyNjE1WhcNMjUwNTE4MDQyNjE1WjAYMRYwFAYD VQQDEw02ODIwMjZlNy01NGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn2ljQ40mVT6s96UMDygNvayXSNUYf1xh0Q4suAhyYtQ80pXuEh7BERInVqXz 6OkGc/j9pwuu33m6/HbXnqGzH2uEPOKnDpPjQRgIgOs2yQ2mjYqPfxLZsMrNtLzU fWYXsqJdpvpBt+PnsqClJ7B1orxRRbgtaQE3XRihD9d2yPaaUK8znSr2jR691x52 tWDW8lemdzlS25k57DKS089YyFuFg/8hCBZW76M7HDIpTwNdQhlZdgwd5/TJzvip RpJYg/nYIUK0Vus/HFvImmuziLe1NdKPmNtvbHX3gtrHEzgUPnECvJjUwwRc428B mCj9jLHbyNcAafPu8O7kHliUeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRQKjrD oJLikUA6h57oMBuJ4d9aMB8GA1UdIwQYMBaAFOQe11YHSzet3HlPlAvR9T4/Z2uT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjVDNy82N0QyNDM5NkU4 MDkxMUVFQkU0ODk1NjNDNEY5QUUwMi81QjdYVmdkTE42M2NlVS1VQzlIMVBqOW5h NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVCN1hWZ2RMTjYzY2VVLVVDOUgxUGo5bmE1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjVDNy82N0QyNDM5NkU4MDkxMUVFQkU0ODk1NjNDNEY5QUUwMi81QjdYVmdkTE42 M2NlVS1VQzlIMVBqOW5hNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx9YR33nvBCyCK5BX73KUp89ikC8A8q9fM0RF3xKbZsTPHRlTAaCxQ tWE2SJVjwXNkHsuIhdtLm6nle9Tp7y0GS4Q91oFoX52dtGbVbn59UvGct/zR1+Gt gMGrCqsjCfEV/Eo2NdouHNpTJMgX9iwsa4OVYcR1uSH/seyIst6DYylWlt4YD8Hv 3f+2yYHE2Idl+U9uo/J/zY/KVAd5Zld9uj6Qqzmk/63FlenA8Clt+PKu2EsHX32g 0VXejL3bMt9xBhTJvSH6I1OhL3nmwu6diQsVI9zEQu3/RFsXxhpmvneX/OeqqPz2 Bjx5qply35R6qlU+6jvxcHAW/68A4K18 -----END CERTIFICATE-----Generated at Sun May 11 18:50:44 2025 by rpki-client