$ rpki-client -vvf rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/5-kErSYVSeMdvVn0azB0xr-m2rI.mft File: 5-kErSYVSeMdvVn0azB0xr-m2rI.mft (raw, json) Hash identifier: YPSBsiPj0kNk0T/REvnEjXBzAQqAWv1r8IiPrjOxWVY= Subject key identifier: 7F:4C:7A:63:11:B0:A2:E7:5E:04:CF:7A:77:C6:2A:A9:BB:52:FB:7F Authority key identifier: E7:E9:04:AD:26:15:49:E3:1D:BD:59:F4:6B:30:74:C6:BF:A6:DA:B2 Certificate issuer: /CN=A9148E9A/serialNumber=E7E904AD261549E31DBD59F46B3074C6BFA6DAB2 Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5-kErSYVSeMdvVn0azB0xr-m2rI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/5-kErSYVSeMdvVn0azB0xr-m2rI.mft Manifest number: 0196 Signing time: Sun 11 May 2025 02:22:59 +0000 Manifest this update: Sun 11 May 2025 02:22:59 +0000 Manifest next update: Sun 18 May 2025 02:22:59 +0000 Files and hashes: 1: 5-kErSYVSeMdvVn0azB0xr-m2rI.crl (hash: Z2PcvGkgHvvG6bTwbrBTDZtLicOAbURxCrzm2Y8uZbo=) 2: 20BD79FAC17A11ED8F7A315FC4F9AE02.roa (hash: jHvBpbPikdEm8qDyFLwKqOP7PFtCpJ8WS2O/wf5HHhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/5-kErSYVSeMdvVn0azB0xr-m2rI.crl rsync://rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/5-kErSYVSeMdvVn0azB0xr-m2rI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5-kErSYVSeMdvVn0azB0xr-m2rI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:22:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148E9A, serialNumber=E7E904AD261549E31DBD59F46B3074C6BFA6DAB2 Validity Not Before: May 11 02:22:59 2025 GMT Not After : May 18 02:22:59 2025 GMT Subject: CN=68200a03-6684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:89:f6:77:25:73:8f:49:60:d2:8b:5a:6a:14: 6f:b5:02:20:02:cb:86:44:f2:94:63:2b:b8:07:60: 4c:6e:c7:20:c1:9a:b1:01:32:fc:4e:5b:9e:d8:5d: a4:2b:aa:47:7d:55:89:ef:2b:5c:4d:39:8f:7b:ec: 62:fb:9c:45:62:96:fa:4c:ad:d6:cc:da:65:4e:eb: 3b:1c:cf:4b:57:67:9b:fa:81:bc:61:52:b3:cd:d7: 7d:d6:ab:ba:e1:5a:b0:b1:4e:64:27:d7:29:ec:24: cf:45:03:b7:3d:a9:25:13:b9:97:3a:ed:33:d2:78: d1:03:0a:ee:ce:54:55:47:a9:1c:53:1c:74:37:b5: 0a:74:01:34:cd:f9:8c:1e:38:b1:d1:0e:48:5b:98: 25:31:e4:f6:b6:20:fc:29:b7:36:74:5e:71:c2:e4: e6:20:60:1f:2c:5b:01:c1:5c:8c:6a:e8:e8:cd:ad: 35:13:71:e7:95:a3:81:76:85:aa:c4:3c:46:fa:f9: 91:f1:cd:bf:5f:af:c2:78:56:1e:c3:39:4c:bc:35: bb:9a:18:8e:9e:72:21:7c:3f:3a:ae:f0:18:4f:eb: 0b:d8:04:95:18:70:d8:41:0e:5c:79:7f:43:02:b1: ad:db:f5:76:ce:69:f4:2c:24:22:7c:85:c8:ae:4f: 98:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:4C:7A:63:11:B0:A2:E7:5E:04:CF:7A:77:C6:2A:A9:BB:52:FB:7F X509v3 Authority Key Identifier: keyid:E7:E9:04:AD:26:15:49:E3:1D:BD:59:F4:6B:30:74:C6:BF:A6:DA:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/5-kErSYVSeMdvVn0azB0xr-m2rI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5-kErSYVSeMdvVn0azB0xr-m2rI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/5-kErSYVSeMdvVn0azB0xr-m2rI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:3b:d3:2b:91:bf:90:7b:aa:fc:02:0e:be:7c:42:72:a8:9a: 7f:33:93:75:51:ed:23:0b:d0:f3:ec:6d:8b:34:fb:28:db:34: d5:8c:39:9f:da:94:d1:af:de:2c:a3:95:7b:f5:a4:f9:4d:82: 38:c9:10:c9:4e:2a:f3:10:bf:4f:ff:28:18:74:fc:e3:c3:86: 2d:39:2e:95:c8:9c:62:ae:62:cb:05:71:ee:a9:6a:8d:fe:c9: 48:cd:f2:1d:94:8a:b7:7d:90:cf:94:eb:74:e6:18:80:8e:38: c7:ad:bd:c2:09:3c:72:f0:1c:9e:6f:e4:e3:dd:14:b0:01:cf: 86:9e:ba:a3:78:48:34:36:41:85:57:47:19:02:8b:b3:8d:9b: 7a:0f:45:bb:10:32:c5:76:0d:9f:aa:c0:a3:7e:61:83:11:5d: 84:4e:13:66:dd:bb:53:ca:17:19:4d:0b:2c:2e:aa:d1:7f:c0: 4e:42:79:66:cd:81:2f:ac:1d:81:c2:13:a7:30:22:bb:55:f7: 11:c6:6a:1c:c8:0d:e4:61:38:6e:b4:21:bd:69:50:6d:21:5e: d1:f2:f0:07:c1:84:30:b7:f7:b7:c1:f4:47:89:21:7a:25:91: 31:4b:59:7a:2c:1a:03:91:70:53:3d:f1:2d:79:47:91:dc:89: e1:e0:ed:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhFOUExMTAvBgNVBAUTKEU3RTkwNEFEMjYxNTQ5RTMxREJENTlGNDZCMzA3NEM2 QkZBNkRBQjIwHhcNMjUwNTExMDIyMjU5WhcNMjUwNTE4MDIyMjU5WjAYMRYwFAYD VQQDEw02ODIwMGEwMy02Njg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA94n2dyVzj0lg0otaahRvtQIgAsuGRPKUYyu4B2BMbscgwZqxATL8Tlue2F2k K6pHfVWJ7ytcTTmPe+xi+5xFYpb6TK3WzNplTus7HM9LV2eb+oG8YVKzzdd91qu6 4VqwsU5kJ9cp7CTPRQO3PaklE7mXOu0z0njRAwruzlRVR6kcUxx0N7UKdAE0zfmM Hjix0Q5IW5glMeT2tiD8Kbc2dF5xwuTmIGAfLFsBwVyMaujoza01E3HnlaOBdoWq xDxG+vmR8c2/X6/CeFYewzlMvDW7mhiOnnIhfD86rvAYT+sL2ASVGHDYQQ5ceX9D ArGt2/V2zmn0LCQifIXIrk+Y/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9MemMR sKLnXgTPenfGKqm7Uvt/MB8GA1UdIwQYMBaAFOfpBK0mFUnjHb1Z9GswdMa/ptqy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEU5QS8wM0Y0N0Q4QUMx NzcxMUVEQTAzOUYyMkZDNEY5QUUwMi81LWtFclNZVlNlTWR2Vm4wYXpCMHhyLW0y ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUta0VyU1lWU2VNZHZWbjBhekIweHItbTJySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEU5QS8wM0Y0N0Q4QUMxNzcxMUVEQTAzOUYyMkZDNEY5QUUwMi81LWtFclNZVlNl TWR2Vm4wYXpCMHhyLW0yckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmO9Mrkb+Qe6r8Ag6+fEJyqJp/M5N1Ue0jC9Dz7G2LNPso2zTVjDmf 2pTRr94so5V79aT5TYI4yRDJTirzEL9P/ygYdPzjw4YtOS6VyJxirmLLBXHuqWqN /slIzfIdlIq3fZDPlOt05hiAjjjHrb3CCTxy8Byeb+Tj3RSwAc+GnrqjeEg0NkGF V0cZAouzjZt6D0W7EDLFdg2fqsCjfmGDEV2EThNm3btTyhcZTQssLqrRf8BOQnlm zYEvrB2BwhOnMCK7VfcRxmocyA3kYThutCG9aVBtIV7R8vAHwYQwt/e3wfRHiSF6 JZExS1l6LBoDkXBTPfEteUeR3Inh4O11 -----END CERTIFICATE-----Generated at Mon May 12 01:17:29 2025 by rpki-client