$ rpki-client -vvf rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft File: 5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft (raw, json) Hash identifier: aV8/Np+Z2NZyIFE3iGz9xeJ0NUuNaNXDyeK9/h2kHVo= Subject key identifier: 48:1A:18:6D:12:6C:F8:D1:FE:F0:4C:69:00:4C:56:E9:23:FB:20:8D Authority key identifier: E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25 Certificate issuer: /CN=A914A47A/serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25 Certificate serial: 347E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft Manifest number: 3479 Signing time: Sun 04 May 2025 14:51:36 +0000 Manifest this update: Sun 04 May 2025 14:51:36 +0000 Manifest next update: Sun 11 May 2025 14:51:36 +0000 Files and hashes: 1: 5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl (hash: oBLum1aF1PcgYvy8V9Zqo8SuppPJ12BNiV9AG8VJqf0=) 2: A5C01D6ED15511EA904EF30BC4F9AE02.roa (hash: g9pqUh5erEZO/WLay3//J8dkPYx1y9WBTENSIPISBog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 14:51:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13438 (0x347e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A47A, serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25 Validity Not Before: May 4 14:51:36 2025 GMT Not After : May 11 14:51:36 2025 GMT Subject: CN=68177ef8-8c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c9:fc:60:8c:84:cf:4a:91:be:16:d5:8f:cf: 32:a3:a9:23:4c:a1:39:8b:4b:ab:3e:f1:ff:7b:cd: 1d:9c:3f:49:82:64:d3:76:d7:04:b2:6e:b3:e5:48: f8:46:2b:e2:35:21:a8:7e:5c:11:a6:c0:a4:63:58: c6:47:d5:3f:ee:6a:2a:b0:ae:07:6e:a8:fe:79:15: c9:f4:82:62:06:d7:4a:0b:b5:88:84:0d:c6:38:46: 67:a8:e3:b8:92:cd:4d:97:1a:f4:53:67:cc:f5:e4: bc:a8:0e:72:d2:95:a6:3f:95:25:1b:c7:a9:77:e7: 59:ef:d1:92:4f:4c:a9:c1:19:e9:cb:00:16:a4:2e: 29:69:c2:f9:0a:2e:7d:ec:50:d2:01:4f:f2:cc:05: 6d:7f:f0:41:6b:db:7a:2a:49:c3:dc:23:9e:8a:c5: fa:e2:bc:83:fb:41:df:73:39:0d:03:f5:d5:c7:b8: 6a:49:2f:db:76:1b:de:89:46:28:9f:f3:9c:c4:56: 2a:fa:3c:6e:0e:c5:e9:ac:23:ad:3c:ef:c3:f7:ea: 30:3d:3a:ab:9c:42:4c:15:c4:82:37:4c:e2:38:10: 19:de:85:b6:e2:57:a6:fc:5e:d2:fc:e6:21:6a:af: 35:bd:63:7a:fa:30:e6:6a:a6:4d:48:e5:a7:f3:b7: 00:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:1A:18:6D:12:6C:F8:D1:FE:F0:4C:69:00:4C:56:E9:23:FB:20:8D X509v3 Authority Key Identifier: keyid:E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:14:e3:e3:bf:0d:ce:19:ad:d7:44:a3:ab:89:30:f4:b1:4e: 39:51:ca:52:9f:ae:ee:4b:32:25:2a:6c:96:a4:f8:ca:7f:fa: a7:80:7f:aa:4d:d3:4e:9b:6c:90:b1:a2:27:a8:54:82:b5:98: 05:8e:85:86:12:78:88:dd:27:56:31:0b:b6:18:ba:be:9d:28: c3:d6:2f:e2:35:fd:17:97:ca:ca:80:46:34:ab:ce:0b:f6:6b: 8e:19:1c:81:9e:23:e4:c2:56:b7:f0:e2:d8:50:c1:1c:ac:d5: f8:1f:05:c0:8a:93:df:17:7c:c4:e3:f5:92:6c:71:aa:08:9d: dc:3c:f8:2a:02:68:56:bf:33:9a:c5:25:b2:c1:51:c9:21:c6: 8b:b5:15:6e:3d:76:11:2f:8b:39:b2:ed:0c:9b:8f:ee:a0:55: 5e:88:a0:a6:4c:10:16:ac:ad:8d:39:c6:02:73:2e:5f:fa:b4: ad:2f:4e:07:d5:9a:a8:09:43:24:17:a9:f3:ef:90:14:c4:f0: 9b:9b:77:4f:af:3a:33:ff:64:f9:43:0a:01:db:76:ba:9f:b3: b9:e2:b6:cb:ca:4a:80:ab:6e:3b:7f:12:e3:da:0a:3c:3a:d7: cb:3a:c5:ea:da:78:f5:3d:05:fe:17:e8:c7:30:8e:95:d5:79: 73:5c:b9:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE0N0ExMTAvBgNVBAUTKEU1MkQ3RjdGQkFBQzFGNzVBRkZBNzYyRURCM0YyODE2 MEJDRkJEMjUwHhcNMjUwNTA0MTQ1MTM2WhcNMjUwNTExMTQ1MTM2WjAYMRYwFAYD VQQDEw02ODE3N2VmOC04YzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsn8YIyEz0qRvhbVj88yo6kjTKE5i0urPvH/e80dnD9JgmTTdtcEsm6z5Uj4 RiviNSGoflwRpsCkY1jGR9U/7moqsK4Hbqj+eRXJ9IJiBtdKC7WIhA3GOEZnqOO4 ks1Nlxr0U2fM9eS8qA5y0pWmP5UlG8epd+dZ79GST0ypwRnpywAWpC4pacL5Ci59 7FDSAU/yzAVtf/BBa9t6KknD3COeisX64ryD+0HfczkNA/XVx7hqSS/bdhveiUYo n/OcxFYq+jxuDsXprCOtPO/D9+owPTqrnEJMFcSCN0ziOBAZ3oW24lem/F7S/OYh aq81vWN6+jDmaqZNSOWn87cA2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEgaGG0S bPjR/vBMaQBMVukj+yCNMB8GA1UdIwQYMBaAFOUtf3+6rB91r/p2Lts/KBYLz70l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTQ3QS80QUYyMjFEQTFE OTgxMUUyQUQyQjM5ODIwOEIwMkNEMi81UzFfZjdxc0gzV3Ytbll1Mno4b0ZndlB2 U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVTMV9mN3FzSDNXdi1uWXUyejhvRmd2UHZTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTQ3QS80QUYyMjFEQTFEOTgxMUUyQUQyQjM5ODIwOEIwMkNEMi81UzFfZjdxc0gz V3Ytbll1Mno4b0ZndlB2U1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsFOPjvw3OGa3XRKOriTD0sU45UcpSn67uSzIlKmyWpPjKf/qngH+q TdNOm2yQsaInqFSCtZgFjoWGEniI3SdWMQu2GLq+nSjD1i/iNf0Xl8rKgEY0q84L 9muOGRyBniPkwla38OLYUMEcrNX4HwXAipPfF3zE4/WSbHGqCJ3cPPgqAmhWvzOa xSWywVHJIcaLtRVuPXYRL4s5su0Mm4/uoFVeiKCmTBAWrK2NOcYCcy5f+rStL04H 1ZqoCUMkF6nz75AUxPCbm3dPrzoz/2T5QwoB23a6n7O54rbLykqAq247fxLj2go8 OtfLOsXq2nj1PQX+F+jHMI6V1XlzXLkz -----END CERTIFICATE-----Generated at Mon May 5 08:17:03 2025 by rpki-client