$ rpki-client -vvf rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft File: 5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft (raw, json) Hash identifier: 7PFxa+GwQxa8VVx6tY/AZT5xZW8Ra2r4knbPGJhYYg0= Subject key identifier: 0E:5F:1E:CB:82:AF:9A:6E:2D:87:AA:9E:D8:DD:73:D4:A8:C1:86:ED Authority key identifier: E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1 Certificate issuer: /CN=A914C7F8/serialNumber=E50963D70468727356B78B7FC4380974429B64E1 Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft Manifest number: 016E Signing time: Sat 17 May 2025 03:35:05 +0000 Manifest this update: Sat 17 May 2025 03:35:05 +0000 Manifest next update: Sat 24 May 2025 03:35:05 +0000 Files and hashes: 1: 5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl (hash: EV3iuTP+Jj0WaQru9pg3Anb7L2ea4qwZ5ffQfZa2vYQ=) 2: 47862E7E129C11EEA43CFD46C4F9AE02.roa (hash: M9MqZsVmz62prCxeOcSq9CpUw3/czHK+Un3uXWoG0WQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 03:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C7F8, serialNumber=E50963D70468727356B78B7FC4380974429B64E1 Validity Not Before: May 17 03:35:05 2025 GMT Not After : May 24 03:35:05 2025 GMT Subject: CN=682803e9-98bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a6:1d:a7:8b:4e:da:8f:00:7c:73:39:ec:50: 0b:2c:eb:2e:0f:9b:e1:81:93:92:50:ec:47:03:2e: 11:e5:73:da:00:04:1f:88:c8:7d:c7:0d:92:b5:e3: ea:94:41:33:29:80:f6:0d:07:cb:aa:8d:72:cd:c2: ef:92:46:56:01:0b:38:3a:8f:f4:56:4d:9c:00:0e: ea:2c:03:57:d3:28:97:c5:a4:c7:f5:53:e1:e6:aa: 71:14:e8:78:67:72:5a:3b:41:c2:50:3b:a0:c7:09: a3:2e:ab:70:56:6b:f0:78:5e:f6:51:77:7e:13:48: 0a:7a:4d:b1:97:9a:25:63:8e:29:b1:9b:5b:58:20: bc:04:99:e0:f0:b4:df:02:ba:37:72:82:23:2a:61: 33:99:a0:ba:a0:27:52:f1:df:c1:59:41:49:f2:16: c2:75:70:95:65:98:31:e1:52:d0:70:7d:46:55:f6: 0e:99:90:fc:f8:d1:a3:76:a8:c3:e7:94:8b:1c:a2: ee:19:1f:0c:38:f0:df:97:39:79:ea:d9:7b:5c:81: 76:41:34:7f:a0:0c:0d:ec:17:12:44:fc:7e:73:4b: 29:1a:ab:7a:b8:26:8e:43:40:f2:ad:11:4c:d7:7f: c8:e5:3f:e6:cf:cc:c8:71:71:56:95:28:90:25:fc: 27:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5F:1E:CB:82:AF:9A:6E:2D:87:AA:9E:D8:DD:73:D4:A8:C1:86:ED X509v3 Authority Key Identifier: keyid:E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f4:9a:66:de:85:00:cf:d6:a6:4b:c5:31:36:1b:3c:7a:35: 5b:5d:c4:ee:37:20:92:fb:d4:89:a7:2f:b1:29:03:4f:55:ff: 82:92:95:68:34:8d:b5:44:34:36:af:d4:d5:78:67:00:fb:df: e2:b5:d8:0a:c2:59:4d:db:99:c4:7d:6d:9c:0e:cd:59:36:d2: 37:63:80:6c:b8:9f:a5:31:ba:09:f7:85:28:36:ec:f4:f1:6c: b4:fb:cb:df:43:31:48:77:ea:89:92:3a:35:dd:b5:be:3a:38: 20:f3:db:a5:5b:47:c9:85:90:bd:12:94:44:4c:90:ef:fc:6b: 71:36:d2:16:5e:03:9e:02:c4:dd:25:f8:6c:b6:5d:75:a8:89: b0:dc:41:59:47:f4:f8:9a:86:7c:29:bf:75:ab:3c:93:7d:b2: ab:f4:37:64:ce:02:f3:0a:7f:56:9a:27:af:b0:a5:7e:9c:47: b2:e5:19:2f:76:c5:d2:2f:23:7e:41:ed:fe:90:53:02:6d:3f: 0f:95:79:6a:db:92:0b:a4:05:fe:21:e4:46:08:78:47:ce:f2: 24:c2:3a:77:22:13:b3:02:9a:07:fa:df:52:f1:7c:e2:ae:73: bb:a2:24:d6:19:4f:3e:40:8c:ef:cc:be:19:15:4e:99:d5:19: ab:fe:5e:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM3RjgxMTAvBgNVBAUTKEU1MDk2M0Q3MDQ2ODcyNzM1NkI3OEI3RkM0MzgwOTc0 NDI5QjY0RTEwHhcNMjUwNTE3MDMzNTA1WhcNMjUwNTI0MDMzNTA1WjAYMRYwFAYD VQQDEw02ODI4MDNlOS05OGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KYdp4tO2o8AfHM57FALLOsuD5vhgZOSUOxHAy4R5XPaAAQfiMh9xw2StePq lEEzKYD2DQfLqo1yzcLvkkZWAQs4Oo/0Vk2cAA7qLANX0yiXxaTH9VPh5qpxFOh4 Z3JaO0HCUDugxwmjLqtwVmvweF72UXd+E0gKek2xl5olY44psZtbWCC8BJng8LTf Aro3coIjKmEzmaC6oCdS8d/BWUFJ8hbCdXCVZZgx4VLQcH1GVfYOmZD8+NGjdqjD 55SLHKLuGR8MOPDflzl56tl7XIF2QTR/oAwN7BcSRPx+c0spGqt6uCaOQ0DyrRFM 13/I5T/mz8zIcXFWlSiQJfwnPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5fHsuC r5puLYeqntjdc9SowYbtMB8GA1UdIwQYMBaAFOUJY9cEaHJzVreLf8Q4CXRCm2Th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzdGOC9FMjUxMEUxQzEy OTUxMUVFODRCQUQ3NDZDNEY5QUUwMi81UWxqMXdSb2NuTld0NHRfeERnSmRFS2Ja T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRbGoxd1JvY25OV3Q0dF94RGdKZEVLYlpPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzdGOC9FMjUxMEUxQzEyOTUxMUVFODRCQUQ3NDZDNEY5QUUwMi81UWxqMXdSb2Nu Tld0NHRfeERnSmRFS2JaT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL9Jpm3oUAz9amS8UxNhs8ejVbXcTuNyCS+9SJpy+xKQNPVf+CkpVo NI21RDQ2r9TVeGcA+9/itdgKwllN25nEfW2cDs1ZNtI3Y4BsuJ+lMboJ94UoNuz0 8Wy0+8vfQzFId+qJkjo13bW+Ojgg89ulW0fJhZC9EpRETJDv/GtxNtIWXgOeAsTd Jfhstl11qImw3EFZR/T4moZ8Kb91qzyTfbKr9DdkzgLzCn9WmievsKV+nEey5Rkv dsXSLyN+Qe3+kFMCbT8PlXlq25ILpAX+IeRGCHhHzvIkwjp3IhOzApoH+t9S8Xzi rnO7oiTWGU8+QIzvzL4ZFU6Z1Rmr/l7n -----END CERTIFICATE-----Generated at Sat May 17 15:43:44 2025 by rpki-client