$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft File: 5rsDqligwnDrZrPq6yQI__q6Xsc.mft (raw, json) Hash identifier: ZiP5EAWjkUV9+QY0A88RfpS8O6JizIWf5P3EYNFfJk0= Subject key identifier: 65:0E:9A:82:2E:D3:50:63:47:E9:A1:9F:85:20:77:0F:88:6C:6B:0F Authority key identifier: E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7 Certificate issuer: /CN=A914D2BF/serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7 Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft Manifest number: 0194 Signing time: Sat 17 May 2025 03:12:17 +0000 Manifest this update: Sat 17 May 2025 03:12:17 +0000 Manifest next update: Sat 24 May 2025 03:12:17 +0000 Files and hashes: 1: 5rsDqligwnDrZrPq6yQI__q6Xsc.crl (hash: 4gfJsx8ssemP66nyeEeXu79N9CYSOuNSOlFyTlvgkF0=) 2: AEF266ECD34811EDAD96D95DC4F9AE02.roa (hash: KXSCbuQLHG9xWL+hihrwdJUS/R0sgZW/C4dlIANzg14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 03:12:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D2BF, serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7 Validity Not Before: May 17 03:12:17 2025 GMT Not After : May 24 03:12:17 2025 GMT Subject: CN=6827fe91-8799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:46:27:5c:68:60:e9:75:9e:12:59:f1:40:1c: 26:a4:76:9c:f6:1c:4e:a3:79:ba:09:9b:39:c4:ca: 4c:d4:a5:e7:75:be:55:51:da:1f:67:9d:22:f9:f0: 29:74:bb:58:b1:72:43:52:4a:cb:44:b6:66:1a:11: 35:cb:ae:dd:d9:b7:97:74:9d:4f:15:18:ce:f0:72: fc:ea:c8:ac:9f:7a:93:eb:71:e8:83:29:60:e5:85: 0b:81:21:4e:c5:c8:98:07:b2:61:a4:62:04:fb:da: 29:4b:31:97:b1:85:9f:c0:4e:4b:a4:25:38:6c:7a: 8f:f7:94:36:55:29:31:59:84:e2:96:81:c4:78:c1: 73:e0:9b:86:72:6d:a4:9a:f7:f8:f1:63:dc:7e:9c: de:41:9e:7a:57:d7:63:f7:93:72:54:e6:c8:0f:2c: 28:21:7d:e0:e8:87:23:df:6d:fa:c3:ea:5a:eb:78: e8:9d:58:a5:a4:85:9d:3a:88:aa:f2:50:f3:8b:b7: ee:3b:37:95:88:6e:16:c8:11:db:91:21:2b:8c:78: e7:d3:de:70:cf:d1:30:00:d7:42:c6:e5:ff:41:32: 79:13:51:a9:93:4d:14:2d:d4:a3:87:22:37:23:93: 31:77:c5:ba:d3:3e:ea:94:f9:54:b9:85:44:d5:0b: b7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0E:9A:82:2E:D3:50:63:47:E9:A1:9F:85:20:77:0F:88:6C:6B:0F X509v3 Authority Key Identifier: keyid:E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:14:cd:ad:89:49:61:19:ea:ea:06:14:1c:77:bb:4e:38:37: 9b:b6:70:23:08:b8:9f:22:b6:fd:6d:34:1e:46:bb:ff:33:3f: 10:33:ce:e6:6b:37:96:36:90:45:5e:0e:b7:cb:ca:46:40:21: 63:2f:80:cd:55:63:e6:ce:cd:3d:1c:96:70:62:f4:9d:3e:db: dc:8c:07:b3:f9:46:e3:5a:b5:76:e8:9e:9b:11:7a:c3:64:e5: 0b:e9:e0:d9:c0:9d:48:fd:b0:71:55:5f:f8:19:cf:42:39:1f: 2a:2d:a2:1a:3f:20:2c:22:cf:ab:5c:a1:0c:fa:9d:19:7a:a7: 58:01:86:cb:02:1c:1a:84:88:84:6c:88:1b:3e:00:bd:14:c2: 19:31:1a:a5:d4:ef:b3:a8:0d:eb:5e:60:49:17:08:67:18:86: d1:1b:4f:71:f9:fc:81:b6:85:fb:59:9b:23:11:d8:0f:a3:48: 2f:27:30:92:7c:27:b9:af:0a:66:9b:98:53:ff:4d:40:d4:40: fb:92:31:0e:10:c4:e8:cb:86:56:a0:1d:3a:e9:74:a4:f8:31: 32:f4:53:47:0b:3f:88:fe:5a:95:ff:5f:5e:d8:f8:f2:25:04: d5:29:2c:61:6b:61:fe:9f:9b:a6:78:74:7a:7f:30:25:93:dc: 59:54:1e:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQyQkYxMTAvBgNVBAUTKEU2QkIwM0FBNThBMEMyNzBFQjY2QjNFQUVCMjQwOEZG RkFCQTVFQzcwHhcNMjUwNTE3MDMxMjE3WhcNMjUwNTI0MDMxMjE3WjAYMRYwFAYD VQQDEw02ODI3ZmU5MS04Nzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0YnXGhg6XWeElnxQBwmpHac9hxOo3m6CZs5xMpM1KXndb5VUdofZ50i+fAp dLtYsXJDUkrLRLZmGhE1y67d2beXdJ1PFRjO8HL86sisn3qT63Hogylg5YULgSFO xciYB7JhpGIE+9opSzGXsYWfwE5LpCU4bHqP95Q2VSkxWYTiloHEeMFz4JuGcm2k mvf48WPcfpzeQZ56V9dj95NyVObIDywoIX3g6Icj3236w+pa63jonVilpIWdOoiq 8lDzi7fuOzeViG4WyBHbkSErjHjn095wz9EwANdCxuX/QTJ5E1Gpk00ULdSjhyI3 I5Mxd8W60z7qlPlUuYVE1Qu3TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUOmoIu 01BjR+mhn4Ugdw+IbGsPMB8GA1UdIwQYMBaAFOa7A6pYoMJw62az6uskCP/6ul7H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDJCRi8yQTcxRTZCQ0Qz NDQxMUVEOEUyQzU0NjRDNEY5QUUwMi81cnNEcWxpZ3duRHJaclBxNnlRSV9fcTZY c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyc0RxbGlnd25EclpyUHE2eVFJX19xNlhzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDJCRi8yQTcxRTZCQ0QzNDQxMUVEOEUyQzU0NjRDNEY5QUUwMi81cnNEcWxpZ3du RHJaclBxNnlRSV9fcTZYc2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAFM2tiUlhGerqBhQcd7tOODebtnAjCLifIrb9bTQeRrv/Mz8QM87m azeWNpBFXg63y8pGQCFjL4DNVWPmzs09HJZwYvSdPtvcjAez+UbjWrV26J6bEXrD ZOUL6eDZwJ1I/bBxVV/4Gc9COR8qLaIaPyAsIs+rXKEM+p0ZeqdYAYbLAhwahIiE bIgbPgC9FMIZMRql1O+zqA3rXmBJFwhnGIbRG09x+fyBtoX7WZsjEdgPo0gvJzCS fCe5rwpmm5hT/01A1ED7kjEOEMToy4ZWoB066XSk+DEy9FNHCz+I/lqV/19e2Pjy JQTVKSxha2H+n5umeHR6fzAlk9xZVB7k -----END CERTIFICATE-----Generated at Sun May 18 11:02:00 2025 by rpki-client