$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft File: sCeV0uCeOqo-NtK1ktLg6fu3770.mft (raw, json) Hash identifier: oJoWtzP9rPyNJ7TY7Xk+3BmRKEoYUOGN7lcX/GLUyzI= Subject key identifier: B5:31:19:A6:59:EB:BF:E6:AE:B5:37:D6:B8:6B:6F:BD:74:C7:97:62 Authority key identifier: B0:27:95:D2:E0:9E:3A:AA:3E:36:D2:B5:92:D2:E0:E9:FB:B7:EF:BD Certificate issuer: /CN=A914E0FE/serialNumber=B02795D2E09E3AAA3E36D2B592D2E0E9FBB7EFBD Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft Manifest number: 5A Signing time: Thu 15 May 2025 06:27:18 +0000 Manifest this update: Thu 15 May 2025 06:27:17 +0000 Manifest next update: Thu 22 May 2025 06:27:17 +0000 Files and hashes: 1: sCeV0uCeOqo-NtK1ktLg6fu3770.crl (hash: aFyLYykJLJQEKQIo0E89xwGWA+I8ySMMPM7sAfWDdcY=) 2: FF3178EAB14B11EFB6CD146AC4F9AE02.roa (hash: KPgMUtF2z6om6dSm7+mB/ufWiwTV8TpJVcH2+or0fgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.crl rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0FE, serialNumber=B02795D2E09E3AAA3E36D2B592D2E0E9FBB7EFBD Validity Not Before: May 15 06:27:17 2025 GMT Not After : May 22 06:27:17 2025 GMT Subject: CN=68258945-179a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7e:50:9f:6e:a7:c8:e5:99:80:5a:6e:83:27: db:a6:15:cc:76:94:35:3a:03:16:c5:d2:61:d0:60: a1:9d:8d:f6:e1:d5:3f:5d:11:7c:ce:0a:6e:0f:1a: ac:12:b5:a5:f5:e9:3b:e4:a6:f6:36:8e:c1:40:85: 32:0e:98:9a:e8:10:91:1a:f0:a5:ec:f4:fb:a2:2a: fa:e1:ab:e1:38:37:c8:48:09:46:85:2b:39:3f:23: e8:08:2b:b4:ad:7d:b3:01:d9:02:18:a7:42:ae:55: 20:70:5c:9a:13:f3:1b:f1:f0:f1:f0:8a:96:2d:21: 10:69:33:fa:67:60:7b:ad:40:33:f9:8b:9d:0f:e3: 22:96:ad:19:78:af:b5:b5:92:8a:0b:7f:82:2c:9e: d9:c2:77:6f:31:23:69:e1:8c:d4:00:e3:66:4a:af: 91:b9:6d:92:ce:bc:61:52:81:0f:2c:b0:2d:53:55: 28:b8:31:33:96:0e:7d:27:1a:42:ec:97:5f:40:43: 0e:77:e1:ae:83:df:0d:dd:20:9e:c1:b8:9a:62:c6: f2:55:53:a3:e1:d5:4f:04:16:1f:77:99:5d:bc:81: b9:5e:4e:89:0a:44:df:ae:13:3c:77:97:17:36:dd: 11:70:35:c8:9b:c6:57:a3:e7:ff:8b:d8:e2:e5:02: 67:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:31:19:A6:59:EB:BF:E6:AE:B5:37:D6:B8:6B:6F:BD:74:C7:97:62 X509v3 Authority Key Identifier: keyid:B0:27:95:D2:E0:9E:3A:AA:3E:36:D2:B5:92:D2:E0:E9:FB:B7:EF:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:27:c0:f4:5e:be:3e:dd:1b:33:e0:dc:4d:70:bf:78:98:1f: 1b:5d:57:65:00:62:f4:50:b7:e9:03:25:2f:f7:b0:6a:9d:8a: 5d:90:21:7a:b3:75:2a:b8:68:fb:2b:b7:a1:bb:62:19:63:92: 39:be:15:14:7e:bc:6b:81:ad:43:fe:ba:27:a4:24:74:ad:da: ab:e7:73:fd:33:7e:74:72:c4:e3:d2:20:6e:fc:b5:a4:a2:62: 16:72:b0:85:1c:62:59:d3:0c:85:dd:73:d9:25:e1:aa:4e:e1: 9a:f7:7f:8b:cd:40:44:b6:32:26:a2:d2:ad:50:6e:ce:9a:87: d6:17:a4:58:67:73:6a:e6:35:14:5e:6a:20:da:3c:f3:ad:c6: 0c:62:97:13:bc:cb:40:b2:ba:83:01:99:00:a5:3f:99:03:2e: 12:19:ba:2a:d8:82:c8:43:ad:90:14:1f:11:b5:27:1f:06:cc: b0:79:39:8b:55:14:3b:3a:d1:91:ae:9e:8b:15:a8:df:9e:08: ca:ae:46:4f:f9:e3:7d:27:07:5b:95:69:cb:f9:fb:50:d3:27: c0:51:77:3f:78:1e:77:5d:ac:4c:c4:5f:c6:54:10:e4:d8:cc: 3a:b1:bf:52:19:09:b0:6a:30:5d:1d:00:93:bc:8f:fa:b8:96: cc:43:12:ad -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTBGRTExMC8GA1UEBRMoQjAyNzk1RDJFMDlFM0FBQTNFMzZEMkI1OTJEMkUwRTlG QkI3RUZCRDAeFw0yNTA1MTUwNjI3MTdaFw0yNTA1MjIwNjI3MTdaMBgxFjAUBgNV BAMTDTY4MjU4OTQ1LTE3OWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDflCfbqfI5ZmAWm6DJ9umFcx2lDU6AxbF0mHQYKGdjfbh1T9dEXzOCm4PGqwS taX16TvkpvY2jsFAhTIOmJroEJEa8KXs9PuiKvrhq+E4N8hICUaFKzk/I+gIK7St fbMB2QIYp0KuVSBwXJoT8xvx8PHwipYtIRBpM/pnYHutQDP5i50P4yKWrRl4r7W1 kooLf4IsntnCd28xI2nhjNQA42ZKr5G5bZLOvGFSgQ8ssC1TVSi4MTOWDn0nGkLs l19AQw534a6D3w3dIJ7BuJpixvJVU6Ph1U8EFh93mV28gbleTokKRN+uEzx3lxc2 3RFwNcibxlej5/+L2OLlAme/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtTEZplnr v+autTfWuGtvvXTHl2IwHwYDVR0jBBgwFoAUsCeV0uCeOqo+NtK1ktLg6fu3770w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFMEZFLzM3MzM0QkUyQUJD QTExRUZBOTk0RDEyOUM0RjlBRTAyL3NDZVYwdUNlT3FvLU50SzFrdExnNmZ1Mzc3 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc0NlVjB1Q2VPcW8tTnRLMWt0TGc2ZnUzNzcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF MEZFLzM3MzM0QkUyQUJDQTExRUZBOTk0RDEyOUM0RjlBRTAyL3NDZVYwdUNlT3Fv LU50SzFrdExnNmZ1Mzc3MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEcnwPRevj7dGzPg3E1wv3iYHxtdV2UAYvRQt+kDJS/3sGqdil2QIXqz dSq4aPsrt6G7Yhljkjm+FRR+vGuBrUP+uiekJHSt2qvnc/0zfnRyxOPSIG78taSi YhZysIUcYlnTDIXdc9kl4apO4Zr3f4vNQES2Miai0q1Qbs6ah9YXpFhnc2rmNRRe aiDaPPOtxgxilxO8y0CyuoMBmQClP5kDLhIZuirYgshDrZAUHxG1Jx8GzLB5OYtV FDs60ZGunosVqN+eCMquRk/5430nB1uVacv5+1DTJ8BRdz94HnddrEzEX8ZUEOTY zDqxv1IZCbBqMF0dAJO8j/q4lsxDEq0= -----END CERTIFICATE-----Generated at Fri May 16 18:41:51 2025 by rpki-client