$ rpki-client -vvf rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft File: 5r9G5TDfkimPrAMq-8mECcRDBDk.mft (raw, json) Hash identifier: a8U9Ov5uGKsUrQ3m+cWNn/q/kYYJY0nMpiQahQ8R2aY= Subject key identifier: AB:C9:44:3D:20:02:24:8A:A0:7F:4C:A3:04:B3:EC:8C:B8:AC:B2:98 Authority key identifier: E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39 Certificate issuer: /CN=A91527F9/serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439 Certificate serial: 34A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft Manifest number: 348C Signing time: Sat 10 May 2025 14:54:11 +0000 Manifest this update: Sat 10 May 2025 14:54:10 +0000 Manifest next update: Sat 17 May 2025 14:54:10 +0000 Files and hashes: 1: 5r9G5TDfkimPrAMq-8mECcRDBDk.crl (hash: 76t3zU/95CpQ1gXpBAc/VyoaS4uFEXFZas5EMMwPzls=) 2: 909C5126F0A711EEA6150174C4F9AE02.roa (hash: HW9R1Ep56SryGIz4W6P5CqXSgSxlXz4KavtGaF387a4=) 3: AD5BA998D85D11EB8E31070BC4F9AE02.roa (hash: AqcTvl3JE8iQmp2mHhzhnxH+2xnTnNkhAQ8gJbtZg+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13472 (0x34a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91527F9, serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439 Validity Not Before: May 10 14:54:10 2025 GMT Not After : May 17 14:54:10 2025 GMT Subject: CN=681f6892-6742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6a:a2:d5:2e:83:1a:38:d8:85:d4:22:0d:a9: a5:68:39:4a:53:69:51:b6:44:00:53:6e:5d:ac:d0: cb:b8:ea:57:15:19:8b:7d:1a:e7:52:73:34:2a:a1: ab:dc:9b:a5:bb:5b:f4:07:e3:a7:eb:9d:77:d3:ec: f8:7a:9f:0a:5f:f8:fc:24:ec:66:c0:22:e3:08:37: 4a:4d:91:28:34:e2:98:31:79:c6:0d:ec:b1:d8:07: 6a:ed:df:74:51:48:a1:8c:b3:8f:67:e1:40:29:f3: 46:37:69:56:2d:e7:33:01:d4:83:a3:79:fe:b9:29: 6b:62:9b:ea:2a:a0:72:59:2e:81:a3:ea:de:e4:a0: 9a:71:b5:b6:d4:68:76:4d:db:4c:bb:2d:37:91:91: 05:fa:c7:be:81:8a:6c:6b:87:aa:78:f6:7f:eb:bf: 6f:99:1a:da:0f:fa:89:fa:a7:71:c0:ca:6e:de:69: ef:24:2d:20:1c:aa:01:e1:eb:f4:57:14:f9:ba:8f: bf:2c:13:75:45:83:09:66:78:10:08:af:b7:b1:0f: ed:85:65:d0:83:b5:07:b1:52:42:a7:10:ef:e4:13: 38:b8:2f:1a:e4:5a:68:33:63:71:b5:fc:da:39:cd: e7:aa:de:17:54:b1:72:c9:e0:f7:7b:ac:c3:b2:b1: c0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C9:44:3D:20:02:24:8A:A0:7F:4C:A3:04:B3:EC:8C:B8:AC:B2:98 X509v3 Authority Key Identifier: keyid:E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:45:1a:99:57:23:99:28:0e:d4:eb:f2:16:14:18:d0:85:92: 84:5f:3d:5a:c8:05:06:d4:a6:64:9e:14:19:b0:2c:2f:fc:61: 2a:ea:ff:56:6a:5a:4f:26:f4:d1:0e:c7:08:49:f5:a7:74:0d: f4:60:ee:6e:b4:83:62:b2:b5:e8:a4:20:5a:c9:fa:5d:83:3c: 53:a9:15:0b:9c:26:3f:db:14:ec:6d:56:80:cc:4f:ea:8c:37: ba:89:d2:1a:ee:8e:5f:85:0f:05:7e:7c:df:93:d8:f3:c0:ff: 63:65:6c:40:df:ad:2f:f0:b8:6f:fa:5d:72:ae:6d:df:6a:25: 34:24:dd:b1:6d:b3:b9:5e:da:13:08:0e:a1:cc:42:ca:61:10: 22:2f:c4:1e:9e:42:04:4c:d9:e5:ab:18:93:66:9f:45:5b:ad: 16:0c:8e:58:b5:66:89:73:ad:56:2b:2c:1d:24:c0:2b:14:a9: 0b:44:ba:fd:da:b6:3a:08:b0:f7:75:c6:24:a0:04:d1:8a:21: 88:20:c7:01:12:bf:14:b6:ef:31:7d:fd:0c:b2:d1:aa:40:c0: 7d:4a:5b:06:32:bf:fb:f9:9d:0a:9e:c0:59:ce:fa:af:7d:4a: 93:27:13:5b:52:f2:63:7d:54:e0:78:b2:53:c9:96:55:0a:b5: 8c:e6:ef:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI3RjkxMTAvBgNVBAUTKEU2QkY0NkU1MzBERjkyMjk4RkFDMDMyQUZCQzk4NDA5 QzQ0MzA0MzkwHhcNMjUwNTEwMTQ1NDEwWhcNMjUwNTE3MTQ1NDEwWjAYMRYwFAYD VQQDEw02ODFmNjg5Mi02NzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmqi1S6DGjjYhdQiDamlaDlKU2lRtkQAU25drNDLuOpXFRmLfRrnUnM0KqGr 3Julu1v0B+On65130+z4ep8KX/j8JOxmwCLjCDdKTZEoNOKYMXnGDeyx2Adq7d90 UUihjLOPZ+FAKfNGN2lWLeczAdSDo3n+uSlrYpvqKqByWS6Bo+re5KCacbW21Gh2 TdtMuy03kZEF+se+gYpsa4eqePZ/679vmRraD/qJ+qdxwMpu3mnvJC0gHKoB4ev0 VxT5uo+/LBN1RYMJZngQCK+3sQ/thWXQg7UHsVJCpxDv5BM4uC8a5FpoM2Nxtfza Oc3nqt4XVLFyyeD3e6zDsrHA5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvJRD0g AiSKoH9MowSz7Iy4rLKYMB8GA1UdIwQYMBaAFOa/RuUw35Ipj6wDKvvJhAnEQwQ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjdGOS82RUQyRUJBQTFE OUExMUUyQUU5M0FEODcwOEIwMkNEMi81cjlHNVREZmtpbVByQU1xLThtRUNjUkRC RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyOUc1VERma2ltUHJBTXEtOG1FQ2NSREJEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjdGOS82RUQyRUJBQTFEOUExMUUyQUU5M0FEODcwOEIwMkNEMi81cjlHNVREZmtp bVByQU1xLThtRUNjUkRCRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrRRqZVyOZKA7U6/IWFBjQhZKEXz1ayAUG1KZknhQZsCwv/GEq6v9W alpPJvTRDscISfWndA30YO5utINisrXopCBayfpdgzxTqRULnCY/2xTsbVaAzE/q jDe6idIa7o5fhQ8Ffnzfk9jzwP9jZWxA360v8Lhv+l1yrm3faiU0JN2xbbO5XtoT CA6hzELKYRAiL8QenkIETNnlqxiTZp9FW60WDI5YtWaJc61WKywdJMArFKkLRLr9 2rY6CLD3dcYkoATRiiGIIMcBEr8Utu8xff0MstGqQMB9SlsGMr/7+Z0KnsBZzvqv fUqTJxNbUvJjfVTgeLJTyZZVCrWM5u+F -----END CERTIFICATE-----Generated at Sun May 11 23:31:08 2025 by rpki-client