$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft File: 5cOmhsg97m0zv-xUHqy0pKCJknk.mft (raw, json) Hash identifier: /Riq3flrU6okdr3/MZTIJHSTsRMLHQ2HxHYjzq0vtjk= Subject key identifier: C0:76:F4:0F:82:43:C5:44:A3:6E:AC:2C:80:96:23:AD:4E:40:00:89 Authority key identifier: E5:C3:A6:86:C8:3D:EE:6D:33:BF:EC:54:1E:AC:B4:A4:A0:89:92:79 Certificate issuer: /CN=A9153AA6/serialNumber=E5C3A686C83DEE6D33BFEC541EACB4A4A0899279 Certificate serial: 16C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft Manifest number: 16BD Signing time: Fri 16 May 2025 16:52:47 +0000 Manifest this update: Fri 16 May 2025 16:52:47 +0000 Manifest next update: Fri 23 May 2025 16:52:47 +0000 Files and hashes: 1: 5cOmhsg97m0zv-xUHqy0pKCJknk.crl (hash: efUxTDEsqGTv2Uvqd3oF1zLlDpA1QFVot+p10mPRXC4=) 2: 99C6F94CF52511E7948D5A0BC4F9AE02.roa (hash: vVPzJlO8vaF4Vh+BV9iHSW1TnZ35r0+ZhJx7At1qJd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.crl rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 16:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5830 (0x16c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153AA6, serialNumber=E5C3A686C83DEE6D33BFEC541EACB4A4A0899279 Validity Not Before: May 16 16:52:47 2025 GMT Not After : May 23 16:52:47 2025 GMT Subject: CN=68276d5f-57d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7d:b5:9a:69:35:f3:a1:ff:16:de:cf:b5:12: 96:32:11:b0:70:4d:be:d8:30:5c:d5:b5:2f:99:03: 7a:36:0e:53:44:ab:de:21:61:82:05:60:36:1c:d8: ca:f3:56:a1:4e:5e:a8:da:24:2c:9a:fa:fa:55:39: e6:1e:21:92:cd:01:e7:de:60:95:9b:0d:d6:e0:74: fa:f7:e0:ac:61:46:e2:8c:b4:1b:7b:b9:e9:1c:4b: 26:cc:81:5b:dc:c1:cf:f3:3d:6e:0e:a0:01:1b:58: 36:ec:e4:f1:3e:25:38:6d:b8:bc:d5:53:e9:f7:c1: 77:ae:6b:26:f2:ba:ed:17:af:51:33:92:e7:af:56: a2:27:a3:fc:12:d3:cb:8a:98:f7:3a:7a:6c:6a:11: 8b:3c:9f:56:97:f3:12:eb:f1:04:47:42:e3:e9:06: 95:30:71:f1:ef:31:20:d9:7d:7d:58:0d:1e:01:9e: ca:66:96:08:1a:1d:a7:7c:4a:59:65:e6:e0:c3:a3: 34:db:ba:0f:cb:b5:08:d1:a6:0a:bb:40:40:b4:c9: ae:33:80:0f:07:6d:6e:5b:d9:46:58:55:a8:a0:dd: c6:90:5c:4c:f4:97:c7:e0:37:9a:be:45:d6:15:45: 30:73:76:03:67:46:a5:48:a1:55:65:3a:12:4d:50: f7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:76:F4:0F:82:43:C5:44:A3:6E:AC:2C:80:96:23:AD:4E:40:00:89 X509v3 Authority Key Identifier: keyid:E5:C3:A6:86:C8:3D:EE:6D:33:BF:EC:54:1E:AC:B4:A4:A0:89:92:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:23:c4:1c:66:64:09:fd:0c:9c:eb:13:c6:cd:63:c0:24:c1: a2:38:2b:23:81:34:19:4a:bd:98:5d:15:64:9c:da:12:27:0b: 99:61:84:67:84:c6:79:40:83:90:56:06:56:9f:78:52:3e:26: c1:c2:d5:26:92:ee:c4:6e:f3:70:f1:6b:2b:06:91:ff:6a:98: 3b:6b:e4:a0:fa:76:a9:f7:42:6f:5e:90:cb:28:0f:5e:3b:10: c5:16:b3:7a:90:97:ee:aa:37:ed:ce:46:e5:9e:ba:79:1f:a6: c1:9c:49:7a:36:7b:c4:e6:48:55:42:23:19:dc:a1:75:d4:27: 5c:ef:a4:80:d4:f8:c3:a6:fc:fe:36:85:ab:27:93:fd:f8:85: 2f:04:ad:be:47:db:67:c3:35:55:93:47:d2:ff:a5:b6:dc:e1: a3:d9:2f:15:4b:2c:79:d4:12:aa:c3:2f:9e:90:52:37:ef:91: 34:1f:b5:d4:22:5b:23:bc:3f:47:9a:36:32:b3:c8:52:b4:19: 19:ca:86:45:b2:40:42:a3:38:ec:ac:bc:20:9d:7a:ea:bf:d9: e8:67:27:e9:43:31:30:84:06:07:17:95:37:e1:e4:55:be:a4: a6:ab:b2:5c:eb:0d:fc:ca:c1:e4:22:aa:22:eb:36:b9:0f:dc: 8c:dc:0e:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNBQTYxMTAvBgNVBAUTKEU1QzNBNjg2QzgzREVFNkQzM0JGRUM1NDFFQUNCNEE0 QTA4OTkyNzkwHhcNMjUwNTE2MTY1MjQ3WhcNMjUwNTIzMTY1MjQ3WjAYMRYwFAYD VQQDEw02ODI3NmQ1Zi01N2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3321mmk186H/Ft7PtRKWMhGwcE2+2DBc1bUvmQN6Ng5TRKveIWGCBWA2HNjK 81ahTl6o2iQsmvr6VTnmHiGSzQHn3mCVmw3W4HT69+CsYUbijLQbe7npHEsmzIFb 3MHP8z1uDqABG1g27OTxPiU4bbi81VPp98F3rmsm8rrtF69RM5Lnr1aiJ6P8EtPL ipj3OnpsahGLPJ9Wl/MS6/EER0Lj6QaVMHHx7zEg2X19WA0eAZ7KZpYIGh2nfEpZ Zebgw6M027oPy7UI0aYKu0BAtMmuM4APB21uW9lGWFWooN3GkFxM9JfH4DeavkXW FUUwc3YDZ0alSKFVZToSTVD32QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMB29A+C Q8VEo26sLICWI61OQACJMB8GA1UdIwQYMBaAFOXDpobIPe5tM7/sVB6stKSgiZJ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0FBNi85QzNEODdFNkY1 MjQxMUU3OTY0NEIwMDlDNEY5QUUwMi81Y09taHNnOTdtMHp2LXhVSHF5MHBLQ0pr bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVjT21oc2c5N20wenYteFVIcXkwcEtDSmtuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0FBNi85QzNEODdFNkY1MjQxMUU3OTY0NEIwMDlDNEY5QUUwMi81Y09taHNnOTdt MHp2LXhVSHF5MHBLQ0prbmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcI8QcZmQJ/Qyc6xPGzWPAJMGiOCsjgTQZSr2YXRVknNoSJwuZYYRn hMZ5QIOQVgZWn3hSPibBwtUmku7EbvNw8WsrBpH/apg7a+Sg+nap90JvXpDLKA9e OxDFFrN6kJfuqjftzkblnrp5H6bBnEl6NnvE5khVQiMZ3KF11Cdc76SA1PjDpvz+ NoWrJ5P9+IUvBK2+R9tnwzVVk0fS/6W23OGj2S8VSyx51BKqwy+ekFI375E0H7XU IlsjvD9HmjYys8hStBkZyoZFskBCozjsrLwgnXrqv9noZyfpQzEwhAYHF5U34eRV vqSmq7Jc6w38ysHkIqoi6za5D9yM3A5q -----END CERTIFICATE-----Generated at Sat May 17 05:45:24 2025 by rpki-client