$ rpki-client -vvf rpki.apnic.net/member_repository/A915F67F/91B983C81D8A11E2B0E494E408B02CD2/5k3PxJR4oTweMa6HKi-sEL-4lTE.mft File: 5k3PxJR4oTweMa6HKi-sEL-4lTE.mft (raw, json) Hash identifier: ZITpsBQ2sKPnwgttC6ZlpD9FjFte/ArjEA0VDImNKr8= Subject key identifier: 4C:68:15:39:5F:72:0B:4E:6D:C7:F7:F3:AD:5C:9C:6A:54:CE:32:57 Authority key identifier: E6:4D:CF:C4:94:78:A1:3C:1E:31:AE:87:2A:2F:AC:10:BF:B8:95:31 Certificate issuer: /CN=A915F67F/serialNumber=E64DCFC49478A13C1E31AE872A2FAC10BFB89531 Certificate serial: 347D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k3PxJR4oTweMa6HKi-sEL-4lTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F67F/91B983C81D8A11E2B0E494E408B02CD2/5k3PxJR4oTweMa6HKi-sEL-4lTE.mft Manifest number: 347D Signing time: Mon 12 May 2025 14:32:36 +0000 Manifest this update: Mon 12 May 2025 14:32:36 +0000 Manifest next update: Mon 19 May 2025 14:32:36 +0000 Files and hashes: 1: 5k3PxJR4oTweMa6HKi-sEL-4lTE.crl (hash: bMQVjTGn4iS0Uav5f/i5IB0VF7xSfnuXiGNTwYk21AQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F67F/91B983C81D8A11E2B0E494E408B02CD2/5k3PxJR4oTweMa6HKi-sEL-4lTE.crl rsync://rpki.apnic.net/member_repository/A915F67F/91B983C81D8A11E2B0E494E408B02CD2/5k3PxJR4oTweMa6HKi-sEL-4lTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k3PxJR4oTweMa6HKi-sEL-4lTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13437 (0x347d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F67F, serialNumber=E64DCFC49478A13C1E31AE872A2FAC10BFB89531 Validity Not Before: May 12 14:32:36 2025 GMT Not After : May 19 14:32:36 2025 GMT Subject: CN=68220684-8546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3a:fb:78:93:46:d7:0d:04:15:e0:93:f4:87: 82:f9:d1:f9:d4:2a:5f:6d:7d:b8:40:4d:71:9a:7e: 3f:8d:d2:d7:f8:1e:11:03:51:17:d8:0f:22:45:f8: ca:53:ba:34:1c:7c:39:c7:e2:c9:b0:56:a8:3a:c4: 15:28:d0:d7:1b:29:51:d3:55:71:1c:58:e8:c7:f0: be:c7:0f:41:72:2d:a5:70:65:73:fa:05:26:44:d8: 7e:e6:28:14:a5:dc:69:fd:f6:60:c2:db:2b:e5:60: c9:ea:9a:37:61:24:3d:a6:0e:e0:38:5c:4a:8d:19: 44:b9:f6:c3:74:dc:d5:ff:d2:6b:a6:a3:0b:6b:46: bf:72:1b:0f:dd:3a:e7:71:32:c7:48:34:0d:ee:2c: c3:b3:c2:0b:d7:20:7c:19:49:6a:c0:e4:12:ae:73: 89:1d:00:7c:5e:ee:25:e2:5c:00:9a:dd:75:52:20: b6:b3:4a:ee:73:ea:65:17:22:4c:35:91:8e:ef:11: 92:05:fc:0b:82:0f:31:04:06:ea:de:ff:f6:db:08: 81:cc:b2:df:72:d1:4c:b3:18:41:a6:f0:6d:0f:28: d8:51:57:56:20:10:4a:b9:f2:09:b2:f1:35:34:c6: 28:a0:69:23:65:77:47:60:8c:da:d9:df:74:22:6e: 0e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:68:15:39:5F:72:0B:4E:6D:C7:F7:F3:AD:5C:9C:6A:54:CE:32:57 X509v3 Authority Key Identifier: keyid:E6:4D:CF:C4:94:78:A1:3C:1E:31:AE:87:2A:2F:AC:10:BF:B8:95:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F67F/91B983C81D8A11E2B0E494E408B02CD2/5k3PxJR4oTweMa6HKi-sEL-4lTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k3PxJR4oTweMa6HKi-sEL-4lTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F67F/91B983C81D8A11E2B0E494E408B02CD2/5k3PxJR4oTweMa6HKi-sEL-4lTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e4:3f:25:8b:54:94:90:c9:92:09:e7:c0:c9:5d:9f:7e:18: ed:89:b5:93:77:76:24:40:09:6c:eb:23:d7:6e:cd:56:2a:17: 02:7c:96:61:b9:d6:cd:e1:db:bd:8b:48:c8:77:17:dc:0f:11: 0f:75:29:d2:38:17:89:69:20:bb:4d:9f:96:33:41:b7:4a:1b: 8b:09:7c:9b:90:ac:c5:26:aa:6d:b5:0e:3a:f5:e6:9d:6f:81: 65:4f:84:53:94:80:78:73:5b:b3:3c:15:63:b5:7b:e3:dd:c1: c9:af:79:af:35:60:c1:91:a5:a5:a9:32:84:79:9d:60:26:fd: 0a:67:87:cc:70:f2:06:0a:37:df:59:fd:23:50:c9:a7:9c:1e: 99:67:93:d3:4e:cc:01:6b:77:e7:41:8f:11:39:a6:10:85:43: a9:dd:b7:3e:06:12:45:44:a6:93:56:6c:48:c7:52:40:d0:6d: 6c:f9:1a:44:a7:40:1a:56:08:5c:8e:f7:04:c0:41:8f:e7:eb: a3:d3:d0:bc:e9:02:e5:f2:80:e0:79:fd:dc:0e:86:dd:a1:9f: 4d:f8:95:a0:68:85:77:4b:8a:43:d0:6f:dc:2a:76:b5:cd:fe: 0f:c2:40:61:4c:bb:7d:04:6c:5d:c3:15:88:75:82:88:f4:0b: 25:3d:84:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY2N0YxMTAvBgNVBAUTKEU2NERDRkM0OTQ3OEExM0MxRTMxQUU4NzJBMkZBQzEw QkZCODk1MzEwHhcNMjUwNTEyMTQzMjM2WhcNMjUwNTE5MTQzMjM2WjAYMRYwFAYD VQQDEw02ODIyMDY4NC04NTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6jr7eJNG1w0EFeCT9IeC+dH51CpfbX24QE1xmn4/jdLX+B4RA1EX2A8iRfjK U7o0HHw5x+LJsFaoOsQVKNDXGylR01VxHFjox/C+xw9Bci2lcGVz+gUmRNh+5igU pdxp/fZgwtsr5WDJ6po3YSQ9pg7gOFxKjRlEufbDdNzV/9JrpqMLa0a/chsP3Trn cTLHSDQN7izDs8IL1yB8GUlqwOQSrnOJHQB8Xu4l4lwAmt11UiC2s0ruc+plFyJM NZGO7xGSBfwLgg8xBAbq3v/22wiBzLLfctFMsxhBpvBtDyjYUVdWIBBKufIJsvE1 NMYooGkjZXdHYIza2d90Im4OnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExoFTlf cgtObcf3861cnGpUzjJXMB8GA1UdIwQYMBaAFOZNz8SUeKE8HjGuhyovrBC/uJUx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjY3Ri85MUI5ODNDODFE OEExMUUyQjBFNDk0RTQwOEIwMkNEMi81azNQeEpSNG9Ud2VNYTZIS2ktc0VMLTRs VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVrM1B4SlI0b1R3ZU1hNkhLaS1zRUwtNGxURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjY3Ri85MUI5ODNDODFEOEExMUUyQjBFNDk0RTQwOEIwMkNEMi81azNQeEpSNG9U d2VNYTZIS2ktc0VMLTRsVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu5D8li1SUkMmSCefAyV2ffhjtibWTd3YkQAls6yPXbs1WKhcCfJZh udbN4du9i0jIdxfcDxEPdSnSOBeJaSC7TZ+WM0G3ShuLCXybkKzFJqpttQ469ead b4FlT4RTlIB4c1uzPBVjtXvj3cHJr3mvNWDBkaWlqTKEeZ1gJv0KZ4fMcPIGCjff Wf0jUMmnnB6ZZ5PTTswBa3fnQY8ROaYQhUOp3bc+BhJFRKaTVmxIx1JA0G1s+RpE p0AaVghcjvcEwEGP5+uj09C86QLl8oDgef3cDobdoZ9N+JWgaIV3S4pD0G/cKna1 zf4PwkBhTLt9BGxdwxWIdYKI9AslPYTw -----END CERTIFICATE-----Generated at Mon May 12 18:17:28 2025 by rpki-client