$ rpki-client -vvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft File: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft (raw, json) Hash identifier: XO22VttN0PPl9y/YUoqTd8ykRLOnlcGdvPvj4ZRgpfs= Subject key identifier: CF:92:86:95:38:38:EF:26:24:8A:07:C0:72:80:79:DE:E0:1E:A4:3E Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 Certificate issuer: /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Certificate serial: 08A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft Manifest number: 0895 Signing time: Mon 12 May 2025 20:23:32 +0000 Manifest this update: Mon 12 May 2025 20:23:32 +0000 Manifest next update: Mon 19 May 2025 20:23:32 +0000 Files and hashes: 1: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl (hash: Mq1u6YTNQe0G64/oFIUUheiY/wAF5O/JtzrTLsgtly0=) 2: A12DD18E2F1C11EDA3E29B09C4F9AE02.roa (hash: JY394gUy9qqM6BqtEt3A+TeeEC3ZSaP+KRzIxp12INs=) 3: A29A66FE2F1C11EDA3E29B09C4F9AE02.roa (hash: pwrQo06SW1WaZHmpSMN3Di6drTMadsg0IhrZWaRW7r4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:23:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2208 (0x8a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91652F7, serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Validity Not Before: May 12 20:23:32 2025 GMT Not After : May 19 20:23:32 2025 GMT Subject: CN=682258c4-046b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:27:5e:b9:3a:d8:58:df:94:da:63:7b:cc:19: 5c:03:38:78:c8:b0:f4:61:54:8a:ee:41:69:77:71: fc:dc:33:41:4f:ea:d4:f8:fb:29:91:fc:1b:ea:29: 96:5c:e7:6c:d2:1b:1a:c6:9f:e8:ec:77:41:c0:e3: 30:dc:59:b9:46:8a:0d:b5:6b:0a:0f:0a:dc:8c:1f: 75:5c:88:be:81:ff:20:22:73:08:c8:5d:cb:e8:b6: 40:74:d2:da:18:0d:a6:2f:d7:45:98:48:8c:a6:4d: 05:78:df:c0:4e:f5:48:42:ba:5d:ee:cf:ea:0b:e3: 16:21:d8:7d:7d:53:a7:30:f7:51:6f:5c:72:9b:b3: b7:28:60:10:1d:11:b2:29:46:6c:54:d6:b0:df:00: fe:61:52:e7:81:cd:cb:53:50:37:26:1d:64:d0:f0: 68:f6:3f:72:61:db:1e:ac:fd:49:7a:0a:62:07:c8: 15:a8:df:f0:6d:1b:2f:bf:4a:7f:f7:0d:c1:6c:31: 13:78:b7:78:de:b6:f9:fd:cd:09:58:5f:76:cc:1c: 8f:22:dd:4a:f1:87:e2:cf:85:47:7b:9a:82:a1:63: 8c:df:7e:a0:f6:ca:3b:91:f8:48:73:95:e3:21:eb: e3:fd:15:2d:7c:21:dc:53:2b:d0:1e:7e:dd:de:79: 30:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:92:86:95:38:38:EF:26:24:8A:07:C0:72:80:79:DE:E0:1E:A4:3E X509v3 Authority Key Identifier: keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:86:c8:b9:bd:c1:e9:79:c3:6c:48:84:20:ad:67:38:0d:f6: ad:3d:d9:5b:0f:f9:1e:32:87:b5:51:5a:71:29:ff:2a:5c:8e: ba:f8:b4:c9:32:20:5a:ca:58:69:d0:b7:69:d8:56:24:1e:43: fb:92:76:e1:6a:03:19:19:4d:f5:67:1d:d8:db:8d:88:42:e7: 84:ee:d1:09:bf:76:9e:c6:27:60:90:93:09:0c:15:ea:23:87: 0d:f3:da:f0:68:64:c9:e6:c5:dd:91:74:7d:52:7e:66:ab:f5: ef:d8:87:8c:59:06:87:e2:d3:70:c0:0b:f6:7a:84:8b:fb:fb: 76:1f:02:9e:39:b6:92:1d:77:64:50:c0:ca:1d:eb:d6:9d:f7: 71:eb:1a:f6:aa:11:d9:d3:84:03:1e:c0:5a:a3:a0:c4:61:61: 38:81:e3:d5:98:09:0e:72:52:30:00:ac:c9:2d:f5:bf:b5:27: 0b:ea:4c:2b:5c:cb:28:d6:70:f0:dd:40:74:11:fd:77:36:88: f2:85:54:30:e6:ad:d4:93:16:97:6b:af:cf:7c:f5:73:62:17: 5a:a7:11:41:94:61:59:1a:0d:ae:f6:09:09:74:1a:86:d7:72: 35:22:4e:04:6d:a5:ca:2e:5d:9e:80:53:d5:a6:61:15:81:b7: 6a:44:44:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyRjcxMTAvBgNVBAUTKEU1MDI3NTdDNjE3QzIxRDQ3QjFCMzU1OUMwOUQ2RUE3 QzNBRkU0MDMwHhcNMjUwNTEyMjAyMzMyWhcNMjUwNTE5MjAyMzMyWjAYMRYwFAYD VQQDEw02ODIyNThjNC0wNDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyydeuTrYWN+U2mN7zBlcAzh4yLD0YVSK7kFpd3H83DNBT+rU+Pspkfwb6imW XOds0hsaxp/o7HdBwOMw3Fm5RooNtWsKDwrcjB91XIi+gf8gInMIyF3L6LZAdNLa GA2mL9dFmEiMpk0FeN/ATvVIQrpd7s/qC+MWIdh9fVOnMPdRb1xym7O3KGAQHRGy KUZsVNaw3wD+YVLngc3LU1A3Jh1k0PBo9j9yYdserP1JegpiB8gVqN/wbRsvv0p/ 9w3BbDETeLd43rb5/c0JWF92zByPIt1K8Yfiz4VHe5qCoWOM336g9so7kfhIc5Xj Ievj/RUtfCHcUyvQHn7d3nkwhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+ShpU4 OO8mJIoHwHKAed7gHqQ+MB8GA1UdIwQYMBaAFOUCdXxhfCHUexs1WcCdbqfDr+QD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTJGNy83Q0M0NUZBRUJB QUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElkUjdHelZad0oxdXA4T3Y1 QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRSjFmR0Y4SWRSN0d6Vlp3SjF1cDhPdjVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTJGNy83Q0M0NUZBRUJBQUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElk UjdHelZad0oxdXA4T3Y1QU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZhsi5vcHpecNsSIQgrWc4DfatPdlbD/keMoe1UVpxKf8qXI66+LTJ MiBaylhp0Ldp2FYkHkP7knbhagMZGU31Zx3Y242IQueE7tEJv3aexidgkJMJDBXq I4cN89rwaGTJ5sXdkXR9Un5mq/Xv2IeMWQaH4tNwwAv2eoSL+/t2HwKeObaSHXdk UMDKHevWnfdx6xr2qhHZ04QDHsBao6DEYWE4gePVmAkOclIwAKzJLfW/tScL6kwr XMso1nDw3UB0Ef13NojyhVQw5q3UkxaXa6/PfPVzYhdapxFBlGFZGg2u9gkJdBqG 13I1Ik4EbaXKLl2egFPVpmEVgbdqRETu -----END CERTIFICATE-----Generated at Wed May 14 20:53:14 2025 by rpki-client