$ rpki-client -vvf rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft File: 5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft (raw, json) Hash identifier: 9l6qKLuvrs1+dkeq3AF57JLhLk5URjPsSOJb3iofzKE= Subject key identifier: 67:21:B7:C3:81:B6:F0:B2:5D:A9:57:0B:FB:8D:91:B8:A0:5B:FF:62 Authority key identifier: E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3 Certificate issuer: /CN=A9165362/serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3 Certificate serial: 053E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft Manifest number: 051B Signing time: Mon 12 May 2025 23:30:11 +0000 Manifest this update: Mon 12 May 2025 23:30:11 +0000 Manifest next update: Mon 19 May 2025 23:30:11 +0000 Files and hashes: 1: 5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl (hash: odo8oeHYPVNiIcChE5XYEmMSyBgRVx2nZsxI5XSNCdo=) 2: 2C4993AA271B11EF97731F0BC4F9AE02.roa (hash: 510AYYtfzA2GESknsDswoMnwkXlbF/avHNUhiFeIBXA=) 3: 9CB324BA273111EF9F5B0860C4F9AE02.roa (hash: tuypvpB5BqOqFONJHnNDkY9wl1Vyxr2l9hApI1MYGj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1342 (0x53e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165362, serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3 Validity Not Before: May 12 23:30:11 2025 GMT Not After : May 19 23:30:11 2025 GMT Subject: CN=68228483-aaa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:29:8b:f4:cf:01:58:3f:37:17:3f:c8:52:3a: 1e:35:09:9d:9e:2d:5b:c4:b8:33:ba:ad:3c:1e:b0: f0:f5:9a:26:8f:d5:11:72:a3:b6:72:be:49:c7:fc: 08:62:df:ba:93:24:d4:48:ef:3f:db:80:37:c6:8e: 36:81:b3:a0:3e:c8:20:a5:24:b5:9c:40:2a:21:2b: 60:0c:94:62:38:32:f2:50:cd:13:44:1b:34:12:8b: 60:90:c4:7d:a3:2f:eb:6c:9c:7a:dd:10:b2:69:46: d0:5d:31:c7:43:13:85:ad:31:6c:44:45:fd:c0:5a: 62:4d:82:03:70:41:e5:1d:f8:22:2e:56:fe:1e:62: 62:bd:d4:d3:a2:2a:1b:44:ba:d1:d8:18:21:ca:57: b9:01:8c:ff:f2:07:7a:67:b5:af:e3:7c:37:36:46: 1c:65:2c:f6:41:7a:f8:dd:97:2c:4a:69:b1:57:a0: 04:b1:28:63:10:d3:d6:31:b3:7d:06:ee:8d:a0:47: 6e:d3:74:8f:35:b0:20:0e:f1:6f:05:93:22:38:80: cc:a1:a0:7f:05:c5:00:2f:de:9f:e5:cd:17:c9:1c: 58:03:2d:da:ca:f6:d8:ca:21:74:76:86:99:4a:cb: ae:5f:d9:14:40:ec:6b:28:df:68:54:2d:e7:7a:50: c6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:21:B7:C3:81:B6:F0:B2:5D:A9:57:0B:FB:8D:91:B8:A0:5B:FF:62 X509v3 Authority Key Identifier: keyid:E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:2f:83:fe:01:24:4d:93:ad:b9:46:e3:2b:64:39:ca:bb:a4: 64:df:1d:59:d5:83:4d:b3:ea:72:8b:13:c0:f4:74:34:ab:f9: 0c:4b:75:bf:db:53:e0:85:51:d9:9e:10:ca:16:ad:d6:35:3f: 80:71:7b:72:4f:b4:5f:0d:d0:bb:cb:dc:9f:c4:3d:49:6b:1c: 81:7f:51:d3:d4:46:17:16:e1:3e:e0:b8:d0:82:97:6c:89:16: 06:84:c5:12:57:d7:b4:94:46:05:de:2e:9d:6c:a0:88:c7:c0: 3c:32:44:50:65:6a:23:f6:4d:e6:c3:cc:ed:19:e2:c9:e5:ca: ff:5f:0c:a0:91:6d:13:cd:e8:d5:fd:a4:25:ea:75:33:e3:8b: cb:a8:9f:10:66:b0:88:31:43:1e:6e:dc:00:20:a8:1f:71:17: 78:c3:53:28:11:eb:1e:2d:4b:d4:3d:e1:2b:83:ac:c0:ec:e1: 2b:72:8f:0c:9b:a7:d6:9b:f3:46:3a:37:ea:fe:0d:ba:cf:64: d6:b9:0c:9a:f4:3b:bf:4f:b4:1c:b3:c1:d0:61:ed:92:b2:36: f5:53:25:b4:ad:a3:83:03:ff:6f:92:6e:4e:ba:d0:b9:78:fe: 0b:5f:91:64:7f:cc:b8:70:48:be:15:e2:e8:06:5a:5e:db:f2: be:92:af:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUzNjIxMTAvBgNVBAUTKEU1RTVEMTY4QTBFMTA5NkVBMUMzRjlCN0Y4RThENzU4 RUFFQTIzRjMwHhcNMjUwNTEyMjMzMDExWhcNMjUwNTE5MjMzMDExWjAYMRYwFAYD VQQDEw02ODIyODQ4My1hYWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnymL9M8BWD83Fz/IUjoeNQmdni1bxLgzuq08HrDw9Zomj9URcqO2cr5Jx/wI Yt+6kyTUSO8/24A3xo42gbOgPsggpSS1nEAqIStgDJRiODLyUM0TRBs0EotgkMR9 oy/rbJx63RCyaUbQXTHHQxOFrTFsREX9wFpiTYIDcEHlHfgiLlb+HmJivdTToiob RLrR2Bghyle5AYz/8gd6Z7Wv43w3NkYcZSz2QXr43ZcsSmmxV6AEsShjENPWMbN9 Bu6NoEdu03SPNbAgDvFvBZMiOIDMoaB/BcUAL96f5c0XyRxYAy3ayvbYyiF0doaZ SsuuX9kUQOxrKN9oVC3nelDGNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGcht8OB tvCyXalXC/uNkbigW/9iMB8GA1UdIwQYMBaAFOXl0Wig4QluocP5t/jo11jq6iPz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTM2Mi9EOUNCRjgwQTEw QjMxMUVDQTMxREY4MkNDNEY5QUUwMi81ZVhSYUtEaENXNmh3X20zLU9qWFdPcnFJ X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVlWFJhS0RoQ1c2aHdfbTMtT2pYV09ycUlfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTM2Mi9EOUNCRjgwQTEwQjMxMUVDQTMxREY4MkNDNEY5QUUwMi81ZVhSYUtEaENX Nmh3X20zLU9qWFdPcnFJX00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYL4P+ASRNk625RuMrZDnKu6Rk3x1Z1YNNs+pyixPA9HQ0q/kMS3W/ 21PghVHZnhDKFq3WNT+AcXtyT7RfDdC7y9yfxD1JaxyBf1HT1EYXFuE+4LjQgpds iRYGhMUSV9e0lEYF3i6dbKCIx8A8MkRQZWoj9k3mw8ztGeLJ5cr/XwygkW0TzejV /aQl6nUz44vLqJ8QZrCIMUMebtwAIKgfcRd4w1MoEeseLUvUPeErg6zA7OErco8M m6fWm/NGOjfq/g26z2TWuQya9Du/T7Qcs8HQYe2Ssjb1UyW0raODA/9vkm5OutC5 eP4LX5Fkf8y4cEi+FeLoBlpe2/K+kq+2 -----END CERTIFICATE-----Generated at Tue May 13 22:58:26 2025 by rpki-client