$ rpki-client -vvf rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft File: 5iRBKkJ5WJuewvqzIiurBibTElo.mft (raw, json) Hash identifier: YLt+lbuiunt9u38c4c4dcdmyksLbOfWGlHrbv04SoIY= Subject key identifier: BD:F5:4F:27:BF:79:D7:C1:21:13:57:BD:A8:FB:D3:FF:39:02:F0:25 Authority key identifier: E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A Certificate issuer: /CN=A9168336/serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A Certificate serial: 0C6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft Manifest number: 0C60 Signing time: Wed 14 May 2025 18:31:08 +0000 Manifest this update: Wed 14 May 2025 18:31:07 +0000 Manifest next update: Wed 21 May 2025 18:31:07 +0000 Files and hashes: 1: 5iRBKkJ5WJuewvqzIiurBibTElo.crl (hash: kqsAMxtj8+zNjRl5XFct0azr87e7eVGSW4AEXDg2bMQ=) 2: BE4852941C2E11EE9A9A9940C4F9AE02.roa (hash: DnLi7rEERWA5qhTcgS0GPWRyD6exAMMBjfted7mhPy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:31:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3183 (0xc6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168336, serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A Validity Not Before: May 14 18:31:07 2025 GMT Not After : May 21 18:31:07 2025 GMT Subject: CN=6824e16b-fa51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a0:78:06:65:25:c3:13:1d:99:74:7c:85:74: 67:c8:a1:26:d5:22:2e:53:9d:7e:c9:98:9d:14:e6: f0:2a:a5:65:a9:4c:40:a8:4d:e1:00:93:05:13:7e: 8a:5b:b2:68:75:d0:ed:41:c1:df:77:f7:51:1b:ba: df:f2:36:6b:e8:b9:5c:35:93:a3:47:ed:af:7d:57: a5:ff:ef:e0:82:e4:db:56:5d:3e:83:72:31:d7:b1: 03:13:d5:31:48:ad:4e:5b:ab:f8:d4:3d:25:a0:9f: 18:32:bc:d9:8d:32:36:be:e1:8a:98:14:e2:fe:d4: 90:29:99:ac:2d:d6:7d:2d:73:c4:96:66:92:ec:22: b5:8f:22:92:6f:d5:06:03:11:cf:5c:db:f4:b8:f4: 9f:1e:d8:a2:ed:3f:5f:02:c1:19:ba:88:4e:ad:59: a3:e4:ce:d3:31:e8:c9:2e:19:86:a6:8b:45:f4:8e: 89:67:31:4e:80:8d:69:31:43:f6:81:49:9f:c3:e8: 7e:8a:ea:9c:4b:c1:a3:a5:26:b8:37:50:fb:db:b4: 26:03:d8:88:29:5e:9f:74:e0:d0:b5:95:13:73:ad: ad:48:81:0d:f2:30:e8:17:ee:8e:be:58:ed:c5:02: f9:cd:3c:d3:55:0f:79:12:59:4d:10:ea:8f:ab:65: 9f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F5:4F:27:BF:79:D7:C1:21:13:57:BD:A8:FB:D3:FF:39:02:F0:25 X509v3 Authority Key Identifier: keyid:E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:78:8e:6c:bc:23:7d:7d:91:32:79:86:0a:b6:b5:82:df:7b: 5b:b3:ab:b4:8b:84:7e:65:e4:28:54:53:00:bd:4d:62:b7:aa: 8c:f2:3c:bd:45:2b:3d:f2:80:0d:0f:a7:fd:43:33:8a:95:9b: 4a:6d:f3:2f:ce:80:c6:ca:3d:79:ac:63:d6:3b:5a:e0:52:73: a0:b5:71:23:94:96:f6:b7:6e:2c:55:06:a2:ae:74:55:99:6b: 2f:fe:9c:41:9a:61:13:6f:e0:d9:d6:31:e7:81:13:a5:c3:af: ef:fb:ec:49:ce:3a:1e:e7:eb:03:ea:d6:28:c8:2c:61:5d:7e: 75:70:0d:91:6f:00:ca:d9:2d:6d:fe:b8:8a:14:33:42:14:2c: fb:dc:b2:c9:aa:7f:93:62:e8:da:e7:d3:2b:ec:50:f3:95:24: 30:ba:58:18:7d:c0:4e:33:1a:7a:41:ca:9c:3e:d6:3c:ad:f0: 37:49:81:08:c3:0b:24:b6:ca:0d:aa:ab:62:a6:fb:66:b5:d5: 37:20:0b:58:ff:65:2c:82:ca:a7:1c:27:80:07:de:8e:b4:21: 8d:e1:80:aa:ac:3e:3a:db:8e:90:c9:9a:8a:1e:2f:e0:ae:7e: 1c:ba:db:08:e2:f7:d4:f8:9c:3c:bc:a3:df:7d:50:c5:4d:95: e5:f6:55:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgzMzYxMTAvBgNVBAUTKEU2MjQ0MTJBNDI3OTU4OUI5RUMyRkFCMzIyMkJBQjA2 MjZEMzEyNUEwHhcNMjUwNTE0MTgzMTA3WhcNMjUwNTIxMTgzMTA3WjAYMRYwFAYD VQQDEw02ODI0ZTE2Yi1mYTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4aB4BmUlwxMdmXR8hXRnyKEm1SIuU51+yZidFObwKqVlqUxAqE3hAJMFE36K W7JoddDtQcHfd/dRG7rf8jZr6LlcNZOjR+2vfVel/+/gguTbVl0+g3Ix17EDE9Ux SK1OW6v41D0loJ8YMrzZjTI2vuGKmBTi/tSQKZmsLdZ9LXPElmaS7CK1jyKSb9UG AxHPXNv0uPSfHtii7T9fAsEZuohOrVmj5M7TMejJLhmGpotF9I6JZzFOgI1pMUP2 gUmfw+h+iuqcS8GjpSa4N1D727QmA9iIKV6fdODQtZUTc62tSIEN8jDoF+6Ovljt xQL5zTzTVQ95EllNEOqPq2Wf+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL31Tye/ edfBIRNXvaj70/85AvAlMB8GA1UdIwQYMBaAFOYkQSpCeVibnsL6syIrqwYm0xJa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODMzNi8xOUY3NUE2NjAx Q0QxMUVBQjg2NUVBMjJDNEY5QUUwMi81aVJCS2tKNVdKdWV3dnF6SWl1ckJpYlRF bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVpUkJLa0o1V0p1ZXd2cXpJaXVyQmliVEVsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODMzNi8xOUY3NUE2NjAxQ0QxMUVBQjg2NUVBMjJDNEY5QUUwMi81aVJCS2tKNVdK dWV3dnF6SWl1ckJpYlRFbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAveI5svCN9fZEyeYYKtrWC33tbs6u0i4R+ZeQoVFMAvU1it6qM8jy9 RSs98oAND6f9QzOKlZtKbfMvzoDGyj15rGPWO1rgUnOgtXEjlJb2t24sVQairnRV mWsv/pxBmmETb+DZ1jHngROlw6/v++xJzjoe5+sD6tYoyCxhXX51cA2RbwDK2S1t /riKFDNCFCz73LLJqn+TYuja59Mr7FDzlSQwulgYfcBOMxp6QcqcPtY8rfA3SYEI wwsktsoNqqtipvtmtdU3IAtY/2UsgsqnHCeAB96OtCGN4YCqrD46246QyZqKHi/g rn4cutsI4vfU+Jw8vKPffVDFTZXl9lXU -----END CERTIFICATE-----Generated at Thu May 15 00:27:58 2025 by rpki-client