$ rpki-client -vvf rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft File: b35Y0Iljiffn_k6HlapVXVxVUYg.mft (raw, json) Hash identifier: Zgom1LoBgzjaGZHzloLzxsztS5K5zVS7wGNxH9WK8Yw= Subject key identifier: 0D:2B:D1:10:44:28:65:CF:43:B6:8E:0A:2D:01:84:22:CE:E3:B9:70 Authority key identifier: 6F:7E:58:D0:89:63:89:F7:E7:FE:4E:87:95:AA:55:5D:5C:55:51:88 Certificate issuer: /CN=A91706E4/serialNumber=6F7E58D0896389F7E7FE4E8795AA555D5C555188 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft Manifest number: 5C Signing time: Tue 13 May 2025 06:19:56 +0000 Manifest this update: Tue 13 May 2025 06:19:55 +0000 Manifest next update: Tue 20 May 2025 06:19:55 +0000 Files and hashes: 1: b35Y0Iljiffn_k6HlapVXVxVUYg.crl (hash: GuducLlltT3yezqP16wuVXQuLR41LG7DtvtI4U3p08k=) 2: 31E9AEC6E30411EFBC0C3B2CC4F9AE02.roa (hash: iUCXkP/k8vFDK+xe4w0gGSkxJOnd/FNj32EaA1KJbt4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.crl rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91706E4, serialNumber=6F7E58D0896389F7E7FE4E8795AA555D5C555188 Validity Not Before: May 13 06:19:55 2025 GMT Not After : May 20 06:19:55 2025 GMT Subject: CN=6822e48b-346c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:97:44:39:f9:73:bf:08:39:ee:7f:65:fd:20: 20:e5:ce:8e:ff:f5:a0:44:5c:53:4d:7b:37:69:82: 82:16:a3:06:3f:d1:99:5d:f6:ea:3e:b2:46:77:a9: 3b:3a:a5:88:bd:90:c8:50:b8:e7:07:fa:63:af:60: 2b:09:9d:3f:9d:58:c8:2d:e2:80:b6:56:3c:47:bc: 91:75:cb:b6:65:91:33:8f:55:dc:ee:0a:89:7b:56: 4b:30:a3:14:ab:92:80:40:c0:cf:ec:70:8b:46:c9: ee:06:5e:a4:64:ca:7a:9d:66:43:57:80:5c:f1:f5: 36:f5:30:6b:ba:d2:88:87:92:23:ca:83:36:73:09: 2a:cd:32:cf:fb:3c:00:69:39:48:0f:02:db:06:7c: a0:f9:b0:53:86:fc:a4:96:fa:62:af:85:0c:c7:78: fa:3d:c7:6d:e3:89:98:fc:76:74:d1:ef:5b:8c:a4: d4:bb:02:35:a3:94:b2:c6:59:25:ec:40:4f:1e:f0: 2e:94:de:79:c4:c7:88:af:2a:60:12:d6:80:02:b1: d6:d0:39:0f:27:7b:d7:61:a3:5b:5c:eb:f1:c9:0c: eb:70:32:60:68:be:4d:cc:76:09:bf:e1:9d:da:35: 78:22:c7:0c:71:87:64:db:11:d1:bc:c2:5e:e6:5b: 35:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:2B:D1:10:44:28:65:CF:43:B6:8E:0A:2D:01:84:22:CE:E3:B9:70 X509v3 Authority Key Identifier: keyid:6F:7E:58:D0:89:63:89:F7:E7:FE:4E:87:95:AA:55:5D:5C:55:51:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:05:ed:38:95:6e:ad:e3:7e:41:29:31:d4:90:ce:0d:55:b4: e4:97:56:67:e6:27:cb:3c:3a:a6:ef:a6:d6:49:7c:77:71:9f: 9d:18:21:cf:39:71:80:e5:73:c7:8b:95:1a:84:e4:30:46:65: d6:b6:a6:41:9e:ef:b8:3d:de:e7:4a:47:fe:75:0f:13:55:bb: 79:56:32:39:db:06:0f:95:6b:11:1b:75:ab:7a:3e:51:a4:d7: 61:c7:d9:32:19:a5:7f:07:fd:be:12:b9:3c:f3:86:44:b2:92: 3b:26:03:42:65:f8:49:d1:64:1b:af:32:08:ac:29:5d:11:84: 1b:44:7b:a2:58:85:3c:30:b6:32:b4:92:63:64:ad:d8:cd:c4: da:2f:b1:61:1d:8a:e2:3d:42:ea:21:35:56:db:be:56:8c:0f: e9:07:86:7f:1d:d2:28:df:ae:82:25:be:79:bb:3d:40:b9:d2: 9d:20:b6:cd:e6:f1:95:04:04:3a:e2:56:2a:10:31:22:ac:2b: 7c:02:66:b2:ca:a2:1d:64:1f:6a:66:50:26:48:dd:df:8f:9c: b5:a6:df:bd:d1:4c:0a:b0:ce:61:a0:79:0a:36:f8:92:02:50: ae:bd:17:2c:10:0c:ee:38:69:cc:11:5c:62:e9:51:0c:65:76: 84:89:08:50 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDZFNDExMC8GA1UEBRMoNkY3RTU4RDA4OTYzODlGN0U3RkU0RTg3OTVBQTU1NUQ1 QzU1NTE4ODAeFw0yNTA1MTMwNjE5NTVaFw0yNTA1MjAwNjE5NTVaMBgxFjAUBgNV BAMTDTY4MjJlNDhiLTM0NmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPl0Q5+XO/CDnuf2X9ICDlzo7/9aBEXFNNezdpgoIWowY/0Zld9uo+skZ3qTs6 pYi9kMhQuOcH+mOvYCsJnT+dWMgt4oC2VjxHvJF1y7ZlkTOPVdzuCol7VkswoxSr koBAwM/scItGye4GXqRkynqdZkNXgFzx9Tb1MGu60oiHkiPKgzZzCSrNMs/7PABp OUgPAtsGfKD5sFOG/KSW+mKvhQzHePo9x23jiZj8dnTR71uMpNS7AjWjlLLGWSXs QE8e8C6U3nnEx4ivKmAS1oACsdbQOQ8ne9dho1tc6/HJDOtwMmBovk3Mdgm/4Z3a NXgixwxxh2TbEdG8wl7mWzVxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDSvREEQo Zc9Dto4KLQGEIs7juXAwHwYDVR0jBBgwFoAUb35Y0Iljiffn/k6HlapVXVxVUYgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwNkU0LzNBQkE4MEFBQTY4 NDExRUY4RjVFRDM3RkM0RjlBRTAyL2IzNVkwSWxqaWZmbl9rNkhsYXBWWFZ4VlVZ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYjM1WTBJbGppZmZuX2s2SGxhcFZYVnhWVVlnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw NkU0LzNBQkE4MEFBQTY4NDExRUY4RjVFRDM3RkM0RjlBRTAyL2IzNVkwSWxqaWZm bl9rNkhsYXBWWFZ4VlVZZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKAF7TiVbq3jfkEpMdSQzg1VtOSXVmfmJ8s8OqbvptZJfHdxn50YIc85 cYDlc8eLlRqE5DBGZda2pkGe77g93udKR/51DxNVu3lWMjnbBg+VaxEbdat6PlGk 12HH2TIZpX8H/b4SuTzzhkSykjsmA0Jl+EnRZBuvMgisKV0RhBtEe6JYhTwwtjK0 kmNkrdjNxNovsWEdiuI9QuohNVbbvlaMD+kHhn8d0ijfroIlvnm7PUC50p0gts3m 8ZUEBDriVioQMSKsK3wCZrLKoh1kH2pmUCZI3d+PnLWm373RTAqwzmGgeQo2+JIC UK69FywQDO44acwRXGLpUQxldoSJCFA= -----END CERTIFICATE-----Generated at Wed May 14 01:28:31 2025 by rpki-client