$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft File: s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft (raw, json) Hash identifier: y+3vjTDhjhEd2EgNRSLf25b5HuYZK0U/Isnp3CI7wxg= Subject key identifier: C1:BD:9C:55:03:59:1E:2A:B5:FA:D6:73:98:34:79:B9:48:B1:4C:37 Authority key identifier: B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44 Certificate issuer: /CN=A917530D/serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44 Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft Manifest number: 0106 Signing time: Sun 11 May 2025 04:03:27 +0000 Manifest this update: Sun 11 May 2025 04:03:27 +0000 Manifest next update: Sun 18 May 2025 04:03:27 +0000 Files and hashes: 1: s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl (hash: /TRrnj1XugJfQ3JuMmrnMytpe/qqrlPLY/BoQyit9G4=) 2: 762CACD0B04311EF95390327C4F9AE02.roa (hash: 7lH097TnqT2Frr0JL7F0/A/6TnFN0hBEwwqzvbNC3Tc=) 3: A97CBD42A06611EFA888B57DC4F9AE02.roa (hash: iA4PiBqhCGu6j+QREktQJZZ0YDevgINmDR162rqZIpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:03:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917530D, serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44 Validity Not Before: May 11 04:03:27 2025 GMT Not After : May 18 04:03:27 2025 GMT Subject: CN=6820218f-73f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:28:9e:d3:c7:9d:dd:07:8c:2a:95:67:f9:90: 9b:b9:cd:e2:4c:93:45:fa:92:6d:2e:6b:5d:29:eb: 27:d1:64:48:c7:f9:41:6a:f5:3a:e5:06:98:e6:21: f6:1d:68:cd:a4:03:35:70:9c:7a:10:6b:9c:17:2d: fb:35:3c:76:39:2a:c9:62:d3:78:83:75:1f:9b:af: f5:87:a4:a5:72:2e:95:76:61:25:f3:45:11:dd:1d: fd:fe:ac:98:88:40:e3:d4:82:ac:1b:b8:e4:10:c0: 9d:ac:ed:21:e6:49:d7:13:49:00:78:6e:8d:5c:5c: 7d:76:25:6e:19:ba:ec:75:6a:66:37:5f:3b:d6:47: 90:6b:d2:09:87:58:c5:5e:90:49:f6:f9:6f:5b:71: fa:48:3f:61:1f:ae:9c:54:06:81:fe:93:71:7a:d9: 18:4b:14:51:4b:f7:93:32:ee:26:be:32:b0:4c:b9: ec:3b:b8:98:6c:c6:4a:7f:a5:27:96:90:87:f1:52: 48:b9:ba:0a:d1:4c:5d:74:8e:a7:df:60:8c:61:f9: 70:6c:4f:b8:bc:f6:ac:50:0d:30:eb:0c:a3:e2:d0: f3:74:1e:f4:3a:16:5f:9b:c1:f3:50:16:05:d9:67: 43:3b:73:d9:af:37:3a:bd:af:bb:f6:73:62:7e:de: 85:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:BD:9C:55:03:59:1E:2A:B5:FA:D6:73:98:34:79:B9:48:B1:4C:37 X509v3 Authority Key Identifier: keyid:B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:14:8a:be:96:7e:0c:75:92:e9:24:e3:e1:ff:87:29:17:fd: a5:26:91:ce:b9:e9:34:f2:ac:c7:3d:9d:d5:fe:1e:2d:45:86: 49:95:a2:75:11:13:f2:79:7c:84:45:10:f7:1b:e6:c2:b2:fd: c8:6d:39:ec:06:3d:5e:d0:58:bb:1e:98:4b:a1:76:ba:6b:50: c2:be:71:fb:61:0e:78:58:41:89:b9:18:22:73:fb:30:42:06: a5:c1:42:e8:8d:c8:7d:7e:4a:28:09:47:5b:92:77:d7:31:8c: 38:0f:5a:ab:8c:63:90:db:cb:60:58:1b:ba:29:99:01:ac:0b: 9c:b7:f5:b3:15:b6:5f:68:46:b6:f9:54:7b:c2:a5:7a:cd:7f: 45:9e:55:2f:21:6e:7c:7e:4b:4c:2a:2b:bd:0c:06:a8:80:fe: e3:e8:af:e5:e9:93:d6:c8:76:09:f5:17:e4:25:fa:58:fb:45: 16:dd:66:50:b4:a0:74:39:7d:f3:7d:cf:12:e2:d1:11:36:96: 3d:c4:72:4c:7a:55:5d:46:45:bf:81:6f:d6:bb:c3:26:8f:f2: 67:7a:12:ce:7b:b1:c7:e4:2d:59:c4:ae:26:70:a1:3f:82:2d: cf:23:84:f2:cb:33:fb:6e:d3:40:82:34:96:d3:f6:53:a9:f7: 70:4e:f6:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMEQxMTAvBgNVBAUTKEIzOTkyRjBENDlCQUY2QTM2RkRBNjU4RTVCNDU5NDY5 NTIxRTVCNDQwHhcNMjUwNTExMDQwMzI3WhcNMjUwNTE4MDQwMzI3WjAYMRYwFAYD VQQDEw02ODIwMjE4Zi03M2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyie08ed3QeMKpVn+ZCbuc3iTJNF+pJtLmtdKesn0WRIx/lBavU65QaY5iH2 HWjNpAM1cJx6EGucFy37NTx2OSrJYtN4g3Ufm6/1h6Slci6VdmEl80UR3R39/qyY iEDj1IKsG7jkEMCdrO0h5knXE0kAeG6NXFx9diVuGbrsdWpmN1871keQa9IJh1jF XpBJ9vlvW3H6SD9hH66cVAaB/pNxetkYSxRRS/eTMu4mvjKwTLnsO7iYbMZKf6Un lpCH8VJIuboK0UxddI6n32CMYflwbE+4vPasUA0w6wyj4tDzdB70OhZfm8HzUBYF 2WdDO3PZrzc6va+79nNift6FlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMG9nFUD WR4qtfrWc5g0eblIsUw3MB8GA1UdIwQYMBaAFLOZLw1Juvajb9pljltFlGlSHltE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwRC9ERDdFMDkxQ0I2 NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi9zNWt2RFVtNjlxTnYybVdPVzBXVWFWSWVX MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3M1a3ZEVW02OXFOdjJtV09XMFdVYVZJZVcwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTMwRC9ERDdFMDkxQ0I2NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi9zNWt2RFVtNjlx TnYybVdPVzBXVWFWSWVXMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeFIq+ln4MdZLpJOPh/4cpF/2lJpHOuek08qzHPZ3V/h4tRYZJlaJ1 ERPyeXyERRD3G+bCsv3IbTnsBj1e0Fi7HphLoXa6a1DCvnH7YQ54WEGJuRgic/sw QgalwULojch9fkooCUdbknfXMYw4D1qrjGOQ28tgWBu6KZkBrAuct/WzFbZfaEa2 +VR7wqV6zX9FnlUvIW58fktMKiu9DAaogP7j6K/l6ZPWyHYJ9RfkJfpY+0UW3WZQ tKB0OX3zfc8S4tERNpY9xHJMelVdRkW/gW/Wu8Mmj/JnehLOe7HH5C1ZxK4mcKE/ gi3PI4TyyzP7btNAgjSW0/ZTqfdwTvYJ -----END CERTIFICATE-----Generated at Sun May 11 19:48:36 2025 by rpki-client