$ rpki-client -vvf rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft File: m5TObjVVCnQlu0QWLfN8v74FPCU.mft (raw, json) Hash identifier: 2U5zEZRDmJZtyVSuPLLtSyHDtCdMYcMgJBYnk/eTY4U= Subject key identifier: E1:4C:87:14:46:AA:32:C6:DD:9E:D6:67:EE:79:EF:49:09:0E:2A:CC Authority key identifier: 9B:94:CE:6E:35:55:0A:74:25:BB:44:16:2D:F3:7C:BF:BE:05:3C:25 Certificate issuer: /CN=A91776C9/serialNumber=9B94CE6E35550A7425BB44162DF37CBFBE053C25 Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft Manifest number: 0159 Signing time: Tue 13 May 2025 03:20:22 +0000 Manifest this update: Tue 13 May 2025 03:20:22 +0000 Manifest next update: Tue 20 May 2025 03:20:22 +0000 Files and hashes: 1: m5TObjVVCnQlu0QWLfN8v74FPCU.crl (hash: Rcvi5M8ClvWAGhRsKZJRRDhacv0cBygytgSCrT3arHs=) 2: C9819D5E705711EFBDEF9265C4F9AE02.roa (hash: 1McoUaNADtVmxnwjUYo0/yr8ZNju9sl8ZAS30i7LT7Y=) 3: C872E06C705711EFBDEF9265C4F9AE02.roa (hash: BmCmwmrfy1CENmrxL9jjUF6CdXOsP2Ds7n3Ty7zfap8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.crl rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91776C9, serialNumber=9B94CE6E35550A7425BB44162DF37CBFBE053C25 Validity Not Before: May 13 03:20:22 2025 GMT Not After : May 20 03:20:22 2025 GMT Subject: CN=6822ba76-5ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:08:73:83:43:ec:58:4a:dc:6f:21:0a:34:cc: fa:f2:93:1e:25:2e:97:9c:97:48:1b:fd:e3:87:be: 67:98:47:94:f8:30:43:57:3e:55:46:e6:fd:8e:9c: b3:bd:d5:9e:8e:70:69:69:e6:9b:9a:61:b7:f3:ca: 01:2c:2e:c4:78:85:e5:8b:cf:62:e6:f9:91:24:3c: 8f:d1:df:75:dc:ad:06:1e:a6:ac:d4:87:a5:bc:34: 3d:d3:ad:58:58:6c:51:e4:54:cb:41:15:32:f9:fc: 0c:bd:4d:20:4e:42:8b:36:22:21:cb:af:1c:07:ea: c8:21:30:fa:92:18:01:c1:13:40:b6:b3:20:7b:10: 96:3d:d2:92:06:66:31:34:24:db:ae:49:c1:be:68: e1:e8:66:66:bd:c4:e9:1a:8d:b4:b0:f1:83:9c:57: f1:5f:2e:19:35:fa:71:2f:66:e1:d6:a4:1e:1f:31: 4c:1d:ed:95:34:66:9b:c3:33:09:ff:b2:63:6e:91: f2:2d:5f:07:8d:2f:02:0e:ac:33:a3:19:c9:ac:f9: d2:58:20:97:1a:d3:be:de:be:66:40:b3:0a:f9:ec: 77:91:f8:8c:fe:c7:7a:92:4b:ab:c5:67:ad:09:b8: e0:39:41:4d:b7:38:ba:dd:21:e2:34:22:f6:8f:89: c8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:4C:87:14:46:AA:32:C6:DD:9E:D6:67:EE:79:EF:49:09:0E:2A:CC X509v3 Authority Key Identifier: keyid:9B:94:CE:6E:35:55:0A:74:25:BB:44:16:2D:F3:7C:BF:BE:05:3C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:3b:75:0d:c7:cb:3c:b4:71:88:b6:e9:05:2e:75:6c:d2:38: 89:a4:bb:84:65:9a:e3:f2:a6:b3:5a:e9:61:50:fe:83:27:3c: 0e:64:f6:a6:b2:d9:be:30:0b:20:0d:52:8b:15:32:e0:aa:ac: 53:51:2a:2f:e1:21:9d:7f:f0:09:ee:35:b7:b6:8d:35:dd:1f: f1:26:88:39:11:32:d0:af:eb:ae:f2:3c:1e:ea:c9:67:3e:3a: 4e:4b:d8:a0:11:d8:73:45:31:cc:2b:f8:14:d1:93:14:3e:44: 05:80:57:5c:1b:b4:fd:61:85:1d:be:0e:ca:13:f0:e2:91:8c: 20:3e:de:86:81:4d:21:e3:b3:07:22:ac:1c:60:1b:49:f8:06: 7c:c1:c6:a1:33:22:ac:c6:ba:8b:19:aa:af:8b:ed:eb:ef:b9: d6:c2:79:00:fc:30:8d:95:4a:dd:80:3e:66:81:10:6a:1d:98: 36:ba:b7:b0:bc:72:bd:48:d3:80:7c:25:89:7a:b0:bc:bf:87: 6d:34:9d:64:58:d1:c7:51:82:1b:12:c3:0f:7b:8d:4e:72:15: 5b:b5:0a:f4:c4:97:f9:c9:a0:6a:07:8d:31:6a:c0:bc:87:47: 81:4a:dc:4a:de:54:58:10:d7:ea:ef:03:42:28:bc:29:56:c6: 36:83:3f:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc2QzkxMTAvBgNVBAUTKDlCOTRDRTZFMzU1NTBBNzQyNUJCNDQxNjJERjM3Q0JG QkUwNTNDMjUwHhcNMjUwNTEzMDMyMDIyWhcNMjUwNTIwMDMyMDIyWjAYMRYwFAYD VQQDEw02ODIyYmE3Ni01ZWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ghzg0PsWErcbyEKNMz68pMeJS6XnJdIG/3jh75nmEeU+DBDVz5VRub9jpyz vdWejnBpaeabmmG388oBLC7EeIXli89i5vmRJDyP0d913K0GHqas1IelvDQ9061Y WGxR5FTLQRUy+fwMvU0gTkKLNiIhy68cB+rIITD6khgBwRNAtrMgexCWPdKSBmYx NCTbrknBvmjh6GZmvcTpGo20sPGDnFfxXy4ZNfpxL2bh1qQeHzFMHe2VNGabwzMJ /7JjbpHyLV8HjS8CDqwzoxnJrPnSWCCXGtO+3r5mQLMK+ex3kfiM/sd6kkurxWet CbjgOUFNtzi63SHiNCL2j4nI1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFMhxRG qjLG3Z7WZ+5570kJDirMMB8GA1UdIwQYMBaAFJuUzm41VQp0JbtEFi3zfL++BTwl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzZDOS8xOEMzQzc2ODJB OUQxMUVFQUFCNUM5NTNDNEY5QUUwMi9tNVRPYmpWVkNuUWx1MFFXTGZOOHY3NEZQ Q1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201VE9ialZWQ25RbHUwUVdMZk44djc0RlBDVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzZDOS8xOEMzQzc2ODJBOUQxMUVFQUFCNUM5NTNDNEY5QUUwMi9tNVRPYmpWVkNu UWx1MFFXTGZOOHY3NEZQQ1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAO3UNx8s8tHGItukFLnVs0jiJpLuEZZrj8qazWulhUP6DJzwOZPam stm+MAsgDVKLFTLgqqxTUSov4SGdf/AJ7jW3to013R/xJog5ETLQr+uu8jwe6sln PjpOS9igEdhzRTHMK/gU0ZMUPkQFgFdcG7T9YYUdvg7KE/DikYwgPt6GgU0h47MH IqwcYBtJ+AZ8wcahMyKsxrqLGaqvi+3r77nWwnkA/DCNlUrdgD5mgRBqHZg2urew vHK9SNOAfCWJerC8v4dtNJ1kWNHHUYIbEsMPe41OchVbtQr0xJf5yaBqB40xasC8 h0eBStxK3lRYENfq7wNCKLwpVsY2gz/i -----END CERTIFICATE-----Generated at Tue May 13 05:09:45 2025 by rpki-client