$ rpki-client -vvf rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft File: 5sRskdEtWFoSsFVpYh3uGtP4kI4.mft (raw, json) Hash identifier: pxBKDQIUWIrBt592T+MKWIp1RsKvYX7p4M8C/9SO2gY= Subject key identifier: AF:82:F7:53:34:7E:53:C6:3A:19:9C:F0:5D:DC:B2:D2:9A:03:71:21 Authority key identifier: E6:C4:6C:91:D1:2D:58:5A:12:B0:55:69:62:1D:EE:1A:D3:F8:90:8E Certificate issuer: /CN=A917A362/serialNumber=E6C46C91D12D585A12B05569621DEE1AD3F8908E Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft Manifest number: 0127 Signing time: Sat 17 May 2025 04:15:43 +0000 Manifest this update: Sat 17 May 2025 04:15:42 +0000 Manifest next update: Sat 24 May 2025 04:15:42 +0000 Files and hashes: 1: 5sRskdEtWFoSsFVpYh3uGtP4kI4.crl (hash: HHCNcRcLXuBoLqUZvSJwRUjbiIs7q63pOGtSRIzGVHo=) 2: 1B299892726F11EEB1217365C4F9AE02.roa (hash: 6cDYRuNREDOcfjp20jGUwg25me6jxHxjZr5vSBlmhG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.crl rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 04:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A362, serialNumber=E6C46C91D12D585A12B05569621DEE1AD3F8908E Validity Not Before: May 17 04:15:42 2025 GMT Not After : May 24 04:15:42 2025 GMT Subject: CN=68280d6f-bd42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dc:3d:7e:b7:b6:b7:3f:71:41:36:0f:62:26: 45:1c:3a:24:6d:7c:29:90:bd:33:f9:aa:95:c4:32: 0b:55:12:5e:f7:24:57:1e:dd:ca:67:f8:0d:ce:a9: 74:c0:b3:8c:9a:d0:67:11:f8:96:bd:58:c5:ae:c6: 97:1b:52:67:82:25:77:10:b6:c3:d7:c4:66:ad:4d: 30:66:97:4a:e5:51:51:1c:fb:65:21:f7:26:69:b8: 16:91:6a:fa:81:9e:ff:34:1a:f0:d0:80:6d:74:ad: 3e:cb:3b:14:92:ea:fd:34:a0:93:1f:94:c0:00:b9: 95:33:6b:26:89:b9:a5:e4:75:3d:dd:54:b6:a1:21: c3:a8:38:cd:ec:dd:6f:27:a8:a9:7c:dd:ef:53:00: 70:40:90:46:61:17:d6:11:21:48:93:99:3a:04:c2: 05:a8:d8:e5:14:22:8d:ff:8e:26:5c:03:34:09:5e: 8e:84:53:82:87:3f:ad:f5:ea:fd:fc:27:60:1f:4e: b1:86:1f:60:41:69:09:e2:bf:f5:46:71:b0:89:a4: d9:54:f2:f0:b6:06:24:0c:57:6f:02:6a:4f:9f:2b: 58:35:ea:dd:93:c7:10:21:b4:3d:aa:e0:4e:25:7c: 34:d9:94:aa:bb:9b:b6:bb:ec:03:4c:a2:dd:a8:48: 91:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:82:F7:53:34:7E:53:C6:3A:19:9C:F0:5D:DC:B2:D2:9A:03:71:21 X509v3 Authority Key Identifier: keyid:E6:C4:6C:91:D1:2D:58:5A:12:B0:55:69:62:1D:EE:1A:D3:F8:90:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:02:88:52:63:d7:93:ac:64:45:6e:77:10:dd:5e:a9:6c:d7: 9a:c7:01:3c:be:48:c1:9a:8c:e5:de:12:49:55:6e:6c:e2:b7: 06:eb:a2:cb:98:ba:10:32:bd:96:bb:99:6a:2d:3c:32:71:af: 5f:e5:ba:f3:e6:76:d7:bf:06:01:72:fc:cd:12:da:fe:86:95: bf:38:2b:bc:12:c1:31:6a:2e:ed:0f:6a:02:1f:76:7d:e9:22: c6:39:8b:c9:84:4b:83:87:be:40:6f:a3:d6:a2:2b:e4:69:17: 10:9e:11:ee:70:1c:f9:80:69:4c:aa:23:c0:91:db:4d:d2:ab: 0b:c9:a0:89:68:19:9a:c1:8d:29:db:ae:18:f7:c9:25:39:0f: 7a:76:5a:e4:3c:10:af:a4:11:13:fd:1f:66:f9:65:0a:0a:f0: a9:65:f1:83:10:0f:27:24:fc:2a:6a:c2:db:aa:b1:92:34:f6: a7:4d:f5:70:75:df:3d:26:fd:f0:21:8f:6f:eb:77:6e:6a:54: 60:c1:02:3b:02:b3:02:30:54:53:d7:e8:77:4d:67:f5:c2:38: 4e:94:9e:e5:8f:8a:20:22:2e:35:76:3e:b0:5f:87:41:df:55: 16:c7:df:3c:4b:c2:34:ba:af:40:6f:e5:7f:84:01:3b:0c:c0: b5:3f:12:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0EzNjIxMTAvBgNVBAUTKEU2QzQ2QzkxRDEyRDU4NUExMkIwNTU2OTYyMURFRTFB RDNGODkwOEUwHhcNMjUwNTE3MDQxNTQyWhcNMjUwNTI0MDQxNTQyWjAYMRYwFAYD VQQDEw02ODI4MGQ2Zi1iZDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutw9fre2tz9xQTYPYiZFHDokbXwpkL0z+aqVxDILVRJe9yRXHt3KZ/gNzql0 wLOMmtBnEfiWvVjFrsaXG1JngiV3ELbD18RmrU0wZpdK5VFRHPtlIfcmabgWkWr6 gZ7/NBrw0IBtdK0+yzsUkur9NKCTH5TAALmVM2smibml5HU93VS2oSHDqDjN7N1v J6ipfN3vUwBwQJBGYRfWESFIk5k6BMIFqNjlFCKN/44mXAM0CV6OhFOChz+t9er9 /CdgH06xhh9gQWkJ4r/1RnGwiaTZVPLwtgYkDFdvAmpPnytYNerdk8cQIbQ9quBO JXw02ZSqu5u2u+wDTKLdqEiR9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+C91M0 flPGOhmc8F3cstKaA3EhMB8GA1UdIwQYMBaAFObEbJHRLVhaErBVaWId7hrT+JCO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTM2Mi83Q0JBNEM0Qzcy NkUxMUVFOUZFMzUwNjFDNEY5QUUwMi81c1Jza2RFdFdGb1NzRlZwWWgzdUd0UDRr STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVzUnNrZEV0V0ZvU3NGVnBZaDN1R3RQNGtJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTM2Mi83Q0JBNEM0QzcyNkUxMUVFOUZFMzUwNjFDNEY5QUUwMi81c1Jza2RFdFdG b1NzRlZwWWgzdUd0UDRrSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6AohSY9eTrGRFbncQ3V6pbNeaxwE8vkjBmozl3hJJVW5s4rcG66LL mLoQMr2Wu5lqLTwyca9f5brz5nbXvwYBcvzNEtr+hpW/OCu8EsExai7tD2oCH3Z9 6SLGOYvJhEuDh75Ab6PWoivkaRcQnhHucBz5gGlMqiPAkdtN0qsLyaCJaBmawY0p 264Y98klOQ96dlrkPBCvpBET/R9m+WUKCvCpZfGDEA8nJPwqasLbqrGSNPanTfVw dd89Jv3wIY9v63dualRgwQI7ArMCMFRT1+h3TWf1wjhOlJ7lj4ogIi41dj6wX4dB 31UWx988S8I0uq9Ab+V/hAE7DMC1PxK7 -----END CERTIFICATE-----Generated at Sun May 18 00:16:40 2025 by rpki-client