$ rpki-client -vvf rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft File: t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft (raw, json) Hash identifier: Ujp7/qGVpQOeNlYJ+1F1pDOQg2y5d3zeiWn5bPlAYvo= Subject key identifier: 7F:3C:91:A5:93:84:49:CD:71:7B:E6:74:47:31:5F:72:60:E3:14:AE Authority key identifier: B7:91:BD:1C:9E:20:81:AA:84:F8:07:80:66:C0:C7:F6:0A:63:79:0E Certificate issuer: /CN=A917F8F2/serialNumber=B791BD1C9E2081AA84F8078066C0C7F60A63790E Certificate serial: 082A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft Manifest number: 081B Signing time: Sat 10 May 2025 20:32:08 +0000 Manifest this update: Sat 10 May 2025 20:32:08 +0000 Manifest next update: Sat 17 May 2025 20:32:08 +0000 Files and hashes: 1: t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl (hash: SkLhvnLP7DSw8sr/LAH66neEW+WYjd6oQIi9jGpfFDw=) 2: B78B5CB6D65F11EA8B30486EC4F9AE02.roa (hash: MyNq7pYsfXRPiYwbL0q3/Dn2sx3QYfe2KkNfFn5PXS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2090 (0x82a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F8F2, serialNumber=B791BD1C9E2081AA84F8078066C0C7F60A63790E Validity Not Before: May 10 20:32:08 2025 GMT Not After : May 17 20:32:08 2025 GMT Subject: CN=681fb7c8-3f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:94:5d:82:2f:23:d2:04:ac:5a:f5:66:b9:1a: 3d:83:9b:1d:c2:27:8a:26:cc:32:34:76:7f:6e:03: a7:fb:15:e4:91:cc:6b:cc:bd:d9:cc:70:af:40:f6: 40:e7:5b:a7:cb:6a:ab:62:d0:84:d9:ca:0c:de:92: fe:af:cc:20:b0:42:bf:b2:32:73:24:72:38:6c:c8: a0:c4:21:d6:cf:8d:5b:0e:1e:07:0d:f7:6c:aa:75: 66:76:61:69:82:8a:65:f3:8a:18:c9:c0:c1:56:bb: 11:f6:53:4c:a1:d2:b9:6d:99:0a:55:12:d9:6c:39: 17:ce:80:4b:49:1c:1b:76:46:6a:65:17:04:40:94: 3d:d7:88:1b:e7:b6:fc:da:b4:98:ae:04:80:c8:69: 81:76:cd:9f:c9:db:0b:ed:d5:4a:05:b4:61:ab:d7: 46:93:3c:1b:af:7e:95:b5:2b:d2:5a:83:e7:f3:b2: 16:ed:7e:b7:e4:67:66:79:39:11:ce:b7:8b:05:b1: f6:eb:42:53:c8:a5:04:cc:02:32:a5:8c:f4:4e:21: 00:49:59:ee:02:48:35:45:5e:d5:a9:be:0b:b9:77: ea:eb:1f:61:8b:25:11:d3:b4:11:62:a1:6c:de:a1: 6b:3c:61:ff:05:18:cc:9b:f8:de:4d:7d:df:83:14: 6d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:3C:91:A5:93:84:49:CD:71:7B:E6:74:47:31:5F:72:60:E3:14:AE X509v3 Authority Key Identifier: keyid:B7:91:BD:1C:9E:20:81:AA:84:F8:07:80:66:C0:C7:F6:0A:63:79:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:fa:34:13:e0:f2:9d:a1:07:40:e9:08:34:f2:4e:e5:6a:24: 85:f1:86:5d:62:47:b2:52:dd:9d:1f:44:a6:a8:9b:b9:d3:af: 7a:26:fb:9d:95:06:3a:9b:a0:ee:b8:03:df:e5:75:1d:1c:bf: 41:1e:9b:d6:6f:8f:7e:5b:62:e2:f3:75:e4:7b:e3:f4:79:b3: 74:2d:dd:d1:27:b2:e2:e6:76:3b:53:c3:5f:ee:e2:48:be:40: b1:da:1d:8b:d1:b1:8b:54:c5:8b:3e:79:8b:5f:77:b1:76:fe: db:f0:e6:48:73:bd:c2:60:09:84:90:0c:24:12:c1:7e:39:65: 8a:67:81:0a:a4:36:2c:bb:5d:b1:3d:c8:a6:76:53:a7:d0:a8: 03:46:b2:cf:a3:f3:92:09:7a:f4:c7:2e:e0:18:96:9a:1f:06: e6:d3:1c:c6:4c:f8:c2:ff:2d:ea:65:de:ed:07:e4:d7:3a:d6: e5:a0:39:55:fe:31:30:1f:af:22:10:74:44:4c:01:3d:83:14: cb:ce:96:ac:66:cc:12:ca:0e:e9:eb:f5:ad:ca:3b:af:69:4b: f0:83:35:01:f6:6d:26:4f:92:40:78:9e:93:46:70:1f:0b:60: 35:34:fd:7c:78:a0:35:c7:0b:2d:c6:3c:48:10:f1:0d:c5:21: a4:80:0b:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4RjIxMTAvBgNVBAUTKEI3OTFCRDFDOUUyMDgxQUE4NEY4MDc4MDY2QzBDN0Y2 MEE2Mzc5MEUwHhcNMjUwNTEwMjAzMjA4WhcNMjUwNTE3MjAzMjA4WjAYMRYwFAYD VQQDEw02ODFmYjdjOC0zZjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpRdgi8j0gSsWvVmuRo9g5sdwieKJswyNHZ/bgOn+xXkkcxrzL3ZzHCvQPZA 51uny2qrYtCE2coM3pL+r8wgsEK/sjJzJHI4bMigxCHWz41bDh4HDfdsqnVmdmFp gopl84oYycDBVrsR9lNModK5bZkKVRLZbDkXzoBLSRwbdkZqZRcEQJQ914gb57b8 2rSYrgSAyGmBds2fydsL7dVKBbRhq9dGkzwbr36VtSvSWoPn87IW7X635GdmeTkR zreLBbH260JTyKUEzAIypYz0TiEASVnuAkg1RV7Vqb4LuXfq6x9hiyUR07QRYqFs 3qFrPGH/BRjMm/jeTX3fgxRt6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH88kaWT hEnNcXvmdEcxX3Jg4xSuMB8GA1UdIwQYMBaAFLeRvRyeIIGqhPgHgGbAx/YKY3kO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjhGMi8wMjJENTcxQ0Q2 NUUxMUVBQjYwQ0EzNkJDNEY5QUUwMi90NUc5SEo0Z2dhcUUtQWVBWnNESDlncGpl UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q1RzlISjRnZ2FxRS1BZUFac0RIOWdwamVRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjhGMi8wMjJENTcxQ0Q2NUUxMUVBQjYwQ0EzNkJDNEY5QUUwMi90NUc5SEo0Z2dh cUUtQWVBWnNESDlncGplUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC++jQT4PKdoQdA6Qg08k7laiSF8YZdYkeyUt2dH0SmqJu50696Jvud lQY6m6DuuAPf5XUdHL9BHpvWb49+W2Li83Xke+P0ebN0Ld3RJ7Li5nY7U8Nf7uJI vkCx2h2L0bGLVMWLPnmLX3exdv7b8OZIc73CYAmEkAwkEsF+OWWKZ4EKpDYsu12x PcimdlOn0KgDRrLPo/OSCXr0xy7gGJaaHwbm0xzGTPjC/y3qZd7tB+TXOtbloDlV /jEwH68iEHRETAE9gxTLzpasZswSyg7p6/WtyjuvaUvwgzUB9m0mT5JAeJ6TRnAf C2A1NP18eKA1xwstxjxIEPENxSGkgAs/ -----END CERTIFICATE-----Generated at Sun May 11 15:57:48 2025 by rpki-client