$ rpki-client -vvf rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft File: 5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft (raw, json) Hash identifier: tO3u/1cfx+pl5P/GN8dIdzSRiC/iwrAIOq2UzhHGUoM= Subject key identifier: DC:97:43:A4:82:18:18:7E:CD:2E:1D:5F:1A:F3:5D:FE:84:7F:3A:01 Authority key identifier: E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D Certificate issuer: /CN=A91801A5/serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D Certificate serial: 0671 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft Manifest number: 0669 Signing time: Mon 12 May 2025 22:10:54 +0000 Manifest this update: Mon 12 May 2025 22:10:54 +0000 Manifest next update: Mon 19 May 2025 22:10:54 +0000 Files and hashes: 1: 5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl (hash: RVcu/PGaZq5ySn9maaAzcukbP7j3Zztp7+c4ZO6hUAs=) 2: 54F537EC32CD11EFA6C5320EC4F9AE02.roa (hash: S55fbog5DZrTL6CQ8gLDN4CUVpPp3b9gzfe68beFEQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:10:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1649 (0x671) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91801A5, serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D Validity Not Before: May 12 22:10:54 2025 GMT Not After : May 19 22:10:54 2025 GMT Subject: CN=682271ee-b8ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:03:ea:c8:4f:bd:d8:4e:b4:20:9c:b8:65:70: b4:45:e8:47:0f:ba:49:3b:89:4c:2b:e2:c2:12:65: ad:cb:a8:58:6d:8a:f8:5d:78:5f:13:18:ed:19:06: 76:f1:ce:02:51:38:ca:c4:1a:fa:9b:65:df:46:0a: fd:27:0d:18:45:b9:1d:19:88:bf:09:2b:1b:dc:a2: b5:b6:7e:8f:76:85:24:13:ec:a6:af:88:8a:ec:ea: 4a:51:b9:e8:ac:c1:e8:09:23:99:63:33:3c:35:8a: bf:5f:32:de:a4:e9:49:fe:58:ea:26:0e:8d:ed:cb: 7c:05:07:3a:3d:9e:83:8c:52:48:91:da:49:68:c5: 09:7c:06:06:d8:16:ff:a6:49:a2:43:d0:fd:1d:b1: 1f:be:e2:3b:02:b4:da:0e:db:93:3b:93:63:1c:05: e4:d1:b6:e8:5f:8f:13:0c:6f:2b:57:b0:c2:c0:28: 88:13:c4:f7:63:a3:e7:5d:c4:61:64:d7:f8:67:76: 78:17:56:93:f6:25:75:55:94:1f:62:77:59:cf:5a: ff:e1:21:06:af:f8:3a:91:60:c8:08:1d:b5:2e:03: 43:6c:f9:b7:34:93:a3:4f:8a:b8:1a:9c:8c:8f:72: a7:80:1a:1f:b5:ab:11:7b:fb:e9:d2:7e:a0:44:b8: 5e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:97:43:A4:82:18:18:7E:CD:2E:1D:5F:1A:F3:5D:FE:84:7F:3A:01 X509v3 Authority Key Identifier: keyid:E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:72:d8:dd:2f:0c:8f:49:26:8b:54:db:0c:76:4d:ea:e5:65: 55:9e:94:82:6d:43:84:f7:44:12:7e:9f:3c:70:8b:33:ce:b7: af:95:03:7c:90:30:9d:9f:67:19:89:42:69:53:4e:fd:0a:62: a0:27:f0:9d:b3:85:e7:d1:bc:24:5f:34:08:a4:6c:84:f4:63: 9e:c7:c6:dc:d8:cf:fc:37:7a:7e:4d:0b:ea:59:2b:76:29:4c: 38:36:ac:19:5d:2d:c4:ce:5b:26:36:63:2a:75:d1:ed:8a:c0: 99:4c:19:28:9a:9f:15:64:52:d6:56:5f:6f:dc:5b:e9:dc:c9: 08:db:60:69:1c:66:36:2f:bb:a7:c2:a3:c0:17:e4:3f:6a:7c: d2:e5:4f:f7:8e:e3:88:f3:08:42:35:b9:75:f7:9a:bc:f6:e6: 80:fa:ba:27:db:a4:f1:7a:89:cc:59:c5:8b:26:a1:a3:a8:11: 24:58:5e:fd:7a:f7:a7:b3:b4:81:0f:ff:6e:82:09:5b:d1:68: f1:0a:3d:9f:ad:e9:30:42:2f:9c:77:f5:59:15:be:ef:01:9e: f5:e1:b5:f1:2c:7e:c3:05:e2:90:18:24:d7:04:e9:e5:54:82: 0b:78:42:d9:56:14:6b:2e:e8:5d:9b:2d:92:e0:a1:05:7b:44: b5:07:41:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAxQTUxMTAvBgNVBAUTKEU1RTFDRkNBRTFGOUU2RjEyMUNBMTM1NTFCNDBGNjk4 OTg0QjlEOUQwHhcNMjUwNTEyMjIxMDU0WhcNMjUwNTE5MjIxMDU0WjAYMRYwFAYD VQQDEw02ODIyNzFlZS1iOGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2QPqyE+92E60IJy4ZXC0RehHD7pJO4lMK+LCEmWty6hYbYr4XXhfExjtGQZ2 8c4CUTjKxBr6m2XfRgr9Jw0YRbkdGYi/CSsb3KK1tn6PdoUkE+ymr4iK7OpKUbno rMHoCSOZYzM8NYq/XzLepOlJ/ljqJg6N7ct8BQc6PZ6DjFJIkdpJaMUJfAYG2Bb/ pkmiQ9D9HbEfvuI7ArTaDtuTO5NjHAXk0bboX48TDG8rV7DCwCiIE8T3Y6PnXcRh ZNf4Z3Z4F1aT9iV1VZQfYndZz1r/4SEGr/g6kWDICB21LgNDbPm3NJOjT4q4GpyM j3KngBoftasRe/vp0n6gRLheqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNyXQ6SC GBh+zS4dXxrzXf6EfzoBMB8GA1UdIwQYMBaAFOXhz8rh+ebxIcoTVRtA9piYS52d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDFBNS84NEI1RDYxQzdE NkQxMUVCQTZBNEE4MTdDNEY5QUUwMi81ZUhQeXVINTV2RWh5aE5WRzBEMm1KaExu WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVlSFB5dUg1NXZFaHloTlZHMEQybUpoTG5aMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDFBNS84NEI1RDYxQzdENkQxMUVCQTZBNEE4MTdDNEY5QUUwMi81ZUhQeXVINTV2 RWh5aE5WRzBEMm1KaExuWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrctjdLwyPSSaLVNsMdk3q5WVVnpSCbUOE90QSfp88cIszzrevlQN8 kDCdn2cZiUJpU079CmKgJ/Cds4Xn0bwkXzQIpGyE9GOex8bc2M/8N3p+TQvqWSt2 KUw4NqwZXS3EzlsmNmMqddHtisCZTBkomp8VZFLWVl9v3Fvp3MkI22BpHGY2L7un wqPAF+Q/anzS5U/3juOI8whCNbl195q89uaA+ron26TxeonMWcWLJqGjqBEkWF79 evens7SBD/9ugglb0WjxCj2frekwQi+cd/VZFb7vAZ714bXxLH7DBeKQGCTXBOnl VIILeELZVhRrLuhdmy2S4KEFe0S1B0Fp -----END CERTIFICATE-----Generated at Tue May 13 22:55:17 2025 by rpki-client