$ rpki-client -vvf rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.mft File: 5zsrW0iY5HX_6GmyTTSFzsh90Us.mft (raw, json) Hash identifier: rpNiutQ0icEyQK2DzQYi/XdOq7UckaOxxdhspncXsKA= Subject key identifier: D2:41:F9:F4:E1:6B:A0:97:DE:FD:74:7C:4E:84:1B:9D:A4:D6:BC:6F Authority key identifier: E7:3B:2B:5B:48:98:E4:75:FF:E8:69:B2:4D:34:85:CE:C8:7D:D1:4B Certificate issuer: /CN=A9181C93/serialNumber=E73B2B5B4898E475FFE869B24D3485CEC87DD14B Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zsrW0iY5HX_6GmyTTSFzsh90Us.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.mft Manifest number: 0130 Signing time: Tue 13 May 2025 03:45:00 +0000 Manifest this update: Tue 13 May 2025 03:44:59 +0000 Manifest next update: Tue 20 May 2025 03:44:59 +0000 Files and hashes: 1: 5zsrW0iY5HX_6GmyTTSFzsh90Us.crl (hash: 7rrPUWbBPKkyZmT62UPMEfMtYSxEdJ8ahETH2gUPFXo=) 2: A2ED9CA2619D11EE8699DD20C4F9AE02.roa (hash: nKra6kgkDLZMACl29cue2PgvN/WmZ6IhO1y9ruMhiD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.crl rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zsrW0iY5HX_6GmyTTSFzsh90Us.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:44:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181C93, serialNumber=E73B2B5B4898E475FFE869B24D3485CEC87DD14B Validity Not Before: May 13 03:44:59 2025 GMT Not After : May 20 03:44:59 2025 GMT Subject: CN=6822c03b-3d3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0e:d4:9a:54:28:4d:d3:9f:54:be:47:00:15: 5c:aa:11:3d:02:9d:72:e7:b0:06:ae:17:99:b3:5f: 53:d4:3b:f6:de:0b:fa:6e:b0:ad:eb:36:d1:3d:33: 2e:1a:a8:29:22:42:62:90:cd:ea:39:ce:c3:d8:9b: e0:d6:92:e7:fa:c4:e4:35:2a:5e:80:b7:1a:10:19: fe:24:e9:a2:d8:43:24:7c:46:c9:b7:f5:18:58:f3: a7:8a:4a:d3:57:de:fd:ac:38:d3:f4:07:4a:86:2f: 90:1a:60:d3:3e:8a:cd:6d:c6:18:8e:10:74:a3:57: e6:9c:87:1b:ec:b5:2c:9e:52:c6:c3:dd:9d:d1:b0: 33:c6:f8:d0:63:e0:69:d2:e8:ae:52:0c:cf:09:87: ff:93:64:aa:8f:70:56:00:0c:7d:6e:4a:7c:c5:00: b3:52:ba:6b:bd:c8:4d:ea:7e:fc:2b:79:21:4e:7d: 91:c2:74:a0:b0:7c:8a:ab:fb:17:ca:51:5e:5e:ac: 07:af:76:a1:25:5e:e1:6c:97:ce:b5:f6:c7:0d:cd: 61:58:5b:5c:99:f2:51:bb:39:83:c1:74:f9:a3:b7: 61:47:84:41:72:73:47:05:76:eb:4e:92:0b:f6:f2: 3a:5a:bf:75:32:cf:68:00:7a:02:1c:bd:b3:b2:49: 75:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:41:F9:F4:E1:6B:A0:97:DE:FD:74:7C:4E:84:1B:9D:A4:D6:BC:6F X509v3 Authority Key Identifier: keyid:E7:3B:2B:5B:48:98:E4:75:FF:E8:69:B2:4D:34:85:CE:C8:7D:D1:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zsrW0iY5HX_6GmyTTSFzsh90Us.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:26:f1:cc:55:db:dc:f6:30:4f:2e:6b:b7:cb:83:a9:ee:c3: 25:9f:1a:d1:b0:4c:df:e3:fd:41:72:43:94:c7:97:b9:c7:bd: d0:1d:0e:c0:2a:8e:f4:5b:ca:72:01:e4:78:c3:df:23:0a:ae: 5b:3d:05:6c:9c:6c:b9:07:e6:c0:d7:35:99:3d:02:ab:a3:00: 85:34:6b:ec:d9:b4:7d:df:10:36:bf:e1:9e:5e:cd:1a:e4:c1: 96:f9:ae:bd:ae:cc:fc:b1:a2:c4:5b:4d:ca:c7:b2:b2:4e:08: a7:0b:0d:80:af:be:40:aa:59:04:68:64:04:bc:b1:35:c4:18: 1f:26:93:62:eb:8b:00:35:5d:3a:3d:12:c0:63:5e:b8:b6:2d: 58:ce:98:19:c1:25:e6:fc:fe:83:c8:c8:a5:a0:24:80:63:18: ab:76:fb:ec:0f:fb:e5:8b:a0:15:e1:dc:2d:d5:52:71:be:18: 65:92:43:9b:9c:d1:ac:ab:6c:2e:31:b8:c7:74:08:b8:76:d9: c2:f2:b7:bd:a7:57:6f:f8:67:23:c1:fa:3a:46:3f:a9:ff:78: a5:a8:20:1b:be:cd:c7:1c:9e:c4:e2:17:ca:00:62:56:7c:74: 46:b2:97:0a:45:da:4e:f9:df:ff:89:59:8a:d9:0e:84:31:2a: ea:bd:af:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFDOTMxMTAvBgNVBAUTKEU3M0IyQjVCNDg5OEU0NzVGRkU4NjlCMjREMzQ4NUNF Qzg3REQxNEIwHhcNMjUwNTEzMDM0NDU5WhcNMjUwNTIwMDM0NDU5WjAYMRYwFAYD VQQDEw02ODIyYzAzYi0zZDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzw7UmlQoTdOfVL5HABVcqhE9Ap1y57AGrheZs19T1Dv23gv6brCt6zbRPTMu GqgpIkJikM3qOc7D2Jvg1pLn+sTkNSpegLcaEBn+JOmi2EMkfEbJt/UYWPOnikrT V979rDjT9AdKhi+QGmDTPorNbcYYjhB0o1fmnIcb7LUsnlLGw92d0bAzxvjQY+Bp 0uiuUgzPCYf/k2Sqj3BWAAx9bkp8xQCzUrprvchN6n78K3khTn2RwnSgsHyKq/sX ylFeXqwHr3ahJV7hbJfOtfbHDc1hWFtcmfJRuzmDwXT5o7dhR4RBcnNHBXbrTpIL 9vI6Wr91Ms9oAHoCHL2zskl1uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJB+fTh a6CX3v10fE6EG52k1rxvMB8GA1UdIwQYMBaAFOc7K1tImOR1/+hpsk00hc7IfdFL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUM5My82RDBGNjQwRTYx OTcxMUVFQTYyQTM2NzZDNEY5QUUwMi81enNyVzBpWTVIWF82R215VFRTRnpzaDkw VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV6c3JXMGlZNUhYXzZHbXlUVFNGenNoOTBVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUM5My82RDBGNjQwRTYxOTcxMUVFQTYyQTM2NzZDNEY5QUUwMi81enNyVzBpWTVI WF82R215VFRTRnpzaDkwVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuJvHMVdvc9jBPLmu3y4Op7sMlnxrRsEzf4/1BckOUx5e5x73QHQ7A Ko70W8pyAeR4w98jCq5bPQVsnGy5B+bA1zWZPQKrowCFNGvs2bR93xA2v+GeXs0a 5MGW+a69rsz8saLEW03Kx7KyTginCw2Ar75AqlkEaGQEvLE1xBgfJpNi64sANV06 PRLAY164ti1YzpgZwSXm/P6DyMiloCSAYxirdvvsD/vli6AV4dwt1VJxvhhlkkOb nNGsq2wuMbjHdAi4dtnC8re9p1dv+Gcjwfo6Rj+p/3ilqCAbvs3HHJ7E4hfKAGJW fHRGspcKRdpO+d//iVmK2Q6EMSrqva+4 -----END CERTIFICATE-----Generated at Wed May 14 11:29:35 2025 by rpki-client