$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft File: l_m5BihHZTCOwmiFXVY9q5GGMFs.mft (raw, json) Hash identifier: 1ul8Jqhe0eLm38Xq95Y0+l8iAa3TjxWWvA0ShxAvkW4= Subject key identifier: 40:C4:C1:42:AF:5B:2A:81:21:5E:11:BE:EB:65:AD:A0:1C:76:C1:96 Authority key identifier: 97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B Certificate issuer: /CN=A918E4E6/serialNumber=97F9B906284765308EC268855D563DAB9186305B Certificate serial: 0C6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft Manifest number: 0C64 Signing time: Sat 10 May 2025 18:06:31 +0000 Manifest this update: Sat 10 May 2025 18:06:31 +0000 Manifest next update: Sat 17 May 2025 18:06:31 +0000 Files and hashes: 1: l_m5BihHZTCOwmiFXVY9q5GGMFs.crl (hash: vqbSvQJRBRX3uIxYdtyWD8e8QsVdP49tUpF2Ho+Ugpk=) 2: 9C9660D4FC6E11E9BC6D4822C4F9AE02.roa (hash: xyYlJncaSUNWmGDmUFY6Ptm1YpyAyeIUKxqpTgZgQ8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3178 (0xc6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4E6, serialNumber=97F9B906284765308EC268855D563DAB9186305B Validity Not Before: May 10 18:06:31 2025 GMT Not After : May 17 18:06:31 2025 GMT Subject: CN=681f95a7-941b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0d:4f:fe:f7:1b:e2:d0:89:f5:5b:fd:b8:af: de:1f:8b:ef:71:0a:42:c7:7c:82:07:1d:61:3e:49: af:fb:8e:d7:03:04:c3:b7:e9:5f:36:bb:50:a0:5a: d9:fa:0c:46:60:a3:6e:1e:c0:51:8c:78:18:9a:a5: 73:26:52:b1:7e:b0:75:a5:1b:a6:d3:1d:ce:a2:f9: 9e:fd:34:b2:85:7f:c0:78:22:e7:35:19:b1:82:a9: df:8a:bf:ab:d8:45:c1:0f:fd:b3:51:e7:af:a9:43: d6:03:76:3e:1d:07:35:97:e0:8e:26:4d:1c:03:b3: f7:e0:35:e8:aa:e1:05:ae:66:a3:33:61:fb:b2:e0: 64:f8:f9:d3:c0:53:93:f5:59:9b:a2:6c:28:cf:bd: 40:66:fa:12:8b:0f:5c:cb:6b:20:62:21:7a:c5:a9: 0d:3a:1a:12:dd:ab:51:2d:b0:9b:e0:3a:ae:51:63: b9:cf:88:4a:86:48:40:fe:86:b5:a3:32:a5:87:29: 78:c0:d6:72:91:ec:ea:bd:e3:84:d5:8c:80:6b:d8: 28:61:0a:e2:cf:48:6c:46:16:0a:7c:b1:7b:99:e4: fe:cf:de:3b:2d:c9:4b:87:37:74:d6:b5:47:21:7e: f5:d4:3d:7e:2c:ac:64:52:1e:2e:ec:b2:45:15:a4: f4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C4:C1:42:AF:5B:2A:81:21:5E:11:BE:EB:65:AD:A0:1C:76:C1:96 X509v3 Authority Key Identifier: keyid:97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:3f:ef:e7:58:ee:e5:04:17:5a:22:74:b8:33:88:ad:85:57: 24:23:fc:5f:35:14:af:e5:35:81:da:5c:e6:31:8e:43:d2:8b: 0a:ab:9f:09:dc:5a:4b:41:06:e9:69:81:08:d7:70:a1:85:35: 25:64:1a:01:54:77:8f:4e:1d:82:ad:88:4c:38:42:81:38:1d: 2b:dd:34:10:85:2f:f0:09:b3:b2:f4:0f:78:6d:a1:79:dd:2e: 28:34:29:58:77:6e:a1:0e:c1:0e:ce:37:e1:e1:c8:1f:79:a4: 53:77:31:de:58:a5:68:e8:1c:9f:62:8c:8a:65:47:e0:b9:b1: f7:e3:b5:77:b4:86:58:3d:f5:ef:35:02:d3:ee:46:ee:8b:0f: 68:21:b9:54:22:d8:39:e3:36:d9:a3:c2:03:61:88:64:e2:3e: 1e:83:48:93:88:f2:c5:da:c3:6f:01:04:57:4c:13:91:fc:3a: a0:b8:a8:56:b2:53:3e:5d:44:83:b4:e1:60:bc:5f:9a:ec:3a: 60:ef:80:74:d0:6e:bd:70:dd:36:91:47:1e:24:7e:2d:84:60: 8a:cc:b4:40:e5:41:22:46:60:9f:d3:7e:ea:a6:73:43:a3:1a: f9:b5:8d:eb:8c:29:79:19:14:13:63:18:ae:aa:bd:85:dd:08: ef:04:07:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0RTYxMTAvBgNVBAUTKDk3RjlCOTA2Mjg0NzY1MzA4RUMyNjg4NTVENTYzREFC OTE4NjMwNUIwHhcNMjUwNTEwMTgwNjMxWhcNMjUwNTE3MTgwNjMxWjAYMRYwFAYD VQQDEw02ODFmOTVhNy05NDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnw1P/vcb4tCJ9Vv9uK/eH4vvcQpCx3yCBx1hPkmv+47XAwTDt+lfNrtQoFrZ +gxGYKNuHsBRjHgYmqVzJlKxfrB1pRum0x3Oovme/TSyhX/AeCLnNRmxgqnfir+r 2EXBD/2zUeevqUPWA3Y+HQc1l+COJk0cA7P34DXoquEFrmajM2H7suBk+PnTwFOT 9Vmbomwoz71AZvoSiw9cy2sgYiF6xakNOhoS3atRLbCb4DquUWO5z4hKhkhA/oa1 ozKlhyl4wNZykezqveOE1YyAa9goYQriz0hsRhYKfLF7meT+z947LclLhzd01rVH IX711D1+LKxkUh4u7LJFFaT0DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEDEwUKv WyqBIV4RvutlraAcdsGWMB8GA1UdIwQYMBaAFJf5uQYoR2UwjsJohV1WPauRhjBb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRFNi8yQjNCMkZDRUZD NkQxMUU5OEZDMkM5MUNDNEY5QUUwMi9sX201QmloSFpUQ093bWlGWFZZOXE1R0dN RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xfbTVCaWhIWlRDT3dtaUZYVlk5cTVHR01Gcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTRFNi8yQjNCMkZDRUZDNkQxMUU5OEZDMkM5MUNDNEY5QUUwMi9sX201QmloSFpU Q093bWlGWFZZOXE1R0dNRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIP+/nWO7lBBdaInS4M4ithVckI/xfNRSv5TWB2lzmMY5D0osKq58J 3FpLQQbpaYEI13ChhTUlZBoBVHePTh2CrYhMOEKBOB0r3TQQhS/wCbOy9A94baF5 3S4oNClYd26hDsEOzjfh4cgfeaRTdzHeWKVo6ByfYoyKZUfgubH347V3tIZYPfXv NQLT7kbuiw9oIblUItg54zbZo8IDYYhk4j4eg0iTiPLF2sNvAQRXTBOR/DqguKhW slM+XUSDtOFgvF+a7Dpg74B00G69cN02kUceJH4thGCKzLRA5UEiRmCf037qpnND oxr5tY3rjCl5GRQTYxiuqr2F3QjvBAdY -----END CERTIFICATE-----Generated at Sun May 11 11:47:18 2025 by rpki-client