$ rpki-client -vvf rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft File: 5tR4mVLfAG9kzr8PNVcqW5bktzc.mft (raw, json) Hash identifier: 0oyxNF00zO8Awbeczgdf1+6kAdYmbm7zv8fq7DRPOZc= Subject key identifier: E5:3A:65:FA:C3:6C:75:01:CA:92:B0:87:BC:B3:22:34:8C:63:39:7D Authority key identifier: E6:D4:78:99:52:DF:00:6F:64:CE:BF:0F:35:57:2A:5B:96:E4:B7:37 Certificate issuer: /CN=A918E63A/serialNumber=E6D4789952DF006F64CEBF0F35572A5B96E4B737 Certificate serial: 0797 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tR4mVLfAG9kzr8PNVcqW5bktzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft Manifest number: 0797 Signing time: Fri 16 May 2025 21:34:28 +0000 Manifest this update: Fri 16 May 2025 21:34:28 +0000 Manifest next update: Fri 23 May 2025 21:34:28 +0000 Files and hashes: 1: 5tR4mVLfAG9kzr8PNVcqW5bktzc.crl (hash: Tx+7j4m791DhErUAtolv/IoGyZ0J+j+Fofo+/AwbT0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.crl rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tR4mVLfAG9kzr8PNVcqW5bktzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 21:34:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1943 (0x797) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E63A, serialNumber=E6D4789952DF006F64CEBF0F35572A5B96E4B737 Validity Not Before: May 16 21:34:28 2025 GMT Not After : May 23 21:34:28 2025 GMT Subject: CN=6827af64-3e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:61:ab:a2:aa:7f:91:6a:ca:79:48:fc:ce:39: 35:02:13:fb:89:5f:36:58:8f:b3:e6:ba:d5:23:17: d3:72:38:3c:24:89:c3:f6:73:d5:50:9a:e6:d0:50: e0:ec:79:41:4a:21:eb:ca:2f:f7:fd:a5:83:b8:88: 1e:ea:93:b0:b9:1e:52:a4:7f:00:df:64:7e:08:11: 1e:1b:85:09:7a:5b:74:f3:0e:40:79:48:6b:1e:f2: ea:b3:73:b7:6b:75:f4:f6:24:16:b9:75:64:f8:de: a4:12:b7:a0:35:4a:9a:7e:87:db:30:56:9e:29:39: d6:3f:92:7e:8b:37:b2:c3:95:b4:3a:43:ce:1d:68: 8d:f3:b0:bf:b5:5a:9f:72:84:5d:05:c9:f2:80:b6: b7:51:06:00:e8:4e:eb:53:86:9d:35:74:00:af:5b: 65:02:fb:a1:4e:2a:ee:a2:4e:25:57:49:36:98:78: bf:c3:aa:2c:8d:00:b8:91:04:8e:aa:e1:21:04:6a: b1:21:31:7a:a8:f4:36:44:27:5e:76:f5:47:9f:b1: 94:6e:7b:82:17:4c:69:45:7e:f5:08:17:ff:17:54: 8e:b7:da:23:33:6c:21:b3:ff:0d:d2:99:a0:ab:a1: 26:86:fc:73:8f:64:f5:04:79:bd:8e:13:a5:4e:1f: 97:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:3A:65:FA:C3:6C:75:01:CA:92:B0:87:BC:B3:22:34:8C:63:39:7D X509v3 Authority Key Identifier: keyid:E6:D4:78:99:52:DF:00:6F:64:CE:BF:0F:35:57:2A:5B:96:E4:B7:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tR4mVLfAG9kzr8PNVcqW5bktzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:9e:ab:65:08:2c:55:9d:a0:fb:b3:eb:91:1a:35:e4:a7:e8: eb:1f:92:52:7b:15:5d:3f:3d:46:cd:e3:f5:fa:7b:9d:28:28: 60:bf:da:4b:d7:b9:72:dc:15:60:c1:c3:31:ff:65:2d:ba:3a: b9:44:93:25:b0:0c:2b:c8:69:8e:8e:9b:b8:6b:c2:71:b3:49: cf:54:d2:87:52:09:bd:44:48:5c:dd:00:c4:a4:fa:32:4f:ea: aa:40:34:8d:c5:21:63:f1:d1:68:86:4b:59:76:46:d4:05:2f: 6a:3d:1d:08:a2:c7:64:97:d8:80:16:ca:74:6a:2b:22:70:31: 92:1a:53:bd:15:72:45:42:26:c2:00:20:9e:97:c3:30:0a:95: b3:72:09:29:73:69:de:4c:ba:14:20:d8:05:35:5b:c0:71:e2: e9:4e:cf:42:29:c8:d0:f7:f4:ed:ed:2d:11:fe:76:34:05:61: c9:92:ec:be:99:ba:e5:d0:d1:6f:75:0d:4a:85:64:19:07:2f: 4a:36:6c:6e:f1:b0:96:0c:f9:02:6f:a6:7a:f5:9a:6f:07:2c: 0f:f8:75:7b:f2:63:32:80:6c:72:e7:48:0f:84:d5:52:02:c2: d1:34:17:c2:b4:d5:57:a6:b8:e1:c7:6e:db:36:97:c5:ec:7c: 63:e8:fe:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2M0ExMTAvBgNVBAUTKEU2RDQ3ODk5NTJERjAwNkY2NENFQkYwRjM1NTcyQTVC OTZFNEI3MzcwHhcNMjUwNTE2MjEzNDI4WhcNMjUwNTIzMjEzNDI4WjAYMRYwFAYD VQQDEw02ODI3YWY2NC0zZTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmGroqp/kWrKeUj8zjk1AhP7iV82WI+z5rrVIxfTcjg8JInD9nPVUJrm0FDg 7HlBSiHryi/3/aWDuIge6pOwuR5SpH8A32R+CBEeG4UJelt08w5AeUhrHvLqs3O3 a3X09iQWuXVk+N6kEregNUqafofbMFaeKTnWP5J+izeyw5W0OkPOHWiN87C/tVqf coRdBcnygLa3UQYA6E7rU4adNXQAr1tlAvuhTiruok4lV0k2mHi/w6osjQC4kQSO quEhBGqxITF6qPQ2RCdedvVHn7GUbnuCF0xpRX71CBf/F1SOt9ojM2whs/8N0pmg q6Emhvxzj2T1BHm9jhOlTh+XswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOU6ZfrD bHUBypKwh7yzIjSMYzl9MB8GA1UdIwQYMBaAFObUeJlS3wBvZM6/DzVXKluW5Lc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTYzQS8zN0Q3QTVBRTAz MkYxMUVCQjU4ODJFMEFDNEY5QUUwMi81dFI0bVZMZkFHOWt6cjhQTlZjcVc1Ymt0 emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV0UjRtVkxmQUc5a3pyOFBOVmNxVzVia3R6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTYzQS8zN0Q3QTVBRTAzMkYxMUVCQjU4ODJFMEFDNEY5QUUwMi81dFI0bVZMZkFH OWt6cjhQTlZjcVc1Ymt0emMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEnqtlCCxVnaD7s+uRGjXkp+jrH5JSexVdPz1GzeP1+nudKChgv9pL 17ly3BVgwcMx/2Utujq5RJMlsAwryGmOjpu4a8Jxs0nPVNKHUgm9REhc3QDEpPoy T+qqQDSNxSFj8dFohktZdkbUBS9qPR0Iosdkl9iAFsp0aisicDGSGlO9FXJFQibC ACCel8MwCpWzcgkpc2neTLoUINgFNVvAceLpTs9CKcjQ9/Tt7S0R/nY0BWHJkuy+ mbrl0NFvdQ1KhWQZBy9KNmxu8bCWDPkCb6Z69ZpvBywP+HV78mMygGxy50gPhNVS AsLRNBfCtNVXprjhx27bNpfF7Hxj6P6V -----END CERTIFICATE-----Generated at Sat May 17 15:43:53 2025 by rpki-client