$ rpki-client -vvf rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft File: pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft (raw, json) Hash identifier: zQJHJme5JXWQ8AZZgtesUPQcT8W2fxURDrgke5799dc= Subject key identifier: BF:5F:86:C6:34:F6:75:BD:BB:2F:90:7A:1B:CF:C8:96:82:13:E5:C2 Authority key identifier: A5:FE:51:29:D4:81:ED:1A:00:E5:5E:99:CE:30:E0:08:B6:3D:6C:EE Certificate issuer: /CN=A918FF9D/serialNumber=A5FE5129D481ED1A00E55E99CE30E008B63D6CEE Certificate serial: 0923 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft Manifest number: 091D Signing time: Sat 10 May 2025 20:00:59 +0000 Manifest this update: Sat 10 May 2025 20:00:58 +0000 Manifest next update: Sat 17 May 2025 20:00:58 +0000 Files and hashes: 1: pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl (hash: J6qkZXvo+sSehaPoTq5kkHEdpLT24yFkN+4/lybnVpw=) 2: 2A1AD3BA9FE711EAAFA97B81C4F9AE02.roa (hash: McDtUaMk7e01xsshJ/22xBrdGiD8USZ0rSk/8TzyXxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2339 (0x923) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FF9D, serialNumber=A5FE5129D481ED1A00E55E99CE30E008B63D6CEE Validity Not Before: May 10 20:00:58 2025 GMT Not After : May 17 20:00:58 2025 GMT Subject: CN=681fb07b-0b2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:70:35:37:1e:85:1d:53:9e:82:24:71:8b:d7: 79:a9:0b:9c:07:9f:f1:58:e9:b5:68:1a:1d:d4:b1: 58:4a:29:14:3b:1e:07:a0:3b:ec:bc:36:6b:2d:89: e5:81:48:58:3d:12:06:c8:36:13:4b:d6:e9:43:15: db:91:c9:88:e5:b4:0b:f2:df:43:43:12:9b:a1:cd: 62:df:95:2e:39:45:8e:59:7e:7b:6e:4e:38:1c:b9: 54:89:58:45:df:7d:6d:16:c7:97:70:f8:fd:b7:92: 7a:6a:7a:7d:48:73:3c:52:98:d4:de:72:ea:96:6b: 57:0b:a4:3f:eb:9a:a3:eb:94:0e:85:46:af:a4:5c: 7c:c5:31:2d:0d:01:c0:f7:8c:8c:c5:c2:3a:60:aa: 60:ee:2c:2b:e3:74:70:2f:6a:c1:f7:2e:85:da:e8: 73:34:f3:62:c5:41:a1:b7:95:35:5e:7b:a1:4b:aa: c5:31:0d:a9:dd:93:c5:40:35:ef:2c:9b:d7:e5:af: 52:9b:d6:d0:28:65:9f:9a:11:d5:ec:40:87:64:19: 6b:f4:03:6f:73:8d:c0:fc:81:7a:d5:99:b6:d2:19: d9:c1:a8:08:84:9b:61:f9:40:ca:10:59:86:67:f9: 5c:c3:8c:af:42:27:0a:d7:cf:77:1d:bc:0c:32:81: 04:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:5F:86:C6:34:F6:75:BD:BB:2F:90:7A:1B:CF:C8:96:82:13:E5:C2 X509v3 Authority Key Identifier: keyid:A5:FE:51:29:D4:81:ED:1A:00:E5:5E:99:CE:30:E0:08:B6:3D:6C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:64:08:98:ac:0b:30:24:cd:41:3b:98:35:8f:ce:ca:cf:f9: 97:26:c8:08:09:a7:76:a6:ba:94:ed:f5:f8:ea:33:36:db:67: 41:e0:03:4f:b5:71:ff:88:30:a8:1d:53:f4:9a:eb:ff:44:41: a4:51:a4:e9:29:c4:5f:c4:79:3d:07:d3:fd:c1:73:de:ee:bd: 96:87:d5:7b:1e:42:17:9b:7a:a0:06:bc:98:9e:c5:ed:9b:0e: 08:a4:4a:06:de:99:ab:8f:39:e9:42:7d:ab:0b:8c:d8:20:56: a3:8c:c9:a4:b6:16:b0:36:09:df:9d:83:cc:de:51:3c:21:dd: ff:c8:ae:d9:65:f4:51:76:8d:67:0f:c8:61:dd:97:73:3d:28: 53:34:bb:2f:66:b7:9c:70:0d:ad:71:f6:ad:52:f0:d9:be:89: 4d:16:fd:61:af:29:d6:ee:7c:ff:b8:8b:a0:0d:5a:07:d9:40: 11:ee:b0:e5:fc:bb:a9:ab:7e:f1:ca:42:7a:18:fe:aa:2c:5f: 19:77:cd:5b:87:a3:32:9c:d0:96:59:ec:24:b7:5d:7d:77:a0: 25:e6:07:6b:63:16:e2:e0:d7:87:d0:2b:5e:dc:db:37:69:06: 44:a5:1e:de:ff:fa:c6:db:8d:4e:b9:48:d9:24:27:fd:da:d1: d2:b8:b9:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZGOUQxMTAvBgNVBAUTKEE1RkU1MTI5RDQ4MUVEMUEwMEU1NUU5OUNFMzBFMDA4 QjYzRDZDRUUwHhcNMjUwNTEwMjAwMDU4WhcNMjUwNTE3MjAwMDU4WjAYMRYwFAYD VQQDEw02ODFmYjA3Yi0wYjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHA1Nx6FHVOegiRxi9d5qQucB5/xWOm1aBod1LFYSikUOx4HoDvsvDZrLYnl gUhYPRIGyDYTS9bpQxXbkcmI5bQL8t9DQxKboc1i35UuOUWOWX57bk44HLlUiVhF 331tFseXcPj9t5J6anp9SHM8UpjU3nLqlmtXC6Q/65qj65QOhUavpFx8xTEtDQHA 94yMxcI6YKpg7iwr43RwL2rB9y6F2uhzNPNixUGht5U1XnuhS6rFMQ2p3ZPFQDXv LJvX5a9Sm9bQKGWfmhHV7ECHZBlr9ANvc43A/IF61Zm20hnZwagIhJth+UDKEFmG Z/lcw4yvQicK1893HbwMMoEEYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9fhsY0 9nW9uy+QehvPyJaCE+XCMB8GA1UdIwQYMBaAFKX+USnUge0aAOVemc4w4Ai2PWzu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkY5RC9DRjg2RDU4QTlG RTUxMUVBQkI4NjNBODBDNEY5QUUwMi9wZjVSS2RTQjdSb0E1VjZaempEZ0NMWTli TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BmNVJLZFNCN1JvQTVWNlp6akRnQ0xZOWJPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkY5RC9DRjg2RDU4QTlGRTUxMUVBQkI4NjNBODBDNEY5QUUwMi9wZjVSS2RTQjdS b0E1VjZaempEZ0NMWTliTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiZAiYrAswJM1BO5g1j87Kz/mXJsgICad2prqU7fX46jM222dB4ANP tXH/iDCoHVP0muv/REGkUaTpKcRfxHk9B9P9wXPe7r2Wh9V7HkIXm3qgBryYnsXt mw4IpEoG3pmrjznpQn2rC4zYIFajjMmkthawNgnfnYPM3lE8Id3/yK7ZZfRRdo1n D8hh3ZdzPShTNLsvZreccA2tcfatUvDZvolNFv1hrynW7nz/uIugDVoH2UAR7rDl /Lupq37xykJ6GP6qLF8Zd81bh6MynNCWWewkt119d6Al5gdrYxbi4NeH0Cte3Ns3 aQZEpR7e//rG241OuUjZJCf92tHSuLnc -----END CERTIFICATE-----Generated at Mon May 12 07:14:00 2025 by rpki-client