$ rpki-client -vvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft File: p5uCiHAxRBmQsY0aBfnicefnuOY.mft (raw, json) Hash identifier: oFfmWONpbQCq5519YtilGqwHfSqotVoco0RPfMisUaQ= Subject key identifier: 61:C9:01:6B:4C:7C:87:A6:43:A0:02:E7:98:BB:5F:43:72:05:B3:7F Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6 Certificate issuer: /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6 Certificate serial: 01D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft Manifest number: 01B6 Signing time: Thu 15 May 2025 02:47:25 +0000 Manifest this update: Thu 15 May 2025 02:47:24 +0000 Manifest next update: Thu 22 May 2025 02:47:24 +0000 Files and hashes: 1: p5uCiHAxRBmQsY0aBfnicefnuOY.crl (hash: EQzmVCuGeczE9R49v3lNHe9QZW5Qq+hiGzc9yBPX3Pk=) 2: 0900F7CA7AE611EF8CE1F784C4F9AE02.roa (hash: qqBFkEJNiWCb2cCDSNMAUnOoY6M5apd24HqIJ4T1rMk=) 3: 4DD66E3C347F11EFB73F4074C4F9AE02.roa (hash: UdSNL+M5bhbjwAkTjKkIwiTAoopRDA15sbVDq+xd/Mo=) 4: C8E6CF687AE811EFA0337A38C4F9AE02.roa (hash: UYQj695a2OmzGWejM8q0zjVy0UfE2w5YDuGLHHyUkKE=) 5: 610B51267AE711EFACC0CA34C4F9AE02.roa (hash: 0osuZSPKtRbkTEe2rjpJx0+V/IP2FJnFJRtn1br7+ws=) 6: 5D463936C87611EDAC86AA74C4F9AE02.roa (hash: wWTFLfND3EADAPn3/677/3gOc92RXHanLyJ2ZQO9E5Y=) 7: E98F15362B3811EF926F1555C4F9AE02.roa (hash: huhcBlB6kInuEcW0eyepHJy04Qrnm/zwE5F/lbsIg4U=) 8: 34D5ED1210F511EEBCE2A81EC4F9AE02.roa (hash: K7ih6dZEP7tPsDE029yQg9J9G2EoOjYxEh23BSXqdx4=) 9: 9F4683A0B86211EDB9EDAD2CC4F9AE02.roa (hash: xEdof+9upKEPJ5nZ8zJI+L9OfNurTTcojEoj01Jch2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BE9A, serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6 Validity Not Before: May 15 02:47:24 2025 GMT Not After : May 22 02:47:24 2025 GMT Subject: CN=682555bc-c130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a9:5d:c1:c7:70:d6:19:d0:a7:47:05:ad:81: 7c:e9:a4:1d:c8:04:c7:05:51:b3:fa:d0:69:a2:b0: 79:31:68:1e:7d:ea:bd:3e:92:77:e2:4f:aa:cf:d7: c5:a0:09:18:3e:75:a8:b9:99:65:fc:51:ac:e4:e6: df:20:a1:95:65:fa:4c:1c:48:f0:25:84:31:03:a8: af:5a:0a:1e:b0:aa:5e:3c:8f:a8:d8:37:8f:17:6f: 2a:b2:9c:c5:8f:ab:b0:78:b9:4c:b1:61:0c:be:c7: 27:88:24:d6:bd:1d:c9:5b:72:c0:20:13:84:1f:f6: 93:56:a6:f4:eb:d2:d4:86:5d:55:b7:d8:8b:01:af: 90:13:4e:b8:a2:2b:27:ca:cf:ea:6e:4b:b2:2e:63: 48:6e:bf:44:c8:d7:b5:c4:83:2c:a1:07:46:d7:b2: 49:f2:11:d0:89:de:60:18:6b:48:f9:07:9f:1b:46: 07:64:7d:59:06:a7:10:6f:39:c6:e4:63:cd:8e:cb: 23:52:a7:db:93:a0:4f:a9:6c:8d:44:73:1a:9f:31: d3:fd:d9:56:a9:67:42:48:6d:03:87:53:37:04:95: 88:8e:07:2e:30:a8:2c:18:b6:46:00:3f:93:ad:ea: 02:15:f9:3e:23:96:91:ef:ab:d3:00:73:c6:f1:65: 06:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C9:01:6B:4C:7C:87:A6:43:A0:02:E7:98:BB:5F:43:72:05:B3:7F X509v3 Authority Key Identifier: keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:6d:15:12:b7:c6:ee:4f:d6:a8:f2:fb:f8:a6:03:b9:d9:cc: 13:50:f0:8d:3e:a6:18:6a:a9:1a:2f:d3:ae:5c:6d:be:04:07: 10:f5:f5:50:0f:19:ae:25:a6:45:41:23:db:67:62:01:1e:fa: f5:76:9a:14:cf:0b:4e:f6:b2:da:8a:5e:72:cc:7b:f6:ca:65: 58:2a:bb:47:dd:28:83:e7:77:54:6d:8c:23:85:25:4d:42:26: 06:5b:99:27:2d:6a:c5:50:8d:54:58:23:3a:d7:b5:b6:a0:fa: 73:15:f9:a5:81:3a:24:d7:bf:b0:e2:db:75:15:72:38:22:08: 71:d8:ee:0f:64:b9:ec:ce:2c:0a:da:2c:6c:76:fa:19:de:61: 54:e7:3c:00:04:d2:fd:3d:7b:53:af:cb:63:f0:d3:4a:d1:b0: 9e:11:04:1d:9d:e2:be:eb:5a:a0:0b:1f:16:41:d8:62:22:5d: 20:2c:50:99:b3:65:cb:81:6c:5e:d1:01:c2:80:78:0e:80:77: 18:f2:85:84:88:7b:b3:20:0a:fe:ad:5b:0a:a3:36:57:5a:3d: ed:24:57:20:6a:21:c1:7b:1a:ee:1e:2b:38:ea:0b:93:dc:64: 45:2c:52:d7:81:9a:28:db:52:05:a9:61:82:9c:b6:8c:6a:b5: 03:7e:18:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJFOUExMTAvBgNVBAUTKEE3OUI4Mjg4NzAzMTQ0MTk5MEIxOEQxQTA1RjlFMjcx RTdFN0I4RTYwHhcNMjUwNTE1MDI0NzI0WhcNMjUwNTIyMDI0NzI0WjAYMRYwFAYD VQQDEw02ODI1NTViYy1jMTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3qldwcdw1hnQp0cFrYF86aQdyATHBVGz+tBporB5MWgefeq9PpJ34k+qz9fF oAkYPnWouZll/FGs5ObfIKGVZfpMHEjwJYQxA6ivWgoesKpePI+o2DePF28qspzF j6uweLlMsWEMvscniCTWvR3JW3LAIBOEH/aTVqb069LUhl1Vt9iLAa+QE064oisn ys/qbkuyLmNIbr9EyNe1xIMsoQdG17JJ8hHQid5gGGtI+QefG0YHZH1ZBqcQbznG 5GPNjssjUqfbk6BPqWyNRHManzHT/dlWqWdCSG0Dh1M3BJWIjgcuMKgsGLZGAD+T reoCFfk+I5aR76vTAHPG8WUGBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHJAWtM fIemQ6AC55i7X0NyBbN/MB8GA1UdIwQYMBaAFKebgohwMUQZkLGNGgX54nHn57jm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkU5QS84RkExRjU2RUI4 NUUxMUVEOEU2RjQyMTNDNEY5QUUwMi9wNXVDaUhBeFJCbVFzWTBhQmZuaWNlZm51 T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A1dUNpSEF4UkJtUXNZMGFCZm5pY2VmbnVPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkU5QS84RkExRjU2RUI4NUUxMUVEOEU2RjQyMTNDNEY5QUUwMi9wNXVDaUhBeFJC bVFzWTBhQmZuaWNlZm51T1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVbRUSt8buT9ao8vv4pgO52cwTUPCNPqYYaqkaL9OuXG2+BAcQ9fVQ DxmuJaZFQSPbZ2IBHvr1dpoUzwtO9rLail5yzHv2ymVYKrtH3SiD53dUbYwjhSVN QiYGW5knLWrFUI1UWCM617W2oPpzFfmlgTok17+w4tt1FXI4Ighx2O4PZLnsziwK 2ixsdvoZ3mFU5zwABNL9PXtTr8tj8NNK0bCeEQQdneK+61qgCx8WQdhiIl0gLFCZ s2XLgWxe0QHCgHgOgHcY8oWEiHuzIAr+rVsKozZXWj3tJFcgaiHBexruHis46guT 3GRFLFLXgZoo21IFqWGCnLaMarUDfhhn -----END CERTIFICATE-----Generated at Fri May 16 09:26:48 2025 by rpki-client