$ rpki-client -vvf rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft File: V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft (raw, json) Hash identifier: 3h9Cej2tseMPF7Bh5VPlZu3SaLRASpI0hbhlEaoD73s= Subject key identifier: B5:5C:92:21:43:4F:A9:37:7E:A2:24:89:2F:D3:D3:3E:17:C0:98:26 Authority key identifier: 57:99:72:E6:0E:A6:F4:63:84:89:1A:D0:E3:F4:17:90:C8:08:05:F1 Certificate issuer: /CN=A919C1A2/serialNumber=579972E60EA6F46384891AD0E3F41790C80805F1 Certificate serial: 01F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft Manifest number: 01EC Signing time: Sat 17 May 2025 02:19:21 +0000 Manifest this update: Sat 17 May 2025 02:19:20 +0000 Manifest next update: Sat 24 May 2025 02:19:20 +0000 Files and hashes: 1: V5ly5g6m9GOEiRrQ4_QXkMgIBfE.crl (hash: K/rqPbEFoTnX+YRrMUwTzax+IV9/RIpEqlgGpFqKkUs=) 2: 46B3DF5A46E111EDB39B8526C4F9AE02.roa (hash: qtQ5quSwMYsKVelHw8PoUcCRH9+p/SKKBVtmk8NHuxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.crl rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 02:19:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 497 (0x1f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C1A2, serialNumber=579972E60EA6F46384891AD0E3F41790C80805F1 Validity Not Before: May 17 02:19:20 2025 GMT Not After : May 24 02:19:20 2025 GMT Subject: CN=6827f228-521e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c6:16:ed:a3:b2:41:81:d5:27:08:02:ec:12: 96:a2:21:78:a1:1d:51:de:a4:5b:e9:74:90:8c:5e: fb:ff:a7:e1:b8:1d:b0:fd:85:9e:8d:5e:cd:9d:a0: 93:e2:93:a8:42:1a:93:d1:72:81:d8:52:b6:b2:a8: 48:2b:71:ac:13:df:1a:e4:2d:d5:5c:1b:cd:3b:73: 8e:fe:91:b5:d6:ee:26:c4:ce:21:d4:e5:9e:b9:60: da:07:cc:f3:e1:a4:98:31:c0:04:11:13:fe:1a:f0: 73:cf:a8:47:a9:fd:ba:65:d9:16:b1:ac:a1:bd:ce: 35:60:1d:8f:49:14:ac:a0:f7:08:08:d8:ba:3b:e8: bd:b5:e2:a7:08:07:39:e9:cc:45:20:ac:3e:19:0e: 1b:15:fa:1d:4c:13:27:ca:08:71:01:06:87:89:dd: da:1e:e6:6c:fb:0b:70:32:78:d1:93:41:db:8c:89: 48:a4:36:d0:4b:b9:a3:2d:e0:d7:ab:e6:a2:1b:03: b0:1c:3f:37:ec:aa:c2:c5:d0:bf:60:ae:09:9d:32: 15:ff:bf:9a:1f:e8:8a:0f:ef:16:4a:7e:4d:78:3e: 25:20:ca:47:f8:7b:f8:e9:32:e9:55:46:ec:4b:30: 50:a3:cc:5d:3d:b4:1d:de:22:f7:c7:ec:29:dd:6b: 29:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:5C:92:21:43:4F:A9:37:7E:A2:24:89:2F:D3:D3:3E:17:C0:98:26 X509v3 Authority Key Identifier: keyid:57:99:72:E6:0E:A6:F4:63:84:89:1A:D0:E3:F4:17:90:C8:08:05:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:df:e4:ca:28:6d:34:d5:c6:80:36:73:63:60:04:1f:d0:ba: 47:db:c5:20:45:d8:3c:0a:a7:19:f4:4b:a3:31:9e:e5:c2:bf: 14:5e:f4:55:9c:87:bd:b5:e9:90:c3:8d:de:01:2e:54:dd:de: 90:bd:dc:ba:5a:c6:13:da:14:7f:71:05:40:2c:91:fb:95:6e: af:44:4c:6c:9f:94:cc:2b:e4:bc:a6:3f:5d:3f:7a:f7:e1:46: 43:cd:9f:76:f5:0d:1f:45:36:84:72:0b:ac:4a:63:95:b9:1f: 9a:42:15:21:fe:92:99:c7:c5:16:30:23:07:9e:b8:ab:3a:0d: f6:8e:9e:3b:49:2f:4c:bc:af:e9:43:02:4a:d7:3c:2a:3e:bd: ed:c1:23:9a:aa:8e:c8:21:e2:44:69:8b:8e:62:e7:51:c2:84: 1f:2e:d1:4f:93:ce:09:c1:ba:ad:d5:fc:19:e2:03:ab:f1:ad: 19:c0:19:ee:0e:db:c8:97:97:60:31:4e:f8:40:8f:ab:79:3c: e7:0b:50:c7:51:86:41:24:f0:a2:05:78:81:64:5d:72:fe:72: 22:b4:9b:c5:e2:b4:67:87:af:51:4e:76:0d:79:f0:fc:5b:ff: 2f:88:43:4d:0f:4f:3c:07:42:43:4a:1e:b6:e3:f6:7e:c6:00: 0e:09:2c:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMxQTIxMTAvBgNVBAUTKDU3OTk3MkU2MEVBNkY0NjM4NDg5MUFEMEUzRjQxNzkw QzgwODA1RjEwHhcNMjUwNTE3MDIxOTIwWhcNMjUwNTI0MDIxOTIwWjAYMRYwFAYD VQQDEw02ODI3ZjIyOC01MjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8YW7aOyQYHVJwgC7BKWoiF4oR1R3qRb6XSQjF77/6fhuB2w/YWejV7NnaCT 4pOoQhqT0XKB2FK2sqhIK3GsE98a5C3VXBvNO3OO/pG11u4mxM4h1OWeuWDaB8zz 4aSYMcAEERP+GvBzz6hHqf26ZdkWsayhvc41YB2PSRSsoPcICNi6O+i9teKnCAc5 6cxFIKw+GQ4bFfodTBMnyghxAQaHid3aHuZs+wtwMnjRk0HbjIlIpDbQS7mjLeDX q+aiGwOwHD837KrCxdC/YK4JnTIV/7+aH+iKD+8WSn5NeD4lIMpH+Hv46TLpVUbs SzBQo8xdPbQd3iL3x+wp3WsptwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLVckiFD T6k3fqIkiS/T0z4XwJgmMB8GA1UdIwQYMBaAFFeZcuYOpvRjhIka0OP0F5DICAXx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzFBMi80NzRDRDg0NDQ2 REQxMUVEOTI0MDIzMjBDNEY5QUUwMi9WNWx5NWc2bTlHT0VpUnJRNF9RWGtNZ0lC ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Y1bHk1ZzZtOUdPRWlSclE0X1FYa01nSUJmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzFBMi80NzRDRDg0NDQ2REQxMUVEOTI0MDIzMjBDNEY5QUUwMi9WNWx5NWc2bTlH T0VpUnJRNF9RWGtNZ0lCZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr3+TKKG001caANnNjYAQf0LpH28UgRdg8CqcZ9EujMZ7lwr8UXvRV nIe9temQw43eAS5U3d6Qvdy6WsYT2hR/cQVALJH7lW6vRExsn5TMK+S8pj9dP3r3 4UZDzZ929Q0fRTaEcgusSmOVuR+aQhUh/pKZx8UWMCMHnrirOg32jp47SS9MvK/p QwJK1zwqPr3twSOaqo7IIeJEaYuOYudRwoQfLtFPk84Jwbqt1fwZ4gOr8a0ZwBnu DtvIl5dgMU74QI+reTznC1DHUYZBJPCiBXiBZF1y/nIitJvF4rRnh69RTnYNefD8 W/8viENND088B0JDSh624/Z+xgAOCSzf -----END CERTIFICATE-----Generated at Sat May 17 09:36:37 2025 by rpki-client