$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft File: 5Otd-leSQpC7j-xFuZd_xsf2-jc.mft (raw, json) Hash identifier: 3rNKwGFk0hIvUB8qrisTL8ZrnYMbEx0bgx+/YA0Jnjc= Subject key identifier: DE:5E:F6:81:50:6B:99:4B:7D:32:7B:6D:4B:7A:72:89:87:52:BC:01 Authority key identifier: E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 Certificate issuer: /CN=A91A8B0B/serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Certificate serial: 0C80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft Manifest number: 0C6E Signing time: Tue 06 May 2025 18:15:16 +0000 Manifest this update: Tue 06 May 2025 18:15:15 +0000 Manifest next update: Tue 13 May 2025 18:15:15 +0000 Files and hashes: 1: 5Otd-leSQpC7j-xFuZd_xsf2-jc.crl (hash: kne+en/VLQ5oJFtbDUbq+kv8NeqMJ9rK8T0uDsuNe88=) 2: 5842DDF0FCE511E9BFA4B27AC4F9AE02.roa (hash: kJqESF4QlMyVG/2/vUjwGWXp6ZiWLKmRChQ5GeCT1ak=) 3: EA17F65E6C6711ECB7C0925AC4F9AE02.roa (hash: n6K4eFBQQStBGPjOWI9UjtqimxuSa7JV9+htrnKW+a4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 18:15:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3200 (0xc80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8B0B, serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Validity Not Before: May 6 18:15:15 2025 GMT Not After : May 13 18:15:15 2025 GMT Subject: CN=681a51b3-e27a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:e0:8f:3f:13:2d:37:87:77:e6:6e:9a:31:74: 24:86:cc:f3:bf:a4:1d:20:80:72:6c:50:86:26:bc: 13:ee:a9:ce:3c:64:95:ec:41:6b:e2:d1:26:ee:a8: 16:55:fe:7f:2e:e3:d3:a7:29:24:56:b2:9a:33:26: e3:02:87:96:9d:3b:b3:14:c3:63:2f:17:ba:aa:28: c2:1f:f3:e4:a7:d0:33:b0:b8:0a:91:ff:49:ed:53: 22:a8:43:7f:c6:23:69:27:59:a2:85:c7:2c:25:c8: 85:0a:43:9b:2c:b2:23:c1:b5:80:0b:f7:23:61:2f: bb:de:9e:10:c6:e0:34:b2:2a:a8:b9:22:cb:59:7b: bb:44:63:3c:c6:a1:ec:b7:f7:ff:65:6b:bd:b7:4d: 34:f1:f0:48:42:7b:f0:0e:3e:66:fe:d1:28:76:a3: 94:21:57:bc:ac:72:df:41:2e:0d:7a:18:08:70:c1: 5b:09:fd:cb:3d:f6:f3:cf:f8:48:c5:5e:c1:c3:74: 4a:2f:ab:ee:a2:88:a7:84:a3:34:39:bc:04:bd:4c: 32:fd:6b:ef:81:34:46:d4:58:d0:f7:af:9e:65:b8: db:01:84:4c:02:3f:af:a8:bf:28:95:44:56:e9:7b: bd:c4:07:9b:26:43:a7:85:15:b0:51:99:d4:5b:7d: ef:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5E:F6:81:50:6B:99:4B:7D:32:7B:6D:4B:7A:72:89:87:52:BC:01 X509v3 Authority Key Identifier: keyid:E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:bd:91:77:29:b7:cb:27:48:00:f0:57:bb:95:80:b6:0b:52: 89:06:a4:55:ed:34:2a:65:67:97:0e:51:d7:64:56:cc:7d:94: f5:90:bf:d2:9b:05:40:22:c5:e5:29:bf:ce:c4:c0:61:24:1f: a3:cf:68:fa:5d:a6:f7:48:6c:db:b5:71:c1:d0:91:76:4e:81: cd:bf:a0:88:a3:22:f9:17:4d:0d:9d:26:73:c0:b3:bf:23:f3: 99:9f:5d:a4:ff:7b:ef:7a:0d:6f:5a:83:5d:29:d9:a5:12:a6: 2b:cb:a4:22:e4:14:ea:8d:9e:27:74:39:ee:72:57:68:69:e4: 60:34:24:16:a7:cc:ff:24:e8:26:dc:4b:13:30:de:d1:00:16: 89:61:2c:81:9a:05:bc:58:1d:fb:41:fb:90:fb:de:fb:92:1b: 40:5a:9e:63:6a:d2:a6:9b:79:07:91:33:d5:47:3b:d9:2c:e3: 5c:a7:cf:d4:d3:28:28:e7:54:5f:44:1a:7a:03:bb:48:40:54: 45:96:75:36:7c:70:15:85:53:66:03:c9:b8:1b:37:ca:0e:22: 07:d7:c5:52:f7:e2:7a:f0:e3:1b:c4:fe:03:c6:0a:e1:3b:b1: b2:26:8e:47:a3:89:f1:b9:8a:60:c0:41:49:bb:ff:0e:b0:e1: 76:df:df:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThCMEIxMTAvBgNVBAUTKEU0RUI1REZBNTc5MjQyOTBCQjhGRUM0NUI5OTc3RkM2 QzdGNkZBMzcwHhcNMjUwNTA2MTgxNTE1WhcNMjUwNTEzMTgxNTE1WjAYMRYwFAYD VQQDEw02ODFhNTFiMy1lMjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9uCPPxMtN4d35m6aMXQkhszzv6QdIIBybFCGJrwT7qnOPGSV7EFr4tEm7qgW Vf5/LuPTpykkVrKaMybjAoeWnTuzFMNjLxe6qijCH/Pkp9AzsLgKkf9J7VMiqEN/ xiNpJ1mihccsJciFCkObLLIjwbWAC/cjYS+73p4QxuA0siqouSLLWXu7RGM8xqHs t/f/ZWu9t0008fBIQnvwDj5m/tEodqOUIVe8rHLfQS4NehgIcMFbCf3LPfbzz/hI xV7Bw3RKL6vuooinhKM0ObwEvUwy/WvvgTRG1FjQ96+eZbjbAYRMAj+vqL8olURW 6Xu9xAebJkOnhRWwUZnUW33vrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5e9oFQ a5lLfTJ7bUt6comHUrwBMB8GA1UdIwQYMBaAFOTrXfpXkkKQu4/sRbmXf8bH9vo3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEIwQi81QUVCNUVCMkZD QzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1FwQzdqLXhGdVpkX3hzZjIt amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPdGQtbGVTUXBDN2oteEZ1WmRfeHNmMi1qYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEIwQi81QUVCNUVCMkZDQzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1Fw QzdqLXhGdVpkX3hzZjItamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2vZF3KbfLJ0gA8Fe7lYC2C1KJBqRV7TQqZWeXDlHXZFbMfZT1kL/S mwVAIsXlKb/OxMBhJB+jz2j6Xab3SGzbtXHB0JF2ToHNv6CIoyL5F00NnSZzwLO/ I/OZn12k/3vveg1vWoNdKdmlEqYry6Qi5BTqjZ4ndDnucldoaeRgNCQWp8z/JOgm 3EsTMN7RABaJYSyBmgW8WB37QfuQ+977khtAWp5jatKmm3kHkTPVRzvZLONcp8/U 0ygo51RfRBp6A7tIQFRFlnU2fHAVhVNmA8m4GzfKDiIH18VS9+J68OMbxP4Dxgrh O7GyJo5Ho4nxuYpgwEFJu/8OsOF2399r -----END CERTIFICATE-----Generated at Wed May 7 10:29:07 2025 by rpki-client