$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft File: 5esYDNbcUWxm01KwR7npxaUCcOM.mft (raw, json) Hash identifier: q5m6kGZIvcMBHzFfJCfCH5I7MGCP6n6wUp+kJ7OciW4= Subject key identifier: DD:BA:7E:A1:B7:75:5F:B1:A0:FC:6C:80:F9:AD:88:E9:91:CE:54:A8 Authority key identifier: E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3 Certificate issuer: /CN=A91ABFD9/serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3 Certificate serial: 08B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft Manifest number: 0897 Signing time: Sun 04 May 2025 20:19:12 +0000 Manifest this update: Sun 04 May 2025 20:19:12 +0000 Manifest next update: Sun 11 May 2025 20:19:12 +0000 Files and hashes: 1: 5esYDNbcUWxm01KwR7npxaUCcOM.crl (hash: ib4oJBXQGXr6Yfpza8gCbFOKnZMzfq7Rd3Phd/owPJA=) 2: E2E21364C4F811EAB8D31113C4F9AE02.roa (hash: KT6K45U/vV1zQkhhfiaxr9a9XeTKLIwG0eEDcyR3ERI=) 3: F1A54AC47A5611EB876D281FC4F9AE02.roa (hash: LbbFjEbhHg5fzKZNW2jokQ6UuaIS/rDPKgFU2q0pJeg=) 4: 36945EC2232711EBA0F14F17C4F9AE02.roa (hash: Gzcr6RaAc7WjlspRH4slQcyVh4i/nmyVkR/RXd4O0KM=) 5: 6AE50E1C21E011EBBF36CD21C4F9AE02.roa (hash: Lg2iSZUiBgCc3+l3q9JExUq+jxWe1fvszct9oy4Ys3k=) 6: E22ECDEAC4F811EAB8D31113C4F9AE02.roa (hash: tlDd7aRrzNeu6uslbfPluCcOk663EDpRsH8KL9nqlD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 20:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2227 (0x8b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABFD9, serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3 Validity Not Before: May 4 20:19:12 2025 GMT Not After : May 11 20:19:12 2025 GMT Subject: CN=6817cbc0-1e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:42:73:2d:81:0e:9e:60:81:36:c7:d7:c5:81: fd:b3:61:36:2e:d2:22:9c:da:20:0c:62:da:92:02: a7:77:16:73:80:52:a8:2e:d0:ee:43:26:5d:36:62: 9b:3b:af:70:74:03:81:ad:ff:94:5d:05:6a:d0:19: 62:42:7d:32:b0:2b:c9:0a:61:b8:3b:75:ef:a4:a2: e9:83:f3:14:af:7a:53:7b:85:f4:82:dc:76:c0:35: 14:5d:bc:ca:7b:85:95:a7:f7:cd:55:14:fd:c2:81: b8:8e:57:83:c9:ef:5d:1c:78:88:42:07:fa:49:4a: 97:67:45:a9:38:57:2b:34:ab:a8:41:e8:2b:7d:8a: 7a:a8:37:8b:f1:da:d0:52:cf:3f:8c:fa:b5:c7:ff: 62:b2:6f:4a:d1:48:11:27:fb:d2:d9:7f:d2:c1:6f: 09:8c:06:0c:c9:48:f2:ed:e9:02:f7:1e:a0:3c:d7: 85:51:e3:02:10:36:5c:b1:2f:b2:92:07:db:4c:40: 9d:e8:4e:c2:a0:d7:55:c3:66:e3:b5:2f:5f:e6:ec: 65:a1:12:e2:6e:1b:94:66:51:a4:d9:2b:55:a9:d9: b8:d9:c3:59:65:4c:92:c7:88:7e:ef:b3:01:c9:16: 3d:3d:38:a2:c4:e4:58:13:89:61:86:9e:0f:73:f6: 7a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:BA:7E:A1:B7:75:5F:B1:A0:FC:6C:80:F9:AD:88:E9:91:CE:54:A8 X509v3 Authority Key Identifier: keyid:E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:96:01:65:fe:ad:9a:07:d2:aa:3d:ff:51:54:ed:b2:80:84: cf:8f:9e:9d:69:b7:e4:76:f5:3a:4f:16:7d:a8:9a:03:7e:84: 42:dc:95:94:26:e5:f8:b2:c8:04:af:85:ec:ff:92:7f:30:6f: cd:b3:46:fc:27:4e:b4:fd:00:05:18:39:3d:2c:ae:33:6c:20: cc:49:db:b0:c4:fd:af:5c:03:00:ae:41:fb:e9:cd:23:88:2b: c2:00:db:0e:01:ba:0e:a4:c7:49:38:6e:54:27:21:2f:12:63: 99:da:ff:44:82:66:82:b9:c1:0b:e9:45:a4:50:49:dd:27:e2: fd:e7:66:df:38:e2:ec:4b:88:d5:ff:0a:43:e3:70:f1:a0:3f: 7f:c0:09:59:d0:97:1a:3b:6b:da:bf:bc:ea:cb:0d:c1:e4:fa: 4d:a9:08:42:08:ad:d7:87:bb:f1:a4:c3:bf:c9:2a:3a:2c:05: d7:f8:36:ed:bb:b0:7c:a2:7e:d7:ab:a3:cb:b1:f3:42:f2:07: f1:17:57:2a:3f:33:86:7a:97:7b:15:82:04:a9:7d:42:c3:ad: f0:a3:60:ec:d7:6a:3f:72:3a:24:49:02:5d:ab:dc:67:20:68: c3:99:e4:35:0c:b9:f1:93:ce:45:3f:88:52:35:e8:a2:35:d7: 16:3c:1c:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJGRDkxMTAvBgNVBAUTKEU1RUIxODBDRDZEQzUxNkM2NkQzNTJCMDQ3QjlFOUM1 QTUwMjcwRTMwHhcNMjUwNTA0MjAxOTEyWhcNMjUwNTExMjAxOTEyWjAYMRYwFAYD VQQDEw02ODE3Y2JjMC0xZTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkJzLYEOnmCBNsfXxYH9s2E2LtIinNogDGLakgKndxZzgFKoLtDuQyZdNmKb O69wdAOBrf+UXQVq0BliQn0ysCvJCmG4O3XvpKLpg/MUr3pTe4X0gtx2wDUUXbzK e4WVp/fNVRT9woG4jleDye9dHHiIQgf6SUqXZ0WpOFcrNKuoQegrfYp6qDeL8drQ Us8/jPq1x/9ism9K0UgRJ/vS2X/SwW8JjAYMyUjy7ekC9x6gPNeFUeMCEDZcsS+y kgfbTECd6E7CoNdVw2bjtS9f5uxloRLibhuUZlGk2StVqdm42cNZZUySx4h+77MB yRY9PTiixORYE4lhhp4Pc/Z6yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN26fqG3 dV+xoPxsgPmtiOmRzlSoMB8GA1UdIwQYMBaAFOXrGAzW3FFsZtNSsEe56cWlAnDj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkZEOS80QUU4MDQxRUI5 RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VXeG0wMUt3UjducHhhVUNj T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVlc1lETmJjVVd4bTAxS3dSN25weGFVQ2NPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkZEOS80QUU4MDQxRUI5RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VX eG0wMUt3UjducHhhVUNjT00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1lgFl/q2aB9KqPf9RVO2ygITPj56dabfkdvU6TxZ9qJoDfoRC3JWU JuX4ssgEr4Xs/5J/MG/Ns0b8J060/QAFGDk9LK4zbCDMSduwxP2vXAMArkH76c0j iCvCANsOAboOpMdJOG5UJyEvEmOZ2v9EgmaCucEL6UWkUEndJ+L952bfOOLsS4jV /wpD43DxoD9/wAlZ0JcaO2vav7zqyw3B5PpNqQhCCK3Xh7vxpMO/ySo6LAXX+Dbt u7B8on7Xq6PLsfNC8gfxF1cqPzOGepd7FYIEqX1Cw63wo2Ds12o/cjokSQJdq9xn IGjDmeQ1DLnxk85FP4hSNeiiNdcWPBw8 -----END CERTIFICATE-----Generated at Tue May 6 01:36:22 2025 by rpki-client