$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft File: d5zZIVaek_nSaxOlqn43bPtfBpA.mft (raw, json) Hash identifier: WGISSqRMi4sTsYu1WmEqF2LMk/ohXFebz00G7TgSLHA= Subject key identifier: 51:0D:66:10:75:9A:47:03:29:23:17:85:A3:C2:43:D9:7E:B2:60:1D Authority key identifier: 77:9C:D9:21:56:9E:93:F9:D2:6B:13:A5:AA:7E:37:6C:FB:5F:06:90 Certificate issuer: /CN=A91AF317/serialNumber=779CD921569E93F9D26B13A5AA7E376CFB5F0690 Certificate serial: 0649 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft Manifest number: 0643 Signing time: Mon 12 May 2025 22:22:51 +0000 Manifest this update: Mon 12 May 2025 22:22:50 +0000 Manifest next update: Mon 19 May 2025 22:22:50 +0000 Files and hashes: 1: d5zZIVaek_nSaxOlqn43bPtfBpA.crl (hash: KFVyiUhOjDfmljfLn+o+KInQUV1u4rh5VlLnyPtqC9k=) 2: 291E55288C7111EBA752313FC4F9AE02.roa (hash: A4h072jPvWuDDgO/u+pRW1SBWKkT2qV8RaMiezxbECY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.crl rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1609 (0x649) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF317, serialNumber=779CD921569E93F9D26B13A5AA7E376CFB5F0690 Validity Not Before: May 12 22:22:50 2025 GMT Not After : May 19 22:22:50 2025 GMT Subject: CN=682274bb-dfe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6d:76:04:c6:4b:15:2a:57:9d:e0:d1:a2:45: 9b:a7:33:a4:0b:b9:f3:38:7c:e1:32:f0:23:39:49: f1:a6:36:a8:74:6f:80:0a:70:b3:4f:4b:d4:79:75: e5:0d:6b:3d:e7:6c:bb:b1:3d:4d:9c:8d:a6:00:34: a2:98:8f:80:09:a5:9e:69:7f:10:11:6e:0a:f0:6a: 34:f6:b7:b3:25:36:4c:04:60:37:75:64:19:41:4e: e2:e9:e6:65:57:c7:9e:05:0e:44:34:08:99:90:92: 7a:af:ff:ad:41:6d:06:1c:09:56:4f:5b:fb:e3:26: da:8b:57:31:fb:1f:f1:71:5a:81:ea:15:e5:ea:c0: 80:1b:c1:a2:e8:99:d5:2e:9e:65:bc:4c:cd:94:00: b9:68:84:4d:95:d4:ee:2e:bc:80:56:f7:19:a7:ab: a4:32:59:0c:3f:2f:55:28:41:b8:90:54:1c:8b:09: f5:c2:75:f4:ae:67:a0:d7:23:7d:63:ac:36:39:b6: 27:80:2d:0f:79:84:e4:9b:61:7a:eb:60:84:25:26: 84:d9:39:47:7b:bb:25:cc:f8:34:b9:a5:66:1d:7e: 83:62:27:cc:39:00:6b:e8:0c:21:8a:94:01:7a:1f: b5:4c:ab:25:89:63:b8:07:f3:53:26:24:ae:0e:97: fb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0D:66:10:75:9A:47:03:29:23:17:85:A3:C2:43:D9:7E:B2:60:1D X509v3 Authority Key Identifier: keyid:77:9C:D9:21:56:9E:93:F9:D2:6B:13:A5:AA:7E:37:6C:FB:5F:06:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:58:70:f4:95:63:b0:6f:79:ec:8f:b0:cc:09:59:ba:8a:7c: 6c:9f:0a:c8:80:5e:b8:43:1b:06:15:33:1a:21:68:16:bc:9e: ee:40:bd:76:17:fa:55:2e:a0:b2:2b:3c:65:f7:77:b1:7d:bc: 37:b2:fa:c2:a1:1b:63:79:8e:8e:0c:92:67:5f:28:63:f8:04: dc:c7:30:dd:40:cd:17:23:7a:25:17:80:d9:e4:85:85:0a:46: 03:53:0a:15:cd:dc:9f:03:1a:aa:21:60:c2:3f:95:28:9a:6d: b5:78:b4:70:ca:68:fb:71:54:50:5c:9c:51:3a:45:6b:da:a6: 1a:c6:f7:99:be:69:67:70:0a:13:aa:b6:6d:36:09:45:7f:77: 26:50:25:ce:e4:84:a5:46:43:19:40:16:85:36:59:dd:b3:a1: 6f:e2:72:bc:88:3d:00:51:8d:d3:69:4c:18:52:4e:87:23:d5: a2:2d:0c:c6:71:d9:70:9d:13:12:8c:d3:5f:ef:87:d3:3d:d7: f1:4d:d3:ea:05:c2:5d:d6:2d:b1:7d:44:8a:ed:58:2f:38:64: 21:9b:cc:b5:ab:61:68:32:c9:df:58:4e:63:bc:3e:4e:24:84: 5b:93:31:74:49:0e:ae:05:69:67:fd:e1:79:49:00:dd:d0:ca: ff:eb:50:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYzMTcxMTAvBgNVBAUTKDc3OUNEOTIxNTY5RTkzRjlEMjZCMTNBNUFBN0UzNzZD RkI1RjA2OTAwHhcNMjUwNTEyMjIyMjUwWhcNMjUwNTE5MjIyMjUwWjAYMRYwFAYD VQQDEw02ODIyNzRiYi1kZmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1212BMZLFSpXneDRokWbpzOkC7nzOHzhMvAjOUnxpjaodG+ACnCzT0vUeXXl DWs952y7sT1NnI2mADSimI+ACaWeaX8QEW4K8Go09rezJTZMBGA3dWQZQU7i6eZl V8eeBQ5ENAiZkJJ6r/+tQW0GHAlWT1v74ybai1cx+x/xcVqB6hXl6sCAG8Gi6JnV Lp5lvEzNlAC5aIRNldTuLryAVvcZp6ukMlkMPy9VKEG4kFQciwn1wnX0rmeg1yN9 Y6w2ObYngC0PeYTkm2F662CEJSaE2TlHe7slzPg0uaVmHX6DYifMOQBr6AwhipQB eh+1TKsliWO4B/NTJiSuDpf78wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFENZhB1 mkcDKSMXhaPCQ9l+smAdMB8GA1UdIwQYMBaAFHec2SFWnpP50msTpap+N2z7XwaQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjMxNy80RkQ1NzY4MDhD NkYxMUVCQkE4MTlGMzFDNEY5QUUwMi9kNXpaSVZhZWtfblNheE9scW40M2JQdGZC cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q1elpJVmFla19uU2F4T2xxbjQzYlB0ZkJwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjMxNy80RkQ1NzY4MDhDNkYxMUVCQkE4MTlGMzFDNEY5QUUwMi9kNXpaSVZhZWtf blNheE9scW40M2JQdGZCcEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnWHD0lWOwb3nsj7DMCVm6inxsnwrIgF64QxsGFTMaIWgWvJ7uQL12 F/pVLqCyKzxl93exfbw3svrCoRtjeY6ODJJnXyhj+ATcxzDdQM0XI3olF4DZ5IWF CkYDUwoVzdyfAxqqIWDCP5Uomm21eLRwymj7cVRQXJxROkVr2qYaxveZvmlncAoT qrZtNglFf3cmUCXO5ISlRkMZQBaFNlnds6Fv4nK8iD0AUY3TaUwYUk6HI9WiLQzG cdlwnRMSjNNf74fTPdfxTdPqBcJd1i2xfUSK7VgvOGQhm8y1q2FoMsnfWE5jvD5O JIRbkzF0SQ6uBWln/eF5SQDd0Mr/61AM -----END CERTIFICATE-----Generated at Wed May 14 03:23:40 2025 by rpki-client