$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft File: _U5c-75RNAFgOW1ZbhsySM_IHMQ.mft (raw, json) Hash identifier: vTVlLwuRcQujj+ZBEqMUkzHqU/VTWReS5NGW7GKEp+8= Subject key identifier: F4:B3:71:41:B4:8F:49:63:6D:FB:03:C8:36:15:BB:FB:0D:6C:E2:F7 Authority key identifier: FD:4E:5C:FB:BE:51:34:01:60:39:6D:59:6E:1B:32:48:CF:C8:1C:C4 Certificate issuer: /CN=A91B5CEA/serialNumber=FD4E5CFBBE51340160396D596E1B3248CFC81CC4 Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U5c-75RNAFgOW1ZbhsySM_IHMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft Manifest number: 01D6 Signing time: Sun 11 May 2025 01:48:23 +0000 Manifest this update: Sun 11 May 2025 01:48:22 +0000 Manifest next update: Sun 18 May 2025 01:48:22 +0000 Files and hashes: 1: _U5c-75RNAFgOW1ZbhsySM_IHMQ.crl (hash: 6R5DWLZF1KNillyaUfKBJNm8RSkgTLusRrygnMsb2Ys=) 2: B42198DC64F211ED9AEC046FC4F9AE02.roa (hash: mfM+unwRd1y5KNLtchPVfnPJL1r2yUuTkpo8qV3b6dM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.crl rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U5c-75RNAFgOW1ZbhsySM_IHMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:48:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5CEA, serialNumber=FD4E5CFBBE51340160396D596E1B3248CFC81CC4 Validity Not Before: May 11 01:48:22 2025 GMT Not After : May 18 01:48:22 2025 GMT Subject: CN=682001e7-b32e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f1:3e:2e:98:82:44:37:50:36:b8:a7:5e:97: c2:23:20:83:55:69:bf:6c:42:1b:ab:9c:e7:85:c3: d9:c8:5a:8a:60:4b:26:0e:8d:d7:7f:b1:50:f1:d3: b1:a5:b0:97:7c:16:fb:b8:46:77:4e:22:12:69:c8: 88:28:93:ce:cd:0a:da:a7:c2:fe:0c:0a:b5:d8:26: 17:ef:26:02:c5:fe:7b:b4:33:a6:6c:89:0f:f7:7c: 20:16:50:c2:61:0c:6a:ee:b2:d5:5e:66:62:9a:b9: 33:f4:b5:d3:af:54:ae:f7:88:02:8b:14:30:02:c6: 38:cd:3e:3f:da:be:a5:f0:58:db:46:d6:56:f4:08: 91:d2:a7:84:4e:54:12:c8:7f:8b:57:f2:42:98:76: a8:7f:6a:da:55:69:96:dd:1d:f3:aa:81:25:8c:30: e7:55:43:e0:16:dc:03:19:cf:e9:7b:58:59:4a:0b: 06:fc:75:30:45:7f:f9:33:67:82:d0:4f:8a:d1:90: bb:6b:b6:b7:f1:e4:6c:32:ff:4b:a3:e8:75:45:e4: 23:b6:cb:fb:a1:57:1a:80:00:27:20:9f:1c:af:e9: c2:93:aa:80:55:c4:82:4d:0c:d9:de:84:4e:4b:2d: 08:c2:2a:5c:94:d1:01:a1:f2:cf:0f:77:8b:7f:d6: fd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B3:71:41:B4:8F:49:63:6D:FB:03:C8:36:15:BB:FB:0D:6C:E2:F7 X509v3 Authority Key Identifier: keyid:FD:4E:5C:FB:BE:51:34:01:60:39:6D:59:6E:1B:32:48:CF:C8:1C:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U5c-75RNAFgOW1ZbhsySM_IHMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:de:6f:a7:bc:cd:46:e6:bf:51:dc:ba:05:e5:c5:d8:d6:02: 4b:79:ab:b4:2a:12:1f:4c:b4:07:a7:6f:16:73:f5:dc:cb:9d: bc:6d:e1:ab:32:d8:d7:c2:c3:90:97:55:51:74:8a:6b:5c:4d: a2:2e:00:3a:e3:7c:6a:d2:f2:31:7d:db:43:87:68:69:a2:ee: 8b:82:8b:b7:dc:2d:77:fc:65:af:de:18:ef:c6:1f:28:1d:75: 42:8b:29:d0:9c:cb:4d:09:1e:69:4c:d1:a6:d6:66:69:0b:7d: b8:a4:1c:3c:e5:bb:46:bb:77:87:2d:a3:24:b7:d3:ac:09:7f: d8:45:ec:e0:0d:4f:99:80:57:9c:d8:57:e2:39:eb:b0:10:ad: c8:96:43:ec:74:d5:50:73:19:be:b2:92:69:ce:44:cd:e5:d7: f0:d2:14:94:37:e6:ba:41:e7:49:9b:97:1c:45:98:6f:7e:c3: 38:db:ba:c7:40:55:e2:33:43:e2:22:aa:44:06:a3:be:ff:2d: 15:00:38:fb:7b:1d:7f:86:c2:2e:08:be:67:b2:c0:a0:1e:40: 8c:b4:c0:d7:04:9c:a5:4b:fe:92:1a:02:c2:66:43:0d:cd:71: ea:c4:9c:d9:57:c7:59:49:c9:9d:de:a0:35:e2:f4:4c:0e:d0: d0:57:13:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDRUExMTAvBgNVBAUTKEZENEU1Q0ZCQkU1MTM0MDE2MDM5NkQ1OTZFMUIzMjQ4 Q0ZDODFDQzQwHhcNMjUwNTExMDE0ODIyWhcNMjUwNTE4MDE0ODIyWjAYMRYwFAYD VQQDEw02ODIwMDFlNy1iMzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxfE+LpiCRDdQNrinXpfCIyCDVWm/bEIbq5znhcPZyFqKYEsmDo3Xf7FQ8dOx pbCXfBb7uEZ3TiISaciIKJPOzQrap8L+DAq12CYX7yYCxf57tDOmbIkP93wgFlDC YQxq7rLVXmZimrkz9LXTr1Su94gCixQwAsY4zT4/2r6l8FjbRtZW9AiR0qeETlQS yH+LV/JCmHaof2raVWmW3R3zqoEljDDnVUPgFtwDGc/pe1hZSgsG/HUwRX/5M2eC 0E+K0ZC7a7a38eRsMv9Lo+h1ReQjtsv7oVcagAAnIJ8cr+nCk6qAVcSCTQzZ3oRO Sy0IwipclNEBofLPD3eLf9b99QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPSzcUG0 j0ljbfsDyDYVu/sNbOL3MB8GA1UdIwQYMBaAFP1OXPu+UTQBYDltWW4bMkjPyBzE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNFQS8yOEE3N0I2ODY0 RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9fVTVjLTc1Uk5BRmdPVzFaYmhzeVNNX0lI TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19VNWMtNzVSTkFGZ09XMVpiaHN5U01fSUhNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUNFQS8yOEE3N0I2ODY0RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9fVTVjLTc1Uk5B RmdPVzFaYmhzeVNNX0lITVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb3m+nvM1G5r9R3LoF5cXY1gJLeau0KhIfTLQHp28Wc/Xcy528beGr MtjXwsOQl1VRdIprXE2iLgA643xq0vIxfdtDh2hpou6Lgou33C13/GWv3hjvxh8o HXVCiynQnMtNCR5pTNGm1mZpC324pBw85btGu3eHLaMkt9OsCX/YRezgDU+ZgFec 2FfiOeuwEK3IlkPsdNVQcxm+spJpzkTN5dfw0hSUN+a6QedJm5ccRZhvfsM427rH QFXiM0PiIqpEBqO+/y0VADj7ex1/hsIuCL5nssCgHkCMtMDXBJylS/6SGgLCZkMN zXHqxJzZV8dZScmd3qA14vRMDtDQVxOI -----END CERTIFICATE-----Generated at Sun May 11 21:14:51 2025 by rpki-client