$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft File: 5MWJuJPSconPhG3wWt-1lgNkKP0.mft (raw, json) Hash identifier: JILd3e8k8uMMmLYr/PWsUb/VY0pUjggLZ/lWJX4ehY0= Subject key identifier: 2E:22:A7:E9:91:41:77:50:FF:66:85:CF:DB:89:E8:92:EA:3C:EC:E4 Authority key identifier: E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD Certificate issuer: /CN=A91B8AC8/serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft Manifest number: 5A Signing time: Thu 15 May 2025 06:31:08 +0000 Manifest this update: Thu 15 May 2025 06:31:07 +0000 Manifest next update: Thu 22 May 2025 06:31:07 +0000 Files and hashes: 1: 5MWJuJPSconPhG3wWt-1lgNkKP0.crl (hash: Yxh8h0SzFIghP16iPICZEdvWlHptGOgsxSBIbhOXB+s=) 2: 8FFA61D4B13D11EF9EFDE433C4F9AE02.roa (hash: EhNDnWOJJGSPSxGl0lercQlAl3yvPmyKkzL2DPkH1sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8AC8, serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD Validity Not Before: May 15 06:31:07 2025 GMT Not After : May 22 06:31:07 2025 GMT Subject: CN=68258a2c-2a36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:80:64:6b:0b:92:c4:3d:32:4d:76:bf:99:d8: 58:a6:9f:87:c1:f6:72:cb:93:c4:83:61:1f:41:6a: 10:de:fe:ee:56:fd:88:31:45:e1:01:3b:26:7f:0a: e2:54:af:ee:7c:4c:1e:4a:cf:51:c6:25:43:19:e1: 2e:e7:d0:13:65:bc:2e:ae:64:8e:86:e4:9c:d5:31: 8d:d4:cf:17:42:6b:48:47:38:dc:19:da:d8:8f:a3: 62:c0:8b:ce:50:d5:aa:c7:66:bc:dd:c1:31:f3:67: 5b:c1:5d:52:f6:c0:5e:ac:bb:56:4e:13:37:a4:a9: 78:1e:64:c8:8f:d2:74:6b:59:cb:92:4b:06:91:80: b8:f9:92:ca:c8:d2:fb:06:81:98:36:b5:21:67:de: d7:67:07:49:1d:4f:ea:d9:a4:50:c0:ac:93:6f:cd: 2e:6b:b0:70:df:bb:c2:27:28:7c:13:2c:0b:fe:05: 3e:be:e2:9d:7b:6b:29:75:5d:14:a1:c3:c2:39:6e: cd:9e:ef:44:af:c2:eb:50:de:4a:63:e5:7f:0b:b4: bb:b2:c1:e3:c7:b9:99:79:ac:d0:fc:55:0a:36:43: 1d:27:d3:2d:ee:29:1f:a2:eb:38:d0:44:17:61:4d: 85:24:40:92:74:44:d6:71:2d:73:0f:95:da:f5:e5: 7a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:22:A7:E9:91:41:77:50:FF:66:85:CF:DB:89:E8:92:EA:3C:EC:E4 X509v3 Authority Key Identifier: keyid:E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b3:f6:13:21:d8:b0:40:32:26:d5:57:8f:78:30:d0:84:5d: 9c:71:d7:fd:f0:ae:16:a9:ac:90:8a:eb:6c:d9:3f:e2:83:27: 14:18:7f:6b:7e:6d:fe:18:ef:5e:bf:c1:7b:ed:b2:9b:25:ee: 96:09:4e:75:11:02:51:50:a5:bf:6a:db:cf:67:28:4c:c0:3b: 13:96:4d:77:80:4d:f2:06:50:92:6a:2a:18:35:a6:3f:e8:60: f5:fb:ba:06:1f:17:7b:56:8f:71:b7:95:04:3e:1b:ee:f5:54: ff:ad:98:57:69:00:0d:1b:94:b1:33:62:18:4b:16:94:bd:24: 1d:5c:69:db:b0:c3:6e:c3:a1:63:5c:f6:f0:e3:cf:58:92:20: 07:6c:f3:a4:e2:67:c9:36:5a:ed:d6:54:a8:f8:e6:2a:33:07: 7b:0f:51:4a:47:25:08:d0:20:6c:5b:15:38:d0:d5:b6:64:1a: c8:74:f6:d6:01:18:bb:ad:c7:2e:c0:bc:1c:ec:61:1d:69:1f: b5:80:55:10:53:b4:b1:de:58:ef:cb:31:1b:08:9a:27:2e:3e: c6:eb:b5:75:fe:2f:9e:e2:c7:7b:7b:0f:f9:bd:9c:70:73:4a: be:c9:fa:1d:45:ac:b9:cc:64:cc:21:22:0c:59:e2:4e:12:71: e6:a5:79:6d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEFDODExMC8GA1UEBRMoRTRDNTg5Qjg5M0QyNzI4OUNGODQ2REYwNUFERkI1OTYw MzY0MjhGRDAeFw0yNTA1MTUwNjMxMDdaFw0yNTA1MjIwNjMxMDdaMBgxFjAUBgNV BAMTDTY4MjU4YTJjLTJhMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7gGRrC5LEPTJNdr+Z2Fimn4fB9nLLk8SDYR9BahDe/u5W/YgxReEBOyZ/CuJU r+58TB5Kz1HGJUMZ4S7n0BNlvC6uZI6G5JzVMY3UzxdCa0hHONwZ2tiPo2LAi85Q 1arHZrzdwTHzZ1vBXVL2wF6su1ZOEzekqXgeZMiP0nRrWcuSSwaRgLj5ksrI0vsG gZg2tSFn3tdnB0kdT+rZpFDArJNvzS5rsHDfu8InKHwTLAv+BT6+4p17ayl1XRSh w8I5bs2e70SvwutQ3kpj5X8LtLuywePHuZl5rND8VQo2Qx0n0y3uKR+i6zjQRBdh TYUkQJJ0RNZxLXMPldr15XpbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULiKn6ZFB d1D/ZoXP24nokuo87OQwHwYDVR0jBBgwFoAU5MWJuJPSconPhG3wWt+1lgNkKP0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4QUM4L0UxMkQxMDUyQjEz QzExRUZBQUY5RDczMUM0RjlBRTAyLzVNV0p1SlBTY29uUGhHM3dXdC0xbGdOa0tQ MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNU1XSnVKUFNjb25QaEczd1d0LTFsZ05rS1AwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 QUM4L0UxMkQxMDUyQjEzQzExRUZBQUY5RDczMUM0RjlBRTAyLzVNV0p1SlBTY29u UGhHM3dXdC0xbGdOa0tQMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADuz9hMh2LBAMibVV494MNCEXZxx1/3wrhaprJCK62zZP+KDJxQYf2t+ bf4Y716/wXvtspsl7pYJTnURAlFQpb9q289nKEzAOxOWTXeATfIGUJJqKhg1pj/o YPX7ugYfF3tWj3G3lQQ+G+71VP+tmFdpAA0blLEzYhhLFpS9JB1caduww27DoWNc 9vDjz1iSIAds86TiZ8k2Wu3WVKj45iozB3sPUUpHJQjQIGxbFTjQ1bZkGsh09tYB GLutxy7AvBzsYR1pH7WAVRBTtLHeWO/LMRsImicuPsbrtXX+L57ix3t7D/m9nHBz Sr7J+h1FrLnMZMwhIgxZ4k4ScealeW0= -----END CERTIFICATE-----Generated at Fri May 16 06:31:47 2025 by rpki-client