$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft File: f5auCiLKk4vV-dmnMor1g2LrIsE.mft (raw, json) Hash identifier: m1oWVvOeFf9utr9QWXbFxoRvvOS2Z65L4weHUikErNA= Subject key identifier: 99:DB:52:33:70:B9:0C:FB:3F:D4:A0:2D:BE:2B:F4:68:74:84:AE:DF Authority key identifier: 7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1 Certificate issuer: /CN=A91BFFBE/serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft Manifest number: 61 Signing time: Tue 13 May 2025 06:14:51 +0000 Manifest this update: Tue 13 May 2025 06:14:50 +0000 Manifest next update: Tue 20 May 2025 06:14:50 +0000 Files and hashes: 1: f5auCiLKk4vV-dmnMor1g2LrIsE.crl (hash: VgtA0Gwo47VhIlAC0qdFVUnWhwFlmSS3Uu2+dNJ1EOk=) 2: 4450DA2C9D0311EF877CD229C4F9AE02.roa (hash: buSMZTKEc3PdwiMwBtG/n0gmpQCMqdjfMf4AjKQfjyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFFBE, serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1 Validity Not Before: May 13 06:14:50 2025 GMT Not After : May 20 06:14:50 2025 GMT Subject: CN=6822e35b-3f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:31:71:65:f1:0c:5c:95:fb:2f:48:68:57:a4: 33:aa:12:48:a9:09:b9:00:5f:0b:5b:b5:a7:be:1f: b6:30:54:96:b7:ae:62:c8:dc:71:42:8b:b8:7b:d1: 30:ca:f8:a8:d7:a3:99:c6:3f:b1:0c:9d:6d:b7:39: ef:b3:ce:ec:4b:af:a3:54:d8:8c:c7:62:d4:01:46: 0f:d7:36:0f:96:30:d0:59:e3:cb:0f:13:7c:9e:2c: 21:b2:6b:ad:42:f6:b9:bb:50:22:cd:a5:da:41:84: e0:04:34:bf:07:b2:62:21:7e:68:b7:bb:d0:d1:98: 9c:60:47:35:79:5b:8b:a3:e5:8f:a7:7a:a7:eb:d8: f4:b1:f6:8e:27:6e:97:63:92:bb:1b:f8:0c:0c:29: e5:fa:d2:5e:81:d4:69:c5:21:9c:2a:dc:28:df:aa: 26:2e:61:ee:2b:95:91:c2:26:68:cc:71:84:74:73: db:6e:81:6a:0a:e3:1d:5f:15:b9:67:86:90:97:18: 25:a9:dc:97:98:13:20:eb:a3:9c:9c:fe:15:a9:a9: 53:de:e1:a2:e1:2c:76:aa:b5:bb:d3:08:92:be:1b: 86:b6:9f:df:66:d9:2c:26:42:ee:20:74:2c:fc:2e: 36:31:85:69:d9:58:75:51:ca:9e:4b:49:58:03:d9: d8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DB:52:33:70:B9:0C:FB:3F:D4:A0:2D:BE:2B:F4:68:74:84:AE:DF X509v3 Authority Key Identifier: keyid:7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:93:9b:23:81:8b:ec:a6:4d:c0:08:bc:3d:a4:db:56:24:82: df:9f:8b:69:e3:9c:e4:d1:24:7a:dd:26:f6:3d:15:01:bd:6e: c3:11:0f:94:1f:2f:87:48:d3:c6:c1:7f:cf:26:9c:69:a9:a8: 29:c6:59:2f:4c:82:36:05:8a:d6:fb:4c:7b:a8:ec:58:4e:fc: c9:45:a8:39:f0:94:3e:a7:84:53:b4:ee:86:d9:ce:8e:e7:11: 6e:c4:75:2b:2c:67:23:36:13:a0:c8:c6:e4:e9:9e:ed:6f:62: 11:d9:18:c7:d5:73:d9:cc:7b:70:ba:79:8c:35:58:8a:b5:28: fd:9d:8c:79:9c:80:1c:cc:9d:50:a8:c4:63:d6:e6:77:13:9e: b9:1e:66:d8:7f:fa:75:f5:fa:44:79:cf:e2:79:c8:56:55:8f: 6c:5b:0a:3b:12:05:be:41:10:46:d3:6e:ef:8c:91:62:93:a7: 56:6d:e5:2e:41:d0:af:36:5d:6d:40:96:ae:79:ee:90:1f:30: b8:e3:84:23:a4:8c:d6:45:6b:64:9a:29:35:8e:20:a6:45:ff: 77:42:ab:c3:6b:35:c3:5e:63:91:9e:ad:c1:87:61:62:05:0a: ff:0d:0b:9b:4e:fb:e7:4b:bf:4e:21:b9:ed:83:dd:e5:6a:d5: 49:52:5c:cd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RkZCRTExMC8GA1UEBRMoN0Y5NkFFMEEyMkNBOTM4QkQ1RjlEOUE3MzI4QUY1ODM2 MkVCMjJDMTAeFw0yNTA1MTMwNjE0NTBaFw0yNTA1MjAwNjE0NTBaMBgxFjAUBgNV BAMTDTY4MjJlMzViLTNmMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCMXFl8QxclfsvSGhXpDOqEkipCbkAXwtbtae+H7YwVJa3rmLI3HFCi7h70TDK +KjXo5nGP7EMnW23Oe+zzuxLr6NU2IzHYtQBRg/XNg+WMNBZ48sPE3yeLCGya61C 9rm7UCLNpdpBhOAENL8HsmIhfmi3u9DRmJxgRzV5W4uj5Y+neqfr2PSx9o4nbpdj krsb+AwMKeX60l6B1GnFIZwq3CjfqiYuYe4rlZHCJmjMcYR0c9tugWoK4x1fFbln hpCXGCWp3JeYEyDro5yc/hWpqVPe4aLhLHaqtbvTCJK+G4a2n99m2SwmQu4gdCz8 LjYxhWnZWHVRyp5LSVgD2dinAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmdtSM3C5 DPs/1KAtviv0aHSErt8wHwYDVR0jBBgwFoAUf5auCiLKk4vV+dmnMor1g2LrIsEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGRkJFLzQyMTU5RjVBOUQw MjExRUY5OUNDODYwOUM0RjlBRTAyL2Y1YXVDaUxLazR2Vi1kbW5Nb3IxZzJMcklz RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZjVhdUNpTEtrNHZWLWRtbk1vcjFnMkxySXNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG RkJFLzQyMTU5RjVBOUQwMjExRUY5OUNDODYwOUM0RjlBRTAyL2Y1YXVDaUxLazR2 Vi1kbW5Nb3IxZzJMcklzRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAASTmyOBi+ymTcAIvD2k21Ykgt+fi2njnOTRJHrdJvY9FQG9bsMRD5Qf L4dI08bBf88mnGmpqCnGWS9MgjYFitb7THuo7FhO/MlFqDnwlD6nhFO07obZzo7n EW7EdSssZyM2E6DIxuTpnu1vYhHZGMfVc9nMe3C6eYw1WIq1KP2djHmcgBzMnVCo xGPW5ncTnrkeZth/+nX1+kR5z+J5yFZVj2xbCjsSBb5BEEbTbu+MkWKTp1Zt5S5B 0K82XW1Alq557pAfMLjjhCOkjNZFa2SaKTWOIKZF/3dCq8NrNcNeY5GercGHYWIF Cv8NC5tO++dLv04hue2D3eVq1UlSXM0= -----END CERTIFICATE-----Generated at Thu May 15 03:37:36 2025 by rpki-client