$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.mft File: 5jRJcTfNjgmazQdoyBzzu0QmUbo.mft (raw, json) Hash identifier: bG4MTZa+I/Va/Yhrc5IWkKfHMxXqCeKA/MA9TqnCzCQ= Subject key identifier: A5:6F:9C:B6:E0:8E:F9:07:70:7C:64:5D:E1:BB:FA:35:55:C7:00:7C Authority key identifier: E6:34:49:71:37:CD:8E:09:9A:CD:07:68:C8:1C:F3:BB:44:26:51:BA Certificate issuer: /CN=A91CF064/serialNumber=E634497137CD8E099ACD0768C81CF3BB442651BA Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jRJcTfNjgmazQdoyBzzu0QmUbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.mft Manifest number: 9B Signing time: Tue 13 May 2025 05:28:45 +0000 Manifest this update: Tue 13 May 2025 05:28:45 +0000 Manifest next update: Tue 20 May 2025 05:28:45 +0000 Files and hashes: 1: 5jRJcTfNjgmazQdoyBzzu0QmUbo.crl (hash: OTKcUORLE5qjzvRspeoypS8ZUHN5Qd5f1s/CstfiF/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.crl rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jRJcTfNjgmazQdoyBzzu0QmUbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF064, serialNumber=E634497137CD8E099ACD0768C81CF3BB442651BA Validity Not Before: May 13 05:28:45 2025 GMT Not After : May 20 05:28:45 2025 GMT Subject: CN=6822d88d-c84d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fa:54:3a:ac:9a:08:23:bc:a2:23:bd:a8:b2: 9a:9f:7f:7d:87:21:41:33:2f:bd:03:3f:2a:c7:94: ea:51:e1:3e:2c:1f:6a:f0:55:95:cb:19:08:71:f4: fe:c3:c7:1d:ef:f3:b1:79:88:76:ca:87:9e:2e:2d: bf:6c:12:18:d2:ce:b6:8a:02:61:15:a4:66:ac:1b: d6:52:c4:17:8f:ea:b0:d6:03:41:98:74:eb:f8:eb: fb:5b:2f:11:61:94:84:e7:66:f6:45:d8:a4:0d:ef: 42:19:f2:cc:af:3e:01:bc:ec:aa:ee:a0:1d:49:5d: 2f:bd:bb:38:51:cb:dd:76:18:2f:13:d9:04:61:32: d0:d8:0f:76:74:48:53:b8:23:91:66:7e:0f:b0:ca: 15:3d:b8:be:a8:a9:f5:b3:f8:1a:f1:d8:4c:2f:ea: 21:2d:96:3f:4e:0d:88:53:07:cd:0f:46:29:3d:a4: a7:e6:57:1f:d2:9e:ad:75:28:e4:d5:09:74:30:e9: 40:ad:d8:5b:4b:a3:11:cf:7d:ca:76:e0:e2:a8:40: 17:26:76:4c:9a:12:05:17:f0:a6:5b:d8:8c:e2:06: ca:f1:c0:2e:92:ae:9e:8d:64:82:0f:56:c2:40:92: 66:d5:c2:ec:71:69:be:a8:66:b8:54:e5:57:1f:16: 80:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:6F:9C:B6:E0:8E:F9:07:70:7C:64:5D:E1:BB:FA:35:55:C7:00:7C X509v3 Authority Key Identifier: keyid:E6:34:49:71:37:CD:8E:09:9A:CD:07:68:C8:1C:F3:BB:44:26:51:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jRJcTfNjgmazQdoyBzzu0QmUbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:30:01:ac:a4:c1:34:96:a7:82:cb:b4:2f:a1:90:8e:40:25: ac:d6:84:6c:27:ec:d1:4a:a1:0a:c5:f6:20:09:50:16:12:14: 1c:ed:ce:54:9e:bb:a0:cc:e3:5f:9c:a8:a0:f9:e3:f6:cc:4a: 52:28:b7:39:57:8a:b8:94:fc:f6:3d:f3:f2:e7:ac:af:93:3d: b4:1a:0b:f3:a2:78:9f:89:2e:06:5d:fd:51:92:2b:15:a6:3e: 3f:7f:5a:d1:27:91:3b:12:fc:62:7c:08:bb:b3:7c:dd:19:ef: 9a:e2:5b:41:c9:39:42:8a:d6:ad:18:13:18:68:b8:f5:aa:59: fe:18:cc:ad:2b:b0:e7:30:ad:35:23:1e:7f:b5:92:29:ff:eb: 7a:6f:53:8b:8a:dd:2e:d3:ab:7f:a8:84:2a:1a:e2:96:cf:b8: e0:0b:f4:a1:77:41:c2:0f:27:19:14:54:36:22:af:ee:78:85: 4c:6a:70:5f:0a:6c:2b:fd:6d:9d:c1:0c:87:11:e2:17:2e:f1: a0:50:39:dc:57:04:93:31:1c:95:6b:77:d5:6d:4e:4a:38:22: 89:4d:01:82:fa:83:36:51:7f:7a:5f:f5:38:91:8c:86:cd:ef: 8b:0b:25:03:54:58:17:b8:b3:50:9e:6b:f0:c3:66:2a:35:7b: 8d:92:c4:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YwNjQxMTAvBgNVBAUTKEU2MzQ0OTcxMzdDRDhFMDk5QUNEMDc2OEM4MUNGM0JC NDQyNjUxQkEwHhcNMjUwNTEzMDUyODQ1WhcNMjUwNTIwMDUyODQ1WjAYMRYwFAYD VQQDEw02ODIyZDg4ZC1jODRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPpUOqyaCCO8oiO9qLKan399hyFBMy+9Az8qx5TqUeE+LB9q8FWVyxkIcfT+ w8cd7/OxeYh2yoeeLi2/bBIY0s62igJhFaRmrBvWUsQXj+qw1gNBmHTr+Ov7Wy8R YZSE52b2RdikDe9CGfLMrz4BvOyq7qAdSV0vvbs4UcvddhgvE9kEYTLQ2A92dEhT uCORZn4PsMoVPbi+qKn1s/ga8dhML+ohLZY/Tg2IUwfND0YpPaSn5lcf0p6tdSjk 1Ql0MOlArdhbS6MRz33KduDiqEAXJnZMmhIFF/CmW9iM4gbK8cAukq6ejWSCD1bC QJJm1cLscWm+qGa4VOVXHxaAeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVvnLbg jvkHcHxkXeG7+jVVxwB8MB8GA1UdIwQYMBaAFOY0SXE3zY4Jms0HaMgc87tEJlG6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjA2NC9GQzJGRjlDNjQ0 RTIxMUVGQjEzRjIyMTRDNEY5QUUwMi81alJKY1RmTmpnbWF6UWRveUJ6enUwUW1V Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVqUkpjVGZOamdtYXpRZG95Qnp6dTBRbVViby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjA2NC9GQzJGRjlDNjQ0RTIxMUVGQjEzRjIyMTRDNEY5QUUwMi81alJKY1RmTmpn bWF6UWRveUJ6enUwUW1VYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdMAGspME0lqeCy7QvoZCOQCWs1oRsJ+zRSqEKxfYgCVAWEhQc7c5U nrugzONfnKig+eP2zEpSKLc5V4q4lPz2PfPy56yvkz20GgvzonifiS4GXf1RkisV pj4/f1rRJ5E7EvxifAi7s3zdGe+a4ltByTlCitatGBMYaLj1qln+GMytK7DnMK01 Ix5/tZIp/+t6b1OLit0u06t/qIQqGuKWz7jgC/Shd0HCDycZFFQ2Iq/ueIVManBf Cmwr/W2dwQyHEeIXLvGgUDncVwSTMRyVa3fVbU5KOCKJTQGC+oM2UX96X/U4kYyG ze+LCyUDVFgXuLNQnmvww2YqNXuNksRM -----END CERTIFICATE-----Generated at Wed May 14 10:46:09 2025 by rpki-client