$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft File: r5ACm-EBySLPz0vRRdevHcZA5eA.mft (raw, json) Hash identifier: C4X7XFYnrkp9J0VyvQUqo8+3tR7r450BpTo062liAZw= Subject key identifier: F6:76:19:F9:E2:05:E7:15:83:80:A7:64:30:78:90:51:FE:35:03:EB Authority key identifier: AF:90:02:9B:E1:01:C9:22:CF:CF:4B:D1:45:D7:AF:1D:C6:40:E5:E0 Certificate issuer: /CN=A91D2646/serialNumber=AF90029BE101C922CFCF4BD145D7AF1DC640E5E0 Certificate serial: 09E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft Manifest number: 09DC Signing time: Sat 10 May 2025 19:39:56 +0000 Manifest this update: Sat 10 May 2025 19:39:56 +0000 Manifest next update: Sat 17 May 2025 19:39:56 +0000 Files and hashes: 1: r5ACm-EBySLPz0vRRdevHcZA5eA.crl (hash: ZjkiiO7LbReaV0iTH+5cUE/i0A4DQq4NQCUwUMEI/Ag=) 2: EE675FC27BED11EABD4A3A27C4F9AE02.roa (hash: AgjaL53ax01ov0J7/NtNC0271FAg3f2kxQ+XWNRqNo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.crl rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2533 (0x9e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2646, serialNumber=AF90029BE101C922CFCF4BD145D7AF1DC640E5E0 Validity Not Before: May 10 19:39:56 2025 GMT Not After : May 17 19:39:56 2025 GMT Subject: CN=681fab8c-d965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e5:e7:c9:03:a3:1e:67:d2:74:83:bc:32:bd: 8b:1b:03:b3:07:e3:d9:25:44:8a:fe:0f:03:79:a0: 68:d4:5f:fa:c9:45:1f:36:b5:bb:16:56:a7:09:5c: ca:59:68:97:51:96:24:28:53:79:16:50:0d:72:30: 87:dd:c0:f4:55:c3:6a:48:ea:49:65:07:a9:65:48: 15:54:be:a9:a0:23:81:6a:5c:33:03:55:1c:ef:f3: 01:ac:b1:0e:4c:f0:12:81:93:03:37:86:7e:c5:25: 6f:05:bf:cb:8e:8d:4e:10:47:b7:a2:0f:07:a0:fd: b0:5c:b2:16:90:c3:22:76:61:88:a6:ad:4c:8f:96: 54:1d:43:6d:71:a7:94:86:6b:29:b9:c4:ed:b1:ac: 42:58:33:99:60:dd:cd:de:1b:f0:42:02:af:38:c9: 2f:68:a3:d6:43:2d:1a:6d:a8:ef:78:7d:f5:75:fe: 45:4b:6e:bd:93:cf:56:c3:09:f1:21:cc:79:f0:97: ac:42:73:f2:45:92:08:46:bd:83:db:f9:17:15:95: e7:ee:92:4f:cc:fb:f9:9a:43:57:39:ed:a8:e0:fd: 82:f2:06:aa:16:92:4b:12:00:cc:22:26:32:cf:d7: ca:81:d2:19:79:c0:22:63:cd:f2:3d:fc:ac:6f:6f: 41:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:76:19:F9:E2:05:E7:15:83:80:A7:64:30:78:90:51:FE:35:03:EB X509v3 Authority Key Identifier: keyid:AF:90:02:9B:E1:01:C9:22:CF:CF:4B:D1:45:D7:AF:1D:C6:40:E5:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:3a:10:fe:ec:74:4b:2b:9c:d3:87:ff:2c:47:dd:ad:2a:5f: 89:03:b9:df:e9:c2:d9:7d:1b:c2:4e:d5:43:e8:d8:d1:32:c5: 5f:94:0d:14:27:e6:cf:85:64:77:07:f6:a4:34:a7:0a:6c:da: 3d:6b:be:8d:6f:17:f5:c5:c3:92:ab:48:d4:17:e0:43:db:bb: 87:e8:7c:b5:77:ab:5f:a6:a3:73:c5:2f:7f:ac:68:b5:70:e3: ed:49:b7:fd:ac:79:6f:b1:4a:72:30:8a:be:a9:55:cf:d6:d0: 0d:d1:bf:db:43:f9:8c:53:74:a9:84:17:1b:b6:08:c4:15:6b: 7b:34:51:45:a8:f4:b3:c9:b0:5d:a2:81:cd:ad:40:52:40:aa: a5:b6:d5:2a:23:76:9b:0b:49:72:a9:9b:bd:ed:40:ee:5e:6f: 0b:d3:fe:28:84:2d:08:12:16:b7:d9:48:0b:d7:d3:30:3a:81: 3b:6f:3f:b3:b8:c2:08:01:03:93:e6:75:5b:33:54:08:85:03: c6:85:c3:a5:9c:f9:a4:d9:ee:5e:84:ab:ce:f1:78:dc:e1:f4: 4c:70:17:85:92:01:b2:9a:65:69:4c:b5:e3:55:56:09:26:65: 75:3d:62:20:35:8e:67:1f:7f:87:81:b3:e0:0e:73:e5:0f:44: 18:3d:06:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2NDYxMTAvBgNVBAUTKEFGOTAwMjlCRTEwMUM5MjJDRkNGNEJEMTQ1RDdBRjFE QzY0MEU1RTAwHhcNMjUwNTEwMTkzOTU2WhcNMjUwNTE3MTkzOTU2WjAYMRYwFAYD VQQDEw02ODFmYWI4Yy1kOTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeXnyQOjHmfSdIO8Mr2LGwOzB+PZJUSK/g8DeaBo1F/6yUUfNrW7FlanCVzK WWiXUZYkKFN5FlANcjCH3cD0VcNqSOpJZQepZUgVVL6poCOBalwzA1Uc7/MBrLEO TPASgZMDN4Z+xSVvBb/Ljo1OEEe3og8HoP2wXLIWkMMidmGIpq1Mj5ZUHUNtcaeU hmspucTtsaxCWDOZYN3N3hvwQgKvOMkvaKPWQy0abajveH31df5FS269k89Wwwnx Icx58JesQnPyRZIIRr2D2/kXFZXn7pJPzPv5mkNXOe2o4P2C8gaqFpJLEgDMIiYy z9fKgdIZecAiY83yPfysb29BgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZ2Gfni BecVg4CnZDB4kFH+NQPrMB8GA1UdIwQYMBaAFK+QApvhAckiz89L0UXXrx3GQOXg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjY0Ni9EMjAzN0QxMjdC RUMxMUVBQTlBNkM3MjVDNEY5QUUwMi9yNUFDbS1FQnlTTFB6MHZSUmRldkhjWkE1 ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I1QUNtLUVCeVNMUHowdlJSZGV2SGNaQTVlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjY0Ni9EMjAzN0QxMjdCRUMxMUVBQTlBNkM3MjVDNEY5QUUwMi9yNUFDbS1FQnlT TFB6MHZSUmRldkhjWkE1ZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALOhD+7HRLK5zTh/8sR92tKl+JA7nf6cLZfRvCTtVD6NjRMsVflA0U J+bPhWR3B/akNKcKbNo9a76Nbxf1xcOSq0jUF+BD27uH6Hy1d6tfpqNzxS9/rGi1 cOPtSbf9rHlvsUpyMIq+qVXP1tAN0b/bQ/mMU3SphBcbtgjEFWt7NFFFqPSzybBd ooHNrUBSQKqlttUqI3abC0lyqZu97UDuXm8L0/4ohC0IEha32UgL19MwOoE7bz+z uMIIAQOT5nVbM1QIhQPGhcOlnPmk2e5ehKvO8Xjc4fRMcBeFkgGymmVpTLXjVVYJ JmV1PWIgNY5nH3+HgbPgDnPlD0QYPQYI -----END CERTIFICATE-----Generated at Sun May 11 14:54:10 2025 by rpki-client