$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft File: 5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft (raw, json) Hash identifier: 6aCrYNtxF7xqkKB7pHHrUGUA1dldHZBfyyVxBfbkxvA= Subject key identifier: B8:15:31:0E:DC:F6:73:88:B5:7F:5D:69:51:AC:FD:11:D6:F3:FD:8D Authority key identifier: E6:F6:5D:22:1B:59:5F:6B:A1:3E:B3:14:DE:E3:38:CA:24:1E:27:20 Certificate issuer: /CN=A91D2B62/serialNumber=E6F65D221B595F6BA13EB314DEE338CA241E2720 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft Manifest number: 8F Signing time: Thu 15 May 2025 05:43:20 +0000 Manifest this update: Thu 15 May 2025 05:43:20 +0000 Manifest next update: Thu 22 May 2025 05:43:20 +0000 Files and hashes: 1: 5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl (hash: xQtDorzy37WeB01DoKAgXJozIcVqgDy655buB/wdGc8=) 2: F47CB05C5AE011EFB4CD7428C4F9AE02.roa (hash: dP/ms8awhu5P0L5X1kq3UaHwPpJfEdsfRvw8IFgrpFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:43:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2B62, serialNumber=E6F65D221B595F6BA13EB314DEE338CA241E2720 Validity Not Before: May 15 05:43:20 2025 GMT Not After : May 22 05:43:20 2025 GMT Subject: CN=68257ef8-8964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:73:73:b3:68:8b:11:9e:29:ee:72:a4:2b:dc: c7:7c:53:f1:63:a1:26:be:82:8f:a6:b9:65:43:a9: 40:c6:17:ff:69:32:b7:8e:56:3d:ff:c6:bc:5c:46: 6a:67:5b:e0:fb:df:42:99:3c:9c:9b:15:02:27:4b: 4b:54:7d:c6:39:79:ce:3e:60:49:91:a2:39:24:aa: 31:8a:1e:e6:e7:20:50:83:b3:a8:62:84:6d:1a:df: 92:9c:ab:5a:85:8e:b9:30:12:5b:82:9f:d0:a5:e2: 18:c5:bb:46:aa:9c:39:48:58:06:d7:a7:76:8e:d4: 0d:b5:2e:10:74:ae:38:b7:d8:21:82:59:2e:18:b0: af:e5:40:db:d4:4e:ec:1e:25:16:f4:ff:1c:89:8c: 1b:6e:f6:07:d0:78:9f:81:b9:4c:c4:a7:f1:bb:c9: 1c:94:78:d6:75:de:1f:6f:23:dc:8d:89:f5:48:b9: 53:4a:b7:6d:36:db:7c:12:68:f2:c5:dd:78:89:8b: 5b:e1:9a:c3:b8:9b:af:84:0c:d3:58:a1:02:ba:6c: 2e:cd:83:48:c3:e8:91:9e:cc:4b:e0:9b:bf:c4:7c: c6:71:c4:12:24:77:10:ce:82:d2:66:81:c5:a9:d9: 21:0a:1b:83:25:5d:ee:f1:82:da:58:ec:03:fc:a8: b2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:15:31:0E:DC:F6:73:88:B5:7F:5D:69:51:AC:FD:11:D6:F3:FD:8D X509v3 Authority Key Identifier: keyid:E6:F6:5D:22:1B:59:5F:6B:A1:3E:B3:14:DE:E3:38:CA:24:1E:27:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:8b:73:2e:2a:a2:7b:e5:88:4f:38:f2:62:cf:96:74:1a:ec: 7e:a3:1b:63:a9:e1:7e:43:c5:0a:35:99:8e:3a:e4:88:c7:5a: 3b:48:44:36:1f:3b:48:37:ac:e5:36:48:dd:62:a0:5e:a5:90: c3:2b:30:ff:74:a0:ae:b1:f3:be:43:d6:64:3c:b1:1a:93:91: 0d:36:dd:0d:cd:94:37:f4:51:37:b6:4c:31:0d:89:38:67:0c: a3:74:0c:28:a9:7e:e2:e8:b2:ad:1b:1e:f6:36:40:41:6f:da: 22:25:57:2c:db:91:98:4d:86:46:2f:01:c5:de:01:6c:7a:1a: 0f:09:b5:44:b5:db:b3:09:4a:5c:8d:7e:33:d7:56:28:4a:6b: 7b:5e:84:b7:89:ff:4a:b2:04:22:d2:a5:f0:7c:9c:e3:8b:bd: a1:f8:10:9b:ee:85:f9:16:87:24:ed:0a:bd:3d:ec:7f:2a:12: 6a:f4:46:ca:d2:66:63:52:88:18:c6:67:b7:42:56:68:93:d8: 73:bd:f7:75:20:bf:77:0d:6a:c5:86:5e:1d:ad:89:83:4f:ab: 10:b3:78:4b:88:7f:5a:a9:76:7d:70:8b:1d:d1:2b:71:ad:a5: aa:7e:24:f8:2b:13:1d:ae:df:08:e1:9e:19:c9:4c:19:90:a8: 51:70:e2:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJCNjIxMTAvBgNVBAUTKEU2RjY1RDIyMUI1OTVGNkJBMTNFQjMxNERFRTMzOENB MjQxRTI3MjAwHhcNMjUwNTE1MDU0MzIwWhcNMjUwNTIyMDU0MzIwWjAYMRYwFAYD VQQDEw02ODI1N2VmOC04OTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3Nzs2iLEZ4p7nKkK9zHfFPxY6EmvoKPprllQ6lAxhf/aTK3jlY9/8a8XEZq Z1vg+99CmTycmxUCJ0tLVH3GOXnOPmBJkaI5JKoxih7m5yBQg7OoYoRtGt+SnKta hY65MBJbgp/QpeIYxbtGqpw5SFgG16d2jtQNtS4QdK44t9ghglkuGLCv5UDb1E7s HiUW9P8ciYwbbvYH0HifgblMxKfxu8kclHjWdd4fbyPcjYn1SLlTSrdtNtt8Emjy xd14iYtb4ZrDuJuvhAzTWKECumwuzYNIw+iRnsxL4Ju/xHzGccQSJHcQzoLSZoHF qdkhChuDJV3u8YLaWOwD/KiymQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLgVMQ7c 9nOItX9daVGs/RHW8/2NMB8GA1UdIwQYMBaAFOb2XSIbWV9roT6zFN7jOMokHicg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkI2Mi9CRDI5QjgxNjVB RTAxMUVGODY1MUI2MUJDNEY5QUUwMi81dlpkSWh0WlgydWhQck1VM3VNNHlpUWVK eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV2WmRJaHRaWDJ1aFByTVUzdU00eWlRZUp5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkI2Mi9CRDI5QjgxNjVBRTAxMUVGODY1MUI2MUJDNEY5QUUwMi81dlpkSWh0Wlgy dWhQck1VM3VNNHlpUWVKeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3i3MuKqJ75YhPOPJiz5Z0Gux+oxtjqeF+Q8UKNZmOOuSIx1o7SEQ2 HztIN6zlNkjdYqBepZDDKzD/dKCusfO+Q9ZkPLEak5ENNt0NzZQ39FE3tkwxDYk4 ZwyjdAwoqX7i6LKtGx72NkBBb9oiJVcs25GYTYZGLwHF3gFsehoPCbVEtduzCUpc jX4z11YoSmt7XoS3if9KsgQi0qXwfJzji72h+BCb7oX5Fock7Qq9Pex/KhJq9EbK 0mZjUogYxme3QlZok9hzvfd1IL93DWrFhl4drYmDT6sQs3hLiH9aqXZ9cIsd0Stx raWqfiT4KxMdrt8I4Z4ZyUwZkKhRcOI1 -----END CERTIFICATE-----Generated at Fri May 16 16:44:47 2025 by rpki-client