$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft File: 5TfQw0j9fcSfX8OwBmoxxYT64as.mft (raw, json) Hash identifier: ThI2/0RfJbROu7EvErk2BdTmQFsp7x4Qtif29aQ2BdM= Subject key identifier: 5F:D2:BD:30:28:58:71:B0:F7:22:87:30:A8:98:FA:58:4F:6B:43:59 Authority key identifier: E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB Certificate issuer: /CN=A91D4345/serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB Certificate serial: 0C4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft Manifest number: 0C40 Signing time: Sat 10 May 2025 18:16:24 +0000 Manifest this update: Sat 10 May 2025 18:16:24 +0000 Manifest next update: Sat 17 May 2025 18:16:24 +0000 Files and hashes: 1: 5TfQw0j9fcSfX8OwBmoxxYT64as.crl (hash: g1HnwvlLLy9XFqfPr5sKZPTuo2wWDLhc5LgtVi01qNw=) 2: F3529CDCAE1511EE92D99E46C4F9AE02.roa (hash: hTD7DjMK2EnPCWqJypUdiJk7jUHRPt10GcfYU8sN4po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:16:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3149 (0xc4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4345, serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB Validity Not Before: May 10 18:16:24 2025 GMT Not After : May 17 18:16:24 2025 GMT Subject: CN=681f97f8-2556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:10:1a:0a:28:72:eb:1a:a8:79:76:ec:39:67: cb:fd:87:b3:68:09:d2:7b:60:58:39:5d:53:a4:77: 90:9d:19:cc:7d:1a:cc:2c:98:45:1d:25:42:6f:d3: a7:22:26:0b:98:c0:ec:6d:7f:12:30:3d:6e:f6:2d: 56:e5:b9:d1:37:73:93:91:44:4f:0e:af:2e:1f:4a: 12:83:88:62:fe:16:a3:85:c6:a7:c5:9b:46:fb:92: c3:4a:31:f4:a7:d5:c1:a9:83:24:3c:2e:fa:a4:49: c2:88:4f:a2:a5:0e:f4:ad:1e:cb:14:28:dd:06:9f: b8:8a:4c:1e:44:b3:fa:62:e2:6f:42:08:1a:1d:f3: 6c:82:6b:0d:c3:e6:47:00:ca:43:1e:63:4e:44:88: 93:e2:cd:3d:53:6f:71:b6:1e:19:1e:9e:03:ac:13: dd:ba:3b:7c:73:8a:de:cd:e0:f8:fe:2c:59:d1:f2: 30:4a:c1:c2:c3:2e:21:4f:ad:38:23:ed:21:46:cb: c3:f4:f7:be:94:8b:ca:5d:eb:13:0d:b9:51:35:d7: ee:1e:97:b2:35:fd:1f:d0:10:69:d9:56:78:26:7c: 97:c0:73:0e:1c:04:ce:cf:47:ad:6d:42:4e:e1:a5: 58:cf:b4:df:bb:1d:f1:b7:a0:5d:96:16:78:8f:ce: 0f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D2:BD:30:28:58:71:B0:F7:22:87:30:A8:98:FA:58:4F:6B:43:59 X509v3 Authority Key Identifier: keyid:E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:94:27:5f:1a:1f:64:2f:f4:1b:ed:02:a0:25:a8:c7:ad:a6: f1:15:ed:eb:df:bf:37:8c:98:0f:05:f9:5c:a1:dd:06:5b:6d: a8:71:73:d1:d5:1b:2d:ac:f2:72:45:8d:78:12:26:cf:ab:2f: fb:70:bc:41:6f:bf:2d:ac:9f:36:6a:46:a0:55:ea:33:c4:4c: cd:29:d6:51:1a:ad:17:bd:70:c2:02:a2:49:94:77:ba:b0:4f: 14:6c:66:e9:ab:8d:08:b0:0c:9b:2f:91:d9:95:29:ed:aa:b1: 08:5c:9f:34:df:b4:9d:96:56:b3:19:86:2e:8e:a1:de:ab:bc: d0:9d:33:e8:d2:e3:ab:91:9a:7e:9b:c1:a8:70:cd:42:ee:4b: ab:5e:c8:5f:82:0b:e1:37:e3:b5:f6:f7:ca:96:33:ed:13:e0: ba:84:09:1c:ed:7a:3f:2e:da:30:dd:f2:a4:0e:b3:22:b7:c4: 45:73:16:48:08:13:d1:d0:52:9a:46:d1:65:f8:35:17:ca:1a: ce:f7:f0:44:ee:dc:08:78:5e:b9:ab:6f:4f:f0:38:f1:de:e0: c3:52:29:5f:79:37:75:cd:01:48:8e:dc:2c:6a:7b:cf:f3:e6: dc:d1:7c:16:48:9f:2c:2d:63:0b:97:c2:e8:3e:c1:c5:eb:dd: 0d:85:52:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQzNDUxMTAvBgNVBAUTKEU1MzdEMEMzNDhGRDdEQzQ5RjVGQzNCMDA2NkEzMUM1 ODRGQUUxQUIwHhcNMjUwNTEwMTgxNjI0WhcNMjUwNTE3MTgxNjI0WjAYMRYwFAYD VQQDEw02ODFmOTdmOC0yNTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0RAaCihy6xqoeXbsOWfL/YezaAnSe2BYOV1TpHeQnRnMfRrMLJhFHSVCb9On IiYLmMDsbX8SMD1u9i1W5bnRN3OTkURPDq8uH0oSg4hi/hajhcanxZtG+5LDSjH0 p9XBqYMkPC76pEnCiE+ipQ70rR7LFCjdBp+4ikweRLP6YuJvQggaHfNsgmsNw+ZH AMpDHmNORIiT4s09U29xth4ZHp4DrBPdujt8c4rezeD4/ixZ0fIwSsHCwy4hT604 I+0hRsvD9Pe+lIvKXesTDblRNdfuHpeyNf0f0BBp2VZ4JnyXwHMOHATOz0etbUJO 4aVYz7Tfux3xt6BdlhZ4j84P1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/SvTAo WHGw9yKHMKiY+lhPa0NZMB8GA1UdIwQYMBaAFOU30MNI/X3En1/DsAZqMcWE+uGr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDM0NS9FQzc4Q0REQTA1 MzgxMUVBQjU4OTc2NjhDNEY5QUUwMi81VGZRdzBqOWZjU2ZYOE93Qm1veHhZVDY0 YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVUZlF3MGo5ZmNTZlg4T3dCbW94eFlUNjRhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDM0NS9FQzc4Q0REQTA1MzgxMUVBQjU4OTc2NjhDNEY5QUUwMi81VGZRdzBqOWZj U2ZYOE93Qm1veHhZVDY0YXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATlCdfGh9kL/Qb7QKgJajHrabxFe3r3783jJgPBflcod0GW22ocXPR 1RstrPJyRY14EibPqy/7cLxBb78trJ82akagVeozxEzNKdZRGq0XvXDCAqJJlHe6 sE8UbGbpq40IsAybL5HZlSntqrEIXJ8037SdllazGYYujqHeq7zQnTPo0uOrkZp+ m8GocM1C7kurXshfggvhN+O19vfKljPtE+C6hAkc7Xo/Ltow3fKkDrMit8RFcxZI CBPR0FKaRtFl+DUXyhrO9/BE7twIeF65q29P8Djx3uDDUilfeTd1zQFIjtwsanvP 8+bc0XwWSJ8sLWMLl8LoPsHF690NhVJa -----END CERTIFICATE-----Generated at Sun May 11 05:08:42 2025 by rpki-client