$ rpki-client -vvf rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft File: 5NzsWVobtnOJciNlasY5uVNS3XM.mft (raw, json) Hash identifier: bAeT9fzI6ioH0eQ0lPjPbn7SSdvBGl1HLmPTSQSjets= Subject key identifier: 8C:16:65:8E:89:05:75:25:82:41:79:CF:B2:D4:7E:7F:66:C4:64:C9 Authority key identifier: E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73 Certificate issuer: /CN=A91D604E/serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73 Certificate serial: 0CA5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft Manifest number: 0C98 Signing time: Sat 10 May 2025 18:02:36 +0000 Manifest this update: Sat 10 May 2025 18:02:35 +0000 Manifest next update: Sat 17 May 2025 18:02:35 +0000 Files and hashes: 1: 5NzsWVobtnOJciNlasY5uVNS3XM.crl (hash: WigEmvPArZ4kpJw2F0+AMo0t5Pq5zyT+dfsSUMBVGgg=) 2: D1C40E28183411EF99FD8776C4F9AE02.roa (hash: chBs/iSmoBtAd9EtvA3mnCGyh8XU8yYYJZGBD7EHNow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3237 (0xca5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D604E, serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73 Validity Not Before: May 10 18:02:35 2025 GMT Not After : May 17 18:02:35 2025 GMT Subject: CN=681f94bc-b037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cb:f8:5c:3f:3d:39:d1:ce:49:b7:85:9f:33: 4f:cb:2a:87:86:c9:46:85:72:e4:70:b5:02:13:5c: c9:56:97:4f:14:2b:3f:be:39:10:9a:58:cc:e8:e4: b4:c8:7a:0d:b9:37:71:e6:dc:63:2a:20:5a:91:5a: cf:ee:07:b2:d0:99:f3:90:b7:4e:59:6f:27:57:26: ed:fd:56:96:15:4d:da:d1:45:77:e1:31:a1:c6:f4: ae:65:87:92:dc:c3:32:da:09:11:f0:97:6f:6e:57: 1b:2a:cc:b6:1f:f4:c8:c0:bc:35:1b:6a:3c:f7:57: da:63:ba:e3:9a:22:5d:01:a3:4a:0e:82:ab:b9:d7: 77:3f:0b:a8:7c:49:a9:fb:31:ec:6c:c0:b4:67:30: 70:73:f4:06:97:48:9f:5d:9d:b3:e1:4e:f9:58:15: e5:3f:10:57:9e:2f:77:e1:c3:27:97:63:fe:22:6f: 18:ab:05:67:78:cb:4c:65:6e:2f:01:5d:e4:f4:1a: 7d:a7:50:6a:13:f8:90:cf:b0:f4:db:20:f0:cd:14: ca:1c:cb:8e:39:af:f7:38:10:4b:c0:9b:82:f1:3e: ed:ee:b5:63:6f:72:ea:59:57:35:6b:37:ef:5e:4e: 7e:33:85:fd:74:da:1d:46:23:62:d3:d8:bb:05:c0: b1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:16:65:8E:89:05:75:25:82:41:79:CF:B2:D4:7E:7F:66:C4:64:C9 X509v3 Authority Key Identifier: keyid:E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:d3:5c:47:12:98:81:76:a5:82:6e:d1:4c:98:7f:dd:37:df: d7:2b:e2:6b:fa:de:ed:c5:c7:f4:20:cf:89:e5:77:78:64:48: 50:24:d4:b7:53:55:fe:c4:8c:62:a5:e5:8b:56:03:42:8f:ab: d3:ae:06:23:82:a1:1d:5b:ae:09:92:54:14:5d:30:18:d1:b1: 1d:2b:71:2c:37:05:80:76:d3:25:d6:37:fb:b7:ff:c3:a2:17: 76:d8:c7:22:d1:4f:16:c3:74:94:d9:94:d4:76:3e:48:6f:92: 27:b5:10:58:73:eb:56:da:3f:2e:c4:f8:ef:4c:d3:7a:5d:82: 22:b3:3a:25:ad:85:f6:c6:63:4c:fd:23:9a:ca:dd:e9:a2:30: b2:a3:b6:03:a8:09:57:87:d5:eb:b9:47:a9:ec:67:e8:4a:f2: d8:5c:c5:1d:78:2c:6d:00:51:39:d6:9f:b7:7c:8f:69:be:af: f5:45:88:30:a8:d7:7f:c7:dc:29:8c:cb:73:8b:c4:76:15:ae: 75:3a:45:c5:22:0e:62:d2:13:40:0f:2c:f1:22:9d:cd:7a:1d: 23:39:e5:df:2d:62:f7:2e:9f:82:c8:07:4c:eb:d5:9b:08:42: ab:12:98:aa:7f:b7:99:ad:83:e1:8e:7c:a5:e9:62:00:64:61: 2c:e6:08:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwNEUxMTAvBgNVBAUTKEU0RENFQzU5NUExQkI2NzM4OTcyMjM2NTZBQzYzOUI5 NTM1MkRENzMwHhcNMjUwNTEwMTgwMjM1WhcNMjUwNTE3MTgwMjM1WjAYMRYwFAYD VQQDEw02ODFmOTRiYy1iMDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8v4XD89OdHOSbeFnzNPyyqHhslGhXLkcLUCE1zJVpdPFCs/vjkQmljM6OS0 yHoNuTdx5txjKiBakVrP7gey0JnzkLdOWW8nVybt/VaWFU3a0UV34TGhxvSuZYeS 3MMy2gkR8JdvblcbKsy2H/TIwLw1G2o891faY7rjmiJdAaNKDoKrudd3PwuofEmp +zHsbMC0ZzBwc/QGl0ifXZ2z4U75WBXlPxBXni934cMnl2P+Im8YqwVneMtMZW4v AV3k9Bp9p1BqE/iQz7D02yDwzRTKHMuOOa/3OBBLwJuC8T7t7rVjb3LqWVc1azfv Xk5+M4X9dNodRiNi09i7BcCxiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwWZY6J BXUlgkF5z7LUfn9mxGTJMB8GA1UdIwQYMBaAFOTc7FlaG7ZziXIjZWrGOblTUt1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjA0RS85MUI1QzBDMEY0 RUQxMUU5OENCRkEwMTNDNEY5QUUwMi81TnpzV1ZvYnRuT0pjaU5sYXNZNXVWTlMz WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVOenNXVm9idG5PSmNpTmxhc1k1dVZOUzNYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjA0RS85MUI1QzBDMEY0RUQxMUU5OENCRkEwMTNDNEY5QUUwMi81TnpzV1ZvYnRu T0pjaU5sYXNZNXVWTlMzWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDA01xHEpiBdqWCbtFMmH/dN9/XK+Jr+t7txcf0IM+J5Xd4ZEhQJNS3 U1X+xIxipeWLVgNCj6vTrgYjgqEdW64JklQUXTAY0bEdK3EsNwWAdtMl1jf7t//D ohd22Mci0U8Ww3SU2ZTUdj5Ib5IntRBYc+tW2j8uxPjvTNN6XYIiszolrYX2xmNM /SOayt3pojCyo7YDqAlXh9XruUep7GfoSvLYXMUdeCxtAFE51p+3fI9pvq/1RYgw qNd/x9wpjMtzi8R2Fa51OkXFIg5i0hNADyzxIp3Neh0jOeXfLWL3Lp+CyAdM69Wb CEKrEpiqf7eZrYPhjnyl6WIAZGEs5gja -----END CERTIFICATE-----Generated at Mon May 12 12:23:44 2025 by rpki-client