$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft File: FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft (raw, json) Hash identifier: JTtAkMwNi6vGgEWcq9B1lXcX+yP9woLDI1f/Q/2DuMo= Subject key identifier: 38:3A:36:F5:C8:FA:2D:55:E5:B8:ED:D2:0A:4A:57:D3:6F:01:2A:01 Authority key identifier: 15:6E:D5:BF:81:43:7C:1B:71:E7:1C:B0:2E:EC:27:AB:18:AF:79:A4 Certificate issuer: /CN=A91DD299/serialNumber=156ED5BF81437C1B71E71CB02EEC27AB18AF79A4 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft Manifest number: 5E Signing time: Sun 11 May 2025 05:50:38 +0000 Manifest this update: Sun 11 May 2025 05:50:37 +0000 Manifest next update: Sun 18 May 2025 05:50:37 +0000 Files and hashes: 1: FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl (hash: LbHfvhJNOR4YbFpI9LNNyXchXTGHid3QbDbR8OgF6LY=) 2: F7AA5B1CA1DA11EF86B88981C4F9AE02.roa (hash: plZkhxc00wQXxhpH5zdDV/kYvwUsg48B+WnMIB2ox4E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD299, serialNumber=156ED5BF81437C1B71E71CB02EEC27AB18AF79A4 Validity Not Before: May 11 05:50:37 2025 GMT Not After : May 18 05:50:37 2025 GMT Subject: CN=68203aae-bd41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e2:d2:bd:36:57:cc:d0:ec:a4:8f:3d:52:a1: 20:4b:ef:9e:d9:c9:4d:0e:48:ad:d8:b2:d5:c5:f7: 25:f8:01:09:43:1d:56:fa:28:8a:33:81:49:36:20: 50:c6:71:6b:68:82:95:7e:94:f4:d0:18:5d:fb:80: ba:f4:5d:e6:99:02:71:5c:bf:c7:c8:2b:0c:16:1a: d8:40:27:ce:78:8a:47:16:34:3f:4e:30:83:b4:9b: 92:09:77:df:dd:f9:0b:e3:d9:14:f3:b4:18:44:e9: 4e:65:28:91:89:69:4e:0f:21:55:33:fc:10:b4:bc: 3f:14:a3:9e:d5:b4:2a:1a:24:e3:6d:b5:a4:f5:af: f2:9e:53:85:29:dc:f1:fb:99:4e:04:b9:c2:64:0d: 60:e3:c3:dd:e4:58:45:7d:9c:c2:85:ad:58:82:f7: a7:6f:58:85:48:a3:3c:e4:0a:74:ba:b0:34:7f:e5: aa:fb:ea:4b:1f:24:3d:d1:d1:86:89:3e:e5:07:60: 63:53:a4:db:23:bf:fc:ef:2d:9d:dd:5e:3b:cb:6c: 7d:75:0c:eb:85:f6:03:8d:fc:7c:1f:18:e3:be:3a: ab:ee:37:3c:17:95:51:94:1b:a1:c6:09:3a:f0:a5: 32:0e:d5:61:ab:09:67:c7:7c:36:a6:72:fb:ec:80: 93:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3A:36:F5:C8:FA:2D:55:E5:B8:ED:D2:0A:4A:57:D3:6F:01:2A:01 X509v3 Authority Key Identifier: keyid:15:6E:D5:BF:81:43:7C:1B:71:E7:1C:B0:2E:EC:27:AB:18:AF:79:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:10:b7:fa:b8:36:b5:7a:22:e6:4e:f2:70:9e:9e:68:de:bd: e2:b9:10:ac:49:fc:b1:e4:f9:38:d7:a0:cb:8a:1e:28:a5:36: d7:53:86:6b:ad:bc:ed:42:3f:2e:a1:8f:fb:36:83:b1:23:ac: bc:cd:75:31:4f:d5:bc:c2:4d:f4:1f:7b:8f:01:02:99:a6:eb: 54:30:ae:e7:6a:e6:60:41:94:66:90:a7:f2:d1:aa:0e:a0:ba: 40:f5:50:b3:18:8c:00:44:c7:85:f8:cc:45:2e:2e:ba:f0:86: 4c:f7:d0:eb:7f:f8:59:4b:98:49:e2:e5:16:66:c1:1a:c3:fa: 7a:c9:37:cc:0f:df:cb:e5:ab:06:e6:8f:3d:28:7d:f6:07:83: b9:98:a8:78:62:59:2f:dc:26:93:48:18:55:77:af:69:bc:03: 7f:cb:fb:47:53:a5:47:f4:eb:af:95:f3:0c:a5:5c:d1:04:c5: ff:60:fa:ac:83:0e:2b:ca:ad:66:06:6f:ae:ff:81:eb:b3:b6: 65:7c:cf:bd:ef:3b:30:36:0a:21:06:7b:b3:89:ca:5e:34:48: 98:cb:e5:a8:24:8e:72:66:49:8e:57:c5:60:17:ea:cd:14:33: 34:ab:34:bf:d8:73:49:7d:73:03:55:25:24:c6:9f:e8:e3:76: 25:b8:14:6f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDI5OTExMC8GA1UEBRMoMTU2RUQ1QkY4MTQzN0MxQjcxRTcxQ0IwMkVFQzI3QUIx OEFGNzlBNDAeFw0yNTA1MTEwNTUwMzdaFw0yNTA1MTgwNTUwMzdaMBgxFjAUBgNV BAMTDTY4MjAzYWFlLWJkNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCW4tK9NlfM0Oykjz1SoSBL757ZyU0OSK3YstXF9yX4AQlDHVb6KIozgUk2IFDG cWtogpV+lPTQGF37gLr0XeaZAnFcv8fIKwwWGthAJ854ikcWND9OMIO0m5IJd9/d +Qvj2RTztBhE6U5lKJGJaU4PIVUz/BC0vD8Uo57VtCoaJONttaT1r/KeU4Up3PH7 mU4EucJkDWDjw93kWEV9nMKFrViC96dvWIVIozzkCnS6sDR/5ar76ksfJD3R0YaJ PuUHYGNTpNsjv/zvLZ3dXjvLbH11DOuF9gON/HwfGOO+OqvuNzwXlVGUG6HGCTrw pTIO1WGrCWfHfDamcvvsgJOfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUODo29cj6 LVXluO3SCkpX028BKgEwHwYDVR0jBBgwFoAUFW7Vv4FDfBtx5xywLuwnqxiveaQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMjk5LzVFQjkzQTcyQTFE QTExRUZCMjMzM0E0NUM0RjlBRTAyL0ZXN1Z2NEZEZkJ0eDV4eXdMdXducXhpdmVh US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRlc3VnY0RkRmQnR4NXh5d0x1d25xeGl2ZWFRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE Mjk5LzVFQjkzQTcyQTFEQTExRUZCMjMzM0E0NUM0RjlBRTAyL0ZXN1Z2NEZEZkJ0 eDV4eXdMdXducXhpdmVhUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIIQt/q4NrV6IuZO8nCenmjeveK5EKxJ/LHk+TjXoMuKHiilNtdThmut vO1CPy6hj/s2g7EjrLzNdTFP1bzCTfQfe48BApmm61Qwrudq5mBBlGaQp/LRqg6g ukD1ULMYjABEx4X4zEUuLrrwhkz30Ot/+FlLmEni5RZmwRrD+nrJN8wP38vlqwbm jz0offYHg7mYqHhiWS/cJpNIGFV3r2m8A3/L+0dTpUf066+V8wylXNEExf9g+qyD DivKrWYGb67/geuztmV8z73vOzA2CiEGe7OJyl40SJjL5agkjnJmSY5XxWAX6s0U MzSrNL/Yc0l9cwNVJSTGn+jjdiW4FG8= -----END CERTIFICATE-----Generated at Mon May 12 04:01:22 2025 by rpki-client