$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft File: 5Acguik7ryW8Chd4xlzw0uDzUWA.mft (raw, json) Hash identifier: /WaHOqRkZxFTDfd3/5wanXMx2GCLfz9JCHLXJyAH6Io= Subject key identifier: 1C:EE:92:D4:86:5B:4A:F8:4B:AE:5E:FF:3C:A1:4C:A4:A0:E4:EE:FC Authority key identifier: E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60 Certificate issuer: /CN=A91EF35B/serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160 Certificate serial: 046D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft Manifest number: 0454 Signing time: Tue 13 May 2025 00:02:42 +0000 Manifest this update: Tue 13 May 2025 00:02:41 +0000 Manifest next update: Tue 20 May 2025 00:02:41 +0000 Files and hashes: 1: 5Acguik7ryW8Chd4xlzw0uDzUWA.crl (hash: tzWmXOgM7emMCsplWTOpARv/h64qxO75n98v+iNujYk=) 2: 859B9868927E11EEB878AA50C4F9AE02.roa (hash: ZCpdqccvGNQRvKgyIaRry+OF/s1VpSriPxxNhei30Yk=) 3: 0BFA0C9C927E11EEA47AD74FC4F9AE02.roa (hash: JbuO9QygXZWdecTCM5Sf89ukRTRQrSasLXKuG+IV9QE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1133 (0x46d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF35B, serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160 Validity Not Before: May 13 00:02:41 2025 GMT Not After : May 20 00:02:41 2025 GMT Subject: CN=68228c22-0c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:12:d3:71:b6:6d:76:be:73:96:d7:68:5e:bb: e2:a3:e7:75:98:53:65:fd:ad:09:15:5d:80:b9:fa: 28:d7:d5:f2:bd:28:ae:07:31:e9:2f:ed:2b:c0:fc: 08:a3:28:df:dd:c2:4c:8c:f5:1f:ce:65:8a:c5:bb: 9c:d2:e3:b8:9c:b4:16:d4:22:7c:80:b3:2a:98:43: 96:00:34:6d:f4:b7:8d:fb:c6:80:19:61:6c:d6:59: 2b:ad:60:65:36:fd:e7:04:37:2b:ec:f7:3e:cf:21: 30:81:86:ec:59:48:e9:c7:8c:4d:65:94:3d:0c:9c: 3b:6b:ac:5a:99:e5:50:c4:7b:a2:fe:fa:6c:85:00: ea:df:0c:10:7e:a2:78:a2:c7:e0:df:dc:6e:9f:a5: 6a:d4:d8:17:cb:61:21:2c:57:42:97:44:3a:79:1a: 08:b5:8c:75:a0:51:44:48:08:80:ec:c9:a8:a0:a3: 78:7b:24:8b:0c:9f:42:ce:de:6b:3f:4c:b1:3e:8b: f2:ce:19:16:d4:c0:e3:43:ad:f5:1d:85:86:54:50: f0:20:06:2b:85:62:74:4f:7f:d2:50:3e:10:77:d3: 2d:14:da:21:09:7b:c8:f3:69:35:49:b9:77:1d:1a: 07:f7:6f:55:d0:c1:ee:1a:8f:f5:df:5d:6c:bc:8e: 68:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:EE:92:D4:86:5B:4A:F8:4B:AE:5E:FF:3C:A1:4C:A4:A0:E4:EE:FC X509v3 Authority Key Identifier: keyid:E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:df:b6:34:5a:14:22:f4:a7:b5:45:01:e5:e7:78:0d:76:48: 6b:71:de:c3:2f:80:c9:33:4b:40:1e:58:cf:d8:b6:1d:85:32: ea:db:bf:2b:f1:ca:bc:f8:23:49:a0:6b:05:87:a9:e7:c1:c4: 82:65:09:64:f2:55:96:7f:01:b6:80:fb:9c:d9:ad:9e:39:16: f1:36:b6:bc:89:e8:73:bc:60:27:99:3a:a2:3d:36:67:03:29: 35:91:f5:c7:29:32:af:93:93:6c:1b:f1:aa:5c:c8:3e:45:d4: fe:f6:c9:84:fe:0f:c5:da:27:65:0e:98:7e:b2:4a:85:fe:83: 79:77:32:97:f8:ac:af:cf:5f:68:52:a5:5c:d0:80:c9:b4:fd: 96:a3:b8:1e:f5:e4:80:2d:1f:ab:38:38:3c:62:d3:97:ce:d2: 34:6a:a1:e9:b0:1c:a1:c1:fa:1f:dc:a7:53:d4:bb:57:ef:e0: 6c:71:1c:ca:cb:63:9b:ba:72:57:5d:07:04:e4:14:f9:7e:1f: 4f:df:8e:22:03:fe:bc:6d:e3:5c:64:6b:23:65:83:c2:b8:58: 8b:67:e4:7a:06:b0:5a:20:92:e3:f8:c7:6f:89:46:42:cc:8a: 66:2f:43:16:5c:73:17:5e:d6:79:d9:12:f8:53:5e:0b:95:dd: cc:e1:59:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYzNUIxMTAvBgNVBAUTKEU0MDcyMEJBMjkzQkFGMjVCQzBBMTc3OEM2NUNGMEQy RTBGMzUxNjAwHhcNMjUwNTEzMDAwMjQxWhcNMjUwNTIwMDAwMjQxWjAYMRYwFAYD VQQDEw02ODIyOGMyMi0wYzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhLTcbZtdr5zltdoXrvio+d1mFNl/a0JFV2Aufoo19XyvSiuBzHpL+0rwPwI oyjf3cJMjPUfzmWKxbuc0uO4nLQW1CJ8gLMqmEOWADRt9LeN+8aAGWFs1lkrrWBl Nv3nBDcr7Pc+zyEwgYbsWUjpx4xNZZQ9DJw7a6xameVQxHui/vpshQDq3wwQfqJ4 osfg39xun6Vq1NgXy2EhLFdCl0Q6eRoItYx1oFFESAiA7MmooKN4eySLDJ9Czt5r P0yxPovyzhkW1MDjQ631HYWGVFDwIAYrhWJ0T3/SUD4Qd9MtFNohCXvI82k1Sbl3 HRoH929V0MHuGo/1311svI5o/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzuktSG W0r4S65e/zyhTKSg5O78MB8GA1UdIwQYMBaAFOQHILopO68lvAoXeMZc8NLg81Fg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjM1Qi9FMDEwMTU4QTU2 NEUxMUVDODU4ODU5MTRDNEY5QUUwMi81QWNndWlrN3J5VzhDaGQ0eGx6dzB1RHpV V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVBY2d1aWs3cnlXOENoZDR4bHp3MHVEelVXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjM1Qi9FMDEwMTU4QTU2NEUxMUVDODU4ODU5MTRDNEY5QUUwMi81QWNndWlrN3J5 VzhDaGQ0eGx6dzB1RHpVV0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp37Y0WhQi9Ke1RQHl53gNdkhrcd7DL4DJM0tAHljP2LYdhTLq278r 8cq8+CNJoGsFh6nnwcSCZQlk8lWWfwG2gPuc2a2eORbxNra8iehzvGAnmTqiPTZn Ayk1kfXHKTKvk5NsG/GqXMg+RdT+9smE/g/F2idlDph+skqF/oN5dzKX+Kyvz19o UqVc0IDJtP2Wo7ge9eSALR+rODg8YtOXztI0aqHpsByhwfof3KdT1LtX7+BscRzK y2ObunJXXQcE5BT5fh9P344iA/68beNcZGsjZYPCuFiLZ+R6BrBaIJLj+MdviUZC zIpmL0MWXHMXXtZ52RL4U14Lld3M4Vk9 -----END CERTIFICATE-----Generated at Wed May 14 11:54:52 2025 by rpki-client