$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft File: C5I347CGtYw82c5v1JrCYffVJaM.mft (raw, json) Hash identifier: bObGQTXMjJtLwN3hGGso2BtPT9uTMIG4BPIgi6nIw2k= Subject key identifier: 76:B5:78:21:8F:C5:0D:24:77:E0:EF:E8:77:AE:C3:22:8A:2B:D1:96 Authority key identifier: 0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3 Certificate issuer: /CN=A91F08FA/serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft Manifest number: 32 Signing time: Fri 09 May 2025 06:40:55 +0000 Manifest this update: Fri 09 May 2025 06:40:55 +0000 Manifest next update: Fri 16 May 2025 06:40:55 +0000 Files and hashes: 1: C5I347CGtYw82c5v1JrCYffVJaM.crl (hash: MnXQS6ztJm70/FPhyh8GLNgYguhanWRjyzxx+DK+FWI=) 2: B4F27262FA2911EFA783CE2DC4F9AE02.roa (hash: bP9/t2AlBY53g2t6Q5eQ3rldZs73eo2gwKpDvHbyV4Y=) 3: 9C9C1046F7CD11EF9245601CC4F9AE02.roa (hash: DqTJbrCn4Uj3CYLjBwjQvRunEdKhXtsy8A7Y63yZ9r4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 06:40:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F08FA, serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3 Validity Not Before: May 9 06:40:55 2025 GMT Not After : May 16 06:40:55 2025 GMT Subject: CN=681da377-aaf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2b:ff:c4:23:f1:ff:f7:c9:d1:3e:db:e4:3b: 43:3b:92:49:75:51:28:47:69:8d:31:ec:77:6c:63: e2:a8:fd:f3:af:c0:b2:d7:7b:05:cb:41:3e:26:2f: cb:2d:1e:ae:2f:94:d5:8b:45:13:56:85:2f:31:12: e7:0f:81:73:41:db:20:08:4e:cb:c3:f9:45:f0:e7: 91:7e:e5:83:3e:c3:dc:03:ab:c9:bb:5e:6c:19:8e: 92:75:0b:ef:46:ac:0f:c2:d8:65:98:82:ec:2f:46: 04:3e:b2:8e:aa:fb:50:1c:63:d5:24:53:05:4a:97: ed:80:f1:8f:5e:a8:66:f2:12:af:8f:ba:92:1d:4a: a5:cb:9b:ec:57:e3:4b:9d:3b:bd:01:9a:16:17:b8: cf:22:d4:63:d2:84:a3:e9:34:4d:40:73:d7:7d:00: 57:39:4e:26:72:ac:58:5d:40:19:d6:e7:a3:17:3b: fe:ec:f6:be:ca:00:f3:c7:ee:6f:e3:9b:90:01:5e: e0:bb:2a:c2:1a:7e:12:6f:ba:e6:d0:2c:a3:64:12: a5:7c:98:2a:ae:3e:30:01:32:b3:12:5d:6c:bd:0f: fe:ef:65:61:cc:d7:15:a6:00:a7:82:b4:db:00:cb: f4:9d:10:43:43:5e:4e:44:91:ec:ed:04:52:40:5f: 32:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B5:78:21:8F:C5:0D:24:77:E0:EF:E8:77:AE:C3:22:8A:2B:D1:96 X509v3 Authority Key Identifier: keyid:0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:5c:62:d9:75:58:97:8a:dc:6d:21:57:19:4b:cf:e7:d2:15: 1e:5a:90:fc:f9:be:cd:28:3d:ab:dc:24:8f:4a:75:c9:d7:ab: 08:d5:66:50:0b:0d:bb:ac:5e:2a:80:78:1d:85:14:c5:e1:14: 35:d2:83:da:d8:8d:2a:f9:b1:bc:1f:f2:e1:fb:8f:17:69:51: fb:1c:23:a2:17:74:6a:34:a2:e9:7b:0d:c7:74:54:35:c1:9c: 7a:41:12:de:b6:ce:0d:61:a1:8e:3c:4b:9e:b5:c4:a9:a3:5a: 5c:a4:0f:ae:e5:a4:cd:22:2e:84:c6:b6:7c:49:c9:ce:69:ac: a9:51:92:63:f7:6c:0d:dc:ce:7c:e4:21:9b:29:16:43:ab:d7: 3e:6f:85:a0:2a:ea:38:fb:f2:58:6a:8e:b7:fc:82:ae:a8:60: eb:7c:a2:21:28:fb:b8:c7:fd:48:ca:b1:41:78:60:4e:ba:9e: 5c:7e:31:52:8c:5c:04:4f:4b:af:57:96:1f:22:68:d3:9e:ac: 90:08:32:6b:b5:4b:6d:1a:a3:f5:fe:98:61:19:5a:20:98:a0: fe:a7:35:f6:6a:9d:cd:c3:c8:44:7e:ac:48:b6:e5:0d:00:c8: 37:fc:22:6d:35:a9:95:15:c2:45:ad:f5:72:48:b1:1a:b9:68: 0e:9e:c7:de -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDhGQTExMC8GA1UEBRMoMEI5MjM3RTNCMDg2QjU4QzNDRDlDRTZGRDQ5QUMyNjFG N0Q1MjVBMzAeFw0yNTA1MDkwNjQwNTVaFw0yNTA1MTYwNjQwNTVaMBgxFjAUBgNV BAMTDTY4MWRhMzc3LWFhZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkK//EI/H/98nRPtvkO0M7kkl1UShHaY0x7HdsY+Ko/fOvwLLXewXLQT4mL8st Hq4vlNWLRRNWhS8xEucPgXNB2yAITsvD+UXw55F+5YM+w9wDq8m7XmwZjpJ1C+9G rA/C2GWYguwvRgQ+so6q+1AcY9UkUwVKl+2A8Y9eqGbyEq+PupIdSqXLm+xX40ud O70BmhYXuM8i1GPShKPpNE1Ac9d9AFc5TiZyrFhdQBnW56MXO/7s9r7KAPPH7m/j m5ABXuC7KsIafhJvuubQLKNkEqV8mCquPjABMrMSXWy9D/7vZWHM1xWmAKeCtNsA y/SdEENDXk5EkeztBFJAXzKNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdrV4IY/F DSR34O/od67DIoor0ZYwHwYDVR0jBBgwFoAUC5I347CGtYw82c5v1JrCYffVJaMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwOEZBL0QzN0Y2MjVDRTcz RDExRUY4QTA0NjIxN0M0RjlBRTAyL0M1STM0N0NHdFl3ODJjNXYxSnJDWWZmVkph TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQzVJMzQ3Q0d0WXc4MmM1djFKckNZZmZWSmFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw OEZBL0QzN0Y2MjVDRTczRDExRUY4QTA0NjIxN0M0RjlBRTAyL0M1STM0N0NHdFl3 ODJjNXYxSnJDWWZmVkphTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIZcYtl1WJeK3G0hVxlLz+fSFR5akPz5vs0oPavcJI9KdcnXqwjVZlAL DbusXiqAeB2FFMXhFDXSg9rYjSr5sbwf8uH7jxdpUfscI6IXdGo0oul7Dcd0VDXB nHpBEt62zg1hoY48S561xKmjWlykD67lpM0iLoTGtnxJyc5prKlRkmP3bA3cznzk IZspFkOr1z5vhaAq6jj78lhqjrf8gq6oYOt8oiEo+7jH/UjKsUF4YE66nlx+MVKM XARPS69Xlh8iaNOerJAIMmu1S20ao/X+mGEZWiCYoP6nNfZqnc3DyER+rEi25Q0A yDf8Im01qZUVwkWt9XJIsRq5aA6ex94= -----END CERTIFICATE-----Generated at Sun May 11 01:51:25 2025 by rpki-client