$ rpki-client -vvf rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft File: 5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft (raw, json) Hash identifier: wiOi/hM/FH9XT2UJM3w0dE+EvNAOW9fu0eZQOKv2QiU= Subject key identifier: 9A:F7:75:96:2B:C9:9F:B2:5B:4A:C5:3D:8B:DF:BC:81:FF:C1:D5:27 Authority key identifier: E6:1F:A1:24:A6:18:E2:56:67:CC:31:CC:FC:49:16:CE:07:6F:DA:57 Certificate issuer: /CN=A91F35BB/serialNumber=E61FA124A618E25667CC31CCFC4916CE076FDA57 Certificate serial: 04B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft Manifest number: 04B3 Signing time: Sat 10 May 2025 23:27:20 +0000 Manifest this update: Sat 10 May 2025 23:27:20 +0000 Manifest next update: Sat 17 May 2025 23:27:20 +0000 Files and hashes: 1: 5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl (hash: /FToPEYv9FC2IU3bFfRpka4hqPHMDVTsKmr/oZkofY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1203 (0x4b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F35BB, serialNumber=E61FA124A618E25667CC31CCFC4916CE076FDA57 Validity Not Before: May 10 23:27:20 2025 GMT Not After : May 17 23:27:20 2025 GMT Subject: CN=681fe0d8-c6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:96:d2:06:8b:43:31:7e:39:3a:89:fe:68:5d: fa:1a:fa:b4:c3:73:d1:f4:9c:8e:3a:7a:18:63:61: 64:f7:39:0d:41:1b:37:65:c1:f8:fd:61:5e:54:38: 43:e9:64:8f:ea:8a:84:9e:36:99:af:76:0b:19:c3: 8a:63:0a:4d:69:73:87:b8:43:38:d3:8f:b2:26:1e: 3b:70:bf:f8:99:29:50:95:ac:44:40:bc:1d:22:de: 49:08:b6:2a:12:11:7d:e9:9f:16:b3:f4:dd:1e:d2: 41:b1:e7:e0:99:5e:96:93:c6:df:71:f0:e8:ff:e4: 04:f8:e9:4e:5e:d9:75:31:3a:fa:0d:5e:4b:69:da: a8:dd:bf:6c:87:58:e2:8b:75:29:a4:01:b5:f8:6d: a7:7d:05:e4:7b:b8:b1:4e:f1:2d:45:5a:79:8b:53: c2:8a:87:45:c8:9a:b7:2e:b2:74:fa:6d:94:1b:51: f6:23:b8:31:af:d3:af:e2:5e:98:f7:d2:14:cd:2e: 3f:39:df:43:88:e1:fb:56:99:05:27:1b:35:d4:5e: ea:65:5e:bc:38:ed:c1:12:de:7f:49:78:53:f8:3a: cc:df:02:b7:a5:8b:dc:2a:d4:fd:d2:89:f8:78:c0: 9a:7d:50:28:8b:f2:bf:8e:7e:39:ec:8b:a7:e8:1c: 15:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F7:75:96:2B:C9:9F:B2:5B:4A:C5:3D:8B:DF:BC:81:FF:C1:D5:27 X509v3 Authority Key Identifier: keyid:E6:1F:A1:24:A6:18:E2:56:67:CC:31:CC:FC:49:16:CE:07:6F:DA:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:92:4e:4a:f7:13:c9:a9:06:66:9b:16:a8:e5:57:bd:e4:01: f5:fd:dd:22:05:c9:d6:bf:8c:6b:42:4d:ba:8a:8e:ba:ae:d9: b7:55:a0:55:d4:46:93:49:07:24:aa:86:61:33:d3:eb:99:c6: 7c:0e:e4:63:d7:99:d7:9e:92:85:68:10:af:99:54:85:86:96: 4f:a1:ec:7f:6d:9c:15:35:45:fc:c1:bb:ba:a8:68:89:6b:69: 07:d0:cf:6e:98:71:94:8f:23:3f:d0:0b:64:b9:49:57:d9:d3: ec:92:0a:69:59:30:80:33:95:e6:11:e7:81:6f:b9:75:c9:65: fd:10:7a:ea:f9:ba:21:fd:c0:11:cc:4a:da:a9:ae:e3:ec:3e: 55:74:53:f4:13:07:88:f5:6b:af:d7:fd:94:d9:d3:bf:11:a9: 5a:43:61:14:2e:09:11:e5:8a:16:b0:96:89:cd:63:c9:40:d2: 5e:d3:b0:fc:6c:54:ce:a1:f6:4a:7a:14:a6:be:86:09:a4:d0: b1:7c:ff:a7:fc:c3:c7:37:69:57:fe:2a:27:b2:90:0a:c8:1f: e7:09:c0:fc:52:35:a4:19:c7:70:10:58:db:5a:7c:0b:e3:2f: 8d:30:e6:f6:70:e0:53:1f:87:70:93:50:e3:1b:e7:9c:36:ea: db:83:bb:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM1QkIxMTAvBgNVBAUTKEU2MUZBMTI0QTYxOEUyNTY2N0NDMzFDQ0ZDNDkxNkNF MDc2RkRBNTcwHhcNMjUwNTEwMjMyNzIwWhcNMjUwNTE3MjMyNzIwWjAYMRYwFAYD VQQDEw02ODFmZTBkOC1jNmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5bSBotDMX45Oon+aF36Gvq0w3PR9JyOOnoYY2Fk9zkNQRs3ZcH4/WFeVDhD 6WSP6oqEnjaZr3YLGcOKYwpNaXOHuEM404+yJh47cL/4mSlQlaxEQLwdIt5JCLYq EhF96Z8Ws/TdHtJBsefgmV6Wk8bfcfDo/+QE+OlOXtl1MTr6DV5Ladqo3b9sh1ji i3UppAG1+G2nfQXke7ixTvEtRVp5i1PCiodFyJq3LrJ0+m2UG1H2I7gxr9Ov4l6Y 99IUzS4/Od9DiOH7VpkFJxs11F7qZV68OO3BEt5/SXhT+DrM3wK3pYvcKtT90on4 eMCafVAoi/K/jn457Iun6BwVYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJr3dZYr yZ+yW0rFPYvfvIH/wdUnMB8GA1UdIwQYMBaAFOYfoSSmGOJWZ8wxzPxJFs4Hb9pX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzVCQi8wNzYzN0QwMjI3 RkIxMUVDODg4MEQxNzBDNEY5QUUwMi81aC1oSktZWTRsWm56REhNX0VrV3pnZHYy bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVoLWhKS1lZNGxabnpESE1fRWtXemdkdjJsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzVCQi8wNzYzN0QwMjI3RkIxMUVDODg4MEQxNzBDNEY5QUUwMi81aC1oSktZWTRs Wm56REhNX0VrV3pnZHYybGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAykk5K9xPJqQZmmxao5Ve95AH1/d0iBcnWv4xrQk26io66rtm3VaBV 1EaTSQckqoZhM9PrmcZ8DuRj15nXnpKFaBCvmVSFhpZPoex/bZwVNUX8wbu6qGiJ a2kH0M9umHGUjyM/0AtkuUlX2dPskgppWTCAM5XmEeeBb7l1yWX9EHrq+boh/cAR zEraqa7j7D5VdFP0EweI9Wuv1/2U2dO/EalaQ2EULgkR5YoWsJaJzWPJQNJe07D8 bFTOofZKehSmvoYJpNCxfP+n/MPHN2lX/ionspAKyB/nCcD8UjWkGcdwEFjbWnwL 4y+NMOb2cOBTH4dwk1DjG+ecNurbg7tf -----END CERTIFICATE-----Generated at Mon May 12 13:12:28 2025 by rpki-client