$ rpki-client -vvf rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft File: 5L99WWC2svPFIUHvK2Aq0RT0DKg.mft (raw, json) Hash identifier: Lzj9uI9erzARIpaC3u6nRpwEiCBARekLf/GNdmnRjL8= Subject key identifier: 50:C4:12:D8:F7:8E:4F:C4:65:C0:C7:06:4A:D2:0B:73:0F:A7:FD:09 Authority key identifier: E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8 Certificate issuer: /CN=A91F53A5/serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8 Certificate serial: 02F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft Manifest number: 02F0 Signing time: Tue 13 May 2025 01:05:12 +0000 Manifest this update: Tue 13 May 2025 01:05:12 +0000 Manifest next update: Tue 20 May 2025 01:05:12 +0000 Files and hashes: 1: 5L99WWC2svPFIUHvK2Aq0RT0DKg.crl (hash: cOkYjfgzDGAH8nGrbw1cy13U2lp3rs3HW4G3dfugnIs=) 2: 99C51F96DA6D11EC86CE4D59C4F9AE02.roa (hash: JVCzZkuG4CHRB6G2oinVMp3rcx6RD2PvDmsbTNaguh8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 755 (0x2f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F53A5, serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8 Validity Not Before: May 13 01:05:12 2025 GMT Not After : May 20 01:05:12 2025 GMT Subject: CN=68229ac8-b2c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:42:b7:01:2e:93:20:23:b8:0a:ff:bb:f8:21: 65:da:cc:b1:97:73:3c:c8:d0:80:56:34:a3:4c:cc: 7a:79:7e:38:2c:e5:a4:df:82:3f:b7:1a:df:5e:90: 77:72:ab:af:3e:d8:83:f5:d2:fa:0c:70:71:02:b1: ba:ee:c3:36:0f:4c:50:a0:2c:27:14:81:99:f8:21: e6:d0:bf:e2:76:5c:54:8d:fb:d2:16:93:7a:76:52: d6:2b:0d:93:45:38:69:70:a4:9d:48:47:82:c8:b2: 07:90:e6:25:7a:ff:35:99:c8:79:be:f2:77:18:de: 66:ed:ae:f4:04:86:d0:e7:6d:cb:b1:c1:d4:be:aa: 75:4b:b3:b5:76:c4:2f:74:20:ac:d3:94:c5:3b:d2: c5:28:0d:ab:2f:e9:4c:d9:e4:e6:78:03:61:5d:df: cc:c0:19:e4:0f:51:a9:6c:d2:bc:16:34:92:b4:0e: 40:a5:c6:60:13:60:48:ba:a8:f2:71:97:f3:ea:27: 92:a0:91:ef:06:56:29:77:f2:e4:8c:d1:42:0b:a6: 74:ae:35:2e:ab:29:84:26:fb:e9:d3:ce:df:64:6c: 0f:bc:49:b2:d2:2f:55:21:bd:78:36:34:b0:b1:28: 2b:28:2d:16:ea:34:7b:ed:47:49:3b:8e:89:28:51: a3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C4:12:D8:F7:8E:4F:C4:65:C0:C7:06:4A:D2:0B:73:0F:A7:FD:09 X509v3 Authority Key Identifier: keyid:E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:c0:f3:94:e1:6f:34:32:4c:bd:ed:25:57:c6:89:9e:e3:8a: 57:12:14:05:3c:fb:7e:87:0e:8b:e1:74:7a:f0:30:d3:72:22: 38:6b:70:ce:02:05:97:17:ba:0a:96:80:89:a4:54:b6:aa:67: cd:5e:1b:8d:61:41:a9:b8:1d:14:8f:8d:c9:8f:62:78:db:fc: a6:2e:c8:23:5b:78:aa:ad:62:b4:0a:c4:d3:d9:75:88:ed:43: 80:c7:08:bd:48:9c:64:fc:47:54:c5:97:b9:d3:e3:01:d3:e6: 5c:97:e5:a3:56:d3:0a:8c:45:9b:ef:7d:9d:5e:15:1f:20:e5: 35:68:c7:b8:41:e2:1f:80:66:1e:bb:c8:8c:4a:da:24:50:82: 5a:84:d1:37:07:a2:31:b9:e0:a0:b7:27:10:65:45:dc:a9:df: 7e:db:2d:0d:c9:89:92:f2:dc:0c:03:be:3e:ee:54:c3:cf:ee: 41:9a:15:a5:e2:ce:01:3b:48:57:9f:8a:ee:5b:79:26:17:2b: 9a:dc:82:d1:c3:05:d5:42:d6:73:40:10:90:92:7f:86:41:b2: 96:c1:27:2e:5e:e9:61:d1:20:4b:77:2a:89:14:c4:6f:53:ac: f4:bc:4e:24:2c:3d:09:51:1c:06:23:9b:0c:8c:f7:fc:5c:62: 77:23:14:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUzQTUxMTAvBgNVBAUTKEU0QkY3RDU5NjBCNkIyRjNDNTIxNDFFRjJCNjAyQUQx MTRGNDBDQTgwHhcNMjUwNTEzMDEwNTEyWhcNMjUwNTIwMDEwNTEyWjAYMRYwFAYD VQQDEw02ODIyOWFjOC1iMmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA50K3AS6TICO4Cv+7+CFl2syxl3M8yNCAVjSjTMx6eX44LOWk34I/txrfXpB3 cquvPtiD9dL6DHBxArG67sM2D0xQoCwnFIGZ+CHm0L/idlxUjfvSFpN6dlLWKw2T RThpcKSdSEeCyLIHkOYlev81mch5vvJ3GN5m7a70BIbQ523LscHUvqp1S7O1dsQv dCCs05TFO9LFKA2rL+lM2eTmeANhXd/MwBnkD1GpbNK8FjSStA5ApcZgE2BIuqjy cZfz6ieSoJHvBlYpd/LkjNFCC6Z0rjUuqymEJvvp087fZGwPvEmy0i9VIb14NjSw sSgrKC0W6jR77UdJO46JKFGjbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDEEtj3 jk/EZcDHBkrSC3MPp/0JMB8GA1UdIwQYMBaAFOS/fVlgtrLzxSFB7ytgKtEU9Ayo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTNBNS81MDBDRkU5OERB NjYxMUVDODBERkU3MzZDNEY5QUUwMi81TDk5V1dDMnN2UEZJVUh2SzJBcTBSVDBE S2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVMOTlXV0Myc3ZQRklVSHZLMkFxMFJUMERLZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTNBNS81MDBDRkU5OERBNjYxMUVDODBERkU3MzZDNEY5QUUwMi81TDk5V1dDMnN2 UEZJVUh2SzJBcTBSVDBES2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALwPOU4W80Mky97SVXxome44pXEhQFPPt+hw6L4XR68DDTciI4a3DO AgWXF7oKloCJpFS2qmfNXhuNYUGpuB0Uj43Jj2J42/ymLsgjW3iqrWK0CsTT2XWI 7UOAxwi9SJxk/EdUxZe50+MB0+Zcl+WjVtMKjEWb732dXhUfIOU1aMe4QeIfgGYe u8iMStokUIJahNE3B6IxueCgtycQZUXcqd9+2y0NyYmS8twMA74+7lTDz+5BmhWl 4s4BO0hXn4ruW3kmFyua3ILRwwXVQtZzQBCQkn+GQbKWwScuXulh0SBLdyqJFMRv U6z0vE4kLD0JURwGI5sMjPf8XGJ3IxSO -----END CERTIFICATE-----Generated at Wed May 14 15:12:39 2025 by rpki-client