$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft File: 5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft (raw, json) Hash identifier: h+KB3ucFSUwWJqZn1TNFxvCenBR8+ooA/lJp8sCeM/g= Subject key identifier: 66:DC:36:18:F6:B5:3B:58:38:AE:00:74:23:32:DA:49:D6:1D:97:71 Authority key identifier: E7:3F:B8:86:8D:D3:B4:61:EA:1A:67:3C:7A:36:94:52:35:E9:CA:AE Certificate issuer: /CN=A91FCEB1/serialNumber=E73FB8868DD3B461EA1A673C7A36945235E9CAAE Certificate serial: 06F8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft Manifest number: 2161 Signing time: Mon 12 May 2025 15:55:50 +0000 Manifest this update: Mon 12 May 2025 15:55:49 +0000 Manifest next update: Mon 19 May 2025 15:55:49 +0000 Files and hashes: 1: 5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl (hash: e4k5dwM4AKBlvUm7nwY/Kt8WxOwtYbQebWg+WuWZ7Fg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1784 (0x6f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1, serialNumber=E73FB8868DD3B461EA1A673C7A36945235E9CAAE Validity Not Before: May 12 15:55:49 2025 GMT Not After : May 19 15:55:49 2025 GMT Subject: CN=68221a05-1028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:43:c0:0b:2a:28:79:ec:d0:fb:13:da:01:16: 17:6d:e4:51:47:03:81:60:22:59:48:6c:88:17:c9: 74:b3:87:54:e5:84:ea:a3:0b:96:ab:63:c7:c5:5b: fd:a9:a0:e7:8a:be:f8:bf:7f:4f:30:1d:36:99:bf: b0:47:41:be:21:69:dd:9c:62:f9:da:2e:8a:ce:3e: aa:b3:13:76:22:4d:b7:76:a0:1e:ad:86:a1:a4:85: 01:09:ca:d5:03:95:f1:c7:cb:02:67:94:29:3e:04: 43:07:3f:7b:8f:bd:a3:fa:c1:5c:b4:3f:cd:57:7d: 1b:76:32:e8:1c:0b:6d:b5:c3:30:d5:b2:ef:c1:b8: ae:2d:5f:91:24:7d:f4:6d:30:2b:17:af:84:24:b8: db:0c:bf:33:8a:43:4f:65:7f:a9:56:28:c1:06:eb: d6:d8:1e:65:f2:1c:b2:4f:30:17:ac:24:24:47:4f: e3:fe:8e:6d:33:a9:a8:bd:1c:7b:a2:db:0d:79:5c: e6:ed:67:e5:96:4d:5a:6c:ce:63:b2:23:08:13:86: c9:e7:49:09:69:0b:6a:2c:d7:e3:fd:73:c2:ab:2c: 42:c3:f1:57:06:37:fe:e8:9a:58:6f:58:9e:91:88: 08:88:7c:93:f6:bb:04:0c:8b:88:33:7a:f7:de:d0: bd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:DC:36:18:F6:B5:3B:58:38:AE:00:74:23:32:DA:49:D6:1D:97:71 X509v3 Authority Key Identifier: keyid:E7:3F:B8:86:8D:D3:B4:61:EA:1A:67:3C:7A:36:94:52:35:E9:CA:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:4e:2b:d8:46:51:73:87:06:42:9f:13:a0:f9:2d:05:b4:f6: d9:80:43:9f:05:ff:c7:33:7a:2a:26:3d:48:40:3c:b1:85:f0: 80:dc:68:9c:a1:57:7d:0a:21:44:a6:72:e0:8b:7f:ed:af:d3: 66:0c:3c:db:fc:6a:da:97:cc:5e:3a:32:4d:4b:2e:b0:10:19: 2f:24:aa:51:7d:e3:02:04:6f:9a:04:b2:ab:75:e5:1b:75:89: 59:1e:03:b3:5b:ba:a2:c8:0b:8b:b6:f1:33:00:aa:be:db:24: f1:ec:80:ce:cf:07:3c:9d:af:19:b2:64:8f:7c:b7:9e:2b:0f: 49:7e:87:fe:a2:88:15:16:f2:bc:2f:ba:ce:5a:5b:95:5e:62: 02:91:30:25:95:92:57:36:8d:66:6a:52:73:65:af:9f:fa:6f: 41:11:0a:7c:52:ca:5d:5e:7a:c9:b0:b5:07:d6:62:3c:d2:c4: 14:f3:ab:c6:61:9e:a8:93:4f:54:d7:11:65:59:1d:1a:cb:2c: 39:2d:d3:af:fe:e7:dd:c8:c6:4e:7e:af:4b:e0:cd:b6:05:8d: 81:3d:f8:3f:f5:4b:1c:48:54:25:b2:c6:12:b6:9d:33:56:47: 51:d9:72:9c:08:49:23:29:2a:b0:cf:d1:a4:a1:9d:7e:9f:e2: 44:37:45:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKEU3M0ZCODg2OEREM0I0NjFFQTFBNjczQzdBMzY5NDUy MzVFOUNBQUUwHhcNMjUwNTEyMTU1NTQ5WhcNMjUwNTE5MTU1NTQ5WjAYMRYwFAYD VQQDEw02ODIyMWEwNS0xMDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUPACyooeezQ+xPaARYXbeRRRwOBYCJZSGyIF8l0s4dU5YTqowuWq2PHxVv9 qaDnir74v39PMB02mb+wR0G+IWndnGL52i6Kzj6qsxN2Ik23dqAerYahpIUBCcrV A5Xxx8sCZ5QpPgRDBz97j72j+sFctD/NV30bdjLoHAtttcMw1bLvwbiuLV+RJH30 bTArF6+EJLjbDL8zikNPZX+pVijBBuvW2B5l8hyyTzAXrCQkR0/j/o5tM6movRx7 otsNeVzm7Wfllk1abM5jsiMIE4bJ50kJaQtqLNfj/XPCqyxCw/FXBjf+6JpYb1ie kYgIiHyT9rsEDIuIM3r33tC9TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbcNhj2 tTtYOK4AdCMy2knWHZdxMB8GA1UdIwQYMBaAFOc/uIaN07Rh6hpnPHo2lFI16cqu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS85QzE0QjQwNjNB MjExMUU3OUFBMEQ1MUNDNEY5QUUwMi81ei00aG8zVHRHSHFHbWM4ZWphVVVqWHB5 cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzV6LTRobzNUdEdIcUdtYzhlamFVVWpYcHlxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS85QzE0QjQwNjNBMjExMUU3OUFBMEQ1MUNDNEY5QUUwMi81ei00aG8zVHRH SHFHbWM4ZWphVVVqWHB5cTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2TivYRlFzhwZCnxOg+S0FtPbZgEOfBf/HM3oqJj1IQDyxhfCA3Gic oVd9CiFEpnLgi3/tr9NmDDzb/Gral8xeOjJNSy6wEBkvJKpRfeMCBG+aBLKrdeUb dYlZHgOzW7qiyAuLtvEzAKq+2yTx7IDOzwc8na8ZsmSPfLeeKw9Jfof+oogVFvK8 L7rOWluVXmICkTAllZJXNo1malJzZa+f+m9BEQp8UspdXnrJsLUH1mI80sQU86vG YZ6ok09U1xFlWR0ayyw5LdOv/ufdyMZOfq9L4M22BY2BPfg/9UscSFQlssYStp0z VkdR2XKcCEkjKSqwz9GkoZ1+n+JEN0Xt -----END CERTIFICATE-----Generated at Wed May 14 03:42:06 2025 by rpki-client