$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft File: S5pjiBqFVgIQVOlL3DInTse33fI.mft (raw, json) Hash identifier: 4uAKHNlWkc/iVQ1TiYNsvEZJ+sd8fN7FgRdKJmRai5c= Subject key identifier: FF:60:B3:C7:E4:81:8C:34:5A:5C:90:0B:31:FD:6F:57:A2:DC:EB:3F Authority key identifier: 4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2 Certificate issuer: /CN=A91FD90A/serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2 Certificate serial: 05F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft Manifest number: 05E4 Signing time: Sat 10 May 2025 22:35:54 +0000 Manifest this update: Sat 10 May 2025 22:35:53 +0000 Manifest next update: Sat 17 May 2025 22:35:53 +0000 Files and hashes: 1: S5pjiBqFVgIQVOlL3DInTse33fI.crl (hash: dthvryH80XiBclsa3dfoHmCJ4TPaHS1fVJ/QPv+ty4g=) 2: 410F8C0EDBC611EEA717194DC4F9AE02.roa (hash: WalTM0heTU/pB4x2h5BFYPYTixxcx+WNC43Aop8+j9U=) 3: 65D38F7CC44111EF8409C156C4F9AE02.roa (hash: f9AHjTbNbqSt8k/eMNuMhNVjcuM6wjeLwT4q/khUyEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:35:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1522 (0x5f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD90A, serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2 Validity Not Before: May 10 22:35:53 2025 GMT Not After : May 17 22:35:53 2025 GMT Subject: CN=681fd4ca-aaf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a1:3d:9f:a7:f9:eb:29:f9:a1:c4:00:2c:c7: 21:b6:2f:7b:8a:40:ee:2b:ba:03:60:6b:35:34:01: 6d:0f:f8:bd:71:e6:56:d7:95:d4:37:c2:53:0f:c1: 71:b4:f7:11:4a:af:78:8a:c3:cc:8b:86:59:f4:df: 18:76:47:26:55:4d:82:77:c0:2c:63:e6:c5:16:fc: b8:51:31:fc:3f:e9:02:cf:d1:ec:08:2f:d2:c3:c8: 64:84:c4:cf:f4:7b:2e:90:bd:c6:5c:38:87:28:f8: 7e:25:05:84:15:5f:68:7b:a0:2a:81:9e:33:46:d0: 6e:6f:0d:a1:93:d8:72:49:8c:31:16:44:52:39:9f: 6c:0a:3f:47:3f:9a:01:d9:04:b2:d9:14:59:3d:7b: d0:70:d1:a5:55:d9:fe:97:1f:ee:29:ef:68:7a:02: 4d:ee:fa:e6:da:80:a0:a4:0b:c7:52:ca:65:ea:08: 09:9b:ee:77:ba:9e:32:01:93:bb:ad:4a:ac:c1:b6: 51:e4:e9:49:71:ef:d5:1a:8d:bf:a7:63:2f:de:24: e7:b3:44:ab:71:a9:e5:ba:34:96:ba:3a:15:62:4b: b0:23:18:fc:0b:0f:72:72:bb:ba:dc:24:88:93:57: 1c:1f:09:5a:a4:45:b5:90:37:c2:58:68:3d:f9:25: f2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:60:B3:C7:E4:81:8C:34:5A:5C:90:0B:31:FD:6F:57:A2:DC:EB:3F X509v3 Authority Key Identifier: keyid:4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:67:84:f5:ac:4a:1d:0d:1b:7f:c9:57:59:cc:ef:a4:a0:e6: fe:a4:1e:6b:98:43:68:1e:2e:e0:0f:75:09:85:71:ec:a8:f7: b1:33:90:df:2a:38:ea:35:49:29:0d:02:90:56:a1:da:43:01: 22:eb:04:b2:cf:56:3e:23:83:97:b3:a3:d9:98:d1:7c:a0:cf: 51:d2:ac:9f:ef:8c:ea:12:31:4c:f3:6b:d6:d9:44:92:bc:88: de:9f:f8:ca:67:a8:48:97:8e:d1:2b:32:f5:96:8a:41:6f:44: 42:d0:e5:32:fb:f9:62:65:ee:9b:d4:65:78:a3:c6:22:db:b2: b4:cc:5a:03:42:5e:5b:87:c2:43:98:bc:13:51:29:eb:c0:4e: e3:c9:e2:f4:4f:36:11:8a:7a:c2:d1:8d:cb:b5:43:82:a7:ed: 98:d6:67:c7:0d:da:45:e0:ec:a3:e3:e9:6c:c4:d6:9e:bf:c4: 43:a5:36:04:84:fc:7a:a9:d5:14:c0:fd:5c:f4:90:28:3f:b8: bc:e9:61:e5:6b:0c:4e:1f:0a:7b:93:d8:f1:ac:63:9f:bc:9a: 80:39:e9:3a:e2:c8:bf:12:a4:6d:36:03:7c:d3:0a:f4:1e:5f: b2:62:53:a7:96:0c:bf:a0:83:df:d4:6f:4e:42:c7:04:ce:35: 13:f1:b4:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ5MEExMTAvBgNVBAUTKDRCOUE2Mzg4MUE4NTU2MDIxMDU0RTk0QkRDMzIyNzRF QzdCN0RERjIwHhcNMjUwNTEwMjIzNTUzWhcNMjUwNTE3MjIzNTUzWjAYMRYwFAYD VQQDEw02ODFmZDRjYS1hYWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKE9n6f56yn5ocQALMchti97ikDuK7oDYGs1NAFtD/i9ceZW15XUN8JTD8Fx tPcRSq94isPMi4ZZ9N8YdkcmVU2Cd8AsY+bFFvy4UTH8P+kCz9HsCC/Sw8hkhMTP 9HsukL3GXDiHKPh+JQWEFV9oe6AqgZ4zRtBubw2hk9hySYwxFkRSOZ9sCj9HP5oB 2QSy2RRZPXvQcNGlVdn+lx/uKe9oegJN7vrm2oCgpAvHUspl6ggJm+53up4yAZO7 rUqswbZR5OlJce/VGo2/p2Mv3iTns0SrcanlujSWujoVYkuwIxj8Cw9ycru63CSI k1ccHwlapEW1kDfCWGg9+SXy8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9gs8fk gYw0WlyQCzH9b1ei3Os/MB8GA1UdIwQYMBaAFEuaY4gahVYCEFTpS9wyJ07Ht93y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDkwQS8xN0UyQ0Y1MEI1 QzUxMUVCQjU0RTAxNDZDNEY5QUUwMi9TNXBqaUJxRlZnSVFWT2xMM0RJblRzZTMz ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M1cGppQnFGVmdJUVZPbEwzREluVHNlMzNmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDkwQS8xN0UyQ0Y1MEI1QzUxMUVCQjU0RTAxNDZDNEY5QUUwMi9TNXBqaUJxRlZn SVFWT2xMM0RJblRzZTMzZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaZ4T1rEodDRt/yVdZzO+koOb+pB5rmENoHi7gD3UJhXHsqPexM5Df KjjqNUkpDQKQVqHaQwEi6wSyz1Y+I4OXs6PZmNF8oM9R0qyf74zqEjFM82vW2USS vIjen/jKZ6hIl47RKzL1lopBb0RC0OUy+/liZe6b1GV4o8Yi27K0zFoDQl5bh8JD mLwTUSnrwE7jyeL0TzYRinrC0Y3LtUOCp+2Y1mfHDdpF4Oyj4+lsxNaev8RDpTYE hPx6qdUUwP1c9JAoP7i86WHlawxOHwp7k9jxrGOfvJqAOek64si/EqRtNgN80wr0 Hl+yYlOnlgy/oIPf1G9OQscEzjUT8bQZ -----END CERTIFICATE-----Generated at Sun May 11 11:42:07 2025 by rpki-client