$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft File: K5XY2CKKiRR9gBk9l3DrUK7du2s.mft (raw, json) Hash identifier: KPgx2MxfQO+q2lxzoOF9r4+qOUlPT62v3u6uUH7jmus= Subject key identifier: 52:BA:DC:C6:CC:F2:D0:BB:B7:00:5A:EC:6D:10:A9:2F:70:6C:69:90 Authority key identifier: 2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B Certificate issuer: /CN=A91FF5A9/serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B Certificate serial: 16B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft Manifest number: 169F Signing time: Wed 14 May 2025 16:44:29 +0000 Manifest this update: Wed 14 May 2025 16:44:29 +0000 Manifest next update: Wed 21 May 2025 16:44:29 +0000 Files and hashes: 1: K5XY2CKKiRR9gBk9l3DrUK7du2s.crl (hash: cLxP/OLkEb4qnOt1t2nkVQPEp4JbZ6TShenggSzRcSw=) 2: 07D665E0862711EBAC147872C4F9AE02.roa (hash: h1jWRhCaXCGscugt7m7NPkJTh1NUHltfWypGJXiPwZw=) 3: F9E21144D90F11EDB2DBEA49C4F9AE02.roa (hash: fP45NGSHNvdQShMBiD1rePe2Esz9p+VlDQo2vfi2cz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 16:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5816 (0x16b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5A9, serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B Validity Not Before: May 14 16:44:29 2025 GMT Not After : May 21 16:44:29 2025 GMT Subject: CN=6824c86d-920b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a5:db:63:a3:e2:df:91:31:16:0c:aa:c5:cc: e3:c3:69:2b:7b:2b:6e:a8:6e:dd:bf:67:57:0d:2d: 2a:22:c9:14:a0:06:ed:1d:41:b1:66:77:d6:95:c7: 9c:8f:71:89:45:10:cb:57:45:99:bb:fa:e3:34:16: 94:ea:04:2e:8f:47:6a:f9:78:12:16:2c:22:b7:b5: 64:15:cd:55:83:62:47:77:f1:48:74:85:e8:2d:03: e3:26:95:1f:d5:ab:1d:e7:dd:ba:9b:6d:67:32:0d: 72:a0:8b:e2:23:56:d9:30:25:96:60:44:ba:61:c7: e4:45:dd:ea:7a:bd:8a:37:ae:e1:a6:3c:32:78:ab: d7:94:71:cc:27:b2:44:05:3b:6c:76:91:e5:7f:36: db:0b:c3:02:79:85:4e:35:57:f5:0c:97:b3:44:2d: b3:35:c3:31:69:8b:33:cf:a5:5e:dc:88:d4:f1:db: 49:36:fb:4e:a4:9c:a2:18:47:cd:25:e2:e3:54:71: 10:23:d2:75:88:4a:4f:50:95:be:a9:71:af:63:1b: 44:64:75:6d:d9:41:4c:7d:5c:62:49:50:eb:da:c5: 18:8f:f9:e1:c6:4f:0c:55:9d:04:91:c8:79:8d:74: 91:8b:08:f0:b3:75:cf:d0:42:32:a3:23:ba:11:41: f2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BA:DC:C6:CC:F2:D0:BB:B7:00:5A:EC:6D:10:A9:2F:70:6C:69:90 X509v3 Authority Key Identifier: keyid:2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:a9:64:45:c0:0e:56:4d:69:7a:8c:f8:f9:87:d7:2a:2a:1f: 4c:83:79:a7:07:ab:ad:d0:ed:46:c2:8d:29:6e:d3:2b:21:91: 11:98:43:8b:17:77:83:67:b7:a5:de:a7:b0:bf:b3:7e:51:43: a7:5b:b3:9c:42:48:9c:f6:28:0b:d2:6d:25:4d:31:50:ae:09: 76:f8:27:86:cc:fc:77:9a:50:0a:da:dd:c0:a2:1c:52:df:66: e9:b4:22:a7:ac:9e:82:ac:23:79:78:49:a4:2a:96:4b:c2:99: 3f:aa:6d:32:65:e0:c6:27:ba:e7:d2:a4:2e:b1:bb:a6:29:19: a2:c6:7d:1e:97:57:44:d5:fa:20:7c:47:02:95:81:5c:c4:95: 63:ff:c8:8d:e0:87:6b:1d:46:88:a2:b5:29:35:1c:fe:c6:78: c7:bf:6a:b2:f4:8a:a7:93:40:2e:21:5f:6f:27:69:c3:ea:0d: c6:8b:79:1b:c9:76:3f:de:00:56:e1:87:18:e9:7b:b6:f9:7b: c8:92:76:0e:ee:d0:70:2f:2f:03:16:97:6a:be:a5:e0:b2:c0: ee:34:ba:ef:79:4b:c0:03:b6:bd:78:42:40:64:cc:ae:24:14: 0e:e8:1f:fb:08:ba:f6:28:d9:9d:e3:21:b3:00:f2:b6:04:b6: e4:5c:e0:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY1QTkxMTAvBgNVBAUTKDJCOTVEOEQ4MjI4QTg5MTQ3RDgwMTkzRDk3NzBFQjUw QUVEREJCNkIwHhcNMjUwNTE0MTY0NDI5WhcNMjUwNTIxMTY0NDI5WjAYMRYwFAYD VQQDEw02ODI0Yzg2ZC05MjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp6XbY6Pi35ExFgyqxczjw2kreytuqG7dv2dXDS0qIskUoAbtHUGxZnfWlcec j3GJRRDLV0WZu/rjNBaU6gQuj0dq+XgSFiwit7VkFc1Vg2JHd/FIdIXoLQPjJpUf 1asd5926m21nMg1yoIviI1bZMCWWYES6YcfkRd3qer2KN67hpjwyeKvXlHHMJ7JE BTtsdpHlfzbbC8MCeYVONVf1DJezRC2zNcMxaYszz6Ve3IjU8dtJNvtOpJyiGEfN JeLjVHEQI9J1iEpPUJW+qXGvYxtEZHVt2UFMfVxiSVDr2sUYj/nhxk8MVZ0Ekch5 jXSRiwjws3XP0EIyoyO6EUHycQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFK63MbM 8tC7twBa7G0QqS9wbGmQMB8GA1UdIwQYMBaAFCuV2NgiiokUfYAZPZdw61Cu3btr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVBOS8wMEI3MTUxQ0ZE MDgxMUU3QTQyOEZGMEZDNEY5QUUwMi9LNVhZMkNLS2lSUjlnQms5bDNEclVLN2R1 MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s1WFkyQ0tLaVJSOWdCazlsM0RyVUs3ZHUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjVBOS8wMEI3MTUxQ0ZEMDgxMUU3QTQyOEZGMEZDNEY5QUUwMi9LNVhZMkNLS2lS UjlnQms5bDNEclVLN2R1MnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYqWRFwA5WTWl6jPj5h9cqKh9Mg3mnB6ut0O1Gwo0pbtMrIZERmEOL F3eDZ7el3qewv7N+UUOnW7OcQkic9igL0m0lTTFQrgl2+CeGzPx3mlAK2t3AohxS 32bptCKnrJ6CrCN5eEmkKpZLwpk/qm0yZeDGJ7rn0qQusbumKRmixn0el1dE1fog fEcClYFcxJVj/8iN4IdrHUaIorUpNRz+xnjHv2qy9Iqnk0AuIV9vJ2nD6g3Gi3kb yXY/3gBW4YcY6Xu2+XvIknYO7tBwLy8DFpdqvqXgssDuNLrveUvAA7a9eEJAZMyu JBQO6B/7CLr2KNmd4yGzAPK2BLbkXOC0 -----END CERTIFICATE-----Generated at Thu May 15 03:37:38 2025 by rpki-client