$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft File: 5nV74dIYmt6NdyyclIZDEL45LXA.mft (raw, json) Hash identifier: PrpjG3rKFLC1+Je4ceGJVkMv9vDWsW6A4uANk7vZZ38= Subject key identifier: 19:25:84:94:77:B3:83:73:16:97:0D:27:40:B8:04:56:73:41:FD:02 Authority key identifier: E6:75:7B:E1:D2:18:9A:DE:8D:77:2C:9C:94:86:43:10:BE:39:2D:70 Certificate issuer: /CN=A9111F9E/serialNumber=E6757BE1D2189ADE8D772C9C94864310BE392D70 Certificate serial: 0448 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft Manifest number: 0442 Signing time: Thu 03 Apr 2025 00:16:09 +0000 Manifest this update: Thu 03 Apr 2025 00:16:08 +0000 Manifest next update: Thu 10 Apr 2025 00:16:08 +0000 Files and hashes: 1: 5nV74dIYmt6NdyyclIZDEL45LXA.crl (hash: vMgxbUY9t/7szJHLASDF+078EXfA/d80PrduiDhT9Zg=) 2: 2B70BBE889E111EEB5E86A0EC4F9AE02.roa (hash: ii2gJPxNc38H3aArS7srunxvBmsm9HkEFksE6I5LOY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.crl rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1096 (0x448) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111F9E Validity Not Before: Apr 3 00:16:08 2025 GMT Not After : Apr 10 00:16:08 2025 GMT Subject: CN=67edd348-3ce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:19:f5:7b:02:c8:7f:f4:86:b4:d0:f9:84:14: 7f:05:23:f6:b2:4d:70:8a:ec:40:4b:8e:85:e0:2b: b0:38:f5:62:9e:70:43:95:a2:e2:fc:fa:46:66:d6: 29:d7:ee:f6:d1:14:e0:07:f8:39:a0:59:93:aa:d0: eb:85:2c:38:06:4e:56:89:95:21:e0:55:9d:ca:70: 4c:c2:e9:71:75:b8:50:71:2d:56:ee:ba:f4:de:a3: de:6a:43:90:1f:9e:b6:a6:20:bf:f1:f9:b5:00:25: af:8b:92:72:ae:e0:32:f2:9e:6a:cb:08:01:be:d7: cb:77:70:77:50:70:06:3d:e6:15:72:ca:86:b7:53: 80:ad:83:2b:fc:2a:7b:e8:f1:c7:a0:db:53:ff:14: 88:da:3d:0c:c6:58:45:3f:5c:99:92:d9:cc:e4:5d: 0f:28:e8:27:71:64:ea:dc:fc:98:5c:27:53:be:99: 64:9b:34:8e:4b:c1:83:5d:55:03:aa:75:61:fd:5d: d5:c2:f5:ef:81:49:0b:96:ea:63:44:0b:a4:2a:18: 4d:05:7f:8c:f4:60:ed:28:ee:5d:9c:96:0d:d5:b5: d0:e3:6f:16:f5:9f:f4:5b:6b:eb:36:2b:b6:0e:36: 35:9b:39:df:00:5b:4e:56:55:c2:25:89:c8:7b:35: bc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:25:84:94:77:B3:83:73:16:97:0D:27:40:B8:04:56:73:41:FD:02 X509v3 Authority Key Identifier: keyid:E6:75:7B:E1:D2:18:9A:DE:8D:77:2C:9C:94:86:43:10:BE:39:2D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:a6:16:90:82:60:87:eb:39:f3:ca:5b:d9:67:08:48:bb:e4: 67:fd:1d:83:a1:78:e7:e8:29:af:63:41:68:83:b9:ee:04:dc: 9c:08:af:87:bc:3c:f9:3a:58:dd:8d:b5:0c:92:62:ef:56:fe: 04:8f:3d:db:b1:63:aa:44:e4:67:a7:31:a3:5f:90:85:5f:05: 19:5d:23:c3:6e:0c:3b:e2:7f:d4:4d:8a:65:87:93:01:c0:16: a2:1a:34:cd:ea:2e:10:c9:5b:66:3e:f6:93:07:95:97:1a:d2: c1:1a:64:91:49:f9:89:c4:15:32:e7:7b:af:4b:a4:f9:1b:56: 2f:36:6c:01:6b:3f:3b:b2:6d:e1:6f:b0:c8:e1:46:4a:5c:d9: 89:52:f1:b8:cc:4d:db:e4:6c:79:0a:23:4a:f6:e1:e7:2c:d7: 8b:6b:3a:26:3c:15:b1:ae:01:8c:65:87:5b:42:38:d3:30:08: 7a:92:73:ad:d9:dc:17:0b:85:3a:0b:d9:fa:fb:0f:65:5d:8c: e9:70:cd:e0:d4:bb:b2:8e:4c:6d:86:93:1e:93:c8:ae:fc:af: 0c:ae:3d:f7:e4:ca:7b:3b:c2:a8:63:43:70:2b:3c:82:78:2a: 71:56:fc:a5:71:0a:76:e7:f4:61:35:75:3e:c4:62:d9:75:07: 40:1b:3f:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFGOUUxMTAvBgNVBAUTKEU2NzU3QkUxRDIxODlBREU4RDc3MkM5Qzk0ODY0MzEw QkUzOTJENzAwHhcNMjUwNDAzMDAxNjA4WhcNMjUwNDEwMDAxNjA4WjAYMRYwFAYD VQQDEw02N2VkZDM0OC0zY2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBn1ewLIf/SGtND5hBR/BSP2sk1wiuxAS46F4CuwOPVinnBDlaLi/PpGZtYp 1+720RTgB/g5oFmTqtDrhSw4Bk5WiZUh4FWdynBMwulxdbhQcS1W7rr03qPeakOQ H562piC/8fm1ACWvi5JyruAy8p5qywgBvtfLd3B3UHAGPeYVcsqGt1OArYMr/Cp7 6PHHoNtT/xSI2j0MxlhFP1yZktnM5F0PKOgncWTq3PyYXCdTvplkmzSOS8GDXVUD qnVh/V3VwvXvgUkLlupjRAukKhhNBX+M9GDtKO5dnJYN1bXQ428W9Z/0W2vrNiu2 DjY1mznfAFtOVlXCJYnIezW8HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBklhJR3 s4NzFpcNJ0C4BFZzQf0CMB8GA1UdIwQYMBaAFOZ1e+HSGJrejXcsnJSGQxC+OS1w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUY5RS8wMDZDRTk5QzUw MDYxMUVDOTA1NkNENDVDNEY5QUUwMi81blY3NGRJWW10Nk5keXljbElaREVMNDVM WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVuVjc0ZElZbXQ2TmR5eWNsSVpERUw0NUxYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUY5RS8wMDZDRTk5QzUwMDYxMUVDOTA1NkNENDVDNEY5QUUwMi81blY3NGRJWW10 Nk5keXljbElaREVMNDVMWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSphaQgmCH6znzylvZZwhIu+Rn/R2DoXjn6CmvY0Fog7nuBNycCK+H vDz5OljdjbUMkmLvVv4Ejz3bsWOqRORnpzGjX5CFXwUZXSPDbgw74n/UTYplh5MB wBaiGjTN6i4QyVtmPvaTB5WXGtLBGmSRSfmJxBUy53uvS6T5G1YvNmwBaz87sm3h b7DI4UZKXNmJUvG4zE3b5Gx5CiNK9uHnLNeLazomPBWxrgGMZYdbQjjTMAh6knOt 2dwXC4U6C9n6+w9lXYzpcM3g1LuyjkxthpMek8iu/K8Mrj335Mp7O8KoY0NwKzyC eCpxVvylcQp25/RhNXU+xGLZdQdAGz/E -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:19 2025 by rpki-client