$ rpki-client -vvf rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.mft File: 5v6wYDITaH99TA3YxdHl8ycflmo.mft (raw, json) Hash identifier: pIgbPg0LYY7sxYgsR+wbbmmSpTajiNtwGXtOx8tv6e8= Subject key identifier: DA:09:86:59:68:96:9D:93:D2:32:4F:E6:6F:3D:2F:4D:93:C4:28:B8 Authority key identifier: E6:FE:B0:60:32:13:68:7F:7D:4C:0D:D8:C5:D1:E5:F3:27:1F:96:6A Certificate issuer: /CN=A9117602/serialNumber=E6FEB0603213687F7D4C0DD8C5D1E5F3271F966A Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5v6wYDITaH99TA3YxdHl8ycflmo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.mft Manifest number: D2 Signing time: Thu 03 Apr 2025 04:52:29 +0000 Manifest this update: Thu 03 Apr 2025 04:52:29 +0000 Manifest next update: Thu 10 Apr 2025 04:52:29 +0000 Files and hashes: 1: 5v6wYDITaH99TA3YxdHl8ycflmo.crl (hash: LkjEVJAiNXjESOFBhW98m41bqtdqlpJaL2vYW8O4mqw=) 2: 1EF0CB38CEFB11EE9D1FB686C4F9AE02.roa (hash: TdWbrQouM5tMsxDZgyF71MAPlIDYzdDMiQL7lgFXRP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.crl rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5v6wYDITaH99TA3YxdHl8ycflmo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117602 Validity Not Before: Apr 3 04:52:29 2025 GMT Not After : Apr 10 04:52:29 2025 GMT Subject: CN=67ee140d-4d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:54:94:7c:80:73:9d:fa:95:57:99:ae:19:75: f4:89:44:6e:24:4b:d0:e7:1e:73:a3:8d:b7:e3:f1: 22:cc:47:40:8b:38:5a:d0:a7:f2:88:63:f3:3f:69: d3:1d:65:ef:e1:c6:ec:59:b4:e3:03:85:43:6c:17: f9:a0:44:76:93:9e:fc:35:df:15:c7:31:28:1a:c8: b3:81:bd:5d:f2:bf:06:62:f1:94:b3:3d:96:88:ec: d8:c3:1f:10:d7:a5:18:62:dd:3a:96:79:6f:1c:ec: aa:db:50:f3:d9:33:19:01:d7:5c:23:cf:03:c0:8c: b9:ad:1e:53:f3:0e:c6:03:d9:aa:98:44:6a:7e:7a: 90:df:dd:a2:86:f4:f3:32:74:65:89:0c:47:bd:34: 29:eb:2f:3a:de:44:88:a6:d5:eb:da:eb:20:e0:85: 59:de:31:35:80:4c:33:24:45:45:16:c1:2b:7d:ad: 3a:c9:03:43:05:e4:08:64:0a:81:a8:bb:d9:80:e5: ee:cd:28:35:4b:b5:4d:40:5d:00:b9:f6:d1:10:3a: 29:d1:d8:72:3c:0c:02:7d:28:77:12:94:a6:d5:b1: 6b:1b:0b:97:ca:06:b3:b5:88:f8:1b:35:3e:46:ae: 76:24:bc:4b:ba:7b:a8:fb:55:af:9f:f7:91:d7:c5: 40:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:09:86:59:68:96:9D:93:D2:32:4F:E6:6F:3D:2F:4D:93:C4:28:B8 X509v3 Authority Key Identifier: keyid:E6:FE:B0:60:32:13:68:7F:7D:4C:0D:D8:C5:D1:E5:F3:27:1F:96:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5v6wYDITaH99TA3YxdHl8ycflmo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:3e:2d:f8:56:11:75:18:f4:53:63:ae:6e:6a:fe:52:27:d9: 43:6c:d7:94:54:90:54:87:8d:6b:42:28:a6:cc:fc:0a:82:fd: b5:c0:ab:6e:69:17:17:ad:81:8a:11:16:b5:ed:cb:fd:c1:32: 22:ea:38:3d:07:e1:af:2a:c5:19:52:57:0b:69:6c:ae:89:b0: fa:8b:44:23:92:f7:63:ae:9d:19:e2:25:91:8a:d5:d4:4d:b3: 67:27:04:1d:79:0a:da:c7:13:5e:7a:20:10:8f:79:3c:e3:6d: 92:d0:7e:25:8e:d7:ad:19:19:94:75:44:b2:2a:16:89:05:b6: 77:d3:32:d8:5f:ac:0f:bf:a7:4f:c0:f1:ec:70:06:85:2e:04: 36:14:8b:f5:d7:80:f7:d4:23:23:7d:d9:96:bf:10:e1:a7:33: b9:d4:21:90:dd:21:9f:83:29:41:54:48:20:9d:c5:27:f0:0a: aa:fc:ab:9e:97:af:1a:09:f0:cc:c4:3b:ce:94:36:77:e5:21: ec:d6:8c:b1:59:54:b8:f1:ce:d5:c7:f3:f9:32:d5:03:52:d5: 0c:5a:b3:d3:1f:ef:7c:e8:3e:ec:48:44:e8:6f:81:01:38:31: 0a:63:d4:56:12:06:0f:17:ed:a5:64:10:44:5d:05:00:b4:1e: 6c:40:52:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc2MDIxMTAvBgNVBAUTKEU2RkVCMDYwMzIxMzY4N0Y3RDRDMEREOEM1RDFFNUYz MjcxRjk2NkEwHhcNMjUwNDAzMDQ1MjI5WhcNMjUwNDEwMDQ1MjI5WjAYMRYwFAYD VQQDEw02N2VlMTQwZC00ZDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01SUfIBznfqVV5muGXX0iURuJEvQ5x5zo4234/EizEdAizha0KfyiGPzP2nT HWXv4cbsWbTjA4VDbBf5oER2k578Nd8VxzEoGsizgb1d8r8GYvGUsz2WiOzYwx8Q 16UYYt06lnlvHOyq21Dz2TMZAddcI88DwIy5rR5T8w7GA9mqmERqfnqQ392ihvTz MnRliQxHvTQp6y863kSIptXr2usg4IVZ3jE1gEwzJEVFFsErfa06yQNDBeQIZAqB qLvZgOXuzSg1S7VNQF0AufbREDop0dhyPAwCfSh3EpSm1bFrGwuXygaztYj4GzU+ Rq52JLxLunuo+1Wvn/eR18VA3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNoJhllo lp2T0jJP5m89L02TxCi4MB8GA1UdIwQYMBaAFOb+sGAyE2h/fUwN2MXR5fMnH5Zq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzYwMi9BRUJDNUNGNkNF RkExMUVFOTdGODhDODVDNEY5QUUwMi81djZ3WURJVGFIOTlUQTNZeGRIbDh5Y2Zs bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV2NndZRElUYUg5OVRBM1l4ZEhsOHljZmxtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzYwMi9BRUJDNUNGNkNFRkExMUVFOTdGODhDODVDNEY5QUUwMi81djZ3WURJVGFI OTlUQTNZeGRIbDh5Y2ZsbW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIPi34VhF1GPRTY65uav5SJ9lDbNeUVJBUh41rQiimzPwKgv21wKtu aRcXrYGKERa17cv9wTIi6jg9B+GvKsUZUlcLaWyuibD6i0Qjkvdjrp0Z4iWRitXU TbNnJwQdeQraxxNeeiAQj3k8422S0H4ljtetGRmUdUSyKhaJBbZ30zLYX6wPv6dP wPHscAaFLgQ2FIv114D31CMjfdmWvxDhpzO51CGQ3SGfgylBVEggncUn8Aqq/Kue l68aCfDMxDvOlDZ35SHs1oyxWVS48c7Vx/P5MtUDUtUMWrPTH+986D7sSETob4EB ODEKY9RWEgYPF+2lZBBEXQUAtB5sQFJ1 -----END CERTIFICATE-----Generated at Fri Apr 4 18:31:30 2025 by rpki-client