$ rpki-client -vvf rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft File: ah5W1f4mxr0uywRXgX3GujwN5H0.mft (raw, json) Hash identifier: 7miE9YdjqnORt7sJQBCZc/S2H4o8yjwPiNYdJuQzQNo= Subject key identifier: 37:19:4A:7C:5E:93:3B:92:02:63:90:99:CA:C2:25:E6:8E:5B:48:69 Authority key identifier: 6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D Certificate issuer: /CN=A9118F69/serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D Certificate serial: 021B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft Manifest number: 0218 Signing time: Mon 07 Apr 2025 01:37:29 +0000 Manifest this update: Mon 07 Apr 2025 01:37:28 +0000 Manifest next update: Mon 14 Apr 2025 01:37:28 +0000 Files and hashes: 1: ah5W1f4mxr0uywRXgX3GujwN5H0.crl (hash: bIz7rDQCH/TMp8JD8TrszDCIu8TDODECSRc4JDaXjTo=) 2: 3B0E8BD2292211ED93341915C4F9AE02.roa (hash: nIc0DzbDh/PwNmfiEtRIcpTiu7BnHHbJ2kvWsihcckg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 01:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 539 (0x21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118F69 Validity Not Before: Apr 7 01:37:28 2025 GMT Not After : Apr 14 01:37:28 2025 GMT Subject: CN=67f32c59-679c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:62:6b:9a:d9:15:a3:63:d5:b7:14:db:86:55: 22:a5:b9:dd:97:dc:cb:88:08:4b:23:4a:83:4c:b7: 1d:fc:c6:26:0d:42:2d:7d:16:28:be:73:c6:12:fe: 58:d9:64:a9:ad:51:82:05:e5:ca:5e:e5:26:3f:d8: f9:72:67:07:d4:dd:2c:2d:27:0f:8b:2e:2e:7d:c0: 8e:e2:d6:d2:6f:3a:9e:76:bc:ba:71:76:c1:42:6e: 3d:dc:5e:f0:b2:7f:49:ca:0b:ff:97:b5:61:e2:5b: 8c:c8:cb:21:da:1c:8b:42:32:66:eb:e3:90:7b:69: da:d3:e9:44:fa:f1:0e:a3:56:21:3b:14:a5:f5:5e: 4a:bc:05:51:c9:92:96:22:87:02:d5:43:f7:6f:f4: 0f:75:a4:d8:ce:53:7a:68:07:f7:5c:9e:68:5e:ee: d2:2b:f6:d8:c1:59:f1:19:7d:55:43:9f:aa:f8:c8: 2d:5e:8b:d3:b5:ce:62:56:cb:22:ed:70:81:b4:73: 5e:d3:4f:df:be:5e:6f:c4:e0:6a:c3:76:b1:c4:6b: b6:bc:44:c0:c6:7f:96:c5:c4:12:d9:5e:c5:80:eb: 66:8a:97:3f:f8:fa:a2:30:90:1b:ff:52:b3:3a:49: b7:bb:a9:3e:18:6f:58:a7:d8:35:be:c3:44:4a:30: f5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:19:4A:7C:5E:93:3B:92:02:63:90:99:CA:C2:25:E6:8E:5B:48:69 X509v3 Authority Key Identifier: keyid:6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:61:70:8c:c3:91:d0:90:1f:98:54:77:08:59:f6:4d:38:72: 07:44:d2:56:0b:dc:53:78:b6:d4:05:28:2a:93:73:1f:e5:e4: 7c:fa:13:9c:09:4b:98:f4:de:22:1a:b1:27:20:d1:98:30:f6: 87:1e:97:0e:88:10:e7:24:de:22:c3:e5:ce:dc:fb:de:07:78: 41:01:d5:56:a9:3a:bd:6c:9c:66:f0:c0:9c:95:c3:51:27:c6: b8:e4:77:d7:c2:21:d9:a8:4c:d3:2d:49:1f:42:5c:bc:d7:b7: 04:51:b2:f2:eb:fe:10:c9:d4:6a:10:81:91:1b:63:dd:58:f3: 47:e1:94:ca:d2:de:da:41:ff:8e:52:67:2e:cd:6c:a5:33:14: 7e:14:67:11:6c:f1:65:00:02:a6:33:63:b9:32:76:28:85:82: 6e:7d:c2:16:18:ed:06:1c:2b:26:7c:61:20:e0:97:29:3e:ac: 2a:f6:c9:d3:da:55:ad:5b:54:fc:f0:65:ba:16:5d:95:b2:d3: 39:84:bd:d4:30:d0:20:d5:bf:7f:fd:13:bc:c9:6f:b1:11:01: 11:76:f4:5e:f4:84:64:a9:c8:ba:20:28:4e:8f:b8:4f:d7:a9: e9:c1:fd:6f:5d:c0:58:91:ec:ea:62:4d:b3:d7:5a:fb:f2:c1: 5d:65:be:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThGNjkxMTAvBgNVBAUTKDZBMUU1NkQ1RkUyNkM2QkQyRUNCMDQ1NzgxN0RDNkJB M0MwREU0N0QwHhcNMjUwNDA3MDEzNzI4WhcNMjUwNDE0MDEzNzI4WjAYMRYwFAYD VQQDEw02N2YzMmM1OS02NzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApGJrmtkVo2PVtxTbhlUipbndl9zLiAhLI0qDTLcd/MYmDUItfRYovnPGEv5Y 2WSprVGCBeXKXuUmP9j5cmcH1N0sLScPiy4ufcCO4tbSbzqedry6cXbBQm493F7w sn9Jygv/l7Vh4luMyMsh2hyLQjJm6+OQe2na0+lE+vEOo1YhOxSl9V5KvAVRyZKW IocC1UP3b/QPdaTYzlN6aAf3XJ5oXu7SK/bYwVnxGX1VQ5+q+MgtXovTtc5iVssi 7XCBtHNe00/fvl5vxOBqw3axxGu2vETAxn+WxcQS2V7FgOtmipc/+PqiMJAb/1Kz Okm3u6k+GG9Yp9g1vsNESjD1BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcZSnxe kzuSAmOQmcrCJeaOW0hpMB8GA1UdIwQYMBaAFGoeVtX+Jsa9LssEV4F9xro8DeR9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEY2OS9COTk4REQzQzI5 MDgxMUVEQkQyNjJCMjhDNEY5QUUwMi9haDVXMWY0bXhyMHV5d1JYZ1gzR3Vqd041 SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoNVcxZjRteHIwdXl3UlhnWDNHdWp3TjVIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEY2OS9COTk4REQzQzI5MDgxMUVEQkQyNjJCMjhDNEY5QUUwMi9haDVXMWY0bXhy MHV5d1JYZ1gzR3Vqd041SDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFYXCMw5HQkB+YVHcIWfZNOHIHRNJWC9xTeLbUBSgqk3Mf5eR8+hOc CUuY9N4iGrEnINGYMPaHHpcOiBDnJN4iw+XO3PveB3hBAdVWqTq9bJxm8MCclcNR J8a45HfXwiHZqEzTLUkfQly817cEUbLy6/4QydRqEIGRG2PdWPNH4ZTK0t7aQf+O UmcuzWylMxR+FGcRbPFlAAKmM2O5MnYohYJufcIWGO0GHCsmfGEg4JcpPqwq9snT 2lWtW1T88GW6Fl2VstM5hL3UMNAg1b9//RO8yW+xEQERdvRe9IRkqci6IChOj7hP 16npwf1vXcBYkezqYk2z11r78sFdZb6u -----END CERTIFICATE-----Generated at Tue Apr 8 15:01:01 2025 by rpki-client