$ rpki-client -vvf rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft File: a5tdFBgYlY1zBFgvJU6hddhD4_0.mft (raw, json) Hash identifier: Cdv6ENmzR/3MaozzAU7/MgY0Im3pKuI5hTTLbMjLA4Y= Subject key identifier: 5C:71:3B:50:16:07:9C:8E:C8:32:3C:32:46:32:73:FB:CD:F7:69:D6 Authority key identifier: 6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD Certificate issuer: /CN=A91359CD/serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Certificate serial: 09AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft Manifest number: 09A4 Signing time: Sun 06 Apr 2025 19:47:27 +0000 Manifest this update: Sun 06 Apr 2025 19:47:27 +0000 Manifest next update: Sun 13 Apr 2025 19:47:27 +0000 Files and hashes: 1: a5tdFBgYlY1zBFgvJU6hddhD4_0.crl (hash: 6qOwiMCSoyMKHFxXKQCSNnQN7aFivs8YPRmtClWfXTg=) 2: 8F467E0082DD11EABD325010C4F9AE02.roa (hash: pqGYncUOZKT5Ae6UAJqJyy2fRgkfmoSyVZAKTooTufw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 19:47:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2475 (0x9ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91359CD Validity Not Before: Apr 6 19:47:27 2025 GMT Not After : Apr 13 19:47:27 2025 GMT Subject: CN=67f2da4f-b61c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4e:98:6d:fd:2d:8d:19:8f:57:1c:40:0c:80: b3:4e:6a:99:08:4d:dc:99:80:c4:60:ea:62:c6:15: 9a:74:73:ee:9f:4c:3d:4e:49:76:71:e9:9f:3b:5f: ce:41:fd:57:95:03:0e:de:32:3d:04:bb:ae:ec:79: fa:fb:8f:33:c3:3a:92:f2:95:0b:ce:b2:9d:79:9e: b7:21:de:c2:e7:7f:4a:e1:0e:e9:50:1c:09:3f:81: f3:50:a0:22:7b:96:fb:23:17:c3:81:02:14:52:31: 8a:f7:d6:13:5f:a6:51:12:0a:b2:d3:5a:40:04:ed: 94:53:a8:36:2b:4e:26:0f:71:88:82:3c:34:53:85: 13:2f:d5:a4:33:d3:2f:36:b4:72:33:36:36:5f:98: 25:37:01:cf:ce:cb:3e:0f:71:54:28:5f:7e:68:c8: 59:35:b7:ea:ca:c9:eb:9a:52:9c:56:fe:7a:af:1f: a0:35:78:42:f5:00:36:54:5c:0e:7e:4f:1f:d2:a2: d3:ac:65:81:bf:9e:82:d0:a3:4e:bb:10:21:2a:de: a4:15:25:ad:be:24:04:54:c2:d0:ce:21:85:3e:7d: a4:3b:9e:95:6c:a0:3e:a0:01:f6:4e:4a:43:bb:bb: ee:54:e6:0c:92:be:61:0e:a3:b3:81:4b:ca:60:67: c5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:71:3B:50:16:07:9C:8E:C8:32:3C:32:46:32:73:FB:CD:F7:69:D6 X509v3 Authority Key Identifier: keyid:6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:d4:8c:8a:7e:10:ce:13:7c:3d:3a:ca:4a:95:b1:68:cd:f6: 0a:55:91:0b:c7:e8:1d:03:0c:36:f9:64:3b:bf:dd:ac:e4:9e: 58:f4:4b:8b:ed:a8:82:e8:be:04:ae:ed:a9:13:23:da:7d:7b: 49:b4:36:c8:18:a3:f7:d4:10:f9:ee:1a:b7:20:db:76:f5:5a: 8a:46:4d:74:51:83:e0:35:6d:ac:b4:92:55:1b:66:21:7f:2d: 77:33:03:a3:e2:7c:83:e8:06:43:49:38:1d:15:3c:96:2b:28: ba:8b:30:6d:ac:17:ce:23:dd:37:7a:7a:1e:30:7e:35:cd:69: 42:f2:75:aa:ac:45:f0:9b:e1:d7:9b:3d:fc:26:93:d3:05:53: b0:df:33:b7:54:3c:6b:3c:e5:2e:72:62:df:f6:6c:d9:06:a5: ef:49:4b:d8:bc:a8:39:12:24:98:1b:48:a1:80:9d:b2:70:70: 06:07:f7:64:2d:9e:15:a4:95:71:d6:e5:42:63:ab:67:96:e6: 9c:34:83:f8:b5:a2:bc:bc:41:8f:cc:2b:53:76:a4:50:6a:90: 87:0c:60:b5:89:10:21:24:ee:6a:93:6d:52:ce:64:ee:c5:4b: 57:47:00:3b:f1:d1:95:17:05:39:96:d4:52:af:4d:54:d6:20: 57:46:d6:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU5Q0QxMTAvBgNVBAUTKDZCOUI1RDE0MTgxODk1OEQ3MzA0NTgyRjI1NEVBMTc1 RDg0M0UzRkQwHhcNMjUwNDA2MTk0NzI3WhcNMjUwNDEzMTk0NzI3WjAYMRYwFAYD VQQDEw02N2YyZGE0Zi1iNjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3E6Ybf0tjRmPVxxADICzTmqZCE3cmYDEYOpixhWadHPun0w9Tkl2cemfO1/O Qf1XlQMO3jI9BLuu7Hn6+48zwzqS8pULzrKdeZ63Id7C539K4Q7pUBwJP4HzUKAi e5b7IxfDgQIUUjGK99YTX6ZREgqy01pABO2UU6g2K04mD3GIgjw0U4UTL9WkM9Mv NrRyMzY2X5glNwHPzss+D3FUKF9+aMhZNbfqysnrmlKcVv56rx+gNXhC9QA2VFwO fk8f0qLTrGWBv56C0KNOuxAhKt6kFSWtviQEVMLQziGFPn2kO56VbKA+oAH2TkpD u7vuVOYMkr5hDqOzgUvKYGfFUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxxO1AW B5yOyDI8MkYyc/vN92nWMB8GA1UdIwQYMBaAFGubXRQYGJWNcwRYLyVOoXXYQ+P9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTlDRC8xODVGRkMyODgy REIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZMXpCRmd2SlU2aGRkaEQ0 XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E1dGRGQmdZbFkxekJGZ3ZKVTZoZGRoRDRfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTlDRC8xODVGRkMyODgyREIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZ MXpCRmd2SlU2aGRkaEQ0XzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi1IyKfhDOE3w9OspKlbFozfYKVZELx+gdAww2+WQ7v92s5J5Y9EuL 7aiC6L4Eru2pEyPafXtJtDbIGKP31BD57hq3INt29VqKRk10UYPgNW2stJJVG2Yh fy13MwOj4nyD6AZDSTgdFTyWKyi6izBtrBfOI903enoeMH41zWlC8nWqrEXwm+HX mz38JpPTBVOw3zO3VDxrPOUucmLf9mzZBqXvSUvYvKg5EiSYG0ihgJ2ycHAGB/dk LZ4VpJVx1uVCY6tnluacNIP4taK8vEGPzCtTdqRQapCHDGC1iRAhJO5qk21SzmTu xUtXRwA78dGVFwU5ltRSr01U1iBXRtZy -----END CERTIFICATE-----Generated at Mon Apr 7 22:38:46 2025 by rpki-client