$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft File: 5G4YncjpEKGrvi42TdCBd1zkhGA.mft (raw, json) Hash identifier: USjEFGpZcGQzvI49eA86JoEqF7NQFCBf7TfBMqVv79w= Subject key identifier: A7:F1:76:2C:91:9C:50:24:E6:67:12:38:5A:8D:2C:F7:6B:62:28:1E Authority key identifier: E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60 Certificate issuer: /CN=A9135B44/serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460 Certificate serial: 01F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft Manifest number: 01EC Signing time: Sat 05 Apr 2025 02:14:32 +0000 Manifest this update: Sat 05 Apr 2025 02:14:31 +0000 Manifest next update: Sat 12 Apr 2025 02:14:31 +0000 Files and hashes: 1: 5G4YncjpEKGrvi42TdCBd1zkhGA.crl (hash: 6fqsOD7VAcBdHLSIzXIJu0al7SVNvK/ANt8p1b1YLcA=) 2: D4B06AAA3A6E11ED8266115DC4F9AE02.roa (hash: rXyXJ/J6rVFIkAmCNmdDPvJdD/VKGdNuveHL3e4vBN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:14:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 497 (0x1f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B44 Validity Not Before: Apr 5 02:14:31 2025 GMT Not After : Apr 12 02:14:31 2025 GMT Subject: CN=67f09207-2143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9f:26:d0:f5:e5:f5:b0:cc:ab:bf:49:1a:2c: cc:fe:b8:7b:de:98:2e:8b:ea:24:db:05:da:14:30: f5:bf:0b:9c:dd:b9:9d:9f:e0:b7:0e:d0:7a:6b:b2: f8:72:82:b9:ea:ac:10:c7:89:4a:2e:90:06:bb:c2: a4:d5:44:b2:7b:53:5f:40:28:19:83:02:77:3b:ef: d9:03:c4:90:00:4f:78:63:70:c0:44:ac:cd:5a:6a: 85:c0:f3:e8:ac:ed:d2:11:4d:ec:e3:6c:18:c7:5a: 79:f4:d5:e0:2e:47:2b:2c:8f:b7:00:a7:fd:62:67: 4c:48:ea:cd:1a:ee:7c:50:4e:17:c6:27:4d:d0:fb: e1:70:8b:b4:ab:45:d8:24:9b:3f:ba:94:ba:2a:f8: 5b:45:ed:22:8e:1a:77:c6:e1:30:4e:d8:e6:27:16: fd:c7:a5:ef:bb:c2:55:72:ac:d2:e1:65:b6:3f:f7: 0a:00:99:a3:39:75:c0:73:3f:36:78:ef:d4:ba:d0: 2e:cd:6f:d8:82:50:81:85:9a:0f:d2:7c:b9:53:a2: 60:dc:13:46:72:47:a1:fc:41:9b:72:cd:43:2b:eb: b5:30:e3:e3:62:7f:05:6f:06:e4:3d:a2:1f:02:38: 69:5e:7f:36:ab:03:62:81:ae:51:65:a2:a4:57:50: 7d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F1:76:2C:91:9C:50:24:E6:67:12:38:5A:8D:2C:F7:6B:62:28:1E X509v3 Authority Key Identifier: keyid:E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:d6:ed:68:8c:c2:cb:68:d6:c4:db:1d:44:e5:a0:03:6a:da: 4a:32:99:f4:3e:cb:be:44:2a:58:cc:36:fb:c3:49:eb:6c:c4: f1:9e:85:32:c2:39:5d:f7:3e:71:5e:26:e1:75:f4:f0:d6:f4: 2e:9f:40:d8:8b:ba:eb:8d:85:d2:03:d2:ab:f6:eb:d4:df:85: ad:08:8f:25:04:de:02:eb:fc:a3:45:ea:e8:6d:fe:36:32:05: 18:16:ec:d8:0b:4e:75:33:ed:2b:4c:d6:ec:14:d3:e1:08:07: bb:e5:ca:64:1e:b3:d1:c4:19:0b:b4:a4:80:55:78:86:73:f2: ee:6f:ea:89:83:af:7c:91:4f:9d:d5:dd:3b:24:56:63:b1:54: 83:e1:73:21:7e:2b:86:8d:67:48:3e:15:aa:4f:19:b4:d1:b7: ba:d3:19:7b:79:d7:b1:32:52:41:59:af:d1:81:59:20:66:2a: 0d:7a:3c:49:7d:93:7a:15:cf:4e:87:e6:53:9d:12:4a:1f:69: d1:0e:0f:f7:4d:01:c5:9e:20:f8:8a:9f:83:d4:63:0c:c5:9b: 45:05:d1:f7:87:f3:75:1b:37:54:07:60:ea:0f:da:9d:15:7c: 87:50:ef:03:a4:b8:d0:ef:5a:c4:87:7d:07:7a:26:71:50:8b: f5:8d:2f:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCNDQxMTAvBgNVBAUTKEU0NkUxODlEQzhFOTEwQTFBQkJFMkUzNjRERDA4MTc3 NUNFNDg0NjAwHhcNMjUwNDA1MDIxNDMxWhcNMjUwNDEyMDIxNDMxWjAYMRYwFAYD VQQDEw02N2YwOTIwNy0yMTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA158m0PXl9bDMq79JGizM/rh73pgui+ok2wXaFDD1vwuc3bmdn+C3DtB6a7L4 coK56qwQx4lKLpAGu8Kk1USye1NfQCgZgwJ3O+/ZA8SQAE94Y3DARKzNWmqFwPPo rO3SEU3s42wYx1p59NXgLkcrLI+3AKf9YmdMSOrNGu58UE4XxidN0PvhcIu0q0XY JJs/upS6KvhbRe0ijhp3xuEwTtjmJxb9x6Xvu8JVcqzS4WW2P/cKAJmjOXXAcz82 eO/UutAuzW/YglCBhZoP0ny5U6Jg3BNGckeh/EGbcs1DK+u1MOPjYn8FbwbkPaIf AjhpXn82qwNiga5RZaKkV1B9gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfxdiyR nFAk5mcSOFqNLPdrYigeMB8GA1UdIwQYMBaAFORuGJ3I6RChq74uNk3QgXdc5IRg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUI0NC9BRDBENjFGODNB NkMxMUVEOTk0MUY1NUNDNEY5QUUwMi81RzRZbmNqcEVLR3J2aTQyVGRDQmQxemto R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVHNFluY2pwRUtHcnZpNDJUZENCZDF6a2hHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUI0NC9BRDBENjFGODNBNkMxMUVEOTk0MUY1NUNDNEY5QUUwMi81RzRZbmNqcEVL R3J2aTQyVGRDQmQxemtoR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA91u1ojMLLaNbE2x1E5aADatpKMpn0Psu+RCpYzDb7w0nrbMTxnoUy wjld9z5xXibhdfTw1vQun0DYi7rrjYXSA9Kr9uvU34WtCI8lBN4C6/yjRerobf42 MgUYFuzYC051M+0rTNbsFNPhCAe75cpkHrPRxBkLtKSAVXiGc/Lub+qJg698kU+d 1d07JFZjsVSD4XMhfiuGjWdIPhWqTxm00be60xl7edexMlJBWa/RgVkgZioNejxJ fZN6Fc9Oh+ZTnRJKH2nRDg/3TQHFniD4ip+D1GMMxZtFBdH3h/N1GzdUB2DqD9qd FXyHUO8DpLjQ71rEh30HeiZxUIv1jS9M -----END CERTIFICATE-----Generated at Sat Apr 5 13:47:09 2025 by rpki-client