$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft File: 5pLFtgs-8cIERDn8OQrVbcPLzWM.mft (raw, json) Hash identifier: Xa7k2tHAmqXbQuWSYW59b5FJ5MeF+QlTvq+g2S+Lp40= Subject key identifier: CD:52:E5:4C:8A:1A:7D:46:1E:4B:0F:19:28:82:FD:DB:BA:EC:00:75 Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63 Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63 Certificate serial: 0801 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft Manifest number: 07B4 Signing time: Wed 02 Apr 2025 21:35:13 +0000 Manifest this update: Wed 02 Apr 2025 21:35:12 +0000 Manifest next update: Wed 09 Apr 2025 21:35:12 +0000 Files and hashes: 1: 5pLFtgs-8cIERDn8OQrVbcPLzWM.crl (hash: S2telW6Uo6iPjN6pHkXsQo0CSseGtM3NQa0QuOhxdQY=) 2: 9D00ABAC089C11F09075A534C4F9AE02.roa (hash: HmTougKy3rF1ntb28J+0HCxyJCj3J7caTv76b+CnSpw=) 3: 244B9D1874CB11EEB3C0267DC4F9AE02.roa (hash: 58z0sDsYRtdYBAtwDhNvP7kyEQJboZJS4GpwJLh2ing=) 4: 9765FB988A5D11EE9E6AA223C4F9AE02.roa (hash: gdVUdTDJS2HzCLE0SH5abxwvNMrpuz9i+05KM/O5dKM=) 5: F3643AD6089C11F09BB44535C4F9AE02.roa (hash: d4eF712UMcuWBXICMHSbDq1rVUXEx57Lk10/0qmDX9M=) 6: 06166DF4DC6D11EFBD34F40EC4F9AE02.roa (hash: zAVhFCx+Y0sm2rtgFn1OnJdCE1tYjDSThjKJO14bltw=) 7: 79986EE8FE3D11EFB763F62EC4F9AE02.roa (hash: oPWHOSVVHxMTlEOgiAm0tO2SzI3zA9mMs78DXNw+B34=) 8: 215A8FDE4B9E11EEBF766C7FC4F9AE02.roa (hash: ewzgLIZLx9Y5nPTQhL+AITVEb8oh3TwTplFpZhdDOMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:35:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2049 (0x801) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D1EA Validity Not Before: Apr 2 21:35:12 2025 GMT Not After : Apr 9 21:35:12 2025 GMT Subject: CN=67edad90-6220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:55:1c:8f:e0:6b:28:e9:fe:0a:e8:22:7b:d6: 9b:ef:e3:73:fe:db:c3:7e:31:5d:b4:af:df:2c:d1: 8b:21:d2:db:67:e0:19:ed:61:54:50:0d:ed:f4:c3: 39:0c:cc:02:d8:e7:91:20:1c:7b:19:61:25:f0:20: 82:3f:c3:ac:f8:31:f5:5d:88:e9:ff:50:52:a2:4e: c6:9d:77:ec:b5:ce:b7:4f:2b:91:a9:23:9e:3e:52: c5:13:17:2a:01:b2:f3:ee:9a:22:35:ce:6e:29:1a: 5a:b5:91:95:8a:4d:01:b2:61:fa:b4:dd:61:e2:e9: bd:ae:51:a2:9e:8e:1d:8d:bb:21:fd:20:80:77:f3: 8b:fd:01:a7:be:a1:ab:26:54:0e:fb:6d:7c:48:79: 7e:cb:da:88:f9:6e:ef:b0:9a:6b:8d:53:9c:f4:be: 14:ca:7c:62:b2:1c:5f:c8:91:da:7e:9d:f7:f5:a0: 7b:b4:fa:3e:ca:10:bd:fe:0f:1b:fc:01:de:0f:bf: 50:c2:6f:71:bb:73:83:20:5e:91:1b:5e:e6:6d:3b: f4:91:c2:1d:d7:f8:e1:81:a2:72:12:fe:bd:5a:c2: 1e:ec:9c:8b:10:16:7f:bc:47:f7:16:80:ba:d0:08: ee:21:ea:98:14:ce:d4:5d:ac:72:84:6b:ba:66:0b: 9d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:52:E5:4C:8A:1A:7D:46:1E:4B:0F:19:28:82:FD:DB:BA:EC:00:75 X509v3 Authority Key Identifier: keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:cc:9d:fb:79:4e:76:36:f4:ec:dd:22:ab:eb:1c:07:df:c8: 98:10:e0:a3:9c:05:0d:95:2c:bb:5a:5a:b5:2b:3b:48:1c:f2: 4d:31:ab:e3:ef:d7:66:b1:09:c0:fc:1d:42:4c:7a:46:47:1c: d4:dc:f2:5d:ab:60:96:11:68:4e:40:0b:ba:5d:33:88:85:95: 12:a3:53:df:92:da:6a:9a:56:db:d1:4b:9a:1d:67:5f:f4:22: b3:8e:31:62:f8:d2:2e:bf:77:c4:a5:d1:e3:54:49:be:c7:56: f9:53:78:fc:73:1c:fd:ac:d2:be:7a:d5:aa:c2:c8:5e:5a:1e: c2:ca:bc:ae:d2:79:4f:b3:c9:be:6f:70:f4:59:c7:85:b6:4f: 88:3a:56:1d:5c:8e:93:64:f3:d5:29:44:cc:d3:9e:50:ca:71: 13:0a:4a:6f:a8:f8:9d:70:af:97:13:77:7d:f7:08:d7:f1:4b: b7:0c:a0:75:0b:a3:89:f7:be:c2:1e:4d:9a:58:33:5c:07:72: 17:3d:4b:9c:9b:53:34:bb:83:57:fa:97:c7:3b:db:57:73:db: ea:0a:47:8e:c4:ef:2b:e3:f7:e0:ba:83:34:6c:a3:3e:b7:0f: 2c:ae:72:ec:5e:0e:c9:65:cf:b7:52:b2:f1:53:9d:be:df:e7: a4:76:1d:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QxRUExMTAvBgNVBAUTKEU2OTJDNUI2MEIzRUYxQzIwNDQ0MzlGQzM5MEFENTZE QzNDQkNENjMwHhcNMjUwNDAyMjEzNTEyWhcNMjUwNDA5MjEzNTEyWjAYMRYwFAYD VQQDEw02N2VkYWQ5MC02MjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFUcj+BrKOn+Cugie9ab7+Nz/tvDfjFdtK/fLNGLIdLbZ+AZ7WFUUA3t9MM5 DMwC2OeRIBx7GWEl8CCCP8Os+DH1XYjp/1BSok7GnXfstc63TyuRqSOePlLFExcq AbLz7poiNc5uKRpatZGVik0BsmH6tN1h4um9rlGino4djbsh/SCAd/OL/QGnvqGr JlQO+218SHl+y9qI+W7vsJprjVOc9L4UynxishxfyJHafp339aB7tPo+yhC9/g8b /AHeD79Qwm9xu3ODIF6RG17mbTv0kcId1/jhgaJyEv69WsIe7JyLEBZ/vEf3FoC6 0AjuIeqYFM7UXaxyhGu6Zgud+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1S5UyK Gn1GHksPGSiC/du67AB1MB8GA1UdIwQYMBaAFOaSxbYLPvHCBEQ5/DkK1W3Dy81j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDFFQS85QzkzMkI0ODE3 M0ExMUVCQTNCOTdFN0ZDNEY5QUUwMi81cExGdGdzLThjSUVSRG44T1FyVmJjUEx6 V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVwTEZ0Z3MtOGNJRVJEbjhPUXJWYmNQTHpXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDFFQS85QzkzMkI0ODE3M0ExMUVCQTNCOTdFN0ZDNEY5QUUwMi81cExGdGdzLThj SUVSRG44T1FyVmJjUEx6V00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVzJ37eU52NvTs3SKr6xwH38iYEOCjnAUNlSy7Wlq1KztIHPJNMavj 79dmsQnA/B1CTHpGRxzU3PJdq2CWEWhOQAu6XTOIhZUSo1Pfktpqmlbb0UuaHWdf 9CKzjjFi+NIuv3fEpdHjVEm+x1b5U3j8cxz9rNK+etWqwsheWh7Cyryu0nlPs8m+ b3D0WceFtk+IOlYdXI6TZPPVKUTM055QynETCkpvqPidcK+XE3d99wjX8Uu3DKB1 C6OJ977CHk2aWDNcB3IXPUucm1M0u4NX+pfHO9tXc9vqCkeOxO8r4/fguoM0bKM+ tw8srnLsXg7JZc+3UrLxU52+3+ekdh3x -----END CERTIFICATE-----Generated at Fri Apr 4 22:04:30 2025 by rpki-client