$ rpki-client -vvf rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft File: 53p5hBmz84yLAlkKKUx7NffDREw.mft (raw, json) Hash identifier: nq2nlnlA8yHhhB8PDsK+aNcYlq6zduY7EmMdTe5IqiI= Subject key identifier: 1A:70:EF:EB:F0:F2:40:EE:C9:0D:71:97:73:E9:6C:12:A8:B7:0E:FB Authority key identifier: E7:7A:79:84:19:B3:F3:8C:8B:02:59:0A:29:4C:7B:35:F7:C3:44:4C Certificate issuer: /CN=A914530B/serialNumber=E77A798419B3F38C8B02590A294C7B35F7C3444C Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft Manifest number: 41 Signing time: Wed 09 Apr 2025 06:20:01 +0000 Manifest this update: Wed 09 Apr 2025 06:20:00 +0000 Manifest next update: Wed 16 Apr 2025 06:20:00 +0000 Files and hashes: 1: 53p5hBmz84yLAlkKKUx7NffDREw.crl (hash: VLwfm5hGM/X1rNyv7mjcRT66mLUfKL8Cti9Tnf7Miwk=) 2: 87A33C66B79D11EF9A384C65C4F9AE02.roa (hash: PmWdGEFbgxUM5JARv+3955i+yLCgnSi8KLnrb7A4Hd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.crl rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 06:20:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914530B Validity Not Before: Apr 9 06:20:00 2025 GMT Not After : Apr 16 06:20:00 2025 GMT Subject: CN=67f61191-1895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f6:66:39:e3:e6:29:05:b1:b5:5c:e0:e0:f3: e0:db:1a:bd:68:69:49:96:58:fd:be:15:c9:d6:8f: d9:40:ad:05:e4:6c:a4:4a:54:86:bf:b2:ff:18:f9: a8:aa:31:e5:fa:e3:fa:d6:13:c5:e0:bd:8f:c7:fa: 52:22:18:c4:bc:e5:8b:3b:cb:b9:fd:68:33:f5:d2: 4b:e9:6c:6f:32:aa:01:d1:96:cc:99:2b:8d:43:e2: c1:1d:be:27:89:a8:3a:63:6e:4f:a3:19:78:9a:5e: fd:43:b5:9b:a4:33:70:cb:5a:59:da:a6:c6:57:12: 8e:4a:cb:02:3b:92:d5:b4:5a:e9:ef:df:2f:62:83: 91:94:96:41:84:32:f9:7d:19:00:91:aa:e8:02:31: 5e:01:6d:16:85:5d:68:30:73:6d:30:80:12:bf:5e: 20:78:7f:6d:8b:df:d8:3b:61:46:8c:36:80:f1:0e: 5c:07:79:5b:a6:9b:de:4e:6a:9b:30:1b:25:fd:dd: 6f:2e:bb:d7:6a:ab:76:c0:2c:cd:ef:af:90:47:78: 4a:91:73:51:4f:68:9c:c2:5e:3d:9a:a5:bd:78:4d: 82:16:e8:27:34:77:4b:2f:a7:c2:cc:0a:9e:71:0d: 52:30:19:24:68:5d:b1:e0:a5:ac:95:31:bd:11:43: f4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:70:EF:EB:F0:F2:40:EE:C9:0D:71:97:73:E9:6C:12:A8:B7:0E:FB X509v3 Authority Key Identifier: keyid:E7:7A:79:84:19:B3:F3:8C:8B:02:59:0A:29:4C:7B:35:F7:C3:44:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:d7:c1:a6:32:25:85:34:2f:2a:ac:5b:85:c4:42:00:bb:f2: 0c:4a:2f:90:09:4b:c0:44:76:5d:5d:36:bc:2a:40:26:21:51: 23:15:3c:56:e6:28:2d:c2:e7:27:9b:70:69:3b:37:1a:02:98: c3:cf:28:dd:cf:dc:97:30:55:a0:e1:74:1d:52:0f:20:a7:2e: 63:3d:8d:4a:3a:c1:af:93:c8:6e:96:71:33:7a:fd:48:7f:63: 9c:68:b3:68:3e:4a:e0:a9:48:fd:0e:80:e0:12:49:78:17:ce: b6:a9:b4:a4:43:5d:ca:03:37:80:75:fd:e4:1c:b1:43:d4:53: 59:79:80:30:d4:27:ac:d9:82:9f:f6:9b:31:10:ca:87:5e:9b: cd:71:42:7f:c0:20:5e:07:5a:f6:cc:66:4d:9f:f3:1e:8c:e4: 06:2d:0e:44:94:79:5f:61:49:1f:9c:9e:35:e5:33:d7:29:1a: 82:f0:3f:87:45:a3:79:91:c5:b0:54:4b:2a:ff:40:70:98:e6: 28:09:42:e6:15:28:4d:e8:08:28:e9:e2:26:9d:1f:11:9b:f8: 36:49:ce:2c:73:d4:a2:f0:ba:bc:1f:89:d6:56:3d:76:6a:fb: 18:70:7d:75:7c:87:cb:7f:4c:36:e3:f2:6d:8c:0f:b2:a5:28: 96:8a:3c:88 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NTMwQjExMC8GA1UEBRMoRTc3QTc5ODQxOUIzRjM4QzhCMDI1OTBBMjk0QzdCMzVG N0MzNDQ0QzAeFw0yNTA0MDkwNjIwMDBaFw0yNTA0MTYwNjIwMDBaMBgxFjAUBgNV BAMTDTY3ZjYxMTkxLTE4OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC99mY54+YpBbG1XODg8+DbGr1oaUmWWP2+FcnWj9lArQXkbKRKVIa/sv8Y+aiq MeX64/rWE8XgvY/H+lIiGMS85Ys7y7n9aDP10kvpbG8yqgHRlsyZK41D4sEdvieJ qDpjbk+jGXiaXv1DtZukM3DLWlnapsZXEo5KywI7ktW0Wunv3y9ig5GUlkGEMvl9 GQCRqugCMV4BbRaFXWgwc20wgBK/XiB4f22L39g7YUaMNoDxDlwHeVumm95Oapsw GyX93W8uu9dqq3bALM3vr5BHeEqRc1FPaJzCXj2apb14TYIW6Cc0d0svp8LMCp5x DVIwGSRoXbHgpayVMb0RQ/RtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGnDv6/Dy QO7JDXGXc+lsEqi3DvswHwYDVR0jBBgwFoAU53p5hBmz84yLAlkKKUx7NffDREww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1MzBCLzlFNzVEREI2Qjc5 QTExRUZBMEQ2OTc1REM0RjlBRTAyLzUzcDVoQm16ODR5TEFsa0tLVXg3TmZmRFJF dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNTNwNWhCbXo4NHlMQWxrS0tVeDdOZmZEUkV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 MzBCLzlFNzVEREI2Qjc5QTExRUZBMEQ2OTc1REM0RjlBRTAyLzUzcDVoQm16ODR5 TEFsa0tLVXg3TmZmRFJFdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ3XwaYyJYU0LyqsW4XEQgC78gxKL5AJS8BEdl1dNrwqQCYhUSMVPFbm KC3C5yebcGk7NxoCmMPPKN3P3JcwVaDhdB1SDyCnLmM9jUo6wa+TyG6WcTN6/Uh/ Y5xos2g+SuCpSP0OgOASSXgXzraptKRDXcoDN4B1/eQcsUPUU1l5gDDUJ6zZgp/2 mzEQyodem81xQn/AIF4HWvbMZk2f8x6M5AYtDkSUeV9hSR+cnjXlM9cpGoLwP4dF o3mRxbBUSyr/QHCY5igJQuYVKE3oCCjp4iadHxGb+DZJzixz1KLwurwfidZWPXZq +xhwfXV8h8t/TDbj8m2MD7KlKJaKPIg= -----END CERTIFICATE-----Generated at Thu Apr 10 22:56:07 2025 by rpki-client