$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft File: dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft (raw, json) Hash identifier: iwb//TbFgYvGf3noDJrFgfvddrKL0q9poD6Lb7nuquY= Subject key identifier: 7D:A5:FB:54:25:E4:70:1A:11:79:98:37:8F:29:3B:EA:30:29:B1:7B Authority key identifier: 76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D Certificate issuer: /CN=A9157DAE/serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D Certificate serial: 0447 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft Manifest number: 0434 Signing time: Tue 08 Apr 2025 17:09:54 +0000 Manifest this update: Tue 08 Apr 2025 17:09:53 +0000 Manifest next update: Tue 15 Apr 2025 17:09:53 +0000 Files and hashes: 1: dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl (hash: /YHFWZ5Off25sXJ+pOi6swZpn5BjtHdqY7uHXccjnkM=) 2: 13EE3260596A11ECB1394271C4F9AE02.roa (hash: BSTa7sI/Wxp7paF8iFEhYcOXczYzjvqpGs3tFatgPsE=) 3: F91F0C028A2E11EC98A2702CC4F9AE02.roa (hash: EM7EONiwHXhiPFzyfONkaOBX/AROwU9rjV4ETvuVQDQ=) 4: 1479C514596A11ECB1394271C4F9AE02.roa (hash: TLiIvWlCkSUznKaCtTmASc45uAF4Q8KIvn7LhcKxI18=) 5: F5A921B85BE911EF8624AA20C4F9AE02.roa (hash: HMDK7qPjAO3ncQEJzX6SKnODDt4e7glxidti8sfhV1k=) 6: D36F0B6ECF4411ECB6B61825C4F9AE02.roa (hash: Z/SQA8GAHBj69mDXnfsLMK8qu+tlZ5LxlzdXDGduFGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 17:09:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1095 (0x447) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE Validity Not Before: Apr 8 17:09:53 2025 GMT Not After : Apr 15 17:09:53 2025 GMT Subject: CN=67f55861-41f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2b:b0:56:6e:9e:f3:85:db:3e:ca:88:29:39: 14:9a:8b:e4:65:60:4f:bb:51:8f:03:ab:aa:c8:3f: 21:40:99:68:68:89:1e:c0:95:94:93:15:ad:a0:41: 7f:88:19:fc:47:67:b4:e4:fb:f5:64:2f:b0:4e:00: 85:96:d3:7d:98:db:f2:21:07:f1:57:86:1f:a6:20: 6c:37:15:a1:15:7e:6c:92:f2:eb:92:91:dd:5c:5e: a6:65:29:f4:76:17:59:f3:37:cc:1c:69:39:e7:ff: 94:8a:42:25:1a:7e:48:7d:c7:15:d2:90:56:56:7f: 04:a9:bb:95:6d:a7:80:2c:09:c7:20:f8:92:54:e7: 2e:d6:09:82:b8:88:ce:89:a1:e4:0f:05:63:9d:75: 5a:07:5a:81:12:73:a3:f5:58:b5:fc:17:30:75:70: 15:88:d2:4c:cc:aa:ed:ee:e1:f1:05:4e:b2:32:a9: 2f:64:08:5a:ba:84:39:8d:49:de:47:1f:ad:88:a7: 9a:a5:30:4e:20:dd:76:2a:3f:8a:13:bb:da:a1:66: 55:74:47:55:f1:9b:5d:5d:f6:9a:fb:0a:5f:93:ce: df:8a:0e:bf:c6:79:d9:94:ae:b6:8b:e1:03:98:55: 9f:bd:ca:57:f3:07:16:2c:a4:bc:dc:46:9a:39:b0: 8e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A5:FB:54:25:E4:70:1A:11:79:98:37:8F:29:3B:EA:30:29:B1:7B X509v3 Authority Key Identifier: keyid:76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:24:a1:bc:9d:18:d7:bc:17:90:b1:30:ee:1d:39:80:c1:81: fb:1d:ff:83:fb:30:57:28:ff:97:44:b4:99:46:de:81:5d:85: ca:7a:4e:f7:d9:a6:ed:d9:e9:e5:82:67:a3:e5:a7:84:14:69: 31:b3:06:f1:53:3b:33:8b:09:f8:7b:10:d5:89:df:5b:82:12: ea:11:ea:d5:5c:53:bd:78:d6:fd:48:84:78:95:7a:65:36:de: 57:e7:0c:41:95:bd:57:0a:a1:40:c0:68:61:66:db:66:40:cd: ce:8c:9e:ff:3c:95:a2:cc:f7:bd:c4:28:64:b9:14:4b:41:c4: d5:4d:5e:2e:65:b4:a3:4d:3f:63:44:64:4e:be:e6:89:86:b4: d2:60:1b:dc:fd:10:cb:9d:18:82:c8:f5:7d:ef:44:1d:84:cf: 2e:77:ca:f4:fb:16:b6:71:bc:fc:5f:4e:ee:3b:5a:21:0e:08: 6e:4d:ea:43:b2:ee:10:b3:bc:64:c3:85:2a:42:bb:05:92:c3: 1a:7a:fd:a0:f0:80:62:82:06:ee:c9:4b:1a:a5:7e:2f:9e:78: cc:ea:ca:b2:50:cc:a2:fe:86:33:29:07:4f:28:f5:60:7d:9e: df:b7:30:e9:18:3b:be:a5:b3:73:98:a0:23:d7:a6:b6:5f:8c: 02:9e:6c:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKDc2MEU2QTdGMDhCNzJGRjgwRUI1NkY2NzUwMzIzQjE2 NEE3MERBMUQwHhcNMjUwNDA4MTcwOTUzWhcNMjUwNDE1MTcwOTUzWjAYMRYwFAYD VQQDEw02N2Y1NTg2MS00MWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCuwVm6e84XbPsqIKTkUmovkZWBPu1GPA6uqyD8hQJloaIkewJWUkxWtoEF/ iBn8R2e05Pv1ZC+wTgCFltN9mNvyIQfxV4YfpiBsNxWhFX5skvLrkpHdXF6mZSn0 dhdZ8zfMHGk55/+UikIlGn5IfccV0pBWVn8EqbuVbaeALAnHIPiSVOcu1gmCuIjO iaHkDwVjnXVaB1qBEnOj9Vi1/BcwdXAViNJMzKrt7uHxBU6yMqkvZAhauoQ5jUne Rx+tiKeapTBOIN12Kj+KE7vaoWZVdEdV8ZtdXfaa+wpfk87fig6/xnnZlK62i+ED mFWfvcpX8wcWLKS83EaaObCORQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2l+1Ql 5HAaEXmYN48pO+owKbF7MB8GA1UdIwQYMBaAFHYOan8Ity/4DrVvZ1AyOxZKcNod MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS81QjRDNEUzNjU5 NjkxMUVDOTRBM0U3NzBDNEY5QUUwMi9kZzVxZndpM0xfZ090VzluVURJN0ZrcHcy aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RnNXFmd2kzTF9nT3RXOW5VREk3RmtwdzJoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0RBRS81QjRDNEUzNjU5NjkxMUVDOTRBM0U3NzBDNEY5QUUwMi9kZzVxZndpM0xf Z090VzluVURJN0ZrcHcyaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8JKG8nRjXvBeQsTDuHTmAwYH7Hf+D+zBXKP+XRLSZRt6BXYXKek73 2abt2enlgmej5aeEFGkxswbxUzsziwn4exDVid9bghLqEerVXFO9eNb9SIR4lXpl Nt5X5wxBlb1XCqFAwGhhZttmQM3OjJ7/PJWizPe9xChkuRRLQcTVTV4uZbSjTT9j RGROvuaJhrTSYBvc/RDLnRiCyPV970QdhM8ud8r0+xa2cbz8X07uO1ohDghuTepD su4Qs7xkw4UqQrsFksMaev2g8IBiggbuyUsapX4vnnjM6sqyUMyi/oYzKQdPKPVg fZ7ftzDpGDu+pbNzmKAj16a2X4wCnmwu -----END CERTIFICATE-----Generated at Wed Apr 9 02:18:23 2025 by rpki-client