$ rpki-client -vvf rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft File: V5NDbSKpagYTaFEgO7clmE1wsBc.mft (raw, json) Hash identifier: h8a+CCVaPKHBgYsHz46Bp9iVUcTElg+T8EB41lTd8io= Subject key identifier: 3A:67:9E:9D:87:E7:77:88:9B:54:22:10:43:EC:E0:E6:D3:60:8B:C5 Authority key identifier: 57:93:43:6D:22:A9:6A:06:13:68:51:20:3B:B7:25:98:4D:70:B0:17 Certificate issuer: /CN=A9159DCD/serialNumber=5793436D22A96A06136851203BB725984D70B017 Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft Manifest number: 013E Signing time: Thu 03 Apr 2025 03:37:28 +0000 Manifest this update: Thu 03 Apr 2025 03:37:28 +0000 Manifest next update: Thu 10 Apr 2025 03:37:28 +0000 Files and hashes: 1: V5NDbSKpagYTaFEgO7clmE1wsBc.crl (hash: KDXQDeNagxptJ5D84nPw02GKftpQC98cFhAIIKiK+Bg=) 2: 29D600062C3311EEBFF69B6CC4F9AE02.roa (hash: q7jOTproZWiG/PibVmdnyADWbCK3ghnPut/xoR7KaRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.crl rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:37:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159DCD Validity Not Before: Apr 3 03:37:28 2025 GMT Not After : Apr 10 03:37:28 2025 GMT Subject: CN=67ee0278-d3de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f5:61:af:e8:33:6f:7c:83:04:64:17:32:d8: 2d:d0:bb:83:90:14:dc:2e:69:1c:25:aa:41:39:e2: 48:76:2f:6d:30:ad:1c:1f:24:f4:0f:6e:7a:2e:84: 6f:f1:37:93:e1:49:9c:f0:2e:1b:8b:2d:45:c9:cf: 82:1b:39:1a:ce:11:84:4f:de:63:4a:25:e1:39:4f: ae:1b:6b:02:d9:f1:ee:38:f9:f6:38:2c:24:62:f7: 32:80:7e:a2:0c:e5:8a:da:1e:23:02:82:f8:64:b6: f9:98:0a:e8:7b:d6:ac:76:e3:12:7c:58:7f:98:07: 95:66:92:ec:50:24:77:11:5f:f4:bb:56:82:dd:d7: 6d:e1:59:0f:3b:00:5a:cc:8e:f7:d0:68:8a:77:79: d8:26:bc:5a:1e:23:2f:a0:81:f3:0a:2f:71:86:40: 82:5a:89:56:32:5b:8a:57:5b:af:95:27:8a:ab:15: 18:3a:d3:8e:fc:77:12:72:67:89:1d:0b:8c:48:4d: a8:00:69:ea:d3:48:ea:e6:88:54:d7:37:ab:1c:51: a2:d7:bb:9d:95:9e:cc:75:bc:20:6f:04:b8:17:2c: ec:a4:ce:32:48:1a:18:37:ce:ef:c7:41:f7:ab:e0: 76:7e:4a:7e:95:b5:55:28:6e:e2:c6:d3:03:47:2f: cf:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:67:9E:9D:87:E7:77:88:9B:54:22:10:43:EC:E0:E6:D3:60:8B:C5 X509v3 Authority Key Identifier: keyid:57:93:43:6D:22:A9:6A:06:13:68:51:20:3B:B7:25:98:4D:70:B0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:37:22:1e:24:6f:0c:f4:a5:95:97:21:14:3d:f6:cf:bf:d6: c8:e5:1a:94:90:e5:b4:55:d4:f5:dc:e5:a6:e5:9d:ad:39:eb: cf:55:16:e7:4f:c4:14:19:31:18:85:a2:76:1d:15:ce:7e:e3: 73:c8:d2:36:20:f5:95:e9:fd:dc:cb:21:00:04:17:41:65:f3: 08:66:c1:0c:bd:f4:67:46:ab:08:b2:77:a6:03:f7:64:b0:f5: 8b:25:44:9a:11:d6:7d:20:bf:19:70:2f:af:c5:7f:34:25:b6: 80:04:2b:02:d4:b0:5e:4d:88:c9:fd:7f:19:35:18:06:a6:57: 3b:6d:9a:bd:04:58:ee:fe:87:0c:d0:81:5e:77:54:eb:45:28: 85:24:84:02:4a:eb:76:3f:06:99:9c:ee:3b:82:03:c4:5d:a1: 56:8d:ea:06:8a:81:1f:ea:e6:c8:28:27:68:86:2f:90:74:6e: 91:71:f1:cb:88:94:77:42:24:32:dd:0d:40:40:22:80:b0:92: fe:20:c1:77:0b:e4:50:cc:20:93:b7:6f:69:a6:99:0f:ab:a3: 89:d4:f0:c5:3c:a0:32:fb:4d:93:a4:c0:64:9c:c3:2a:62:38: cc:9a:cd:29:0c:c8:73:0f:54:8b:42:57:52:50:58:31:e4:f7: 17:c5:0d:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlEQ0QxMTAvBgNVBAUTKDU3OTM0MzZEMjJBOTZBMDYxMzY4NTEyMDNCQjcyNTk4 NEQ3MEIwMTcwHhcNMjUwNDAzMDMzNzI4WhcNMjUwNDEwMDMzNzI4WjAYMRYwFAYD VQQDEw02N2VlMDI3OC1kM2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3PVhr+gzb3yDBGQXMtgt0LuDkBTcLmkcJapBOeJIdi9tMK0cHyT0D256LoRv 8TeT4Umc8C4biy1Fyc+CGzkazhGET95jSiXhOU+uG2sC2fHuOPn2OCwkYvcygH6i DOWK2h4jAoL4ZLb5mAroe9asduMSfFh/mAeVZpLsUCR3EV/0u1aC3ddt4VkPOwBa zI730GiKd3nYJrxaHiMvoIHzCi9xhkCCWolWMluKV1uvlSeKqxUYOtOO/HcScmeJ HQuMSE2oAGnq00jq5ohU1zerHFGi17udlZ7MdbwgbwS4FyzspM4ySBoYN87vx0H3 q+B2fkp+lbVVKG7ixtMDRy/PSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDpnnp2H 53eIm1QiEEPs4ObTYIvFMB8GA1UdIwQYMBaAFFeTQ20iqWoGE2hRIDu3JZhNcLAX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OURDRC9BMDBENzAwNjJD MjQxMUVFQUI5NzhGMEZDNEY5QUUwMi9WNU5EYlNLcGFnWVRhRkVnTzdjbG1FMXdz QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Y1TkRiU0twYWdZVGFGRWdPN2NsbUUxd3NCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OURDRC9BMDBENzAwNjJDMjQxMUVFQUI5NzhGMEZDNEY5QUUwMi9WNU5EYlNLcGFn WVRhRkVnTzdjbG1FMXdzQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0NyIeJG8M9KWVlyEUPfbPv9bI5RqUkOW0VdT13OWm5Z2tOevPVRbn T8QUGTEYhaJ2HRXOfuNzyNI2IPWV6f3cyyEABBdBZfMIZsEMvfRnRqsIsnemA/dk sPWLJUSaEdZ9IL8ZcC+vxX80JbaABCsC1LBeTYjJ/X8ZNRgGplc7bZq9BFju/ocM 0IFed1TrRSiFJIQCSut2PwaZnO47ggPEXaFWjeoGioEf6ubIKCdohi+QdG6RcfHL iJR3QiQy3Q1AQCKAsJL+IMF3C+RQzCCTt29pppkPq6OJ1PDFPKAy+02TpMBknMMq YjjMms0pDMhzD1SLQldSUFgx5PcXxQ3V -----END CERTIFICATE-----Generated at Fri Apr 4 21:53:48 2025 by rpki-client