$ rpki-client -vvf rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft File: 5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft (raw, json) Hash identifier: ICkD9SSssHh3kqzHPeyFBrfS4x/27IfLlg5O7IuTsew= Subject key identifier: 24:6C:B6:B9:03:4F:79:B9:11:8F:CF:27:AD:EE:1D:76:70:4D:CE:B3 Authority key identifier: E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3 Certificate issuer: /CN=A9165362/serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3 Certificate serial: 052A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft Manifest number: 0507 Signing time: Wed 02 Apr 2025 23:46:54 +0000 Manifest this update: Wed 02 Apr 2025 23:46:53 +0000 Manifest next update: Wed 09 Apr 2025 23:46:53 +0000 Files and hashes: 1: 5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl (hash: zuPOR4rveR6pfcPItbkrw5FW/sDsJWRACutW4jruv6A=) 2: 2C4993AA271B11EF97731F0BC4F9AE02.roa (hash: 510AYYtfzA2GESknsDswoMnwkXlbF/avHNUhiFeIBXA=) 3: 9CB324BA273111EF9F5B0860C4F9AE02.roa (hash: tuypvpB5BqOqFONJHnNDkY9wl1Vyxr2l9hApI1MYGj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 23:46:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1322 (0x52a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165362 Validity Not Before: Apr 2 23:46:53 2025 GMT Not After : Apr 9 23:46:53 2025 GMT Subject: CN=67edcc6d-8a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:31:49:3c:c7:7c:4f:0e:44:09:d2:95:49:77: f5:24:a9:6b:2c:f1:aa:cf:84:6d:99:6d:e3:8c:15: 38:e3:a5:90:3b:89:3d:33:41:a1:e2:70:b2:bf:7f: da:95:8b:e3:68:a0:14:0e:4e:5d:09:7b:35:4e:ee: b1:0c:0a:e0:c6:be:0a:a5:95:d7:99:be:6a:4f:ce: 7f:62:3b:2b:1e:0d:22:69:70:64:2f:77:c3:de:db: dc:c1:90:84:4c:5e:28:f8:d1:17:02:87:12:bc:38: 5f:87:f9:fd:43:58:ec:47:ee:cf:63:e2:a3:56:24: 02:66:87:7b:93:ee:d9:f2:f8:c0:e8:d1:e6:aa:e8: b5:df:86:c3:8b:18:93:45:b9:17:37:11:62:e0:10: 0d:6e:ac:c5:aa:23:b2:c7:63:9e:a1:fa:e6:80:a5: ac:09:0d:24:a1:14:56:fb:05:e3:5a:19:90:1d:37: a6:0f:b2:63:4d:01:ee:92:6f:b6:eb:81:e5:25:f0: 6b:97:87:8d:92:e5:85:1a:5e:1a:f4:37:e7:55:4d: 65:24:77:ee:e1:4e:cd:28:ac:6d:b8:d5:d6:ae:22: 51:1f:45:fe:31:4f:42:ac:30:dd:7d:e9:8b:cc:41: ff:62:d6:e7:9b:29:4f:65:62:71:40:f6:a9:28:f3: e2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:6C:B6:B9:03:4F:79:B9:11:8F:CF:27:AD:EE:1D:76:70:4D:CE:B3 X509v3 Authority Key Identifier: keyid:E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:5c:a3:60:11:72:fe:3a:60:0b:ee:a7:0b:d7:0b:9f:07:1a: c3:89:be:ef:5f:6b:89:05:5b:89:10:38:89:9e:9f:50:10:16: 00:f0:7d:2a:c3:b4:5a:e2:42:90:21:23:bb:fc:67:61:e9:ac: 55:de:22:d1:46:81:51:8e:89:0a:cd:b1:50:b0:c7:2d:16:c4: 9d:02:5a:48:ff:83:3f:09:f5:02:ae:a9:a3:a9:17:d4:df:90: 3a:af:8c:04:de:92:bb:cb:85:ad:0f:7b:e3:78:ab:8b:7d:5c: 73:27:c3:b7:19:e3:ea:db:ed:3c:b1:43:29:0c:00:39:e1:06: 1f:37:a2:bb:85:a4:2c:a4:01:e0:d1:69:87:2b:a7:e8:81:61: f7:4d:00:b8:c9:e6:54:bc:7c:a1:c4:d5:f4:75:ba:ba:2b:8e: 44:44:6a:da:a8:2c:b6:f0:a8:8f:84:fd:b4:e6:f6:cc:bd:86: 7a:e5:27:5e:83:58:e1:22:f7:5e:06:ab:6c:e3:a0:1c:25:53: c3:4e:bd:e7:a8:b6:65:7c:14:03:f4:17:4c:12:8e:d5:14:a8: 83:50:31:ed:b4:b5:f9:1c:89:89:2a:cf:94:7c:c9:66:81:54: 83:c2:f8:d2:23:75:6c:f5:2e:28:5a:7e:b8:55:ae:ab:db:a4: 4e:8c:33:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUzNjIxMTAvBgNVBAUTKEU1RTVEMTY4QTBFMTA5NkVBMUMzRjlCN0Y4RThENzU4 RUFFQTIzRjMwHhcNMjUwNDAyMjM0NjUzWhcNMjUwNDA5MjM0NjUzWjAYMRYwFAYD VQQDEw02N2VkY2M2ZC04YTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArjFJPMd8Tw5ECdKVSXf1JKlrLPGqz4RtmW3jjBU446WQO4k9M0Gh4nCyv3/a lYvjaKAUDk5dCXs1Tu6xDArgxr4KpZXXmb5qT85/YjsrHg0iaXBkL3fD3tvcwZCE TF4o+NEXAocSvDhfh/n9Q1jsR+7PY+KjViQCZod7k+7Z8vjA6NHmqui134bDixiT RbkXNxFi4BANbqzFqiOyx2OeofrmgKWsCQ0koRRW+wXjWhmQHTemD7JjTQHukm+2 64HlJfBrl4eNkuWFGl4a9DfnVU1lJHfu4U7NKKxtuNXWriJRH0X+MU9CrDDdfemL zEH/YtbnmylPZWJxQPapKPPiuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRstrkD T3m5EY/PJ63uHXZwTc6zMB8GA1UdIwQYMBaAFOXl0Wig4QluocP5t/jo11jq6iPz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTM2Mi9EOUNCRjgwQTEw QjMxMUVDQTMxREY4MkNDNEY5QUUwMi81ZVhSYUtEaENXNmh3X20zLU9qWFdPcnFJ X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVlWFJhS0RoQ1c2aHdfbTMtT2pYV09ycUlfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTM2Mi9EOUNCRjgwQTEwQjMxMUVDQTMxREY4MkNDNEY5QUUwMi81ZVhSYUtEaENX Nmh3X20zLU9qWFdPcnFJX00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEXKNgEXL+OmAL7qcL1wufBxrDib7vX2uJBVuJEDiJnp9QEBYA8H0q w7Ra4kKQISO7/Gdh6axV3iLRRoFRjokKzbFQsMctFsSdAlpI/4M/CfUCrqmjqRfU 35A6r4wE3pK7y4WtD3vjeKuLfVxzJ8O3GePq2+08sUMpDAA54QYfN6K7haQspAHg 0WmHK6fogWH3TQC4yeZUvHyhxNX0dbq6K45ERGraqCy28KiPhP205vbMvYZ65Sde g1jhIvdeBqts46AcJVPDTr3nqLZlfBQD9BdMEo7VFKiDUDHttLX5HImJKs+UfMlm gVSDwvjSI3Vs9S4oWn64Va6r26ROjDPZ -----END CERTIFICATE-----Generated at Fri Apr 4 22:06:39 2025 by rpki-client