$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft File: 5iFGnNWlePlHq0frDs6Ik5uH6_s.mft (raw, json) Hash identifier: eZzWNfFZtjihpFnHe6DL5L1goHqBy3kYqh2VRMFjABk= Subject key identifier: 18:5D:C3:C5:8E:13:13:FA:1D:E6:D6:70:54:C2:7E:85:BD:26:C4:3B Authority key identifier: E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB Certificate issuer: /CN=A9170982/serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB Certificate serial: 0389 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft Manifest number: 036B Signing time: Sat 29 Mar 2025 01:15:33 +0000 Manifest this update: Sat 29 Mar 2025 01:15:33 +0000 Manifest next update: Sat 05 Apr 2025 01:15:33 +0000 Files and hashes: 1: 5iFGnNWlePlHq0frDs6Ik5uH6_s.crl (hash: /8Ddsq72dhVUmZw3Ubyrzzy+qBoPXukfyoFM6WmuZh4=) 2: 2B2CF35A35A411ED89F95974C4F9AE02.roa (hash: BfZYjuf+MTJqrBceGA5aBPWPAbWyAIIKEVtel+HzA+s=) 3: C8165660822F11EEABA7D533C4F9AE02.roa (hash: G6DqHnh4blUKVwDCX+3yAB5EHH1Zl+1SenKDUoryx8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 01:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 905 (0x389) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170982 Validity Not Before: Mar 29 01:15:33 2025 GMT Not After : Apr 5 01:15:33 2025 GMT Subject: CN=67e749b5-b9fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ab:be:0e:61:50:8a:f7:e1:b8:e7:57:00:1a: 45:8f:d3:6a:be:54:fd:eb:22:0e:70:24:a1:94:50: 11:8a:7f:11:d3:01:66:ef:87:98:1d:1c:85:89:46: 10:cf:c5:f5:6a:8d:c5:c2:6f:ab:57:ee:c2:17:ed: 98:53:eb:ac:43:61:6d:a1:61:b0:2b:c5:82:7b:c1: 16:ce:33:5e:1f:e2:33:02:74:e2:25:e0:45:c9:af: 54:54:27:c1:a4:91:7e:8e:ba:91:fa:ad:68:57:32: eb:3a:08:a2:3d:74:ec:f4:2e:a6:bb:78:ab:dd:d1: c5:21:ac:93:ee:33:b9:70:67:02:44:73:75:90:88: ed:0b:fc:40:ef:39:78:04:e1:03:db:5e:25:cf:c7: b6:f2:99:06:dc:f0:fe:77:4a:0e:ba:86:e8:7d:26: 14:56:ed:b7:fb:6a:d9:fc:d9:78:28:9a:70:cc:b9: 66:29:93:06:f6:bc:8a:66:17:ff:10:36:c4:d1:80: 69:8a:28:c5:be:ec:1c:59:1d:1a:8c:12:84:a4:cd: 22:61:4d:6a:70:39:c2:d5:71:c4:0f:88:79:7f:1f: 4a:c5:23:71:24:74:7c:13:84:85:c1:63:c5:6b:22: ea:7f:8c:18:b7:e0:9c:e6:95:35:ae:a7:54:1e:59: d9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:5D:C3:C5:8E:13:13:FA:1D:E6:D6:70:54:C2:7E:85:BD:26:C4:3B X509v3 Authority Key Identifier: keyid:E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:ae:1a:05:36:b4:06:56:6a:a9:69:11:e1:1b:f7:c1:4c:ff: d9:a4:7c:59:c8:73:51:7f:c7:0f:01:65:08:8e:ea:22:8c:0e: 8c:e7:f0:cf:45:d8:42:b8:08:9a:44:2c:98:63:6a:21:ce:86: 9a:3c:53:47:60:d0:85:f4:cb:39:09:b1:e6:f5:88:56:69:57: 46:f6:ac:d8:a0:62:de:d5:0d:52:5d:05:67:e7:98:c5:bf:c6: 85:2d:07:6a:25:ce:dd:30:3b:8b:43:c8:a0:72:1f:f8:3a:b1: 2e:cf:39:23:c4:f2:26:cd:16:8f:82:fa:5e:de:4f:86:95:f8: f1:a5:ac:52:3f:7a:92:39:72:61:19:27:82:a4:b1:bd:db:f8: 76:1f:58:d7:6a:0d:4a:68:3d:32:af:e9:e2:9f:00:79:70:d7: a1:09:7d:84:a0:b8:9b:f6:9b:d1:97:d1:3a:22:db:64:d9:34: 3e:2a:63:a8:73:c6:c6:b3:77:a4:43:33:15:1b:1d:cf:4b:c0: 48:df:32:57:8a:a7:c2:ce:3c:72:87:02:36:48:39:b8:a8:9f: 24:8c:5e:a1:66:0f:22:b7:ef:23:9e:10:ac:14:9b:b0:55:13: 27:fc:ab:47:f4:f4:09:4d:cb:85:7f:5c:94:af:32:c4:31:f0: 1a:87:21:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5ODIxMTAvBgNVBAUTKEU2MjE0NjlDRDVBNTc4Rjk0N0FCNDdFQjBFQ0U4ODkz OUI4N0VCRkIwHhcNMjUwMzI5MDExNTMzWhcNMjUwNDA1MDExNTMzWjAYMRYwFAYD VQQDEw02N2U3NDliNS1iOWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqu+DmFQivfhuOdXABpFj9NqvlT96yIOcCShlFARin8R0wFm74eYHRyFiUYQ z8X1ao3Fwm+rV+7CF+2YU+usQ2FtoWGwK8WCe8EWzjNeH+IzAnTiJeBFya9UVCfB pJF+jrqR+q1oVzLrOgiiPXTs9C6mu3ir3dHFIayT7jO5cGcCRHN1kIjtC/xA7zl4 BOED214lz8e28pkG3PD+d0oOuobofSYUVu23+2rZ/Nl4KJpwzLlmKZMG9ryKZhf/ EDbE0YBpiijFvuwcWR0ajBKEpM0iYU1qcDnC1XHED4h5fx9KxSNxJHR8E4SFwWPF ayLqf4wYt+Cc5pU1rqdUHlnZiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBhdw8WO ExP6HebWcFTCfoW9JsQ7MB8GA1UdIwQYMBaAFOYhRpzVpXj5R6tH6w7OiJObh+v7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDk4Mi9EOEI2ODY5NkFD MTMxMUVDQjc3NkIyMDlDNEY5QUUwMi81aUZHbk5XbGVQbEhxMGZyRHM2SWs1dUg2 X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVpRkduTldsZVBsSHEwZnJEczZJazV1SDZfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDk4Mi9EOEI2ODY5NkFDMTMxMUVDQjc3NkIyMDlDNEY5QUUwMi81aUZHbk5XbGVQ bEhxMGZyRHM2SWs1dUg2X3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKrhoFNrQGVmqpaRHhG/fBTP/ZpHxZyHNRf8cPAWUIjuoijA6M5/DP RdhCuAiaRCyYY2ohzoaaPFNHYNCF9Ms5CbHm9YhWaVdG9qzYoGLe1Q1SXQVn55jF v8aFLQdqJc7dMDuLQ8igch/4OrEuzzkjxPImzRaPgvpe3k+GlfjxpaxSP3qSOXJh GSeCpLG92/h2H1jXag1KaD0yr+ninwB5cNehCX2EoLib9pvRl9E6Ittk2TQ+KmOo c8bGs3ekQzMVGx3PS8BI3zJXiqfCzjxyhwI2SDm4qJ8kjF6hZg8it+8jnhCsFJuw VRMn/KtH9PQJTcuFf1yUrzLEMfAahyGC -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:09 2025 by rpki-client