$ rpki-client -vvf rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft File: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft (raw, json) Hash identifier: x95XXQXH1lOTB2bHxqQzxVw22QwF4rwxi41WwLK7SDA= Subject key identifier: C4:74:19:C7:A4:AD:DF:E8:C4:7B:33:36:A0:96:70:08:3C:B5:E1:E0 Authority key identifier: E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69 Certificate issuer: /CN=A9170DD8/serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft Manifest number: 74 Signing time: Thu 03 Apr 2025 06:05:23 +0000 Manifest this update: Thu 03 Apr 2025 06:05:22 +0000 Manifest next update: Thu 10 Apr 2025 06:05:22 +0000 Files and hashes: 1: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl (hash: M2tEhlJk37GL7jXVEB47GN4h0U//h9T17DP+U8C+xpg=) 2: 4D06CD2C667411EF8E723587C4F9AE02.roa (hash: 4PdtbIsL2ZotyQ7lOujn962oNOjC34OWUPtAk2nb5/I=) 3: 4CA4BE8E667411EF8E723587C4F9AE02.roa (hash: 8qwHnAzkWpQMSqbxW4gRTYW6uWniUVjWaHfJJJJlxJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170DD8 Validity Not Before: Apr 3 06:05:22 2025 GMT Not After : Apr 10 06:05:22 2025 GMT Subject: CN=67ee2523-2484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9f:92:6f:12:b8:ac:b4:0c:77:bb:f9:e2:7f: 0e:52:19:55:ac:ff:26:27:d1:48:ac:ed:02:d2:16: f7:8e:6a:d7:03:7d:ec:5a:d5:a4:d6:21:fc:d4:7c: 45:3d:65:b1:e4:b7:2c:86:15:45:09:77:ae:5d:96: 83:8e:b9:e6:97:9e:bd:6c:e0:8a:c8:20:51:aa:1a: 69:83:79:ec:2e:62:c3:7e:87:81:27:06:f1:41:a4: 01:4f:0d:9e:31:5b:9d:39:bd:61:84:e1:98:66:b3: 5a:ad:64:93:54:2a:5d:8f:ac:92:4e:a0:88:1b:1d: 53:54:d7:79:77:61:87:fb:c6:5d:0a:5c:e5:4d:c0: b7:9d:f9:0d:ee:f3:ba:64:61:f3:d4:79:01:80:ac: 03:81:e2:93:09:eb:bb:06:22:63:c5:3d:22:ab:3e: df:27:9e:f0:46:37:95:1e:0f:47:05:95:b4:b7:75: 6f:be:25:03:c9:9d:88:54:96:d0:83:5d:74:82:23: 61:78:71:7d:52:db:0d:ae:79:80:4c:29:75:72:a0: 3c:a3:71:6c:64:e0:55:ad:03:57:e1:83:92:21:ed: 1f:8e:32:bb:77:f9:ae:ea:07:b8:62:47:58:3d:12: b0:d3:8f:e7:fc:f7:48:ea:6f:a8:22:5f:f8:96:87: 6b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:74:19:C7:A4:AD:DF:E8:C4:7B:33:36:A0:96:70:08:3C:B5:E1:E0 X509v3 Authority Key Identifier: keyid:E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:15:86:9f:60:54:a8:de:3d:41:0f:e9:eb:33:1f:be:9a:19: 8a:14:f9:1a:02:6f:0f:1f:1d:29:03:ec:ba:10:17:ae:fa:71: 6a:41:81:84:5f:d1:5a:45:1f:f2:5e:99:c5:e4:73:bb:31:e9: ee:ca:ce:f6:aa:7f:b7:d1:53:28:d2:9f:c5:d9:7e:6f:98:11: 4a:90:fe:e4:51:1b:05:f3:8b:e8:da:d2:7e:f2:90:10:57:93: 65:dd:01:46:78:ba:94:ae:93:84:20:4e:0f:37:27:89:f8:ec: d2:9d:8f:3c:04:20:b3:f2:8e:85:d0:7f:5e:e9:4d:a7:b9:c9: 5a:e5:7e:42:d3:4d:8c:d8:88:4e:67:c9:0f:a8:b1:0a:3a:1f: 5f:44:34:a5:cd:ca:e0:cf:dc:cd:2a:d8:76:93:c5:e6:bb:5d: 48:1d:cc:a0:88:4f:07:da:11:39:77:8d:e1:27:64:91:22:d4: 97:cb:a1:f9:16:bc:7a:2b:fc:5e:99:93:20:0c:2e:c6:92:bc: 8e:e4:05:bf:e6:fb:17:d0:8a:34:b4:3a:99:53:66:09:83:46: ca:9e:3a:a7:cd:ab:31:5f:45:40:48:24:8e:3d:0f:56:35:a0: 1d:ec:8a:29:f2:44:b1:b9:f5:bb:3b:e3:8f:6d:4b:37:b4:34: a7:33:ac:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MEREODExMC8GA1UEBRMoRTZCNTREMDI3Q0UzNDk4QkYzNUU0RDA2NUJDNDc4QTkz NkMxNjE2OTAeFw0yNTA0MDMwNjA1MjJaFw0yNTA0MTAwNjA1MjJaMBgxFjAUBgNV BAMTDTY3ZWUyNTIzLTI0ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjn5JvEristAx3u/nifw5SGVWs/yYn0Uis7QLSFveOatcDfexa1aTWIfzUfEU9 ZbHktyyGFUUJd65dloOOueaXnr1s4IrIIFGqGmmDeewuYsN+h4EnBvFBpAFPDZ4x W505vWGE4Zhms1qtZJNUKl2PrJJOoIgbHVNU13l3YYf7xl0KXOVNwLed+Q3u87pk YfPUeQGArAOB4pMJ67sGImPFPSKrPt8nnvBGN5UeD0cFlbS3dW++JQPJnYhUltCD XXSCI2F4cX1S2w2ueYBMKXVyoDyjcWxk4FWtA1fhg5Ih7R+OMrt3+a7qB7hiR1g9 ErDTj+f890jqb6giX/iWh2uPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxHQZx6St 3+jEezM2oJZwCDy14eAwHwYDVR0jBBgwFoAU5rVNAnzjSYvzXk0GW8R4qTbBYWkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwREQ4L0E2NkE3NUVFNjVC QjExRUZBRkEzMkY4MkM0RjlBRTAyLzVyVk5BbnpqU1l2elhrMEdXOFI0cVRiQllX ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNXJWTkFuempTWXZ6WGswR1c4UjRxVGJCWVdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw REQ4L0E2NkE3NUVFNjVCQjExRUZBRkEzMkY4MkM0RjlBRTAyLzVyVk5BbnpqU1l2 elhrMEdXOFI0cVRiQllXay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAcVhp9gVKjePUEP6eszH76aGYoU+RoCbw8fHSkD7LoQF676cWpBgYRf 0VpFH/JemcXkc7sx6e7Kzvaqf7fRUyjSn8XZfm+YEUqQ/uRRGwXzi+ja0n7ykBBX k2XdAUZ4upSuk4QgTg83J4n47NKdjzwEILPyjoXQf17pTae5yVrlfkLTTYzYiE5n yQ+osQo6H19ENKXNyuDP3M0q2HaTxea7XUgdzKCITwfaETl3jeEnZJEi1JfLofkW vHor/F6ZkyAMLsaSvI7kBb/m+xfQijS0OplTZgmDRsqeOqfNqzFfRUBIJI49D1Y1 oB3siinyRLG59bs7449tSze0NKczrJs= -----END CERTIFICATE-----Generated at Fri Apr 4 18:30:00 2025 by rpki-client