$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft File: pDc5u18gwUzF_EnjdVh9s7ciN68.mft (raw, json) Hash identifier: 2A9AEqRtJd9gkLzIY2Q157Vde/wXtI9gRAxg/AXPfFM= Subject key identifier: 4F:74:A0:2D:E3:84:FE:DB:59:45:54:9A:F1:8A:68:A9:1B:56:3F:5B Authority key identifier: A4:37:39:BB:5F:20:C1:4C:C5:FC:49:E3:75:58:7D:B3:B7:22:37:AF Certificate issuer: /CN=A9172B7E/serialNumber=A43739BB5F20C14CC5FC49E375587DB3B72237AF Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft Manifest number: 0138 Signing time: Thu 03 Apr 2025 03:49:07 +0000 Manifest this update: Thu 03 Apr 2025 03:49:07 +0000 Manifest next update: Thu 10 Apr 2025 03:49:07 +0000 Files and hashes: 1: pDc5u18gwUzF_EnjdVh9s7ciN68.crl (hash: 2UqVXhrIWAw5rerwjrqGY0kKvEvIoFvC4Oxcx+J0jhg=) 2: BF341AF869A911EE8CB76452C4F9AE02.roa (hash: es2BFpk/dVqzh/KiV65lQ+0ASQp0lQtHLBsKiiObL58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.crl rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:49:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B7E Validity Not Before: Apr 3 03:49:07 2025 GMT Not After : Apr 10 03:49:07 2025 GMT Subject: CN=67ee0533-b053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:25:15:b3:29:c5:5e:17:8b:7c:d8:d9:4b:b3: 45:3c:af:24:67:21:84:19:2d:7d:41:d6:a7:7b:0b: 4a:99:41:19:59:64:25:54:73:ca:2b:f2:4e:ff:90: 78:40:46:c6:8f:0d:13:19:3a:75:b6:76:8a:9b:64: 45:c6:12:45:a8:39:c7:6a:5a:16:fe:0f:ad:d3:a3: 9d:4b:c9:ad:31:df:0f:6b:d2:4d:10:1e:d8:4d:77: 1f:50:3e:2f:9c:c6:9d:4e:39:67:dd:c2:a2:34:e0: 38:12:bb:9a:bf:61:2a:b7:cb:0e:4f:a5:b6:1c:cb: c8:d3:5a:b4:c6:ce:27:35:69:ab:d5:4c:7f:80:46: 9d:cd:cd:8b:17:24:22:9d:18:76:1f:f4:50:fa:82: cc:1f:ab:74:3b:cc:56:0e:cb:8e:cf:e2:03:01:68: 32:e7:70:fe:25:cf:5c:a5:00:14:ac:95:4b:8f:f5: 34:7e:9b:89:74:7b:95:64:1f:0b:06:97:bd:64:fc: df:0b:69:98:c6:e9:21:5c:b7:db:78:75:4a:7a:45: 3c:7b:88:32:2a:ce:e2:6e:71:2a:9b:cb:c2:8c:33: 55:60:50:d8:a7:56:b5:62:29:84:d4:a0:3a:8c:c6: 34:c7:e6:d2:41:fa:77:fb:44:45:ad:ad:bb:a5:1a: 28:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:74:A0:2D:E3:84:FE:DB:59:45:54:9A:F1:8A:68:A9:1B:56:3F:5B X509v3 Authority Key Identifier: keyid:A4:37:39:BB:5F:20:C1:4C:C5:FC:49:E3:75:58:7D:B3:B7:22:37:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:32:69:e6:e6:80:fc:b9:55:2a:73:6c:f1:9b:a8:31:d7:a0: 2b:ec:03:a9:e1:35:c1:4d:45:f3:e4:e6:fb:7b:54:01:96:79: 51:21:32:3f:89:d9:06:f4:a8:b7:87:f1:1b:6c:13:5b:c2:7b: a5:86:ce:fe:62:78:9d:22:f2:aa:97:32:97:34:51:b9:65:17: 44:44:1c:25:b2:82:ed:39:a4:11:f7:68:23:10:ea:50:8f:a1: 45:bc:e2:53:21:80:13:78:fd:74:44:ff:3a:42:04:1e:8a:ee: 67:20:56:59:0c:21:8d:b4:04:81:a1:22:24:5d:5c:87:97:09: 10:2b:0f:5d:21:fd:f1:15:1e:4b:46:a3:f5:38:3b:8c:6e:29: d9:df:6e:8e:b9:bd:dc:c0:36:81:13:57:85:1e:ce:8d:0a:bc: d2:84:e8:cb:d0:e8:f5:b3:70:d7:d9:27:4a:b3:af:d4:81:80: d9:71:59:1f:ff:bf:ca:5e:b3:e2:78:bf:d2:4e:8b:73:c2:1b: 64:21:cf:dd:70:18:75:52:0b:1b:03:c9:c7:b5:a7:e7:80:69: 33:0b:92:31:d6:7f:b0:bf:f4:4a:a0:d9:bf:bc:ab:f4:42:65: 11:9e:b7:b0:5d:e7:34:b6:3c:94:fc:ba:3c:cb:dd:e4:58:c0: 77:02:62:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCN0UxMTAvBgNVBAUTKEE0MzczOUJCNUYyMEMxNENDNUZDNDlFMzc1NTg3REIz QjcyMjM3QUYwHhcNMjUwNDAzMDM0OTA3WhcNMjUwNDEwMDM0OTA3WjAYMRYwFAYD VQQDEw02N2VlMDUzMy1iMDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCUVsynFXheLfNjZS7NFPK8kZyGEGS19QdanewtKmUEZWWQlVHPKK/JO/5B4 QEbGjw0TGTp1tnaKm2RFxhJFqDnHaloW/g+t06OdS8mtMd8Pa9JNEB7YTXcfUD4v nMadTjln3cKiNOA4Eruav2Eqt8sOT6W2HMvI01q0xs4nNWmr1Ux/gEadzc2LFyQi nRh2H/RQ+oLMH6t0O8xWDsuOz+IDAWgy53D+Jc9cpQAUrJVLj/U0fpuJdHuVZB8L Bpe9ZPzfC2mYxukhXLfbeHVKekU8e4gyKs7ibnEqm8vCjDNVYFDYp1a1YimE1KA6 jMY0x+bSQfp3+0RFra27pRookwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE90oC3j hP7bWUVUmvGKaKkbVj9bMB8GA1UdIwQYMBaAFKQ3ObtfIMFMxfxJ43VYfbO3Ijev MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI3RS83M0JDN0FBQzQ3 MTcxMUVFQTQ0NkUzNDZDNEY5QUUwMi9wRGM1dTE4Z3dVekZfRW5qZFZoOXM3Y2lO NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BEYzV1MThnd1V6Rl9FbmpkVmg5czdjaU42OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkI3RS83M0JDN0FBQzQ3MTcxMUVFQTQ0NkUzNDZDNEY5QUUwMi9wRGM1dTE4Z3dV ekZfRW5qZFZoOXM3Y2lONjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbMmnm5oD8uVUqc2zxm6gx16Ar7AOp4TXBTUXz5Ob7e1QBlnlRITI/ idkG9Ki3h/EbbBNbwnulhs7+YnidIvKqlzKXNFG5ZRdERBwlsoLtOaQR92gjEOpQ j6FFvOJTIYATeP10RP86QgQeiu5nIFZZDCGNtASBoSIkXVyHlwkQKw9dIf3xFR5L RqP1ODuMbinZ326Oub3cwDaBE1eFHs6NCrzShOjL0Oj1s3DX2SdKs6/UgYDZcVkf /7/KXrPieL/STotzwhtkIc/dcBh1UgsbA8nHtafngGkzC5Ix1n+wv/RKoNm/vKv0 QmURnrewXec0tjyU/Lo8y93kWMB3AmIR -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:23 2025 by rpki-client