$ rpki-client -vvf rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft File: P5mfuMEae4Z_G_n5nKHCaglVK34.mft (raw, json) Hash identifier: q8abDvz0RVRcmvH9rOZTojEr6mczRDWhKyuSp4l1sVY= Subject key identifier: FF:80:BD:B9:55:8A:23:5D:AF:72:85:B8:42:D1:44:9D:1F:17:0F:08 Authority key identifier: 3F:99:9F:B8:C1:1A:7B:86:7F:1B:F9:F9:9C:A1:C2:6A:09:55:2B:7E Certificate issuer: /CN=A917429C/serialNumber=3F999FB8C11A7B867F1BF9F99CA1C26A09552B7E Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft Manifest number: 013C Signing time: Sat 29 Mar 2025 03:52:18 +0000 Manifest this update: Sat 29 Mar 2025 03:52:17 +0000 Manifest next update: Sat 05 Apr 2025 03:52:17 +0000 Files and hashes: 1: P5mfuMEae4Z_G_n5nKHCaglVK34.crl (hash: ljqnjyVaIJoq1tU7km/UG+IudzsWhowxJMgIKWlSkbU=) 2: D41F53D48DC011EEB2B3600BC4F9AE02.roa (hash: m18iHIQk6Y05pnInRXfSrfccor+XsbyCaftlfR3dVBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.crl rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917429C Validity Not Before: Mar 29 03:52:17 2025 GMT Not After : Apr 5 03:52:17 2025 GMT Subject: CN=67e76e71-3ac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:93:cd:20:80:b2:6b:eb:90:1e:24:62:88:ca: e1:02:8d:6b:18:75:57:ae:25:dc:dc:04:8f:8f:ab: a0:d0:76:c1:6f:ce:81:69:30:8a:01:75:ce:70:54: 69:53:72:2b:bf:23:ac:d6:d8:b5:f4:ce:71:0a:9a: 64:27:7d:e6:f1:f5:f5:bd:cc:bc:65:36:de:e9:6d: 0e:41:7f:5c:52:49:4d:49:80:f3:dd:37:48:5e:a1: 45:0c:14:42:59:34:b5:be:6b:84:ad:d3:f5:7b:42: 27:d9:ba:4e:25:33:61:74:01:fb:ea:91:c0:5f:00: 4e:20:19:3f:9e:3d:af:af:e7:b5:77:4f:9a:cf:4d: 23:74:a1:44:87:84:06:b3:a6:6d:b6:a2:60:3e:9d: 46:02:91:2c:e6:8c:57:d6:23:05:4f:51:e4:eb:f3: c5:ce:6b:36:19:f5:a5:50:c4:79:9e:90:37:d8:47: d4:57:5f:13:50:d3:35:4b:3a:2a:9a:7a:43:cf:61: 38:59:02:f4:24:1c:79:f4:18:49:4f:85:74:48:1c: 40:65:13:7d:60:4d:d7:d6:f9:e5:5d:9e:86:40:09: e8:59:b5:a8:13:16:82:8a:80:7c:99:82:b4:11:e3: a8:f2:98:58:aa:a0:27:f4:41:55:4b:62:c9:38:4c: e9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:80:BD:B9:55:8A:23:5D:AF:72:85:B8:42:D1:44:9D:1F:17:0F:08 X509v3 Authority Key Identifier: keyid:3F:99:9F:B8:C1:1A:7B:86:7F:1B:F9:F9:9C:A1:C2:6A:09:55:2B:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:90:14:88:c3:7e:b8:6b:07:3c:86:d2:17:f5:ae:a6:ba:88: 32:c7:f0:fa:37:51:db:eb:36:c2:be:44:62:26:3c:91:6a:f5: 7f:e6:f5:5c:be:97:8c:69:1a:31:5e:ab:74:ca:85:fd:98:0a: 62:14:a2:85:ca:71:b6:5a:d6:b4:2f:b1:a8:21:98:5f:c3:0a: 00:8e:2b:a2:3a:cd:bb:92:84:57:d1:24:13:fd:ef:43:0b:37: c6:ef:cf:6d:dd:0c:59:bf:6d:1f:cf:64:88:1c:01:00:3a:c5: 6d:f4:de:54:57:c2:ef:3f:bd:c7:6e:fb:ec:7d:c9:fe:e8:b4: 8f:47:51:d6:af:b4:50:f8:8c:93:22:a9:ab:18:47:d6:9a:f1: db:59:05:6a:8e:16:49:e9:a8:56:13:a6:b5:1c:49:36:ef:79: ad:b3:a1:d5:69:61:d3:69:6a:d1:96:7e:95:77:5e:50:29:9a: bd:71:a1:b2:b2:c7:72:7e:68:62:fe:85:07:0c:0e:b8:a3:dc: e3:35:e9:b0:c1:be:a5:2b:27:9f:cc:19:6b:ec:12:83:32:a8: bd:0d:69:b3:01:4e:3a:48:75:cc:fa:52:5d:5a:e3:46:d6:75: a5:46:b9:b1:c2:4a:7a:76:c2:b1:0a:11:cf:dc:cb:39:25:0c: 82:9a:ec:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQyOUMxMTAvBgNVBAUTKDNGOTk5RkI4QzExQTdCODY3RjFCRjlGOTlDQTFDMjZB MDk1NTJCN0UwHhcNMjUwMzI5MDM1MjE3WhcNMjUwNDA1MDM1MjE3WjAYMRYwFAYD VQQDEw02N2U3NmU3MS0zYWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZPNIICya+uQHiRiiMrhAo1rGHVXriXc3ASPj6ug0HbBb86BaTCKAXXOcFRp U3IrvyOs1ti19M5xCppkJ33m8fX1vcy8ZTbe6W0OQX9cUklNSYDz3TdIXqFFDBRC WTS1vmuErdP1e0In2bpOJTNhdAH76pHAXwBOIBk/nj2vr+e1d0+az00jdKFEh4QG s6ZttqJgPp1GApEs5oxX1iMFT1Hk6/PFzms2GfWlUMR5npA32EfUV18TUNM1Szoq mnpDz2E4WQL0JBx59BhJT4V0SBxAZRN9YE3X1vnlXZ6GQAnoWbWoExaCioB8mYK0 EeOo8phYqqAn9EFVS2LJOEzp5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+AvblV iiNdr3KFuELRRJ0fFw8IMB8GA1UdIwQYMBaAFD+Zn7jBGnuGfxv5+ZyhwmoJVSt+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDI5Qy8wRjE3MkREMjMw MjgxMUVFOTM0QThEMENDNEY5QUUwMi9QNW1mdU1FYWU0Wl9HX241bktIQ2FnbFZL MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A1bWZ1TUVhZTRaX0dfbjVuS0hDYWdsVkszNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDI5Qy8wRjE3MkREMjMwMjgxMUVFOTM0QThEMENDNEY5QUUwMi9QNW1mdU1FYWU0 Wl9HX241bktIQ2FnbFZLMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXkBSIw364awc8htIX9a6muogyx/D6N1Hb6zbCvkRiJjyRavV/5vVc vpeMaRoxXqt0yoX9mApiFKKFynG2Wta0L7GoIZhfwwoAjiuiOs27koRX0SQT/e9D CzfG789t3QxZv20fz2SIHAEAOsVt9N5UV8LvP73Hbvvsfcn+6LSPR1HWr7RQ+IyT IqmrGEfWmvHbWQVqjhZJ6ahWE6a1HEk273mts6HVaWHTaWrRln6Vd15QKZq9caGy ssdyfmhi/oUHDA64o9zjNemwwb6lKyefzBlr7BKDMqi9DWmzAU46SHXM+lJdWuNG 1nWlRrmxwkp6dsKxChHP3Ms5JQyCmuww -----END CERTIFICATE-----Generated at Fri Apr 4 22:04:17 2025 by rpki-client