$ rpki-client -vvf rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft File: t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft (raw, json) Hash identifier: btmKE+6znIILDfP3kY+O048tzE4HRQUjdKqHHhe/Ft8= Subject key identifier: E7:6E:BF:B4:89:AA:78:9A:74:D3:1D:D1:BC:C8:5E:2B:88:D5:33:C9 Authority key identifier: B7:91:BD:1C:9E:20:81:AA:84:F8:07:80:66:C0:C7:F6:0A:63:79:0E Certificate issuer: /CN=A917F8F2/serialNumber=B791BD1C9E2081AA84F8078066C0C7F60A63790E Certificate serial: 0818 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft Manifest number: 0809 Signing time: Fri 04 Apr 2025 21:02:53 +0000 Manifest this update: Fri 04 Apr 2025 21:02:52 +0000 Manifest next update: Fri 11 Apr 2025 21:02:52 +0000 Files and hashes: 1: t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl (hash: e/5qT4L0N9KnNq28jZF/bEB0OdDInscrMmC9Lj4Cius=) 2: B78B5CB6D65F11EA8B30486EC4F9AE02.roa (hash: MyNq7pYsfXRPiYwbL0q3/Dn2sx3QYfe2KkNfFn5PXS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2072 (0x818) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F8F2 Validity Not Before: Apr 4 21:02:52 2025 GMT Not After : Apr 11 21:02:52 2025 GMT Subject: CN=67f048fd-c480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3b:16:6a:1a:e5:d2:77:a8:6b:15:69:9b:b1: 54:e5:17:11:ce:4e:66:5a:f2:84:9e:78:fa:a0:1f: 63:c3:01:b9:53:c0:1e:35:3f:4d:51:d4:c5:87:0b: 43:2b:29:fe:ec:13:7e:20:09:c5:83:08:3f:b0:77: ec:66:b2:fe:8f:11:c9:03:d2:8e:cf:35:ea:89:0a: 01:23:6f:c4:51:31:30:c9:14:1d:24:8b:cc:ba:ab: e0:4a:7e:1d:97:19:d6:91:9c:09:45:af:0b:9d:7e: 49:a9:7e:d9:3c:b1:40:f6:ab:69:27:94:b6:76:c1: f1:af:6f:4c:c4:2c:e3:bc:e4:63:e9:fd:9d:45:95: 0a:49:5e:b9:57:91:a8:05:54:73:fd:93:62:c7:52: 42:04:28:a8:18:e3:b7:03:2b:f3:3a:b4:d1:60:76: d5:9c:f1:86:9e:00:2a:0e:5c:50:d6:d3:ed:9e:29: b1:75:37:a5:30:86:b3:26:64:72:56:e9:80:ed:dc: a2:d5:1f:58:02:fd:21:33:eb:4e:c7:78:45:21:34: a0:ec:db:0b:ea:e6:94:c0:2c:a3:8b:7a:04:0c:39: 71:ac:17:59:1c:84:0e:f2:94:e8:ba:ca:9a:ac:dc: 8e:91:e6:a3:53:8b:80:7b:d8:c2:27:84:27:14:68: d5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:6E:BF:B4:89:AA:78:9A:74:D3:1D:D1:BC:C8:5E:2B:88:D5:33:C9 X509v3 Authority Key Identifier: keyid:B7:91:BD:1C:9E:20:81:AA:84:F8:07:80:66:C0:C7:F6:0A:63:79:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:0b:38:08:36:6e:c9:9c:b8:c0:92:d0:61:31:69:63:06:ea: ac:43:91:1b:5e:a3:c0:19:a7:6b:2c:bf:b3:aa:e3:ed:c2:6c: bf:66:29:a7:b3:cb:c6:35:aa:2c:b3:76:fd:95:8d:62:87:e2: 4f:9b:c2:31:8d:89:ca:26:77:3f:69:7c:d3:af:b6:13:35:f5: f1:aa:16:45:bc:01:c7:75:b2:50:16:3a:63:1f:e9:67:2d:fd: 79:93:50:fa:7b:21:62:01:29:c9:67:bb:1b:20:fe:74:44:84: ba:4d:1f:99:21:08:1b:fb:0f:5e:b1:69:76:18:76:4b:b0:b9: 01:19:cb:ac:57:b9:ef:5a:39:2a:b5:ce:5e:ec:ee:a6:8f:6b: f5:8b:1b:48:9e:86:83:29:99:30:6a:ce:32:42:d2:0b:a0:07: 69:52:0b:9e:14:9b:84:b9:52:e7:54:0e:66:f9:49:e8:e8:d1: c0:e7:db:1b:8d:91:76:2a:14:e9:10:a5:56:ef:00:b1:55:69: 0a:97:6c:07:14:45:e7:b3:a2:fe:c8:c9:dd:e9:54:70:57:3e: f9:3e:77:9e:9b:c3:68:fc:0b:e4:22:c2:e7:bd:22:e2:dd:dd: 74:bf:9c:42:8c:a1:40:be:46:12:1a:19:f8:76:61:c2:6c:14: 23:e4:6a:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4RjIxMTAvBgNVBAUTKEI3OTFCRDFDOUUyMDgxQUE4NEY4MDc4MDY2QzBDN0Y2 MEE2Mzc5MEUwHhcNMjUwNDA0MjEwMjUyWhcNMjUwNDExMjEwMjUyWjAYMRYwFAYD VQQDEw02N2YwNDhmZC1jNDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1jsWahrl0neoaxVpm7FU5RcRzk5mWvKEnnj6oB9jwwG5U8AeNT9NUdTFhwtD Kyn+7BN+IAnFgwg/sHfsZrL+jxHJA9KOzzXqiQoBI2/EUTEwyRQdJIvMuqvgSn4d lxnWkZwJRa8LnX5JqX7ZPLFA9qtpJ5S2dsHxr29MxCzjvORj6f2dRZUKSV65V5Go BVRz/ZNix1JCBCioGOO3AyvzOrTRYHbVnPGGngAqDlxQ1tPtnimxdTelMIazJmRy VumA7dyi1R9YAv0hM+tOx3hFITSg7NsL6uaUwCyji3oEDDlxrBdZHIQO8pTousqa rNyOkeajU4uAe9jCJ4QnFGjVZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOduv7SJ qniadNMd0bzIXiuI1TPJMB8GA1UdIwQYMBaAFLeRvRyeIIGqhPgHgGbAx/YKY3kO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjhGMi8wMjJENTcxQ0Q2 NUUxMUVBQjYwQ0EzNkJDNEY5QUUwMi90NUc5SEo0Z2dhcUUtQWVBWnNESDlncGpl UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q1RzlISjRnZ2FxRS1BZUFac0RIOWdwamVRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjhGMi8wMjJENTcxQ0Q2NUUxMUVBQjYwQ0EzNkJDNEY5QUUwMi90NUc5SEo0Z2dh cUUtQWVBWnNESDlncGplUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWCzgINm7JnLjAktBhMWljBuqsQ5EbXqPAGadrLL+zquPtwmy/Zimn s8vGNaoss3b9lY1ih+JPm8IxjYnKJnc/aXzTr7YTNfXxqhZFvAHHdbJQFjpjH+ln Lf15k1D6eyFiASnJZ7sbIP50RIS6TR+ZIQgb+w9esWl2GHZLsLkBGcusV7nvWjkq tc5e7O6mj2v1ixtInoaDKZkwas4yQtILoAdpUgueFJuEuVLnVA5m+Uno6NHA59sb jZF2KhTpEKVW7wCxVWkKl2wHFEXns6L+yMnd6VRwVz75Pneem8No/AvkIsLnvSLi 3d10v5xCjKFAvkYSGhn4dmHCbBQj5GrX -----END CERTIFICATE-----Generated at Sat Apr 5 19:21:37 2025 by rpki-client