$ rpki-client -vvf rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft File: 5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft (raw, json) Hash identifier: KbMCSF6CLTGzoRIK/fJLIUx8KtwmszB2Hp3bkfIh4Mw= Subject key identifier: E7:BE:5F:E0:34:37:0B:B0:D2:B2:39:E9:AB:B5:5D:33:52:94:4C:BB Authority key identifier: E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36 Certificate issuer: /CN=A9183DB7/serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836 Certificate serial: 0DD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft Manifest number: 0DC1 Signing time: Fri 04 Apr 2025 18:01:37 +0000 Manifest this update: Fri 04 Apr 2025 18:01:37 +0000 Manifest next update: Fri 11 Apr 2025 18:01:37 +0000 Files and hashes: 1: 5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl (hash: hbLS1MjlxdLZfqD2f8ghTHH02JgIKLhARCIDawavkxg=) 2: 6B7E8FC670DE11EC8B944928C4F9AE02.roa (hash: 6b2tMOXqi0MLk/Hu4xH6AhhU3ZFcsYoMzDIzjHh7G84=) 3: 6A5EC93A70DE11EC8B944928C4F9AE02.roa (hash: pfOPMFW4kQhWgEqFAOwq3YPcCBwScpJaJmY0T/CFlyo=) 4: 9F14D15E70DB11ECACCABD21C4F9AE02.roa (hash: +n1zXMDCEU4YWE/0cXk32wV8ITOzuCJeFwK/MfgKlSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3538 (0xdd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183DB7 Validity Not Before: Apr 4 18:01:37 2025 GMT Not After : Apr 11 18:01:37 2025 GMT Subject: CN=67f01e81-aa01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bf:c7:48:bd:11:51:0f:01:56:4d:6a:7b:ed: 1a:e1:6c:d2:02:5f:12:6c:ab:cd:10:25:6a:0f:de: 38:cc:78:fb:06:a3:58:c3:65:b0:6a:5e:9a:ca:c2: 8e:4b:2b:a6:6f:8e:31:78:42:17:89:a7:49:da:13: 59:02:3f:06:90:ee:39:2c:b3:8b:2d:33:45:68:17: c3:c7:13:c1:86:f1:ec:46:de:00:bf:37:b2:df:bd: bd:f7:48:15:9e:3a:c2:30:e6:69:17:34:61:53:9c: 52:3f:19:c9:84:77:4d:6d:43:e6:f9:a0:91:a1:88: 1f:df:9e:0a:5b:88:e1:33:bb:fe:6a:1e:33:b9:ce: b1:b5:ab:0d:09:0f:23:0c:89:6e:31:24:bc:bf:c2: 28:70:72:4e:c5:fb:6b:c1:c7:be:4a:b0:e8:01:04: 3d:50:38:1d:d0:66:7b:e2:a8:6a:7c:c4:1c:10:ce: f5:71:f7:f9:59:88:7b:9c:3c:ca:1a:61:eb:7b:6e: 38:b9:bf:a9:83:f5:20:51:4b:33:cf:18:27:b4:8f: a1:f1:63:07:e2:8b:ac:12:78:19:89:c7:d0:1f:f9: b1:4e:a6:47:7f:23:c6:db:7f:b6:e4:06:75:64:08: 6e:c0:59:1e:40:a7:3d:3d:7c:87:5a:11:c3:a8:11: 00:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BE:5F:E0:34:37:0B:B0:D2:B2:39:E9:AB:B5:5D:33:52:94:4C:BB X509v3 Authority Key Identifier: keyid:E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:0c:cd:56:2e:22:9e:59:3c:4f:58:8f:56:b1:03:94:ad:80: dc:3f:34:66:08:72:69:bd:67:a0:f6:98:08:59:5f:15:73:e1: eb:01:f2:ec:c8:45:07:9a:4d:ba:59:9b:81:ee:b6:9e:5e:82: c9:47:5f:d0:61:cd:97:71:ff:1c:6c:11:bf:6b:ce:36:bf:56: 7c:94:8e:73:7e:e8:89:d9:46:91:d8:2c:a4:fa:c6:da:af:ea: 7d:ac:ec:ba:23:1d:7c:b1:6f:79:c8:a9:1f:e8:5e:76:c3:7f: 5e:70:e4:34:59:cf:34:07:92:71:6b:48:01:fa:df:06:07:1f: f0:da:3d:ce:33:fe:3f:7c:60:a2:54:73:99:68:2b:b0:ab:ad: 41:e4:0c:36:5c:23:60:6d:d2:be:da:97:5c:5a:2d:04:d9:4a: 22:70:1f:6c:2f:ec:ea:16:00:b1:3d:69:54:69:cb:c7:c4:9a: 81:df:38:c6:a4:c5:9b:f3:01:b3:84:0b:a5:29:0b:1e:c8:aa: 86:6a:9b:49:8e:e8:18:65:bc:5f:66:ab:ec:43:33:94:e0:b6: 95:e4:bd:40:b1:66:87:08:7a:d9:c5:dd:98:07:d5:8e:45:86: 23:59:85:2e:da:5c:e0:5b:8c:d7:a0:c5:e1:02:81:f3:05:7e: 66:89:70:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNEQjcxMTAvBgNVBAUTKEU1MThFOTQ4MTVDNDZEN0Q4RTZGRUY0RUJDM0QxOERG MEUyMUY4MzYwHhcNMjUwNDA0MTgwMTM3WhcNMjUwNDExMTgwMTM3WjAYMRYwFAYD VQQDEw02N2YwMWU4MS1hYTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7/HSL0RUQ8BVk1qe+0a4WzSAl8SbKvNECVqD944zHj7BqNYw2Wwal6aysKO Syumb44xeEIXiadJ2hNZAj8GkO45LLOLLTNFaBfDxxPBhvHsRt4Avzey372990gV njrCMOZpFzRhU5xSPxnJhHdNbUPm+aCRoYgf354KW4jhM7v+ah4zuc6xtasNCQ8j DIluMSS8v8IocHJOxftrwce+SrDoAQQ9UDgd0GZ74qhqfMQcEM71cff5WYh7nDzK GmHre244ub+pg/UgUUszzxgntI+h8WMH4ousEngZicfQH/mxTqZHfyPG23+25AZ1 ZAhuwFkeQKc9PXyHWhHDqBEAMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOe+X+A0 Nwuw0rI56au1XTNSlEy7MB8GA1UdIwQYMBaAFOUY6UgVxG19jm/vTrw9GN8OIfg2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0RCNy8wRjM3NTk5RUI1 MjExMUU5OEQ4QkFDNTJDNEY5QUUwMi81UmpwU0JYRWJYMk9iLTlPdkQwWTN3NGgt RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVSanBTQlhFYlgyT2ItOU92RDBZM3c0aC1EWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0RCNy8wRjM3NTk5RUI1MjExMUU5OEQ4QkFDNTJDNEY5QUUwMi81UmpwU0JYRWJY Mk9iLTlPdkQwWTN3NGgtRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJDM1WLiKeWTxPWI9WsQOUrYDcPzRmCHJpvWeg9pgIWV8Vc+HrAfLs yEUHmk26WZuB7raeXoLJR1/QYc2Xcf8cbBG/a842v1Z8lI5zfuiJ2UaR2Cyk+sba r+p9rOy6Ix18sW95yKkf6F52w39ecOQ0Wc80B5Jxa0gB+t8GBx/w2j3OM/4/fGCi VHOZaCuwq61B5Aw2XCNgbdK+2pdcWi0E2UoicB9sL+zqFgCxPWlUacvHxJqB3zjG pMWb8wGzhAulKQseyKqGaptJjugYZbxfZqvsQzOU4LaV5L1AsWaHCHrZxd2YB9WO RYYjWYUu2lzgW4zXoMXhAoHzBX5miXCo -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:38 2025 by rpki-client