$ rpki-client -vvf rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft File: P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft (raw, json) Hash identifier: cMw5DdO/nzjgxQJTbwv1oVF9jjGxS0URXybJGLRYdWU= Subject key identifier: BA:B2:BB:A1:E1:36:01:67:0A:E6:D9:6F:88:AB:6A:31:4F:46:74:9D Authority key identifier: 3F:9F:C9:D9:42:19:8C:47:23:34:A3:7E:AD:3D:EA:B5:03:92:E8:2F Certificate issuer: /CN=A9186753/serialNumber=3F9FC9D942198C472334A37EAD3DEAB50392E82F Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5_J2UIZjEcjNKN-rT3qtQOS6C8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft Manifest number: 14 Signing time: Thu 17 Apr 2025 06:51:36 +0000 Manifest this update: Thu 17 Apr 2025 06:51:35 +0000 Manifest next update: Thu 24 Apr 2025 06:51:35 +0000 Files and hashes: 1: P5_J2UIZjEcjNKN-rT3qtQOS6C8.crl (hash: 3KtLAXhRPXvtX2QHnMDputVKmLJiPfn4YSKUwMbO8JM=) 2: 62BBFF4A046A11F081D54156C4F9AE02.roa (hash: pZymfXzsM+oU7Rjr41rJ4omJoS7JHWwRPlAblPbDAXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.crl rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5_J2UIZjEcjNKN-rT3qtQOS6C8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 06:51:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186753, serialNumber=3F9FC9D942198C472334A37EAD3DEAB50392E82F Validity Not Before: Apr 17 06:51:35 2025 GMT Not After : Apr 24 06:51:35 2025 GMT Subject: CN=6800a4f8-6943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7b:bb:c0:4d:4a:60:74:71:63:43:6a:72:84: 38:33:7c:81:01:33:3d:ca:7a:9f:bc:89:2f:ac:2c: 8f:48:2b:24:d8:3d:7e:56:b5:fb:78:7c:88:91:31: b3:db:dc:90:57:48:33:95:2a:69:b4:37:8d:fe:d1: a2:64:a8:07:56:c4:fc:65:b0:7a:d0:03:6b:e4:12: 96:2d:01:92:c3:c9:46:3f:7a:d0:1d:d4:2d:cb:59: b3:74:cb:c8:55:f0:f7:2f:cb:b5:d5:50:f8:2b:69: 70:77:56:71:95:87:61:6b:e9:4f:71:79:06:72:50: 64:03:6a:a9:fa:f3:0d:7d:70:5b:06:cb:38:a9:b4: 9b:dd:aa:88:fc:56:46:2e:66:20:60:95:14:56:27: 3a:80:15:4b:82:f9:1e:b4:01:c2:86:30:d3:41:de: 38:04:3d:4a:33:94:6f:15:57:cc:45:57:95:81:d0: 8d:c9:c0:f3:2b:2f:15:3b:cb:ec:6e:3e:a6:5f:0d: 8d:cb:d3:d2:23:c5:fa:f5:a8:90:12:73:ae:fd:d1: 90:2a:b2:db:a7:9c:82:bd:d2:27:c2:4b:79:81:be: 90:d1:dd:46:26:54:6d:9d:96:f8:8b:3c:c3:5e:40: 74:4e:05:68:83:1d:13:da:ee:4c:9d:f4:f6:47:04: 2a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B2:BB:A1:E1:36:01:67:0A:E6:D9:6F:88:AB:6A:31:4F:46:74:9D X509v3 Authority Key Identifier: keyid:3F:9F:C9:D9:42:19:8C:47:23:34:A3:7E:AD:3D:EA:B5:03:92:E8:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5_J2UIZjEcjNKN-rT3qtQOS6C8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:7f:b8:ed:a6:75:3b:30:1b:a5:d5:6c:bd:f7:06:72:38:c2: 5f:8b:17:3d:1f:3a:be:b1:54:fc:24:94:41:74:2e:3c:00:f6: 8d:08:df:dd:69:86:84:d8:aa:a1:19:90:cf:70:2d:57:89:1d: d9:df:13:a9:f1:e3:f0:88:3b:34:b8:15:1f:48:41:00:d5:bb: 8b:dc:c7:c9:cb:8e:7e:28:74:62:b9:de:71:2e:96:0c:65:9b: 6d:a8:2d:5c:cf:b7:58:cf:bf:bd:4c:1b:d9:d1:fa:57:fc:80: 13:d7:38:fc:50:de:fc:c0:2d:e4:21:ef:fd:06:e6:a8:dd:70: 93:24:cf:30:a9:60:17:b6:c1:df:97:98:a7:5f:48:ff:16:14: 42:09:d5:b8:e5:61:f4:c6:9a:15:c7:a2:16:62:69:3c:e2:bc: 55:c9:cc:54:f4:86:80:1a:b7:3f:81:e7:dd:8c:b8:2e:25:37: 0a:22:a0:33:31:3b:42:60:19:54:1f:af:ae:03:cb:3d:b8:72: 8e:6b:6e:d5:46:b2:1e:65:e5:7e:fe:c4:d9:c3:72:0d:9d:4a: 26:04:bc:1f:d1:4c:cf:4e:51:be:41:1d:79:0c:af:24:71:46: 16:f9:db:00:68:a5:23:e3:67:11:a4:55:a2:7a:3e:5b:e1:da: 09:51:30:f8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 Njc1MzExMC8GA1UEBRMoM0Y5RkM5RDk0MjE5OEM0NzIzMzRBMzdFQUQzREVBQjUw MzkyRTgyRjAeFw0yNTA0MTcwNjUxMzVaFw0yNTA0MjQwNjUxMzVaMBgxFjAUBgNV BAMTDTY4MDBhNGY4LTY5NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUe7vATUpgdHFjQ2pyhDgzfIEBMz3Kep+8iS+sLI9IKyTYPX5Wtft4fIiRMbPb 3JBXSDOVKmm0N43+0aJkqAdWxPxlsHrQA2vkEpYtAZLDyUY/etAd1C3LWbN0y8hV 8Pcvy7XVUPgraXB3VnGVh2Fr6U9xeQZyUGQDaqn68w19cFsGyziptJvdqoj8VkYu ZiBglRRWJzqAFUuC+R60AcKGMNNB3jgEPUozlG8VV8xFV5WB0I3JwPMrLxU7y+xu PqZfDY3L09Ijxfr1qJASc6790ZAqstunnIK90ifCS3mBvpDR3UYmVG2dlviLPMNe QHROBWiDHRPa7kyd9PZHBCrDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUurK7oeE2 AWcK5tlviKtqMU9GdJ0wHwYDVR0jBBgwFoAUP5/J2UIZjEcjNKN+rT3qtQOS6C8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2NzUzLzcyMUJEMzFFMDQ2 NzExRjA4NTdFMTc2M0M0RjlBRTAyL1A1X0oyVUlaakVjak5LTi1yVDNxdFFPUzZD OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUDVfSjJVSVpqRWNqTktOLXJUM3F0UU9TNkM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2 NzUzLzcyMUJEMzFFMDQ2NzExRjA4NTdFMTc2M0M0RjlBRTAyL1A1X0oyVUlaakVj ak5LTi1yVDNxdFFPUzZDOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJh/uO2mdTswG6XVbL33BnI4wl+LFz0fOr6xVPwklEF0LjwA9o0I391p hoTYqqEZkM9wLVeJHdnfE6nx4/CIOzS4FR9IQQDVu4vcx8nLjn4odGK53nEulgxl m22oLVzPt1jPv71MG9nR+lf8gBPXOPxQ3vzALeQh7/0G5qjdcJMkzzCpYBe2wd+X mKdfSP8WFEIJ1bjlYfTGmhXHohZiaTzivFXJzFT0hoAatz+B592MuC4lNwoioDMx O0JgGVQfr64Dyz24co5rbtVGsh5l5X7+xNnDcg2dSiYEvB/RTM9OUb5BHXkMryRx Rhb52wBopSPjZxGkVaJ6Plvh2glRMPg= -----END CERTIFICATE-----Generated at Fri Apr 18 20:43:16 2025 by rpki-client