$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft File: vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft (raw, json) Hash identifier: U+0r6QL9TFRxOVaDdCiRcsXurU7EaFPlkG4/1VsNcVk= Subject key identifier: D7:8B:F8:07:AE:E8:0F:E7:7A:EC:80:78:62:52:BB:14:AE:79:54:76 Authority key identifier: BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62 Certificate issuer: /CN=A9186B80/serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762 Certificate serial: 04E6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft Manifest number: 04DD Signing time: Fri 04 Apr 2025 23:52:50 +0000 Manifest this update: Fri 04 Apr 2025 23:52:49 +0000 Manifest next update: Fri 11 Apr 2025 23:52:49 +0000 Files and hashes: 1: vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl (hash: FcL0lVKzd9KlTy/pF9WFFXK+cjIrUxDb7JUuPI7I8Jc=) 2: 84FBDFD219ED11ECB996CC4FC4F9AE02.roa (hash: gwgFiEpnmvWDubyXGZfYc9G6qjC4Kh/nDliGbejgryA=) 3: 9B741CFE0C3411EDB8619843C4F9AE02.roa (hash: oJYEoaEThRMxBGvil27GsNiveOB+RhewFzQDnOZyafM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1254 (0x4e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186B80 Validity Not Before: Apr 4 23:52:49 2025 GMT Not After : Apr 11 23:52:49 2025 GMT Subject: CN=67f070d2-4c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5d:46:c0:d3:ee:b8:4d:c5:93:09:8c:49:33: 6c:9c:71:37:dd:44:6d:3a:24:54:4c:d8:da:a9:0f: 44:6b:41:7d:9e:89:13:00:cc:ca:df:91:ef:f3:92: 15:ea:29:0d:8f:6c:0d:94:d5:71:60:86:72:e9:e3: e9:b6:8d:6c:0d:5e:52:db:7e:18:0f:ab:08:03:69: 5c:cd:b9:56:51:1c:63:69:3d:94:aa:3b:0b:0f:48: 13:42:cf:f7:53:53:ea:84:6f:f9:23:ef:1b:58:52: 97:d3:da:d7:80:eb:28:e0:26:40:10:00:bc:97:f8: ae:29:81:d2:a7:2c:00:2b:bf:1c:d1:69:af:8c:11: 91:94:b2:58:9c:8c:8d:09:c1:45:68:22:76:fe:34: e5:51:9a:10:d1:10:9d:21:79:e4:d5:59:62:aa:c3: 57:2f:dc:1a:a0:bf:11:75:6b:46:4a:17:17:55:34: a8:13:fe:46:10:14:23:81:e7:e3:0d:21:b8:e9:8d: 5e:5c:7d:ae:3f:b4:be:d4:fa:7b:03:5d:8e:a0:70: 7f:28:85:af:41:67:5f:f3:d1:0d:17:c6:48:e4:e9: ad:c3:31:90:fd:20:4d:5a:16:17:82:96:8c:4a:19: 7c:92:2e:fb:27:bd:5a:5e:f9:14:f6:d9:95:25:f4: 02:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:8B:F8:07:AE:E8:0F:E7:7A:EC:80:78:62:52:BB:14:AE:79:54:76 X509v3 Authority Key Identifier: keyid:BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:d5:08:a5:5c:9a:5f:3c:47:33:46:4f:be:73:09:0a:e9:57: d3:ab:5b:04:dc:9c:91:bc:c2:7f:38:f7:43:20:4b:7d:93:32: 43:cf:8c:a1:18:15:8b:5b:a6:e2:2c:c0:37:65:4a:30:9e:68: 3e:4f:d6:88:5c:06:a6:d5:d4:3b:59:11:ce:e0:8e:da:33:51: c3:aa:0a:cb:88:50:ee:f9:de:3a:f7:f0:3a:e8:15:ce:d2:ef: 5b:05:20:80:7d:fc:ed:01:3f:3a:88:3a:5d:71:bd:d9:69:5c: 40:28:a6:86:9b:d1:66:74:9b:3b:4d:7e:46:b7:d7:d4:4e:b9: 15:3b:ac:d0:f6:ac:73:ad:64:93:db:1a:ae:7b:b5:fe:94:fd: 11:fe:ec:73:6f:64:47:1f:cd:3e:b1:0f:f9:3c:fb:f2:71:e0: 5a:17:db:23:57:ee:e4:76:87:3b:33:c1:f0:9c:c3:9c:c2:f1: c4:78:85:9b:59:f4:7a:75:88:aa:e3:22:e5:d9:6c:b5:95:31: 75:54:1c:9f:ca:62:16:eb:d4:4f:eb:ff:e1:e9:68:0c:8c:60: 11:67:08:0d:3f:c5:d4:0c:93:85:59:d3:73:32:1c:d7:f4:0e: 35:0c:ef:21:40:8e:ce:a3:3b:fe:b0:ee:99:e1:bb:6b:5e:2f: a4:78:bc:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZCODAxMTAvBgNVBAUTKEJEMUU3RTY0MUZGRDk2RDU3NDYxNTVGQzQyMUIxN0RE QzFBQTc3NjIwHhcNMjUwNDA0MjM1MjQ5WhcNMjUwNDExMjM1MjQ5WjAYMRYwFAYD VQQDEw02N2YwNzBkMi00YzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu11GwNPuuE3FkwmMSTNsnHE33URtOiRUTNjaqQ9Ea0F9nokTAMzK35Hv85IV 6ikNj2wNlNVxYIZy6ePpto1sDV5S234YD6sIA2lczblWURxjaT2UqjsLD0gTQs/3 U1PqhG/5I+8bWFKX09rXgOso4CZAEAC8l/iuKYHSpywAK78c0WmvjBGRlLJYnIyN CcFFaCJ2/jTlUZoQ0RCdIXnk1VliqsNXL9waoL8RdWtGShcXVTSoE/5GEBQjgefj DSG46Y1eXH2uP7S+1Pp7A12OoHB/KIWvQWdf89ENF8ZI5OmtwzGQ/SBNWhYXgpaM Shl8ki77J71aXvkU9tmVJfQCIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNeL+Aeu 6A/neuyAeGJSuxSueVR2MB8GA1UdIwQYMBaAFL0efmQf/ZbVdGFV/EIbF93Bqndi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkI4MC9BRTZBQTFCNDEy M0IxMUVDOEExMzVGNDJDNEY5QUUwMi92UjUtWkJfOWx0VjBZVlg4UWhzWDNjR3Fk MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZSNS1aQl85bHRWMFlWWDhRaHNYM2NHcWQySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkI4MC9BRTZBQTFCNDEyM0IxMUVDOEExMzVGNDJDNEY5QUUwMi92UjUtWkJfOWx0 VjBZVlg4UWhzWDNjR3FkMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB1QilXJpfPEczRk++cwkK6VfTq1sE3JyRvMJ/OPdDIEt9kzJDz4yh GBWLW6biLMA3ZUownmg+T9aIXAam1dQ7WRHO4I7aM1HDqgrLiFDu+d469/A66BXO 0u9bBSCAffztAT86iDpdcb3ZaVxAKKaGm9FmdJs7TX5Gt9fUTrkVO6zQ9qxzrWST 2xque7X+lP0R/uxzb2RHH80+sQ/5PPvyceBaF9sjV+7kdoc7M8HwnMOcwvHEeIWb WfR6dYiq4yLl2Wy1lTF1VByfymIW69RP6//h6WgMjGARZwgNP8XUDJOFWdNzMhzX 9A41DO8hQI7Oozv+sO6Z4btrXi+keLzM -----END CERTIFICATE-----Generated at Sat Apr 5 22:17:24 2025 by rpki-client