$ rpki-client -vvf rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft File: _5I0f11UaIEf0lOki_xp_lcKpFA.mft (raw, json) Hash identifier: Cjj6DMWJykUDsxjk/WB6coJgvrjNS3EZCKimA4f8gh0= Subject key identifier: A7:A4:13:28:A0:3E:50:D6:FD:8B:FB:73:23:2B:EC:C7:AC:09:B9:F0 Authority key identifier: FF:92:34:7F:5D:54:68:81:1F:D2:53:A4:8B:FC:69:FE:57:0A:A4:50 Certificate issuer: /CN=A9191769/serialNumber=FF92347F5D5468811FD253A48BFC69FE570AA450 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft Manifest number: 68 Signing time: Mon 07 Apr 2025 05:48:15 +0000 Manifest this update: Mon 07 Apr 2025 05:48:15 +0000 Manifest next update: Mon 14 Apr 2025 05:48:15 +0000 Files and hashes: 1: _5I0f11UaIEf0lOki_xp_lcKpFA.crl (hash: OMRX3BE1NEIfNH6xLaCxPwzQqTILdfbAK6t6YfTRq+c=) 2: 4D36C07677C311EF84D38A3BC4F9AE02.roa (hash: 6DTPGl0cK90vpMXpajrInMal5HqM8aVrjHYhHLus/gk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.crl rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 05:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191769 Validity Not Before: Apr 7 05:48:15 2025 GMT Not After : Apr 14 05:48:15 2025 GMT Subject: CN=67f3671f-e78e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8c:24:84:0b:b3:a2:f3:bb:ba:71:0e:52:a3: be:cb:72:4b:13:97:4d:81:a3:b7:a4:57:a2:2c:e6: 7a:5a:c1:a5:d5:9a:69:73:b0:7c:e0:1f:f3:30:0c: 1a:ae:be:99:51:7a:73:fa:fc:54:8c:12:56:74:d3: 15:99:1d:7d:64:46:7a:af:41:68:fd:07:fc:e5:52: de:fe:f4:dd:46:67:c7:ac:4c:7d:9d:83:c3:cc:22: b6:45:4e:27:ee:0b:88:07:24:7e:ec:c6:1b:72:72: dd:d4:f8:c4:62:f1:33:36:56:70:84:60:44:41:57: 8e:a0:80:89:3d:35:44:21:a8:aa:49:df:28:86:00: cc:be:32:63:0e:4c:cb:ef:c6:ef:99:66:9d:cc:dc: b9:c1:1a:d3:58:03:93:77:32:4f:7d:f0:28:5c:e5: bd:34:e0:2c:8a:a8:8c:4e:73:a4:6d:eb:de:12:1c: 8e:d5:7f:c5:8a:1d:ba:90:6f:25:b2:5b:d1:42:26: f6:ae:14:05:d1:48:25:92:6c:5f:c8:19:06:87:72: 54:7d:a1:95:dd:c5:50:5e:ad:89:dc:d7:83:53:fb: 2f:15:d4:b1:26:8b:b5:f9:c8:df:28:76:63:04:c8: f3:2a:31:8f:8c:07:be:4f:8e:2b:88:b4:b7:d5:af: b5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A4:13:28:A0:3E:50:D6:FD:8B:FB:73:23:2B:EC:C7:AC:09:B9:F0 X509v3 Authority Key Identifier: keyid:FF:92:34:7F:5D:54:68:81:1F:D2:53:A4:8B:FC:69:FE:57:0A:A4:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:5b:99:c2:a4:14:8d:cc:f8:c2:a2:83:24:a2:27:9c:40:f3: c1:9c:a0:9e:5f:22:e8:1e:07:e2:68:3b:be:83:b1:ab:a4:bf: 9f:c8:a7:c1:c4:ad:d8:b1:4d:04:b5:93:f5:3a:ae:7d:3e:93: fb:b0:46:d5:3d:16:2a:04:7f:0a:cc:ae:07:cb:66:0e:de:3f: 5a:f5:7e:ca:5d:4e:89:65:b1:11:77:d9:73:8f:08:c6:70:e8: 0e:1a:38:8a:86:f1:b4:35:94:75:3f:67:ce:3d:5e:75:0d:a3: 63:1b:f4:d3:fb:0e:24:ca:d6:55:b5:7a:79:9e:60:cd:b0:b6: fa:d3:dd:02:20:a9:20:d7:da:f9:c8:d6:96:cb:c3:80:ef:8e: 47:51:c8:f2:5b:c3:88:7f:fc:b6:6c:a2:1c:37:4b:a0:f5:13: 7a:6c:66:44:1c:86:ef:f1:43:c3:c0:a4:a4:65:da:85:83:dd: 4b:2b:5b:a4:d3:67:6d:7e:ba:99:3f:a2:ea:7a:d0:68:47:52: b9:97:73:ed:41:a2:5b:fe:b7:bd:d4:34:ca:ef:72:47:46:1f: df:5f:1c:4a:db:a7:06:9d:73:9c:b1:52:ec:e2:9d:0f:a3:93: 5e:10:88:97:a3:9d:79:39:f0:60:02:4e:cc:8d:3a:39:2b:6d: 7d:5c:85:36 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MTc2OTExMC8GA1UEBRMoRkY5MjM0N0Y1RDU0Njg4MTFGRDI1M0E0OEJGQzY5RkU1 NzBBQTQ1MDAeFw0yNTA0MDcwNTQ4MTVaFw0yNTA0MTQwNTQ4MTVaMBgxFjAUBgNV BAMTDTY3ZjM2NzFmLWU3OGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbjCSEC7Oi87u6cQ5So77LcksTl02Bo7ekV6Is5npawaXVmmlzsHzgH/MwDBqu vplRenP6/FSMElZ00xWZHX1kRnqvQWj9B/zlUt7+9N1GZ8esTH2dg8PMIrZFTifu C4gHJH7sxhtyct3U+MRi8TM2VnCEYERBV46ggIk9NUQhqKpJ3yiGAMy+MmMOTMvv xu+ZZp3M3LnBGtNYA5N3Mk998Chc5b004CyKqIxOc6Rt694SHI7Vf8WKHbqQbyWy W9FCJvauFAXRSCWSbF/IGQaHclR9oZXdxVBerYnc14NT+y8V1LEmi7X5yN8odmME yPMqMY+MB75PjiuItLfVr7UJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUp6QTKKA+ UNb9i/tzIyvsx6wJufAwHwYDVR0jBBgwFoAU/5I0f11UaIEf0lOki/xp/lcKpFAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxNzY5L0QyNkREREIwNzdC RTExRUY5RjJBNDU0N0M0RjlBRTAyL181STBmMTFVYUlFZjBsT2tpX3hwX2xjS3BG QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvXzVJMGYxMVVhSUVmMGxPa2lfeHBfbGNLcEZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx NzY5L0QyNkREREIwNzdCRTExRUY5RjJBNDU0N0M0RjlBRTAyL181STBmMTFVYUlF ZjBsT2tpX3hwX2xjS3BGQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMFbmcKkFI3M+MKigySiJ5xA88GcoJ5fIugeB+JoO76Dsaukv5/Ip8HE rdixTQS1k/U6rn0+k/uwRtU9FioEfwrMrgfLZg7eP1r1fspdTollsRF32XOPCMZw 6A4aOIqG8bQ1lHU/Z849XnUNo2Mb9NP7DiTK1lW1enmeYM2wtvrT3QIgqSDX2vnI 1pbLw4DvjkdRyPJbw4h//LZsohw3S6D1E3psZkQchu/xQ8PApKRl2oWD3UsrW6TT Z21+upk/oup60GhHUrmXc+1Bolv+t73UNMrvckdGH99fHErbpwadc5yxUuzinQ+j k14QiJejnXk58GACTsyNOjkrbX1chTY= -----END CERTIFICATE-----Generated at Wed Apr 9 02:13:47 2025 by rpki-client