$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft File: P5liYas9HvBBZhs6732JMrVwJjc.mft (raw, json) Hash identifier: 1SxXaApNosvy7gMQwx0wd/zbhBPe9Mb77mPa3IIaeHQ= Subject key identifier: 49:3B:17:FD:77:85:9B:16:6D:83:75:BC:38:F3:89:E6:0D:A8:F8:4F Authority key identifier: 3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37 Certificate issuer: /CN=A91DC2A9/serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637 Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft Manifest number: 0146 Signing time: Wed 09 Apr 2025 03:21:39 +0000 Manifest this update: Wed 09 Apr 2025 03:21:39 +0000 Manifest next update: Wed 16 Apr 2025 03:21:39 +0000 Files and hashes: 1: P5liYas9HvBBZhs6732JMrVwJjc.crl (hash: NJEH/ZLicv+bkqh0wuzrVWuYmw6I4ijHlVLSLv3GS4Y=) 2: 9908BDDE1CAA11EF80E3BB87C4F9AE02.roa (hash: 0UTp5Ayv/ftDBInci/moVW1XbBA3xfvlEMb4Bw4foQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 03:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC2A9 Validity Not Before: Apr 9 03:21:39 2025 GMT Not After : Apr 16 03:21:39 2025 GMT Subject: CN=67f5e7c3-1b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:70:df:17:b5:bc:c2:a3:c9:af:27:a4:ce:a6: 57:d9:39:e7:a2:56:48:c7:6e:16:eb:c9:3a:3d:dc: 81:49:49:de:e3:bd:e7:b2:5a:75:9d:7b:a4:2b:d1: 97:21:61:3c:a2:e7:9c:02:12:5c:4d:a2:13:da:11: 82:4d:18:d1:c1:4e:a2:cb:fd:33:5f:13:2e:78:6f: fa:ce:49:9f:3b:e9:58:51:b7:b0:77:44:54:5b:f1: 40:ea:b1:6a:2c:f1:37:87:5d:90:92:87:c9:35:30: 46:1c:76:a5:d4:d2:f8:81:00:32:18:b1:29:5f:eb: 93:88:01:7a:5a:e7:de:c7:60:7d:4e:5a:4b:52:cb: 5b:ea:a6:d7:82:b3:71:b7:d5:bb:f0:03:39:ef:8b: 38:50:36:d9:5d:0e:18:61:bd:02:30:bc:01:56:c0: 27:81:ef:32:88:a5:c6:c2:2e:61:68:ce:68:d7:12: 72:79:82:ab:d5:1e:98:5d:cc:f7:32:17:6e:41:45: f3:33:b6:29:5d:df:3b:24:91:a7:0d:a1:d4:29:9e: ad:9f:c8:cd:67:da:fd:da:c6:31:6f:6e:e2:ff:f8: fb:c1:83:49:6d:68:42:05:75:01:f4:a3:c1:77:04: c3:51:a6:7c:e2:ed:be:8a:14:54:5a:b7:26:20:1b: 88:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:3B:17:FD:77:85:9B:16:6D:83:75:BC:38:F3:89:E6:0D:A8:F8:4F X509v3 Authority Key Identifier: keyid:3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:b2:f6:7a:76:63:05:00:55:c1:68:f0:eb:b2:b3:90:28:21: f7:ee:63:b1:1c:a3:63:1b:d6:94:9c:4c:bd:b0:87:63:55:99: ed:ff:50:df:14:f5:5d:61:2c:d0:ed:d0:d4:22:06:05:23:f2: 5a:d0:26:d1:ff:5c:ce:12:fd:02:94:25:b0:2a:9f:d4:2b:0f: 95:34:ba:8e:60:fc:4a:9b:7a:97:6d:06:50:f2:29:e8:15:ce: 0d:97:64:83:67:8c:5d:7b:ff:d1:5c:e4:fe:df:ee:9c:d3:68: 85:5e:45:12:25:04:01:7f:9a:ce:3f:ff:3c:f4:3c:f6:f6:53: 3d:82:1d:80:89:ac:66:cb:f1:b2:69:a8:05:ac:06:2e:47:31: 54:e1:93:6e:89:1c:e4:aa:fc:ad:06:b8:c6:1a:65:c9:85:98: dd:e3:c8:cc:29:44:40:05:fa:0f:a6:1c:0f:a8:66:32:98:40: 1b:6b:47:4d:70:84:70:65:c8:50:de:9e:cb:2d:91:a8:60:d7: 3a:e9:b1:ae:05:59:b9:08:ec:d8:58:7c:7a:a1:03:bf:3d:ce: 69:2c:2b:50:b5:b0:2c:44:98:11:ae:dc:91:70:6d:8b:86:d2: 3e:21:c4:c9:15:86:e5:cc:08:cc:9b:70:55:05:c4:81:89:bd: 07:e2:44:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMyQTkxMTAvBgNVBAUTKDNGOTk2MjYxQUIzRDFFRjA0MTY2MUIzQUVGN0Q4OTMy QjU3MDI2MzcwHhcNMjUwNDA5MDMyMTM5WhcNMjUwNDE2MDMyMTM5WjAYMRYwFAYD VQQDEw02N2Y1ZTdjMy0xYjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunDfF7W8wqPJryekzqZX2TnnolZIx24W68k6PdyBSUne473nslp1nXukK9GX IWE8ouecAhJcTaIT2hGCTRjRwU6iy/0zXxMueG/6zkmfO+lYUbewd0RUW/FA6rFq LPE3h12QkofJNTBGHHal1NL4gQAyGLEpX+uTiAF6Wufex2B9TlpLUstb6qbXgrNx t9W78AM574s4UDbZXQ4YYb0CMLwBVsAnge8yiKXGwi5haM5o1xJyeYKr1R6YXcz3 MhduQUXzM7YpXd87JJGnDaHUKZ6tn8jNZ9r92sYxb27i//j7wYNJbWhCBXUB9KPB dwTDUaZ84u2+ihRUWrcmIBuIPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEk7F/13 hZsWbYN1vDjzieYNqPhPMB8GA1UdIwQYMBaAFD+ZYmGrPR7wQWYbOu99iTK1cCY3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzJBOS9EOEREQzFBNjM0 QzYxMUVFQjRFQkIwNzBDNEY5QUUwMi9QNWxpWWFzOUh2QkJaaHM2NzMySk1yVndK amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A1bGlZYXM5SHZCQlpoczY3MzJKTXJWd0pqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzJBOS9EOEREQzFBNjM0QzYxMUVFQjRFQkIwNzBDNEY5QUUwMi9QNWxpWWFzOUh2 QkJaaHM2NzMySk1yVndKamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWsvZ6dmMFAFXBaPDrsrOQKCH37mOxHKNjG9aUnEy9sIdjVZnt/1Df FPVdYSzQ7dDUIgYFI/Ja0CbR/1zOEv0ClCWwKp/UKw+VNLqOYPxKm3qXbQZQ8ino Fc4Nl2SDZ4xde//RXOT+3+6c02iFXkUSJQQBf5rOP/889Dz29lM9gh2Aiaxmy/Gy aagFrAYuRzFU4ZNuiRzkqvytBrjGGmXJhZjd48jMKURABfoPphwPqGYymEAba0dN cIRwZchQ3p7LLZGoYNc66bGuBVm5COzYWHx6oQO/Pc5pLCtQtbAsRJgRrtyRcG2L htI+IcTJFYblzAjMm3BVBcSBib0H4kSO -----END CERTIFICATE-----Generated at Wed Apr 9 22:39:05 2025 by rpki-client