$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft File: pDc5u18gwUzF_EnjdVh9s7ciN68.mft (raw, json) Hash identifier: pjziWK3pQ/ifj5az2x7MWj5YuYPupr1q3j/rMnEawws= Subject key identifier: EE:5E:82:2A:18:FC:BC:52:B2:D6:A2:94:FE:FB:00:ED:6A:D0:A8:39 Authority key identifier: A4:37:39:BB:5F:20:C1:4C:C5:FC:49:E3:75:58:7D:B3:B7:22:37:AF Certificate issuer: /CN=A9172B7E/serialNumber=A43739BB5F20C14CC5FC49E375587DB3B72237AF Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft Manifest number: 0154 Signing time: Sat 31 May 2025 03:54:22 +0000 Manifest this update: Sat 31 May 2025 03:54:21 +0000 Manifest next update: Sat 07 Jun 2025 03:54:21 +0000 Files and hashes: 1: pDc5u18gwUzF_EnjdVh9s7ciN68.crl (hash: ZuiSq+7Hhl2fE9hrkqXZvUZ89PK7pMr/WxUuumyzaGU=) 2: BF341AF869A911EE8CB76452C4F9AE02.roa (hash: es2BFpk/dVqzh/KiV65lQ+0ASQp0lQtHLBsKiiObL58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.crl rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:54:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B7E, serialNumber=A43739BB5F20C14CC5FC49E375587DB3B72237AF Validity Not Before: May 31 03:54:21 2025 GMT Not After : Jun 7 03:54:21 2025 GMT Subject: CN=683a7d6e-0415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c8:e8:ac:fb:e0:7e:38:af:17:b7:4a:2b:3b: 91:3d:76:43:73:7e:5a:7d:46:5b:e3:f2:ec:da:96: b9:5e:7a:83:87:1f:33:0e:07:95:9e:b0:c0:16:bc: 8a:da:dc:ad:8b:87:2f:7c:38:a7:8d:fe:10:74:c2: 3b:9b:da:c9:df:60:36:d4:1f:93:ff:2b:cb:40:97: fd:7c:31:19:01:b9:de:cc:27:91:2b:ee:6a:88:c2: 10:36:bc:2f:21:32:7a:1c:69:40:e1:00:05:ce:b6: 42:dc:36:5e:89:1d:b8:d8:40:d4:f1:cf:da:af:c3: 38:0c:76:7a:97:42:ef:70:f4:fd:69:72:43:82:a8: 0c:f3:0a:b0:b0:28:67:a7:71:fb:fa:4e:44:a8:c4: 21:e9:30:4b:8a:f0:65:48:ce:16:27:6f:4a:3a:2b: 9f:e2:1c:98:e1:42:d6:3e:fc:f4:01:09:1a:bc:a6: 45:64:04:f9:b7:f9:c3:8d:7b:69:8d:68:c9:cf:46: 3b:9f:7f:b3:43:d2:91:c5:0f:9b:fd:19:b0:6b:79: 39:16:de:db:d9:2b:28:d2:8d:94:a7:17:89:93:22: 06:95:48:0b:72:a2:b9:8b:ad:7f:fd:95:8d:07:19: b2:cc:b3:f1:24:83:a5:15:d5:90:91:bf:95:02:fa: 73:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:5E:82:2A:18:FC:BC:52:B2:D6:A2:94:FE:FB:00:ED:6A:D0:A8:39 X509v3 Authority Key Identifier: keyid:A4:37:39:BB:5F:20:C1:4C:C5:FC:49:E3:75:58:7D:B3:B7:22:37:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:ce:bb:89:46:01:8a:9a:11:b7:99:25:cf:41:81:1b:2f:2a: b2:a1:0f:06:a7:67:48:5e:e5:d8:c7:cb:39:11:58:72:53:3a: 1b:c5:b4:98:55:d5:07:0d:0b:2f:d7:57:f3:4d:1c:6d:5f:d6: 83:10:79:ac:20:b0:0d:8d:ba:99:bb:40:e4:a5:31:a1:ee:ba: eb:81:eb:43:0b:5d:3f:2f:41:fb:7c:9d:ff:cb:61:c5:30:00: 37:5a:ea:86:49:e1:2e:b8:4d:8c:c8:ab:c7:a3:30:6d:7f:0d: d8:91:11:c8:4c:e6:75:d3:98:03:9a:1f:eb:f4:3a:19:4c:6d: 91:a7:8f:3d:2b:20:03:b5:c1:5f:64:7a:03:3a:bc:e5:21:87: 74:2f:43:d1:e1:3d:6d:5a:52:f8:7d:e3:52:74:97:e6:d5:2c: 33:18:f5:fc:43:4d:2d:5f:d6:15:5a:44:c8:38:66:3e:a1:61: 3c:21:66:47:15:31:ac:51:4c:18:df:54:da:bd:7e:bf:f6:57: 25:64:4d:f3:8f:dd:78:f3:5c:06:5d:c8:0e:32:00:61:1e:5f: a4:d2:f6:24:97:45:b1:df:0b:99:1f:d3:f3:58:2e:1a:93:d2: 3a:67:be:da:db:52:66:9d:c0:13:99:41:87:e7:02:23:e0:5f: a3:6a:41:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCN0UxMTAvBgNVBAUTKEE0MzczOUJCNUYyMEMxNENDNUZDNDlFMzc1NTg3REIz QjcyMjM3QUYwHhcNMjUwNTMxMDM1NDIxWhcNMjUwNjA3MDM1NDIxWjAYMRYwFAYD VQQDEw02ODNhN2Q2ZS0wNDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1sjorPvgfjivF7dKKzuRPXZDc35afUZb4/Ls2pa5XnqDhx8zDgeVnrDAFryK 2tyti4cvfDinjf4QdMI7m9rJ32A21B+T/yvLQJf9fDEZAbnezCeRK+5qiMIQNrwv ITJ6HGlA4QAFzrZC3DZeiR242EDU8c/ar8M4DHZ6l0LvcPT9aXJDgqgM8wqwsChn p3H7+k5EqMQh6TBLivBlSM4WJ29KOiuf4hyY4ULWPvz0AQkavKZFZAT5t/nDjXtp jWjJz0Y7n3+zQ9KRxQ+b/Rmwa3k5Ft7b2Sso0o2UpxeJkyIGlUgLcqK5i61//ZWN BxmyzLPxJIOlFdWQkb+VAvpzjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO5egioY /LxSstailP77AO1q0Kg5MB8GA1UdIwQYMBaAFKQ3ObtfIMFMxfxJ43VYfbO3Ijev MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI3RS83M0JDN0FBQzQ3 MTcxMUVFQTQ0NkUzNDZDNEY5QUUwMi9wRGM1dTE4Z3dVekZfRW5qZFZoOXM3Y2lO NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BEYzV1MThnd1V6Rl9FbmpkVmg5czdjaU42OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkI3RS83M0JDN0FBQzQ3MTcxMUVFQTQ0NkUzNDZDNEY5QUUwMi9wRGM1dTE4Z3dV ekZfRW5qZFZoOXM3Y2lONjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHzruJRgGKmhG3mSXPQYEbLyqyoQ8Gp2dIXuXYx8s5EVhyUzobxbSY VdUHDQsv11fzTRxtX9aDEHmsILANjbqZu0DkpTGh7rrrgetDC10/L0H7fJ3/y2HF MAA3WuqGSeEuuE2MyKvHozBtfw3YkRHITOZ105gDmh/r9DoZTG2Rp489KyADtcFf ZHoDOrzlIYd0L0PR4T1tWlL4feNSdJfm1SwzGPX8Q00tX9YVWkTIOGY+oWE8IWZH FTGsUUwY31TavX6/9lclZE3zj91481wGXcgOMgBhHl+k0vYkl0Wx3wuZH9PzWC4a k9I6Z77a21JmncATmUGH5wIj4F+jakFB -----END CERTIFICATE-----Generated at Sat May 31 17:54:53 2025 by rpki-client