$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft File: 5nV74dIYmt6NdyyclIZDEL45LXA.mft (raw, json) Hash identifier: noE3Gc8CHA2OEvwvZKTlWY5yvSQGGky7p9c0dOSJ3kU= Subject key identifier: 76:62:BB:DB:33:A3:D9:84:EB:0B:72:41:BB:08:02:96:00:D1:0D:13 Authority key identifier: E6:75:7B:E1:D2:18:9A:DE:8D:77:2C:9C:94:86:43:10:BE:39:2D:70 Certificate issuer: /CN=A9111F9E/serialNumber=E6757BE1D2189ADE8D772C9C94864310BE392D70 Certificate serial: 0453 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft Manifest number: 044D Signing time: Thu 24 Apr 2025 23:59:52 +0000 Manifest this update: Thu 24 Apr 2025 23:59:52 +0000 Manifest next update: Thu 01 May 2025 23:59:52 +0000 Files and hashes: 1: 5nV74dIYmt6NdyyclIZDEL45LXA.crl (hash: rLlxTmMz7toGyj4O177TAYWTZVlEohFj3VcPcf6Sy8I=) 2: 2B70BBE889E111EEB5E86A0EC4F9AE02.roa (hash: ii2gJPxNc38H3aArS7srunxvBmsm9HkEFksE6I5LOY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.crl rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:59:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1107 (0x453) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111F9E, serialNumber=E6757BE1D2189ADE8D772C9C94864310BE392D70 Validity Not Before: Apr 24 23:59:52 2025 GMT Not After : May 1 23:59:52 2025 GMT Subject: CN=680ad078-9e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0f:0f:77:73:ac:eb:fa:ef:f6:6e:52:ae:d2: ec:fa:13:39:a8:ed:f3:e5:7f:2a:c7:97:61:2f:0a: 5e:54:07:79:e0:b2:12:c2:43:02:c8:d7:cc:7f:82: ea:7a:d6:1c:02:97:c7:14:fa:b8:49:18:d9:52:45: c6:42:3b:69:f4:d8:83:05:6f:73:5b:f0:9e:cb:8e: 8e:48:8e:56:b3:19:89:c6:22:bf:a0:25:e0:bd:24: 82:06:5f:e1:5b:59:c7:c7:fb:92:30:4d:7c:c2:a9: 5e:bc:54:53:bc:ac:6d:e6:f1:90:9e:08:b0:25:8c: 05:3b:6a:2d:80:43:c9:ef:c6:3f:91:66:c7:e9:0c: a4:54:04:11:b2:89:22:a3:f6:01:06:8a:3f:5c:01: 56:e8:39:74:6c:ce:3e:4d:71:ca:5f:f9:d5:ea:f0: dd:73:94:fe:d0:a0:6a:ec:11:ed:3b:5d:a4:ae:6b: ca:e5:96:95:1c:b9:3e:17:90:d5:22:d9:dd:56:8c: 66:a9:80:22:9b:97:c7:24:a1:5e:fb:75:eb:5c:40: fe:ba:e1:1e:92:0a:79:c1:98:3c:54:ab:de:cf:98: 6a:f3:b5:e5:47:0c:72:f3:17:d6:30:84:7b:7b:a9: 30:2a:4c:fc:33:42:a4:8e:90:a2:92:6a:ce:69:07: 0e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:62:BB:DB:33:A3:D9:84:EB:0B:72:41:BB:08:02:96:00:D1:0D:13 X509v3 Authority Key Identifier: keyid:E6:75:7B:E1:D2:18:9A:DE:8D:77:2C:9C:94:86:43:10:BE:39:2D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d2:48:02:5c:de:d2:69:ec:d5:d6:93:f6:c9:1b:ec:17:6a: fa:2f:78:ff:b9:f7:40:74:b2:70:34:b0:a3:df:d2:84:1c:50: af:cd:dc:13:f6:2f:58:18:c2:4c:68:a3:e9:f6:b6:bb:35:54: 19:d3:77:af:a5:f7:86:53:96:29:a5:91:f7:18:36:03:c7:01: b0:91:71:47:a2:98:ec:16:84:dd:26:ff:77:53:4c:cf:f9:6f: 0c:6b:6e:db:31:f0:6f:1f:14:81:03:59:e8:e5:4c:6b:f1:c7: b6:27:c3:14:7e:60:40:8e:17:14:ad:00:87:f7:91:5c:3f:41: e8:f1:43:af:c3:0d:ca:16:d9:0a:fc:32:7f:6b:45:e8:f7:69: 1c:a9:ee:d0:82:98:e0:23:ba:05:f4:4a:47:a6:2c:bb:84:cf: 3c:90:b8:b2:08:29:a1:83:a1:0c:21:00:f9:5a:f8:c5:40:d8: 52:5e:be:96:b4:45:64:08:3f:80:04:71:a9:0a:08:c1:82:4d: 90:71:aa:a0:d2:af:66:c8:ff:d1:df:45:07:1b:ef:ea:a7:ed: a9:42:6d:04:8f:71:cb:a9:54:f0:e4:14:4b:40:de:16:63:44: f4:36:08:4b:59:d4:4c:35:2e:21:5e:15:08:02:a9:a2:3f:1b: 13:8d:60:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFGOUUxMTAvBgNVBAUTKEU2NzU3QkUxRDIxODlBREU4RDc3MkM5Qzk0ODY0MzEw QkUzOTJENzAwHhcNMjUwNDI0MjM1OTUyWhcNMjUwNTAxMjM1OTUyWjAYMRYwFAYD VQQDEw02ODBhZDA3OC05ZTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4g8Pd3Os6/rv9m5SrtLs+hM5qO3z5X8qx5dhLwpeVAd54LISwkMCyNfMf4Lq etYcApfHFPq4SRjZUkXGQjtp9NiDBW9zW/Cey46OSI5WsxmJxiK/oCXgvSSCBl/h W1nHx/uSME18wqlevFRTvKxt5vGQngiwJYwFO2otgEPJ78Y/kWbH6QykVAQRsoki o/YBBoo/XAFW6Dl0bM4+TXHKX/nV6vDdc5T+0KBq7BHtO12krmvK5ZaVHLk+F5DV ItndVoxmqYAim5fHJKFe+3XrXED+uuEekgp5wZg8VKvez5hq87XlRwxy8xfWMIR7 e6kwKkz8M0KkjpCikmrOaQcORQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZiu9sz o9mE6wtyQbsIApYA0Q0TMB8GA1UdIwQYMBaAFOZ1e+HSGJrejXcsnJSGQxC+OS1w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUY5RS8wMDZDRTk5QzUw MDYxMUVDOTA1NkNENDVDNEY5QUUwMi81blY3NGRJWW10Nk5keXljbElaREVMNDVM WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVuVjc0ZElZbXQ2TmR5eWNsSVpERUw0NUxYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUY5RS8wMDZDRTk5QzUwMDYxMUVDOTA1NkNENDVDNEY5QUUwMi81blY3NGRJWW10 Nk5keXljbElaREVMNDVMWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL0kgCXN7SaezV1pP2yRvsF2r6L3j/ufdAdLJwNLCj39KEHFCvzdwT 9i9YGMJMaKPp9ra7NVQZ03evpfeGU5YppZH3GDYDxwGwkXFHopjsFoTdJv93U0zP +W8Ma27bMfBvHxSBA1no5Uxr8ce2J8MUfmBAjhcUrQCH95FcP0Ho8UOvww3KFtkK /DJ/a0Xo92kcqe7QgpjgI7oF9EpHpiy7hM88kLiyCCmhg6EMIQD5WvjFQNhSXr6W tEVkCD+ABHGpCgjBgk2Qcaqg0q9myP/R30UHG+/qp+2pQm0Ej3HLqVTw5BRLQN4W Y0T0NghLWdRMNS4hXhUIAqmiPxsTjWCe -----END CERTIFICATE-----Generated at Sat Apr 26 17:05:07 2025 by rpki-client