$ rpki-client -vvf rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft File: hELcRgJABgEa1c9IzX5MSLuXoR4.mft (raw, json) Hash identifier: 2EtKAsjZZ3eUrWkOG7nNmiolLptR9gVxeXO+k4fbWqI= Subject key identifier: 70:73:11:76:4D:D7:D2:55:C3:A9:C3:B7:D5:0C:1B:C5:2E:ED:94:01 Authority key identifier: 84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E Certificate issuer: /CN=A9153134/serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft Manifest number: A5 Signing time: Fri 25 Apr 2025 05:30:17 +0000 Manifest this update: Fri 25 Apr 2025 05:30:15 +0000 Manifest next update: Fri 02 May 2025 05:30:15 +0000 Files and hashes: 1: hELcRgJABgEa1c9IzX5MSLuXoR4.crl (hash: xiabKxTUmntr8aGoczc8nhqsCm1stDsC6Co1pdGnW/s=) 2: F32DDE98545411EFA3BC6B2BC4F9AE02.roa (hash: jlXohEw0btRgU9kVspXT8+fcohZF13SEjwBaXsRZEVQ=) 3: F3B36C48545411EFA3BC6B2BC4F9AE02.roa (hash: XyZFxo5dk/YKYCu8Vu1hnlg71wL2V/Va24kQXoHz5hE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:30:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153134, serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E Validity Not Before: Apr 25 05:30:15 2025 GMT Not After : May 2 05:30:15 2025 GMT Subject: CN=680b1de8-5b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f3:93:d2:ca:34:e4:29:90:b2:38:fa:ac:fd: 80:a3:84:1e:75:f1:29:46:76:6a:83:3f:de:ec:1c: 7c:d8:ab:c1:fc:fa:35:47:75:8e:df:97:9d:61:33: 3d:50:3e:6b:27:56:09:7f:89:90:98:18:9f:84:6b: 3f:bc:32:40:68:69:57:a4:93:e9:a5:40:85:99:b3: f9:37:d3:e5:1c:04:6c:c3:d9:5e:e3:df:64:1a:5c: 2a:96:4e:4e:3c:85:72:c2:5f:9a:09:2a:6d:bc:48: 39:e4:47:40:06:c6:ad:83:57:a2:ce:44:b7:79:83: 44:35:16:16:1b:a7:ec:33:c3:38:a2:5e:ab:9d:b5: b0:3c:42:9f:2e:dc:56:81:f0:1e:a4:33:b1:00:72: fc:d2:96:66:88:33:86:a1:a1:48:cd:34:1b:b4:11: 98:57:a2:09:3a:02:0f:be:e2:f8:f4:72:01:5f:cb: 0d:b5:72:4f:85:dd:bb:a4:62:4f:83:1d:32:36:9e: 22:4d:db:7e:1a:72:f1:2d:02:4f:31:12:0a:34:da: 55:51:0d:5f:38:29:51:cf:63:92:0b:13:3f:42:ef: 9f:85:1d:2a:fe:92:ac:2e:71:f7:e4:0d:d6:64:81: f6:60:86:ff:07:69:95:94:ab:0b:e3:28:e2:81:02: b9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:73:11:76:4D:D7:D2:55:C3:A9:C3:B7:D5:0C:1B:C5:2E:ED:94:01 X509v3 Authority Key Identifier: keyid:84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ce:d7:5e:25:ca:1f:da:0c:44:1f:08:2e:39:67:b4:77:b3: ab:3c:08:29:27:69:64:79:7c:18:07:de:9f:33:d8:3b:13:77: 52:ec:f4:3f:2a:2e:ee:aa:1f:48:90:73:f6:b7:4d:ff:85:26: f1:c0:8a:75:15:88:7a:09:56:27:43:41:3a:1d:ed:10:fe:9e: 00:59:c2:99:48:7c:b4:5a:0a:39:e4:8d:90:34:c3:c1:01:7a: 0b:82:67:d6:c6:af:89:53:d6:e8:65:da:1f:a8:b1:e7:cb:1c: 48:d0:de:5e:ad:ad:30:2e:0d:dc:da:7b:fd:c9:f8:12:d2:46: c8:e7:06:3b:13:cd:d2:f3:00:0c:c6:10:81:1e:07:8d:fa:d3: cb:a4:78:1c:b3:f9:76:db:ac:54:21:80:44:19:41:9a:61:70: 84:83:03:17:89:f8:17:52:ec:eb:4b:c6:e6:20:ca:c5:05:95: f0:48:a6:8e:2b:4e:e4:1a:16:fa:a2:46:a3:4e:22:8c:fa:5e: 80:67:62:75:87:be:0f:c3:b3:9d:9a:bd:0e:27:e7:11:83:75: a8:e1:11:ac:c4:64:3e:db:22:81:22:86:b9:ff:6a:13:fe:08: 3d:00:db:7d:3a:58:6e:30:cf:5c:b8:ea:9c:60:14:8e:72:68: 8d:d8:27:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTMxMzQxMTAvBgNVBAUTKDg0NDJEQzQ2MDI0MDA2MDExQUQ1Q0Y0OENEN0U0QzQ4 QkI5N0ExMUUwHhcNMjUwNDI1MDUzMDE1WhcNMjUwNTAyMDUzMDE1WjAYMRYwFAYD VQQDEw02ODBiMWRlOC01Yjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/OT0so05CmQsjj6rP2Ao4QedfEpRnZqgz/e7Bx82KvB/Po1R3WO35edYTM9 UD5rJ1YJf4mQmBifhGs/vDJAaGlXpJPppUCFmbP5N9PlHARsw9le499kGlwqlk5O PIVywl+aCSptvEg55EdABsatg1eizkS3eYNENRYWG6fsM8M4ol6rnbWwPEKfLtxW gfAepDOxAHL80pZmiDOGoaFIzTQbtBGYV6IJOgIPvuL49HIBX8sNtXJPhd27pGJP gx0yNp4iTdt+GnLxLQJPMRIKNNpVUQ1fOClRz2OSCxM/Qu+fhR0q/pKsLnH35A3W ZIH2YIb/B2mVlKsL4yjigQK53QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHBzEXZN 19JVw6nDt9UMG8Uu7ZQBMB8GA1UdIwQYMBaAFIRC3EYCQAYBGtXPSM1+TEi7l6Ee MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzEzNC9FNjVGQThBMDU0 NTMxMUVGOEFENzc0MDlDNEY5QUUwMi9oRUxjUmdKQUJnRWExYzlJelg1TVNMdVhv UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFTGNSZ0pBQmdFYTFjOUl6WDVNU0x1WG9SNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzEzNC9FNjVGQThBMDU0NTMxMUVGOEFENzc0MDlDNEY5QUUwMi9oRUxjUmdKQUJn RWExYzlJelg1TVNMdVhvUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOztdeJcof2gxEHwguOWe0d7OrPAgpJ2lkeXwYB96fM9g7E3dS7PQ/ Ki7uqh9IkHP2t03/hSbxwIp1FYh6CVYnQ0E6He0Q/p4AWcKZSHy0Wgo55I2QNMPB AXoLgmfWxq+JU9boZdofqLHnyxxI0N5era0wLg3c2nv9yfgS0kbI5wY7E83S8wAM xhCBHgeN+tPLpHgcs/l226xUIYBEGUGaYXCEgwMXifgXUuzrS8bmIMrFBZXwSKaO K07kGhb6okajTiKM+l6AZ2J1h74Pw7Odmr0OJ+cRg3Wo4RGsxGQ+2yKBIoa5/2oT /gg9ANt9OlhuMM9cuOqcYBSOcmiN2Cd4 -----END CERTIFICATE-----Generated at Sat Apr 26 04:34:12 2025 by rpki-client