$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft File: -JdCLlAQBtJgHYWlAXlTJrr-c4g.mft (raw, json) Hash identifier: qZM40rtWq1DRIaB3yh1Znv5CX+FMRm/Z4rJkEdG6NSg= Subject key identifier: F8:F2:8B:CB:32:BD:DB:BD:CE:1C:18:E3:37:CE:F9:CC:52:B3:88:C4 Authority key identifier: F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88 Certificate issuer: /CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388 Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft Manifest number: 054E Signing time: Fri 25 Apr 2025 00:12:12 +0000 Manifest this update: Fri 25 Apr 2025 00:12:11 +0000 Manifest next update: Fri 02 May 2025 00:12:11 +0000 Files and hashes: 1: -JdCLlAQBtJgHYWlAXlTJrr-c4g.crl (hash: 4a5fE4mVpzLBrjcfnfKiozmlNNJzOaPuwIu0V903szI=) 2: C5C77866584111EE85E40820C4F9AE02.roa (hash: xKArmrduSBI+gGo62RSF6mCGFoJkOu3mNzVbjwogvU0=) 3: C55784DE584111EE85E40820C4F9AE02.roa (hash: FOhpYe5DK9I/QvT8DCyDAdniDFXXS6XAPszrK91CJRI=) 4: C44DEE8E584111EE85E40820C4F9AE02.roa (hash: 3dgzTKNADS6dTaZ4Dns/R7NlRBp8ohyzR8flEwmQcfM=) 5: 8F60E314584D11EE90C6141EC4F9AE02.roa (hash: Mehq2UCt1CiOt2/FTfT15J6Iwk1nsNkmhPQP9ob7BYA=) 6: C4D7F9DA584111EE85E40820C4F9AE02.roa (hash: JirC+a3hnrfRs218btabHTFrtTd+AmDYvGFRmHD+9Ds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170829, serialNumber=F897422E501006D2601D85A501795326BAFE7388 Validity Not Before: Apr 25 00:12:11 2025 GMT Not After : May 2 00:12:11 2025 GMT Subject: CN=680ad35b-b1c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d2:78:07:7a:45:33:e2:88:9e:f0:b1:cc:26: e1:7b:a5:ad:a9:55:f1:f8:46:a3:5c:7d:dd:d9:96: b9:e5:1f:63:f4:7a:e7:ef:e4:78:6e:2d:ff:0f:8a: 9b:57:d2:18:f7:6c:37:fb:ed:82:fe:e7:93:55:dd: 64:ef:c9:a5:f7:fd:1d:13:55:7b:2a:80:2d:0c:ae: d0:0c:18:58:20:7f:0a:ff:d0:13:39:40:dd:46:2e: b3:d5:14:59:1c:99:81:25:1f:7d:d7:b1:1a:4a:7e: 4e:2c:0f:90:39:ed:32:a7:84:4c:ec:97:ef:8e:65: ce:20:81:63:34:8d:0d:c2:f5:59:4d:a7:0a:9f:92: b2:c4:e9:3f:26:be:38:a3:64:63:c7:19:6f:35:20: 7a:a4:01:29:16:3e:17:7c:5f:71:2e:ed:bf:bd:e2: 8e:9b:4a:c6:ce:23:b0:e7:3e:37:83:6f:c1:e6:55: ea:d8:f4:50:44:f6:f1:80:bc:e3:81:c4:b3:aa:f5: 66:db:1d:ac:3b:d5:85:56:61:eb:eb:04:83:cb:c3: 05:4a:1b:04:24:94:14:39:14:90:95:c0:7a:49:6a: 87:fd:5a:7f:9f:a7:fe:0a:66:b9:05:fc:9a:8e:18: 5f:a9:a2:4d:0e:b5:85:72:67:80:00:53:5b:9a:7e: 61:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F2:8B:CB:32:BD:DB:BD:CE:1C:18:E3:37:CE:F9:CC:52:B3:88:C4 X509v3 Authority Key Identifier: keyid:F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:ed:47:1d:9f:68:9f:34:73:4b:f6:d8:fc:29:3a:29:c9:cb: 4b:be:15:03:9b:b7:ec:64:f5:d5:22:84:ed:bb:d3:ca:00:46: 1c:17:76:e7:5d:30:f3:32:e0:78:f4:35:d8:53:60:bc:60:fe: 91:4a:5a:42:0a:a3:ee:ed:86:6e:52:d6:68:8b:a5:75:8c:f6: 8f:83:a8:ad:55:bb:11:67:d7:fe:6a:c3:01:42:a4:31:09:de: 56:b0:7e:3d:74:dd:99:d7:dd:69:32:37:18:5c:eb:ac:c9:0d: a6:9d:b4:4c:2a:4c:73:78:01:88:29:a0:33:13:46:55:36:de: f5:2a:36:0a:b5:31:3c:bb:ca:3a:5b:6b:21:20:ad:28:40:f8: 61:9e:a4:91:53:23:79:61:0d:8a:64:67:53:2b:2a:d6:df:50: 22:d9:cc:31:b4:e7:1c:8e:8e:52:fb:26:61:3e:d2:0b:2b:1c: dd:47:a8:9b:6a:ea:75:f3:ae:69:f7:db:b5:b9:23:e5:ad:6a: 6b:30:53:62:b7:a0:e1:5e:cf:3f:04:0d:d4:1e:8a:ee:53:07: 86:0b:9d:07:33:af:bf:45:d2:f4:7f:2b:f1:e6:56:5d:9f:f6: ad:22:84:e6:71:f7:12:3f:4e:bc:37:50:53:4e:86:ac:41:0d: 71:ef:ab:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA4MjkxMTAvBgNVBAUTKEY4OTc0MjJFNTAxMDA2RDI2MDFEODVBNTAxNzk1MzI2 QkFGRTczODgwHhcNMjUwNDI1MDAxMjExWhcNMjUwNTAyMDAxMjExWjAYMRYwFAYD VQQDEw02ODBhZDM1Yi1iMWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4NJ4B3pFM+KInvCxzCbhe6WtqVXx+EajXH3d2Za55R9j9Hrn7+R4bi3/D4qb V9IY92w3++2C/ueTVd1k78ml9/0dE1V7KoAtDK7QDBhYIH8K/9ATOUDdRi6z1RRZ HJmBJR9917EaSn5OLA+QOe0yp4RM7JfvjmXOIIFjNI0NwvVZTacKn5KyxOk/Jr44 o2RjxxlvNSB6pAEpFj4XfF9xLu2/veKOm0rGziOw5z43g2/B5lXq2PRQRPbxgLzj gcSzqvVm2x2sO9WFVmHr6wSDy8MFShsEJJQUORSQlcB6SWqH/Vp/n6f+Cma5Bfya jhhfqaJNDrWFcmeAAFNbmn5hPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjyi8sy vdu9zhwY4zfO+cxSs4jEMB8GA1UdIwQYMBaAFPiXQi5QEAbSYB2FpQF5Uya6/nOI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDgyOS83NjY3QkVEMDYz QTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi8tSmRDTGxBUUJ0SmdIWVdsQVhsVEpyci1j NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KZENMbEFRQnRKZ0hZV2xBWGxUSnJyLWM0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDgyOS83NjY3QkVEMDYzQTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi8tSmRDTGxBUUJ0 SmdIWVdsQVhsVEpyci1jNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS7Ucdn2ifNHNL9tj8KTopyctLvhUDm7fsZPXVIoTtu9PKAEYcF3bn XTDzMuB49DXYU2C8YP6RSlpCCqPu7YZuUtZoi6V1jPaPg6itVbsRZ9f+asMBQqQx Cd5WsH49dN2Z191pMjcYXOusyQ2mnbRMKkxzeAGIKaAzE0ZVNt71KjYKtTE8u8o6 W2shIK0oQPhhnqSRUyN5YQ2KZGdTKyrW31Ai2cwxtOccjo5S+yZhPtILKxzdR6ib aup1865p99u1uSPlrWprMFNit6DhXs8/BA3UHoruUweGC50HM6+/RdL0fyvx5lZd n/atIoTmcfcSP068N1BTToasQQ1x76v7 -----END CERTIFICATE-----Generated at Sat Apr 26 09:11:46 2025 by rpki-client