$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft File: 1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft (raw, json) Hash identifier: poqW8j4y1X5z0ZFzAE13rYXbwp7gcyimh4Wp439bA+4= Subject key identifier: 40:56:E9:67:4A:DB:9B:E6:D6:BE:D9:FC:4B:37:95:13:A9:A3:63:77 Authority key identifier: D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57 Certificate issuer: /CN=A9170F11/serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft Manifest number: 5C Signing time: Fri 25 Apr 2025 06:07:06 +0000 Manifest this update: Fri 25 Apr 2025 06:07:06 +0000 Manifest next update: Fri 02 May 2025 06:07:06 +0000 Files and hashes: 1: 1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl (hash: IFk9HYBi7oA3syjs8or+FFXFKnwkx/wVB40cvwlUaBE=) 2: EB2858349B4B11EF86A11C85C4F9AE02.roa (hash: BH8r4wcRvODYc1YiRCd6qM+1RNm98aDQL1IFKl5rQ2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:07:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170F11, serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557 Validity Not Before: Apr 25 06:07:06 2025 GMT Not After : May 2 06:07:06 2025 GMT Subject: CN=680b268a-77b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:96:0f:46:c1:e1:6d:f2:45:d6:ff:5a:38:a1: 9a:7a:47:2d:18:ab:e9:2a:a8:bc:43:d3:7c:33:db: e6:77:a0:0f:21:c0:56:5d:a6:29:1b:56:ec:52:e9: c6:a7:37:4e:c2:f9:5d:39:32:9c:66:a2:f2:10:c7: e7:7e:e9:44:8d:e6:c1:31:31:58:1e:d0:98:30:cf: 54:f1:92:cd:a8:6c:19:a5:66:51:c1:ce:64:02:d3: 9f:bb:a3:9e:dd:59:64:a7:9b:93:75:a3:df:1b:2d: d1:0f:44:e1:db:49:bc:b5:b4:f6:87:d5:4b:c0:12: 07:c6:17:ae:1d:a9:2a:06:6f:dc:60:8f:39:3f:6e: 36:f9:87:c2:96:d6:24:b4:16:a1:4d:fb:1f:79:9f: dc:dd:71:eb:7b:24:00:fa:bb:0e:6e:40:07:70:2c: f5:90:bf:a7:60:e5:dd:e2:1c:c5:22:c1:cb:3d:82: f8:6a:7c:f7:bc:c3:47:d4:e2:cc:e9:9f:bd:3c:91: 99:cb:1e:31:87:06:61:7d:eb:f4:b6:4d:92:96:39: f2:9e:81:28:f1:be:df:b7:2d:66:32:69:65:95:fa: 88:7d:2d:14:59:85:0e:3f:ac:9c:f8:2f:13:64:cb: f6:f3:ec:f3:73:ff:d6:3d:90:5b:3a:72:63:81:65: 96:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:56:E9:67:4A:DB:9B:E6:D6:BE:D9:FC:4B:37:95:13:A9:A3:63:77 X509v3 Authority Key Identifier: keyid:D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:0e:8d:ed:cc:25:78:69:7d:71:a4:2c:21:09:9b:d3:03:37: 89:00:fa:9f:cf:ee:6f:03:30:e9:1b:c8:e5:18:bf:5a:84:ef: 3f:80:71:a7:60:16:61:3d:d0:82:52:bc:0f:ce:d1:f7:28:94: 8d:9b:72:c1:8e:ce:ee:91:98:e1:c6:da:73:ab:46:74:cd:95: 84:06:d9:a7:e1:77:ea:c0:e1:02:d8:ae:48:7a:75:85:53:b2: 4e:e9:26:33:2f:14:c8:70:7c:e9:27:2c:55:35:ab:ef:70:5f: b4:60:be:41:83:f3:6c:ed:b2:de:b1:54:e4:b7:06:1c:8a:6e: 96:fd:18:d3:3a:7e:9a:33:fb:14:26:90:27:3a:fc:f1:0e:3f: 05:aa:03:bf:e2:f6:bd:3e:25:65:17:81:ab:5d:27:41:e1:29: f1:50:ac:ba:28:ad:9c:35:13:e6:51:42:3e:55:23:97:b5:cb: 19:0e:39:67:79:bd:eb:71:9e:3a:bb:75:47:dd:21:3f:6b:d1: 2f:0a:a2:de:47:e2:27:79:9f:91:6c:97:25:80:69:6d:8e:08: 0f:d1:d3:fb:9e:46:d5:ab:56:94:d3:70:7b:fe:2f:c6:51:c7: 92:fe:66:6c:92:65:0d:81:fb:44:8f:29:04:93:49:9d:9a:69: 83:9a:41:ec -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MEYxMTExMC8GA1UEBRMoRDQ2OTY0RjlGMzczMUYyRjYzRTY3MDA4QzkxRTU5QzdE Q0M3ODU1NzAeFw0yNTA0MjUwNjA3MDZaFw0yNTA1MDIwNjA3MDZaMBgxFjAUBgNV BAMTDTY4MGIyNjhhLTc3YjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/lg9GweFt8kXW/1o4oZp6Ry0Yq+kqqLxD03wz2+Z3oA8hwFZdpikbVuxS6can N07C+V05MpxmovIQx+d+6USN5sExMVge0Jgwz1Txks2obBmlZlHBzmQC05+7o57d WWSnm5N1o98bLdEPROHbSby1tPaH1UvAEgfGF64dqSoGb9xgjzk/bjb5h8KW1iS0 FqFN+x95n9zdcet7JAD6uw5uQAdwLPWQv6dg5d3iHMUiwcs9gvhqfPe8w0fU4szp n708kZnLHjGHBmF96/S2TZKWOfKegSjxvt+3LWYyaWWV+oh9LRRZhQ4/rJz4LxNk y/bz7PNz/9Y9kFs6cmOBZZYZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQFbpZ0rb m+bWvtn8SzeVE6mjY3cwHwYDVR0jBBgwFoAU1Glk+fNzHy9j5nAIyR5Zx9zHhVcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwRjExL0U5MjZFOTEyOUE3 QzExRUY4NDk1MEQzM0M0RjlBRTAyLzFHbGstZk56SHk5ajVuQUl5UjVaeDl6SGhW Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMUdsay1mTnpIeTlqNW5BSXlSNVp4OXpIaFZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw RjExL0U5MjZFOTEyOUE3QzExRUY4NDk1MEQzM0M0RjlBRTAyLzFHbGstZk56SHk5 ajVuQUl5UjVaeDl6SGhWYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABIOje3MJXhpfXGkLCEJm9MDN4kA+p/P7m8DMOkbyOUYv1qE7z+Acadg FmE90IJSvA/O0fcolI2bcsGOzu6RmOHG2nOrRnTNlYQG2afhd+rA4QLYrkh6dYVT sk7pJjMvFMhwfOknLFU1q+9wX7RgvkGD82ztst6xVOS3BhyKbpb9GNM6fpoz+xQm kCc6/PEOPwWqA7/i9r0+JWUXgatdJ0HhKfFQrLoorZw1E+ZRQj5VI5e1yxkOOWd5 vetxnjq7dUfdIT9r0S8Kot5H4id5n5FslyWAaW2OCA/R0/ueRtWrVpTTcHv+L8ZR x5L+ZmySZQ2B+0SPKQSTSZ2aaYOaQew= -----END CERTIFICATE-----Generated at Sat Apr 26 17:04:58 2025 by rpki-client