$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft File: pDc5u18gwUzF_EnjdVh9s7ciN68.mft (raw, json) Hash identifier: TnLuxvcGe+n0wD0DM3hQ0Hpvt8vhNeZ66wjHhrWL10o= Subject key identifier: 47:EF:69:C4:6F:36:66:59:F2:FA:0D:40:A1:9F:16:D9:71:89:3C:18 Authority key identifier: A4:37:39:BB:5F:20:C1:4C:C5:FC:49:E3:75:58:7D:B3:B7:22:37:AF Certificate issuer: /CN=A9172B7E/serialNumber=A43739BB5F20C14CC5FC49E375587DB3B72237AF Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft Manifest number: 0147 Signing time: Sat 03 May 2025 03:48:06 +0000 Manifest this update: Sat 03 May 2025 03:48:06 +0000 Manifest next update: Sat 10 May 2025 03:48:06 +0000 Files and hashes: 1: pDc5u18gwUzF_EnjdVh9s7ciN68.crl (hash: xAy/tZO2oD/oBHEFdRCVIqbbdBZLIlUIQpKxCVMMlIY=) 2: BF341AF869A911EE8CB76452C4F9AE02.roa (hash: es2BFpk/dVqzh/KiV65lQ+0ASQp0lQtHLBsKiiObL58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.crl rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 03:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B7E, serialNumber=A43739BB5F20C14CC5FC49E375587DB3B72237AF Validity Not Before: May 3 03:48:06 2025 GMT Not After : May 10 03:48:06 2025 GMT Subject: CN=681591f6-08a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f7:ac:0b:66:83:55:0b:03:10:2c:3c:16:7d: b2:ac:7f:cd:bf:8a:2d:56:5d:c3:5d:e4:40:91:17: 8f:99:0b:31:1a:d0:db:9f:6a:09:71:71:43:e5:df: f9:cc:b2:3b:2a:66:92:b6:d2:57:e3:05:8d:6c:6d: ff:65:a1:fd:15:81:ce:8f:a7:6f:3e:3b:cc:69:87: d2:d5:41:64:f5:4b:06:c3:0d:65:05:86:90:6e:48: 96:bc:6c:c5:23:10:8c:4a:98:ba:4f:da:df:2f:f1: 99:35:0c:3c:ca:56:ca:06:36:fa:86:0f:00:29:a7: bc:1c:9e:c7:f6:d5:af:91:bb:6a:82:be:54:dd:4a: 1a:d6:a9:d9:03:be:b3:b1:ef:ac:bc:f5:0f:30:24: 99:5a:ef:90:cb:e6:36:87:dc:bb:29:06:d6:8b:8c: e6:1e:2f:43:a9:08:ac:3a:62:eb:09:98:1d:8e:e9: 8c:b8:ac:1c:85:fb:ac:97:91:60:f9:1f:39:8d:59: 6d:2c:05:46:d8:62:dd:46:e3:92:8d:5c:ee:ad:83: 5a:c1:bd:9b:ac:8f:e2:31:09:c2:cc:02:a5:4e:6d: 8a:c8:07:98:3b:a2:1f:36:e1:9b:d7:cd:58:0d:c9: 17:52:19:04:da:7d:89:8d:95:13:0d:e3:9e:ac:d8: 81:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:EF:69:C4:6F:36:66:59:F2:FA:0D:40:A1:9F:16:D9:71:89:3C:18 X509v3 Authority Key Identifier: keyid:A4:37:39:BB:5F:20:C1:4C:C5:FC:49:E3:75:58:7D:B3:B7:22:37:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:dd:0d:44:c8:d1:d3:4c:5a:88:40:3a:99:bc:0f:1f:42:56: 62:0d:64:cc:f0:35:dd:02:bb:a4:96:29:cb:82:5f:db:5f:e8: 96:91:b0:5f:5f:a8:2b:53:3a:ae:94:8a:f6:51:f6:68:ff:c6: cb:3d:f8:8d:de:a8:07:f1:64:a0:10:61:1b:ae:fa:19:cc:22: 88:14:eb:31:9c:8f:6d:ec:d5:09:ba:c4:a6:6e:4a:8d:ac:04: e4:ab:71:a3:88:6f:c2:bc:1f:b3:43:a4:b8:01:78:af:7f:e9: 28:e9:7b:15:42:4f:82:86:b3:aa:62:ce:40:80:db:8f:ac:02: 30:4f:ad:a9:5c:ab:85:68:22:48:e1:4e:9b:e3:bd:d1:dc:d9: d3:1f:c9:20:b6:63:75:34:b5:a4:b4:39:93:bd:26:5c:e3:11: 0a:35:c3:c3:fe:4d:72:4a:e5:94:3d:4d:c1:26:2e:54:b7:3f: 62:6e:3e:ef:a9:7b:83:d4:0b:a7:16:c9:00:5e:a1:e7:f9:26: 20:5c:f5:03:03:97:25:e7:56:b1:11:74:70:45:03:e6:5f:59: 16:28:0c:fd:82:08:fb:dd:93:3d:b5:d4:74:6c:d4:12:ab:35: 92:86:c6:e9:58:a6:d8:fd:8c:1f:f9:5c:4a:0b:6b:5b:c7:1f: 90:1e:13:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCN0UxMTAvBgNVBAUTKEE0MzczOUJCNUYyMEMxNENDNUZDNDlFMzc1NTg3REIz QjcyMjM3QUYwHhcNMjUwNTAzMDM0ODA2WhcNMjUwNTEwMDM0ODA2WjAYMRYwFAYD VQQDEw02ODE1OTFmNi0wOGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufesC2aDVQsDECw8Fn2yrH/Nv4otVl3DXeRAkRePmQsxGtDbn2oJcXFD5d/5 zLI7KmaSttJX4wWNbG3/ZaH9FYHOj6dvPjvMaYfS1UFk9UsGww1lBYaQbkiWvGzF IxCMSpi6T9rfL/GZNQw8ylbKBjb6hg8AKae8HJ7H9tWvkbtqgr5U3Uoa1qnZA76z se+svPUPMCSZWu+Qy+Y2h9y7KQbWi4zmHi9DqQisOmLrCZgdjumMuKwchfusl5Fg +R85jVltLAVG2GLdRuOSjVzurYNawb2brI/iMQnCzAKlTm2KyAeYO6IfNuGb181Y DckXUhkE2n2JjZUTDeOerNiBIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEfvacRv NmZZ8voNQKGfFtlxiTwYMB8GA1UdIwQYMBaAFKQ3ObtfIMFMxfxJ43VYfbO3Ijev MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI3RS83M0JDN0FBQzQ3 MTcxMUVFQTQ0NkUzNDZDNEY5QUUwMi9wRGM1dTE4Z3dVekZfRW5qZFZoOXM3Y2lO NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BEYzV1MThnd1V6Rl9FbmpkVmg5czdjaU42OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkI3RS83M0JDN0FBQzQ3MTcxMUVFQTQ0NkUzNDZDNEY5QUUwMi9wRGM1dTE4Z3dV ekZfRW5qZFZoOXM3Y2lONjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD3Q1EyNHTTFqIQDqZvA8fQlZiDWTM8DXdAruklinLgl/bX+iWkbBf X6grUzqulIr2UfZo/8bLPfiN3qgH8WSgEGEbrvoZzCKIFOsxnI9t7NUJusSmbkqN rATkq3GjiG/CvB+zQ6S4AXivf+ko6XsVQk+ChrOqYs5AgNuPrAIwT62pXKuFaCJI 4U6b473R3NnTH8kgtmN1NLWktDmTvSZc4xEKNcPD/k1ySuWUPU3BJi5Utz9ibj7v qXuD1AunFskAXqHn+SYgXPUDA5cl51axEXRwRQPmX1kWKAz9ggj73ZM9tdR0bNQS qzWShsbpWKbY/Ywf+VxKC2tbxx+QHhNL -----END CERTIFICATE-----Generated at Mon May 5 00:51:55 2025 by rpki-client