$ rpki-client -vvf rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft File: P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft (raw, json) Hash identifier: RBJI0az8neGMS0yL7CM6HPmqk/dfqf8aeKoS11gm9DQ= Subject key identifier: 8D:C6:8C:37:FA:28:9C:9D:2D:0F:94:35:5C:0C:5C:82:02:BF:B7:AB Authority key identifier: 3F:9F:C9:D9:42:19:8C:47:23:34:A3:7E:AD:3D:EA:B5:03:92:E8:2F Certificate issuer: /CN=A9186753/serialNumber=3F9FC9D942198C472334A37EAD3DEAB50392E82F Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5_J2UIZjEcjNKN-rT3qtQOS6C8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft Manifest number: 18 Signing time: Fri 25 Apr 2025 06:59:29 +0000 Manifest this update: Fri 25 Apr 2025 06:59:29 +0000 Manifest next update: Fri 02 May 2025 06:59:29 +0000 Files and hashes: 1: P5_J2UIZjEcjNKN-rT3qtQOS6C8.crl (hash: NsHn/jPcDl4AOAXN0SozK+q3s6PQ7tmEQlkYEvlF0hE=) 2: 62BBFF4A046A11F081D54156C4F9AE02.roa (hash: pZymfXzsM+oU7Rjr41rJ4omJoS7JHWwRPlAblPbDAXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.crl rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5_J2UIZjEcjNKN-rT3qtQOS6C8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:59:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186753, serialNumber=3F9FC9D942198C472334A37EAD3DEAB50392E82F Validity Not Before: Apr 25 06:59:29 2025 GMT Not After : May 2 06:59:29 2025 GMT Subject: CN=680b32d1-f9ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:83:86:b7:80:14:44:a9:29:cc:2c:ab:94:d6: 5c:c8:b8:16:96:cf:06:a9:54:54:9f:e8:60:bb:a3: 79:47:f2:36:7a:d1:61:35:6b:2e:e2:64:52:f9:c6: 8c:23:ed:0c:6a:e7:2b:2e:a8:1c:f9:a9:71:07:83: 4b:b8:17:b8:54:12:c6:73:8d:bd:3f:42:e2:4d:2a: b9:00:d5:14:34:93:ac:25:af:f1:d6:ae:18:8c:09: 84:ab:5d:49:c7:f7:d9:a4:00:ec:b7:ac:cf:f6:c2: 0d:3c:cd:a5:02:2c:99:67:48:e7:c1:27:09:89:8b: 50:10:be:36:48:ec:4f:f0:30:bf:41:c6:6a:33:33: e8:ef:1a:10:57:bb:d0:87:5c:87:9c:30:c8:30:ad: 2f:d8:09:7a:d5:01:60:92:a1:f9:16:ca:e5:ef:ea: 1d:42:55:9f:47:4f:8d:b8:3a:e2:95:96:b4:ea:b6: c4:f8:5d:7a:ee:65:84:c7:bd:72:d6:3a:20:b6:9c: 40:23:f3:eb:c9:a7:0b:09:0d:de:d3:bf:0f:b8:b2: 27:b3:14:ac:8e:57:65:64:a5:3e:80:df:21:9e:97: 9a:1c:e7:9d:35:15:ec:bc:55:34:4a:72:ff:96:98: d0:90:ca:bc:b6:9f:7a:fb:57:d4:81:7a:fd:a3:39: 63:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C6:8C:37:FA:28:9C:9D:2D:0F:94:35:5C:0C:5C:82:02:BF:B7:AB X509v3 Authority Key Identifier: keyid:3F:9F:C9:D9:42:19:8C:47:23:34:A3:7E:AD:3D:EA:B5:03:92:E8:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5_J2UIZjEcjNKN-rT3qtQOS6C8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:26:94:2c:eb:2d:3d:b9:fc:a2:30:ab:a9:f2:3d:71:86:59: 45:1d:66:5f:41:1b:1b:52:50:4d:4c:8b:c3:fa:04:5f:65:ee: f6:c4:c5:3b:86:85:4e:fc:74:e0:4c:3e:ab:c2:13:3a:e3:4d: 0c:99:cd:27:e6:89:22:71:1f:b6:6b:b3:84:38:3f:6e:83:8b: 12:53:c8:ff:99:5a:a4:75:04:ee:4e:dd:f6:8f:8b:eb:c9:1b: aa:37:23:4f:4d:6b:d3:57:1a:c4:41:03:21:76:97:2b:8c:55: 48:dc:ed:b9:42:a1:ea:60:2e:61:12:62:50:9b:61:d2:43:68: 71:c0:15:95:3c:91:3f:9c:15:6a:cf:04:3c:0e:9f:dd:52:96: b9:a6:e7:d4:44:70:40:7c:c2:09:c6:56:22:ff:e1:59:25:cc: 83:c3:79:fb:71:bb:cd:c9:e2:24:8e:54:1b:c9:f5:3d:95:48: 20:e4:1d:1f:93:63:30:b3:13:54:a8:c6:a7:ff:cc:fd:86:d7: 56:dc:a3:d2:a4:38:e9:b6:e7:df:84:59:cd:22:51:52:41:b2: d6:62:ff:06:b3:66:08:a6:0e:b2:05:ab:54:b6:82:f1:01:4a: f9:e6:52:7d:38:4b:95:98:5d:8f:d8:7c:53:6f:d4:06:ec:2c: 42:b0:96:9a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 Njc1MzExMC8GA1UEBRMoM0Y5RkM5RDk0MjE5OEM0NzIzMzRBMzdFQUQzREVBQjUw MzkyRTgyRjAeFw0yNTA0MjUwNjU5MjlaFw0yNTA1MDIwNjU5MjlaMBgxFjAUBgNV BAMTDTY4MGIzMmQxLWY5ZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsg4a3gBREqSnMLKuU1lzIuBaWzwapVFSf6GC7o3lH8jZ60WE1ay7iZFL5xowj 7Qxq5ysuqBz5qXEHg0u4F7hUEsZzjb0/QuJNKrkA1RQ0k6wlr/HWrhiMCYSrXUnH 99mkAOy3rM/2wg08zaUCLJlnSOfBJwmJi1AQvjZI7E/wML9BxmozM+jvGhBXu9CH XIecMMgwrS/YCXrVAWCSofkWyuXv6h1CVZ9HT424OuKVlrTqtsT4XXruZYTHvXLW OiC2nEAj8+vJpwsJDd7Tvw+4siezFKyOV2VkpT6A3yGel5oc5501Fey8VTRKcv+W mNCQyry2n3r7V9SBev2jOWNxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjcaMN/oo nJ0tD5Q1XAxcggK/t6swHwYDVR0jBBgwFoAUP5/J2UIZjEcjNKN+rT3qtQOS6C8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2NzUzLzcyMUJEMzFFMDQ2 NzExRjA4NTdFMTc2M0M0RjlBRTAyL1A1X0oyVUlaakVjak5LTi1yVDNxdFFPUzZD OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUDVfSjJVSVpqRWNqTktOLXJUM3F0UU9TNkM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2 NzUzLzcyMUJEMzFFMDQ2NzExRjA4NTdFMTc2M0M0RjlBRTAyL1A1X0oyVUlaakVj ak5LTi1yVDNxdFFPUzZDOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIwmlCzrLT25/KIwq6nyPXGGWUUdZl9BGxtSUE1Mi8P6BF9l7vbExTuG hU78dOBMPqvCEzrjTQyZzSfmiSJxH7Zrs4Q4P26DixJTyP+ZWqR1BO5O3faPi+vJ G6o3I09Na9NXGsRBAyF2lyuMVUjc7blCoepgLmESYlCbYdJDaHHAFZU8kT+cFWrP BDwOn91Slrmm59REcEB8wgnGViL/4VklzIPDeftxu83J4iSOVBvJ9T2VSCDkHR+T YzCzE1Soxqf/zP2G11bco9KkOOm259+EWc0iUVJBstZi/wazZgimDrIFq1S2gvEB SvnmUn04S5WYXY/YfFNv1AbsLEKwlpo= -----END CERTIFICATE-----Generated at Sat Apr 26 16:57:03 2025 by rpki-client