$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft File: Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft (raw, json) Hash identifier: b6CQoTXSdyJjZC1qEY3rQm+FgAjiFT3de8x7c7ClQ/8= Subject key identifier: 4F:A8:C4:71:2C:CD:76:B3:C9:37:BB:72:42:42:38:9F:B3:71:3B:52 Authority key identifier: 21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7 Certificate issuer: /CN=A9171BF0/serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft Manifest number: 5C Signing time: Sun 11 May 2025 05:52:17 +0000 Manifest this update: Sun 11 May 2025 05:52:16 +0000 Manifest next update: Sun 18 May 2025 05:52:16 +0000 Files and hashes: 1: Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl (hash: saoViEQ/J66jSbY7sRTdG7MThZtBxyz98Etq8zjMKzQ=) 2: 115BD35AA41611EFA0D7CD42C4F9AE02.roa (hash: gEbj+lO4aYDwjrfL1QJi0wu8U7VQFh/BgCCzbNzGNWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171BF0, serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7 Validity Not Before: May 11 05:52:16 2025 GMT Not After : May 18 05:52:16 2025 GMT Subject: CN=68203b11-81a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d7:9c:2b:7f:14:d9:d3:d8:db:53:ff:0f:63: 5d:96:9f:ac:94:e4:29:3a:e8:6f:cb:a0:8e:f9:37: 19:a9:d9:8f:82:07:a2:2b:b6:01:3f:62:e9:44:e2: 68:14:bb:76:ad:14:44:52:7d:df:bb:f1:91:65:4d: 88:be:8e:8c:32:36:0b:c3:23:80:f1:d8:9e:fd:7f: 42:7c:61:83:ea:97:b3:2e:6c:6c:f4:c9:18:80:14: 13:38:cc:71:3e:56:4e:ee:12:d9:a5:38:76:d5:9b: e6:91:40:ce:28:3d:1b:bb:df:83:80:04:4f:43:bf: c2:f7:03:9a:40:49:5e:7e:73:bd:a3:e5:ee:51:eb: dc:b4:33:43:61:a1:fc:b1:26:42:a7:07:48:fc:c4: be:30:27:4e:06:d9:82:d5:9e:a5:46:dc:0c:6e:35: 91:b2:3d:de:d0:ba:ca:3f:9b:f1:3f:de:3c:aa:a7: f5:d5:18:41:ee:3d:66:4c:b7:1e:b7:f9:f5:c3:bf: f2:54:1e:15:46:b7:98:37:f9:be:61:a9:7e:1a:d2: e0:42:f2:e0:e5:9a:9d:7b:11:d2:d4:f4:d9:f1:35: ff:3f:28:db:d6:eb:e4:fd:b8:49:7d:55:65:9e:07: 1f:48:41:7c:9a:cd:fb:06:f3:16:8a:7e:67:a3:c8: 7d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A8:C4:71:2C:CD:76:B3:C9:37:BB:72:42:42:38:9F:B3:71:3B:52 X509v3 Authority Key Identifier: keyid:21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:00:70:a3:8d:08:7e:d8:21:d1:0c:57:3b:92:66:d7:a2:66: 8e:ef:67:79:9e:21:ec:d3:f5:a3:9e:5f:72:50:1a:64:26:0c: e4:52:d0:86:25:49:fb:0c:e8:70:ca:e7:30:7a:9a:8f:2c:d2: 79:26:00:e0:76:04:ad:a4:7b:b4:20:cc:86:ec:2c:e6:73:c9: 9d:3e:b1:2f:62:7e:4b:c8:5e:f8:55:b2:f6:ca:28:56:d8:71: bc:78:1d:00:88:23:73:4b:18:98:5c:be:96:79:0c:a6:db:3c: 85:6b:16:08:23:4b:ee:bd:dd:84:e2:65:ab:45:93:a0:99:37: 1f:2a:13:d9:47:77:83:32:bb:7c:f5:3e:e4:a9:bd:0a:77:89: 3a:d9:44:09:db:af:38:1b:db:40:f7:da:82:73:90:ee:83:31: 03:43:5a:12:d2:ca:0b:94:95:95:98:33:c9:31:e4:c9:14:a4: 28:4f:ce:9f:5b:07:8d:f3:60:56:66:e5:39:88:60:43:df:89: 97:65:84:80:9f:04:2a:d7:59:e1:af:53:12:4a:24:62:ae:c6: c0:fa:0f:ed:14:d0:d2:f3:ea:5a:3d:64:a0:9f:64:34:ff:75: 9d:07:e3:d0:cf:f5:08:b6:6b:67:e1:cf:6b:b1:7b:5d:fc:ab: f8:82:df:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MUJGMDExMC8GA1UEBRMoMjFDRkNFODFEODc1RDVDRjhGNTk2QURCRkNDMzYwMTk2 MUM0NDFFNzAeFw0yNTA1MTEwNTUyMTZaFw0yNTA1MTgwNTUyMTZaMBgxFjAUBgNV BAMTDTY4MjAzYjExLTgxYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDR15wrfxTZ09jbU/8PY12Wn6yU5Ck66G/LoI75Nxmp2Y+CB6IrtgE/YulE4mgU u3atFERSfd+78ZFlTYi+jowyNgvDI4Dx2J79f0J8YYPql7MubGz0yRiAFBM4zHE+ Vk7uEtmlOHbVm+aRQM4oPRu734OABE9Dv8L3A5pASV5+c72j5e5R69y0M0Nhofyx JkKnB0j8xL4wJ04G2YLVnqVG3AxuNZGyPd7Quso/m/E/3jyqp/XVGEHuPWZMtx63 +fXDv/JUHhVGt5g3+b5hqX4a0uBC8uDlmp17EdLU9NnxNf8/KNvW6+T9uEl9VWWe Bx9IQXyazfsG8xaKfmejyH2JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUT6jEcSzN drPJN7tyQkI4n7NxO1IwHwYDVR0jBBgwFoAUIc/Ogdh11c+PWWrb/MNgGWHEQecw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxQkYwLzlGNTkxRThFQTQx NTExRUZBMTRGQkQzRkM0RjlBRTAyL0ljX09nZGgxMWMtUFdXcmJfTU5nR1dIRVFl Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSWNfT2dkaDExYy1QV1dyYl9NTmdHV0hFUWVjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcx QkYwLzlGNTkxRThFQTQxNTExRUZBMTRGQkQzRkM0RjlBRTAyL0ljX09nZGgxMWMt UFdXcmJfTU5nR1dIRVFlYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJIAcKONCH7YIdEMVzuSZteiZo7vZ3meIezT9aOeX3JQGmQmDORS0IYl SfsM6HDK5zB6mo8s0nkmAOB2BK2ke7QgzIbsLOZzyZ0+sS9ifkvIXvhVsvbKKFbY cbx4HQCII3NLGJhcvpZ5DKbbPIVrFggjS+693YTiZatFk6CZNx8qE9lHd4Myu3z1 PuSpvQp3iTrZRAnbrzgb20D32oJzkO6DMQNDWhLSyguUlZWYM8kx5MkUpChPzp9b B43zYFZm5TmIYEPfiZdlhICfBCrXWeGvUxJKJGKuxsD6D+0U0NLz6lo9ZKCfZDT/ dZ0H49DP9Qi2a2fhz2uxe138q/iC32Y= -----END CERTIFICATE-----Generated at Sun May 11 22:59:50 2025 by rpki-client