$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft File: pDc5u18gwUzF_EnjdVh9s7ciN68.mft (raw, json) Hash identifier: xdM9ShEzX6QQ8abpWCAYfNAwgnYoNCs3KG+yXr3ycio= Subject key identifier: 1F:DE:4A:4A:A9:E2:AB:BD:A9:44:D1:2F:64:17:C2:FA:28:C6:31:50 Authority key identifier: A4:37:39:BB:5F:20:C1:4C:C5:FC:49:E3:75:58:7D:B3:B7:22:37:AF Certificate issuer: /CN=A9172B7E/serialNumber=A43739BB5F20C14CC5FC49E375587DB3B72237AF Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft Manifest number: 014E Signing time: Sat 17 May 2025 03:55:41 +0000 Manifest this update: Sat 17 May 2025 03:55:41 +0000 Manifest next update: Sat 24 May 2025 03:55:41 +0000 Files and hashes: 1: pDc5u18gwUzF_EnjdVh9s7ciN68.crl (hash: J9B5WcOXHc2djg+hGsNqGdmdBokLSEtVzCBCMlH5Gy8=) 2: BF341AF869A911EE8CB76452C4F9AE02.roa (hash: es2BFpk/dVqzh/KiV65lQ+0ASQp0lQtHLBsKiiObL58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.crl rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 03:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B7E, serialNumber=A43739BB5F20C14CC5FC49E375587DB3B72237AF Validity Not Before: May 17 03:55:41 2025 GMT Not After : May 24 03:55:41 2025 GMT Subject: CN=682808bd-518d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d1:1c:6e:90:8a:58:11:78:e7:ce:72:82:8a: 62:5f:f6:cd:f4:79:11:7d:09:6b:d2:d6:bd:d6:d3: b3:b0:ab:57:ff:f4:66:82:2c:0b:71:61:5e:65:29: ca:fb:a4:68:c8:79:5d:d7:9b:5a:a0:26:ab:09:20: b6:e8:4c:15:1a:92:26:ab:70:47:0b:12:ab:df:05: 99:e8:82:1c:a9:60:9b:8c:ab:0e:1b:66:f9:28:1f: fe:55:9d:81:ac:56:f5:ad:ac:b2:d6:59:0a:40:dd: 9b:ae:32:8f:a6:fd:81:90:54:35:3d:b3:a2:e9:a6: 67:94:f8:10:fa:97:24:6f:7d:54:16:85:ab:b2:9e: 06:27:f3:3f:7a:bb:83:c7:e4:4b:de:bd:f6:e5:de: df:a2:43:61:1a:5c:5e:22:8a:5e:2e:af:2e:32:12: 64:6a:cb:00:6d:e4:83:78:8c:21:ae:f5:36:e1:87: 88:09:86:43:d5:94:7a:f3:b7:63:4c:f2:e9:fa:43: e5:1c:85:b6:28:f7:b4:53:3c:75:65:52:02:9a:17: 57:e2:18:d7:11:76:01:ba:c0:8a:6c:d8:d2:a4:b6: 16:60:f6:2d:29:07:86:41:86:76:a0:21:dc:f0:5b: 90:20:eb:ed:11:54:e3:d8:99:43:7a:13:35:6f:59: 62:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:DE:4A:4A:A9:E2:AB:BD:A9:44:D1:2F:64:17:C2:FA:28:C6:31:50 X509v3 Authority Key Identifier: keyid:A4:37:39:BB:5F:20:C1:4C:C5:FC:49:E3:75:58:7D:B3:B7:22:37:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:d6:d2:3a:6b:31:1a:d5:96:5e:1d:67:2f:0a:06:4a:74:fa: 22:fd:d9:96:10:b2:fa:8b:d1:ac:7e:68:db:9b:96:10:67:a1: ca:d5:54:be:6c:b0:dc:9a:8b:f9:19:4c:c6:1a:17:a2:36:65: 02:21:8b:45:1d:7e:a6:64:dc:3e:00:d5:da:1b:92:90:0a:4c: a9:3c:1f:93:3f:d6:85:ae:0f:87:0e:72:07:bb:87:f4:0b:0b: 99:b2:0d:d7:44:a8:42:7a:68:2b:cc:02:d5:97:54:99:75:b7: 5e:19:95:5f:62:69:5b:04:56:1e:1f:f2:c7:cf:52:cf:6a:50: ec:28:8c:01:da:70:02:2e:0e:e2:0a:21:38:a1:f1:19:51:26: 8c:93:3d:da:d8:e4:9f:b0:cf:ec:b7:03:72:27:fd:02:bd:b2: 8c:52:0e:21:5e:75:87:fa:64:93:5b:80:f3:46:11:ff:1a:51: fc:17:a3:8b:fd:58:1f:d1:d8:c1:b2:72:87:01:e5:0d:df:bc: af:ef:50:77:af:fc:28:d4:e7:4a:3b:ce:eb:3e:61:a2:da:b3: ea:16:7d:c9:12:70:31:91:6b:c0:67:2b:4d:3d:75:8c:7c:58: 20:be:0d:8f:7a:b4:a8:fb:dc:80:5f:70:03:55:59:fb:03:f3: da:9b:98:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCN0UxMTAvBgNVBAUTKEE0MzczOUJCNUYyMEMxNENDNUZDNDlFMzc1NTg3REIz QjcyMjM3QUYwHhcNMjUwNTE3MDM1NTQxWhcNMjUwNTI0MDM1NTQxWjAYMRYwFAYD VQQDEw02ODI4MDhiZC01MThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1NEcbpCKWBF4585ygopiX/bN9HkRfQlr0ta91tOzsKtX//RmgiwLcWFeZSnK +6RoyHld15taoCarCSC26EwVGpImq3BHCxKr3wWZ6IIcqWCbjKsOG2b5KB/+VZ2B rFb1rayy1lkKQN2brjKPpv2BkFQ1PbOi6aZnlPgQ+pckb31UFoWrsp4GJ/M/eruD x+RL3r325d7fokNhGlxeIopeLq8uMhJkassAbeSDeIwhrvU24YeICYZD1ZR687dj TPLp+kPlHIW2KPe0Uzx1ZVICmhdX4hjXEXYBusCKbNjSpLYWYPYtKQeGQYZ2oCHc 8FuQIOvtEVTj2JlDehM1b1li9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/eSkqp 4qu9qUTRL2QXwvooxjFQMB8GA1UdIwQYMBaAFKQ3ObtfIMFMxfxJ43VYfbO3Ijev MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI3RS83M0JDN0FBQzQ3 MTcxMUVFQTQ0NkUzNDZDNEY5QUUwMi9wRGM1dTE4Z3dVekZfRW5qZFZoOXM3Y2lO NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BEYzV1MThnd1V6Rl9FbmpkVmg5czdjaU42OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkI3RS83M0JDN0FBQzQ3MTcxMUVFQTQ0NkUzNDZDNEY5QUUwMi9wRGM1dTE4Z3dV ekZfRW5qZFZoOXM3Y2lONjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj1tI6azEa1ZZeHWcvCgZKdPoi/dmWELL6i9Gsfmjbm5YQZ6HK1VS+ bLDcmov5GUzGGheiNmUCIYtFHX6mZNw+ANXaG5KQCkypPB+TP9aFrg+HDnIHu4f0 CwuZsg3XRKhCemgrzALVl1SZdbdeGZVfYmlbBFYeH/LHz1LPalDsKIwB2nACLg7i CiE4ofEZUSaMkz3a2OSfsM/stwNyJ/0CvbKMUg4hXnWH+mSTW4DzRhH/GlH8F6OL /Vgf0djBsnKHAeUN37yv71B3r/wo1OdKO87rPmGi2rPqFn3JEnAxkWvAZytNPXWM fFggvg2PerSo+9yAX3ADVVn7A/Pam5is -----END CERTIFICATE-----Generated at Sat May 17 13:12:02 2025 by rpki-client