$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft File: dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft (raw, json) Hash identifier: o49gHWKsr7kkUzgku+0uDseDtAUk9oaEim3ik+LDEI8= Subject key identifier: 90:E9:85:1D:E2:B1:B8:A9:5D:3C:ED:79:D5:02:E6:CF:13:B1:A8:EC Authority key identifier: 74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03 Certificate issuer: /CN=A9178424/serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft Manifest number: A5 Signing time: Tue 13 May 2025 05:22:31 +0000 Manifest this update: Tue 13 May 2025 05:22:30 +0000 Manifest next update: Tue 20 May 2025 05:22:30 +0000 Files and hashes: 1: dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl (hash: 8bTsZLcw/Hrjcs2S0lUiQMhBuA9YbpoNbOvlGfnNkVY=) 2: D672BC9638E411EF8BF0C15EC4F9AE02.roa (hash: BbrjGfo0UoZCcLf+k7hQstWYPdgNNbc+IXBk8J2BWwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178424, serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503 Validity Not Before: May 13 05:22:30 2025 GMT Not After : May 20 05:22:30 2025 GMT Subject: CN=6822d717-8628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c9:e1:b2:41:9b:82:09:3a:de:33:66:f4:34: b4:99:54:7f:da:e7:a4:d4:8e:c3:7a:25:f2:a6:b9: b4:fd:f9:0e:7a:86:c3:1a:e0:8a:d0:e8:be:b7:bf: 1d:c8:27:a8:32:0d:ba:02:96:2f:48:e4:7d:e1:b6: 0b:27:0d:87:a9:dd:a7:55:93:39:a8:0a:e5:3e:c3: 63:d1:22:61:92:b3:44:51:4d:f6:ea:18:ec:25:69: 03:a6:2f:68:64:ea:a3:b3:6c:22:f5:7d:e7:41:1b: e5:7e:b4:24:63:da:98:67:10:7f:bb:6c:75:f1:7d: c4:bb:31:3f:28:27:0d:a6:98:c2:fb:dd:24:1c:e4: 3b:af:06:99:c7:77:0f:56:d2:e2:00:4d:24:cb:55: 24:27:c5:72:2c:71:6b:09:58:da:4a:0b:c2:8b:79: e0:48:5c:db:96:46:7a:bd:47:d7:15:20:79:46:d1: 58:76:f1:64:92:36:1e:9a:b3:80:68:6b:3e:01:55: ef:b9:f1:f1:96:58:79:bc:84:5c:15:c6:10:9c:4f: 87:5f:98:84:ea:d5:32:e8:b6:95:dc:83:25:92:9c: fd:01:98:09:30:30:bd:27:94:15:d0:cc:7c:00:bc: b2:3b:86:91:e5:a9:2f:d2:34:fc:4e:2a:95:3f:db: 19:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E9:85:1D:E2:B1:B8:A9:5D:3C:ED:79:D5:02:E6:CF:13:B1:A8:EC X509v3 Authority Key Identifier: keyid:74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:56:bb:c3:c6:08:f5:a7:7f:d0:95:a3:dd:ef:21:b5:47:f3: 28:13:a0:8f:42:42:c9:bb:03:94:dc:72:cc:cf:da:16:13:ed: 75:f2:69:c4:5f:6a:b6:b0:fd:dd:2c:d4:58:f4:f6:fd:bb:ac: 14:9b:dc:10:87:c9:87:76:e0:ef:ea:94:47:58:3b:af:0b:bd: 3a:cf:f7:30:21:85:2b:9c:df:6d:df:b0:19:9a:73:e9:05:61: 4c:39:db:a6:48:b6:7c:1f:7e:a7:a2:57:e6:1d:53:d3:06:45: 12:d1:6d:f5:c6:06:64:c7:5b:12:17:53:62:99:37:49:6d:68: 3a:f7:13:de:c7:1f:ac:b0:12:8b:7d:ee:a1:1d:40:c7:c1:f8: 59:ad:27:7b:e7:0d:de:49:7f:4e:9b:06:af:68:2c:04:c6:17: 52:ba:81:4a:1f:93:60:bb:86:e6:80:19:e3:ef:71:f4:8d:03: 13:90:02:81:c7:21:94:22:38:d4:76:ea:44:fa:52:09:14:f5: d6:5e:b6:e9:25:09:5e:17:17:b2:94:e6:ad:43:fe:88:fe:7c: 2e:74:9b:44:28:0f:00:18:7b:bc:b6:00:51:bf:b1:af:50:49: 05:e3:fc:7c:5d:c7:e0:82:da:a0:c9:de:77:f1:ec:ed:68:4e: 5d:d2:10:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg0MjQxMTAvBgNVBAUTKDc0QTExNjY5QzQzRTUzQjBGMjFENEI0MTNGOTJEOUVB OTEzMTU1MDMwHhcNMjUwNTEzMDUyMjMwWhcNMjUwNTIwMDUyMjMwWjAYMRYwFAYD VQQDEw02ODIyZDcxNy04NjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMnhskGbggk63jNm9DS0mVR/2uek1I7DeiXyprm0/fkOeobDGuCK0Oi+t78d yCeoMg26ApYvSOR94bYLJw2Hqd2nVZM5qArlPsNj0SJhkrNEUU326hjsJWkDpi9o ZOqjs2wi9X3nQRvlfrQkY9qYZxB/u2x18X3EuzE/KCcNppjC+90kHOQ7rwaZx3cP VtLiAE0ky1UkJ8VyLHFrCVjaSgvCi3ngSFzblkZ6vUfXFSB5RtFYdvFkkjYemrOA aGs+AVXvufHxllh5vIRcFcYQnE+HX5iE6tUy6LaV3IMlkpz9AZgJMDC9J5QV0Mx8 ALyyO4aR5akv0jT8TiqVP9sZFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJDphR3i sbipXTztedUC5s8TsajsMB8GA1UdIwQYMBaAFHShFmnEPlOw8h1LQT+S2eqRMVUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODQyNC83OTNFQTZEQTM4 RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9kS0VXYWNRLVU3RHlIVXRCUDVMWjZwRXhW UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RLRVdhY1EtVTdEeUhVdEJQNUxaNnBFeFZRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODQyNC83OTNFQTZEQTM4RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9kS0VXYWNRLVU3 RHlIVXRCUDVMWjZwRXhWUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClVrvDxgj1p3/QlaPd7yG1R/MoE6CPQkLJuwOU3HLMz9oWE+118mnE X2q2sP3dLNRY9Pb9u6wUm9wQh8mHduDv6pRHWDuvC706z/cwIYUrnN9t37AZmnPp BWFMOdumSLZ8H36nolfmHVPTBkUS0W31xgZkx1sSF1NimTdJbWg69xPexx+ssBKL fe6hHUDHwfhZrSd75w3eSX9OmwavaCwExhdSuoFKH5Ngu4bmgBnj73H0jQMTkAKB xyGUIjjUdupE+lIJFPXWXrbpJQleFxeylOatQ/6I/nwudJtEKA8AGHu8tgBRv7Gv UEkF4/x8Xcfggtqgyd538eztaE5d0hDp -----END CERTIFICATE-----Generated at Wed May 14 12:36:05 2025 by rpki-client