$ rpki-client -vvf rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft File: P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft (raw, json) Hash identifier: +OMcVuL54FCqnXFsx1qjeOZfn5PZATehMja/q149lp8= Subject key identifier: B1:1A:FA:57:46:A8:DF:C9:6A:10:A7:E4:F4:F8:00:B8:30:AA:3A:E2 Authority key identifier: 3F:9F:C9:D9:42:19:8C:47:23:34:A3:7E:AD:3D:EA:B5:03:92:E8:2F Certificate issuer: /CN=A9186753/serialNumber=3F9FC9D942198C472334A37EAD3DEAB50392E82F Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5_J2UIZjEcjNKN-rT3qtQOS6C8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft Manifest number: 21 Signing time: Tue 13 May 2025 07:07:59 +0000 Manifest this update: Tue 13 May 2025 07:07:58 +0000 Manifest next update: Tue 20 May 2025 07:07:58 +0000 Files and hashes: 1: P5_J2UIZjEcjNKN-rT3qtQOS6C8.crl (hash: xTKwLtb7HcxIIGSXN1ahRUdfdSrBHrL3X9pPemiNKQU=) 2: 62BBFF4A046A11F081D54156C4F9AE02.roa (hash: pZymfXzsM+oU7Rjr41rJ4omJoS7JHWwRPlAblPbDAXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.crl rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5_J2UIZjEcjNKN-rT3qtQOS6C8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 07:07:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186753, serialNumber=3F9FC9D942198C472334A37EAD3DEAB50392E82F Validity Not Before: May 13 07:07:58 2025 GMT Not After : May 20 07:07:58 2025 GMT Subject: CN=6822efcf-8343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2b:1d:52:9a:84:e5:48:77:16:24:ec:9a:03: 2f:8a:c7:da:cb:3f:60:e4:81:f6:08:2a:ae:24:c5: 4d:8f:26:66:3d:26:51:d3:aa:79:0e:9b:bd:46:87: 0e:f2:de:72:44:ca:a0:ac:cc:42:48:e3:96:50:a1: 8c:38:87:8d:fc:70:e4:53:d7:dc:0c:0e:05:a4:be: da:e8:e2:c6:9d:c5:08:ba:b0:59:c1:5b:09:4f:13: 5e:65:30:8c:c1:9e:06:b1:e0:b5:3d:c2:12:2d:a8: 30:1b:54:f3:3c:39:71:de:1e:b7:10:71:8b:47:13: 6f:f9:8e:ce:b0:b7:5e:45:c4:0a:0f:fe:45:39:f7: 10:2a:b2:9a:fc:d8:88:82:b5:91:05:8e:96:5e:93: 7e:cf:bc:2e:6b:16:c5:d6:f4:87:dd:93:f9:47:30: 9c:05:58:5e:50:c2:00:16:74:1a:2e:db:25:f2:6c: 03:6c:50:f8:bb:35:59:b7:c2:80:ad:28:d1:ec:e1: 9b:ed:ea:10:ab:31:d8:74:c9:15:14:45:a5:25:bc: d0:3d:5f:7f:cf:73:50:9a:3d:06:b2:1a:86:56:ab: c6:97:84:f4:39:eb:55:d1:6a:7d:1d:eb:59:7a:05: 68:a9:3f:96:89:7d:9c:24:c3:f4:dd:a3:85:7a:96: 78:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1A:FA:57:46:A8:DF:C9:6A:10:A7:E4:F4:F8:00:B8:30:AA:3A:E2 X509v3 Authority Key Identifier: keyid:3F:9F:C9:D9:42:19:8C:47:23:34:A3:7E:AD:3D:EA:B5:03:92:E8:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5_J2UIZjEcjNKN-rT3qtQOS6C8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:a0:cb:5b:ac:a6:bd:e4:58:05:51:51:a6:d1:bb:2d:74:a0: 48:f5:a2:46:8a:6d:51:57:00:df:f8:63:6f:fa:15:a4:f1:d6: c3:80:b4:21:a6:af:80:f4:9b:f6:5c:13:d5:7c:19:ca:42:e7: 8d:75:7a:48:01:88:65:f6:b5:20:a9:16:87:e1:8b:ce:9b:ea: 68:b3:0b:8a:84:e8:a4:1c:35:f0:b3:30:10:9c:1f:6e:a0:d8: 7f:a6:40:f3:ee:3e:46:a8:d2:82:6b:f1:07:40:2c:f6:5f:f1: f5:11:c7:e3:be:9c:0b:ac:90:f0:f4:39:37:a2:74:62:66:5b: 85:d9:79:b7:6b:8c:7a:37:f3:37:8e:36:a1:b8:dd:80:6e:59: 3b:d1:f5:d7:48:bb:38:41:12:6a:e3:2a:f0:0c:9f:ec:21:fb: 8b:42:5a:38:de:52:e3:d9:8a:0c:1e:dc:20:08:d6:f0:34:67: 36:04:e6:27:de:8b:93:f7:50:7f:de:3f:52:ee:14:77:76:5a: 35:17:3f:18:fb:0d:3d:a7:f7:b2:ff:26:69:56:8a:bf:a4:42: 69:61:1e:07:3b:02:0d:75:ba:3f:9e:ab:77:13:48:69:a2:60: 3e:3c:c3:8a:d8:98:7f:3e:60:8b:c1:d3:f7:28:dd:b8:6b:62: b4:57:37:7a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 Njc1MzExMC8GA1UEBRMoM0Y5RkM5RDk0MjE5OEM0NzIzMzRBMzdFQUQzREVBQjUw MzkyRTgyRjAeFw0yNTA1MTMwNzA3NThaFw0yNTA1MjAwNzA3NThaMBgxFjAUBgNV BAMTDTY4MjJlZmNmLTgzNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyKx1SmoTlSHcWJOyaAy+Kx9rLP2DkgfYIKq4kxU2PJmY9JlHTqnkOm71Ghw7y 3nJEyqCszEJI45ZQoYw4h438cORT19wMDgWkvtro4sadxQi6sFnBWwlPE15lMIzB ngax4LU9whItqDAbVPM8OXHeHrcQcYtHE2/5js6wt15FxAoP/kU59xAqspr82IiC tZEFjpZek37PvC5rFsXW9Ifdk/lHMJwFWF5QwgAWdBou2yXybANsUPi7NVm3woCt KNHs4Zvt6hCrMdh0yRUURaUlvNA9X3/Pc1CaPQayGoZWq8aXhPQ561XRan0d61l6 BWipP5aJfZwkw/Tdo4V6lnhdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsRr6V0ao 38lqEKfk9PgAuDCqOuIwHwYDVR0jBBgwFoAUP5/J2UIZjEcjNKN+rT3qtQOS6C8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2NzUzLzcyMUJEMzFFMDQ2 NzExRjA4NTdFMTc2M0M0RjlBRTAyL1A1X0oyVUlaakVjak5LTi1yVDNxdFFPUzZD OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUDVfSjJVSVpqRWNqTktOLXJUM3F0UU9TNkM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2 NzUzLzcyMUJEMzFFMDQ2NzExRjA4NTdFMTc2M0M0RjlBRTAyL1A1X0oyVUlaakVj ak5LTi1yVDNxdFFPUzZDOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL+gy1uspr3kWAVRUabRuy10oEj1okaKbVFXAN/4Y2/6FaTx1sOAtCGm r4D0m/ZcE9V8GcpC5411ekgBiGX2tSCpFofhi86b6mizC4qE6KQcNfCzMBCcH26g 2H+mQPPuPkao0oJr8QdALPZf8fURx+O+nAuskPD0OTeidGJmW4XZebdrjHo38zeO NqG43YBuWTvR9ddIuzhBEmrjKvAMn+wh+4tCWjjeUuPZigwe3CAI1vA0ZzYE5ife i5P3UH/eP1LuFHd2WjUXPxj7DT2n97L/JmlWir+kQmlhHgc7Ag11uj+eq3cTSGmi YD48w4rYmH8+YIvB0/co3bhrYrRXN3o= -----END CERTIFICATE-----Generated at Wed May 14 10:44:58 2025 by rpki-client