$ rpki-client -vvf rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft File: _5I0f11UaIEf0lOki_xp_lcKpFA.mft (raw, json) Hash identifier: PmEmNChQ/KOe/gza0wQ/Pc4bu0XR+pdkQ++LsSw/7Wk= Subject key identifier: 76:65:4A:E8:05:A3:79:8D:FF:72:6A:6D:2B:A6:BC:15:1C:07:F1:C7 Authority key identifier: FF:92:34:7F:5D:54:68:81:1F:D2:53:A4:8B:FC:69:FE:57:0A:A4:50 Certificate issuer: /CN=A9191769/serialNumber=FF92347F5D5468811FD253A48BFC69FE570AA450 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft Manifest number: 79 Signing time: Sun 11 May 2025 05:29:25 +0000 Manifest this update: Sun 11 May 2025 05:29:25 +0000 Manifest next update: Sun 18 May 2025 05:29:25 +0000 Files and hashes: 1: _5I0f11UaIEf0lOki_xp_lcKpFA.crl (hash: IQD1hGKN9raAaVRYhJlKw30YSyAFdlxzSERL24aBj2g=) 2: 4D36C07677C311EF84D38A3BC4F9AE02.roa (hash: 6DTPGl0cK90vpMXpajrInMal5HqM8aVrjHYhHLus/gk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.crl rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:29:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191769, serialNumber=FF92347F5D5468811FD253A48BFC69FE570AA450 Validity Not Before: May 11 05:29:25 2025 GMT Not After : May 18 05:29:25 2025 GMT Subject: CN=682035b5-2996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4e:a3:7c:01:fb:93:46:6b:b3:11:08:99:41: 9a:6d:31:b9:d1:e7:b4:37:5b:9f:05:fc:a2:ab:13: eb:6b:ad:4e:dd:17:5b:f7:f1:90:68:15:50:42:b2: 5d:d2:df:5c:1a:52:f0:70:7c:0b:ab:61:dd:08:61: 9e:48:51:a3:12:da:13:1e:fc:81:a0:47:b0:0f:0b: 0d:cb:2c:a2:f6:c9:bc:c8:ff:4c:81:0f:64:73:8e: 3f:31:8b:0f:1c:82:4d:29:6f:0a:61:a8:b6:44:ab: 57:c4:2b:bb:d0:38:4c:9a:46:ea:4e:1c:02:e3:bf: 77:2d:c6:6f:a9:16:fe:33:e6:50:34:1a:85:f7:4c: f9:93:69:9f:ba:26:f3:2b:9a:b1:cc:cf:2b:76:a2: 95:c2:bf:21:be:a7:c0:20:ce:2e:8a:8e:c6:9c:b4: bb:d5:9d:af:5c:63:31:db:f0:26:36:58:b6:e1:94: 81:21:c4:e3:34:01:06:8d:db:b7:c9:7c:d1:03:69: ed:21:67:58:43:4a:36:f5:1c:d3:db:eb:dc:7c:df: 25:e1:1b:fc:b8:c1:44:3a:e5:01:da:cd:48:a9:55: b6:a6:8b:cd:25:d7:99:69:ae:93:a2:1a:31:63:31: 09:c3:11:bc:b4:be:13:54:53:d8:d4:45:ed:49:9c: ef:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:65:4A:E8:05:A3:79:8D:FF:72:6A:6D:2B:A6:BC:15:1C:07:F1:C7 X509v3 Authority Key Identifier: keyid:FF:92:34:7F:5D:54:68:81:1F:D2:53:A4:8B:FC:69:FE:57:0A:A4:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:70:3c:f1:97:08:3c:e2:8b:69:aa:29:60:18:44:ba:a7:d7: 51:33:da:c5:7e:56:2a:d7:61:23:c4:02:9e:9c:e1:a2:a5:dc: 9e:bd:a6:98:d9:85:a3:f6:02:20:00:5f:da:2e:d0:85:fd:fd: fd:66:a6:95:3d:45:97:10:1e:8e:39:99:1c:b0:00:d6:d9:07: b0:8b:8b:1c:d7:72:6f:68:5d:78:e3:90:af:18:dc:18:e2:70: 18:a3:6e:61:43:6b:b3:dc:01:a4:8d:5e:6a:7a:3c:3b:70:63: 2a:c3:4f:f2:a5:81:33:cd:a2:77:7c:80:aa:bd:4b:34:74:7e: 0c:35:1e:6c:41:f0:f2:56:9e:b4:1d:5a:0f:97:d0:f6:b8:51: 65:9f:aa:ad:8d:aa:7b:a7:da:b2:56:ac:ca:5e:cc:19:c0:61: 5d:5e:ba:5a:e3:b1:71:98:98:3a:dd:cc:4d:de:4e:ec:57:97: 91:ef:0a:02:9f:81:f0:c6:0b:88:57:3f:42:64:0f:8d:f7:30: 56:d3:f6:20:ed:cb:c7:de:8a:dc:05:f3:56:44:67:e1:6a:ab: a0:00:33:33:1b:d0:a2:6f:aa:a3:f4:3d:95:29:74:6f:7a:89: b6:b5:b2:26:2e:cc:96:ea:08:db:51:9e:78:f3:d0:3e:77:3b: 1c:a9:62:36 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MTc2OTExMC8GA1UEBRMoRkY5MjM0N0Y1RDU0Njg4MTFGRDI1M0E0OEJGQzY5RkU1 NzBBQTQ1MDAeFw0yNTA1MTEwNTI5MjVaFw0yNTA1MTgwNTI5MjVaMBgxFjAUBgNV BAMTDTY4MjAzNWI1LTI5OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrTqN8AfuTRmuzEQiZQZptMbnR57Q3W58F/KKrE+trrU7dF1v38ZBoFVBCsl3S 31waUvBwfAurYd0IYZ5IUaMS2hMe/IGgR7APCw3LLKL2ybzI/0yBD2Rzjj8xiw8c gk0pbwphqLZEq1fEK7vQOEyaRupOHALjv3ctxm+pFv4z5lA0GoX3TPmTaZ+6JvMr mrHMzyt2opXCvyG+p8Agzi6KjsactLvVna9cYzHb8CY2WLbhlIEhxOM0AQaN27fJ fNEDae0hZ1hDSjb1HNPb69x83yXhG/y4wUQ65QHazUipVbami80l15lprpOiGjFj MQnDEby0vhNUU9jURe1JnO+1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdmVK6AWj eY3/cmptK6a8FRwH8ccwHwYDVR0jBBgwFoAU/5I0f11UaIEf0lOki/xp/lcKpFAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxNzY5L0QyNkREREIwNzdC RTExRUY5RjJBNDU0N0M0RjlBRTAyL181STBmMTFVYUlFZjBsT2tpX3hwX2xjS3BG QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvXzVJMGYxMVVhSUVmMGxPa2lfeHBfbGNLcEZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx NzY5L0QyNkREREIwNzdCRTExRUY5RjJBNDU0N0M0RjlBRTAyL181STBmMTFVYUlF ZjBsT2tpX3hwX2xjS3BGQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMJwPPGXCDzii2mqKWAYRLqn11Ez2sV+VirXYSPEAp6c4aKl3J69ppjZ haP2AiAAX9ou0IX9/f1mppU9RZcQHo45mRywANbZB7CLixzXcm9oXXjjkK8Y3Bji cBijbmFDa7PcAaSNXmp6PDtwYyrDT/KlgTPNond8gKq9SzR0fgw1HmxB8PJWnrQd Wg+X0Pa4UWWfqq2Nqnun2rJWrMpezBnAYV1eulrjsXGYmDrdzE3eTuxXl5HvCgKf gfDGC4hXP0JkD433MFbT9iDty8feitwF81ZEZ+Fqq6AAMzMb0KJvqqP0PZUpdG96 iba1siYuzJbqCNtRnnjz0D53OxypYjY= -----END CERTIFICATE-----Generated at Tue May 13 01:44:27 2025 by rpki-client