$ rpki-client -vvf rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft File: _egcp2lelKkL_f2D8Rp3NGMIF-g.mft (raw, json) Hash identifier: 8rK1GKC1Nlz1KeFKLEEIfExlOa311+OZ4hWQX8m9N/I= Subject key identifier: 4F:35:02:80:28:0C:62:3A:C7:BF:44:FD:25:22:8D:BA:7D:D4:A4:BE Authority key identifier: FD:E8:1C:A7:69:5E:94:A9:0B:FD:FD:83:F1:1A:77:34:63:08:17:E8 Certificate issuer: /CN=A91127B5/serialNumber=FDE81CA7695E94A90BFDFD83F11A7734630817E8 Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft Manifest number: 0119 Signing time: Fri 09 May 2025 03:56:50 +0000 Manifest this update: Fri 09 May 2025 03:56:50 +0000 Manifest next update: Fri 16 May 2025 03:56:50 +0000 Files and hashes: 1: _egcp2lelKkL_f2D8Rp3NGMIF-g.crl (hash: zJg4XExLotUeY4pHNFzavJEbyzY4xJHpR8o9+rEmYKw=) 2: AA02862E890C11EE87862551C4F9AE02.roa (hash: iEIKCf+XGWrseL7l7p29L+eQtWAuRRnnoodUimUnIC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.crl rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 03:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91127B5, serialNumber=FDE81CA7695E94A90BFDFD83F11A7734630817E8 Validity Not Before: May 9 03:56:50 2025 GMT Not After : May 16 03:56:50 2025 GMT Subject: CN=681d7d02-dc25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7f:ce:a0:72:38:3e:c6:be:45:b4:8e:46:2f: 89:d3:ea:0d:0e:ab:40:dc:68:ce:3f:3d:c3:27:db: ce:45:d0:49:80:5b:46:2e:a0:de:e8:c1:dd:22:49: 99:5e:11:1a:90:1d:66:e9:72:4b:8d:14:b4:57:3a: ed:96:78:0e:ec:80:33:2d:10:73:e5:e8:db:81:7c: 75:e1:77:5a:ab:f7:32:20:94:f7:4e:4d:10:8e:b6: b3:9b:c3:4a:0c:6f:e1:3b:3c:29:85:c6:57:34:6a: dd:81:2b:a5:4a:31:5a:3d:88:c3:ae:ce:4b:87:14: 7b:fa:b9:46:de:53:56:ac:7f:66:da:52:88:5a:9d: 21:e5:30:a6:5d:54:58:5b:a4:cb:c4:e8:43:b5:21: 57:e6:39:8e:86:eb:85:4d:b4:a3:e3:45:0b:8e:7d: 0b:c9:6e:4c:a0:0c:60:5e:ae:13:c9:d9:00:24:20: 57:c5:dc:16:14:c3:2e:a2:e9:1a:34:2f:45:de:bc: c0:8b:84:2a:89:68:5e:34:78:09:d5:e2:38:21:2e: 05:ca:b5:85:a6:cb:3e:5a:2d:e2:3c:dd:04:2e:05: 00:c3:75:80:5c:26:61:54:a1:d4:bc:37:fd:97:61: 90:d8:f8:0a:ca:e2:19:cb:6e:d8:02:7f:01:10:56: 8e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:35:02:80:28:0C:62:3A:C7:BF:44:FD:25:22:8D:BA:7D:D4:A4:BE X509v3 Authority Key Identifier: keyid:FD:E8:1C:A7:69:5E:94:A9:0B:FD:FD:83:F1:1A:77:34:63:08:17:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:3c:79:ec:ce:65:d4:8a:b2:5e:16:b8:bf:16:8b:f2:b4:6d: e8:a5:a2:65:a5:68:17:f6:fd:19:6f:46:30:c7:d3:f8:bf:7f: fc:78:21:e8:09:3d:9d:4e:ff:b6:31:5a:7d:9c:87:66:d3:0f: e4:8e:89:79:b7:49:c8:69:1f:41:70:19:75:a8:46:88:6b:cd: e7:ee:4d:98:fd:7a:75:de:82:36:24:59:4f:aa:b6:03:4e:57: 7c:ca:a3:43:eb:a9:25:f6:7c:4d:3e:d3:53:ba:a2:a4:11:9f: b3:65:ab:01:eb:f7:8a:a1:7d:15:f3:9d:92:00:eb:e6:08:b3: 24:7b:dd:59:f2:1c:e8:e9:55:67:51:3e:15:ad:95:1c:07:d7: c7:3e:85:59:01:bc:66:33:91:f1:77:b5:ec:ec:dc:d0:43:c6: 8b:ce:13:55:8a:bb:ee:35:20:4c:ad:01:a5:5a:47:f8:e4:2d: b1:3c:7f:09:3c:09:b3:e6:6d:7f:da:32:28:5e:1a:0d:4a:8a: 2f:f7:76:cf:04:70:0b:40:c5:00:44:61:1a:f4:fb:2d:f2:0a: 5e:40:9f:45:7f:5b:16:d3:1c:a2:17:5c:eb:8d:a4:dd:d8:49: 56:b9:1a:2f:55:62:d6:9d:d4:bd:b4:ca:6a:3e:05:dc:2f:91: 11:a5:33:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3QjUxMTAvBgNVBAUTKEZERTgxQ0E3Njk1RTk0QTkwQkZERkQ4M0YxMUE3NzM0 NjMwODE3RTgwHhcNMjUwNTA5MDM1NjUwWhcNMjUwNTE2MDM1NjUwWjAYMRYwFAYD VQQDEw02ODFkN2QwMi1kYzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxn/OoHI4Psa+RbSORi+J0+oNDqtA3GjOPz3DJ9vORdBJgFtGLqDe6MHdIkmZ XhEakB1m6XJLjRS0VzrtlngO7IAzLRBz5ejbgXx14Xdaq/cyIJT3Tk0Qjrazm8NK DG/hOzwphcZXNGrdgSulSjFaPYjDrs5LhxR7+rlG3lNWrH9m2lKIWp0h5TCmXVRY W6TLxOhDtSFX5jmOhuuFTbSj40ULjn0LyW5MoAxgXq4TydkAJCBXxdwWFMMuouka NC9F3rzAi4QqiWheNHgJ1eI4IS4FyrWFpss+Wi3iPN0ELgUAw3WAXCZhVKHUvDf9 l2GQ2PgKyuIZy27YAn8BEFaO6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE81AoAo DGI6x79E/SUijbp91KS+MB8GA1UdIwQYMBaAFP3oHKdpXpSpC/39g/EadzRjCBfo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdCNS8wRjE5NEVBRTg5 MEMxMUVFOURGNzJDNTBDNEY5QUUwMi9fZWdjcDJsZWxLa0xfZjJEOFJwM05HTUlG LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19lZ2NwMmxlbEtrTF9mMkQ4UnAzTkdNSUYtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjdCNS8wRjE5NEVBRTg5MEMxMUVFOURGNzJDNTBDNEY5QUUwMi9fZWdjcDJsZWxL a0xfZjJEOFJwM05HTUlGLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfPHnszmXUirJeFri/FovytG3opaJlpWgX9v0Zb0Ywx9P4v3/8eCHo CT2dTv+2MVp9nIdm0w/kjol5t0nIaR9BcBl1qEaIa83n7k2Y/Xp13oI2JFlPqrYD Tld8yqND66kl9nxNPtNTuqKkEZ+zZasB6/eKoX0V852SAOvmCLMke91Z8hzo6VVn UT4VrZUcB9fHPoVZAbxmM5Hxd7Xs7NzQQ8aLzhNVirvuNSBMrQGlWkf45C2xPH8J PAmz5m1/2jIoXhoNSoov93bPBHALQMUARGEa9Pst8gpeQJ9Ff1sW0xyiF1zrjaTd 2ElWuRovVWLWndS9tMpqPgXcL5ERpTMT -----END CERTIFICATE-----Generated at Sun May 11 02:00:20 2025 by rpki-client