$ rpki-client -vvf rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft File: peado7v7jl3TlkjmpD4A-nI95lg.mft (raw, json) Hash identifier: zrASuD5LzufClqiBUWzygv4Sxh213uPn1gr/zjIHIWc= Subject key identifier: 12:06:FF:2D:FA:13:39:11:2C:07:86:90:81:17:CD:B8:38:21:21:54 Authority key identifier: A5:E6:9D:A3:BB:FB:8E:5D:D3:96:48:E6:A4:3E:00:FA:72:3D:E6:58 Certificate issuer: /CN=A91190B4/serialNumber=A5E69DA3BBFB8E5DD39648E6A43E00FA723DE658 Certificate serial: 0AA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft Manifest number: 0A9C Signing time: Fri 16 May 2025 19:48:17 +0000 Manifest this update: Fri 16 May 2025 19:48:17 +0000 Manifest next update: Fri 23 May 2025 19:48:17 +0000 Files and hashes: 1: peado7v7jl3TlkjmpD4A-nI95lg.crl (hash: A9Qyau0a8IaVQko7tm0G4iJlPkM22kcRDQJDiQDvl/g=) 2: 55BC5674573F11EAA8901D3EC4F9AE02.roa (hash: GpKaeFCXgLqKWUd4/mw0J3pe4Cuty7kr/IEGoWg6an0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.crl rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 19:48:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2724 (0xaa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91190B4, serialNumber=A5E69DA3BBFB8E5DD39648E6A43E00FA723DE658 Validity Not Before: May 16 19:48:17 2025 GMT Not After : May 23 19:48:17 2025 GMT Subject: CN=68279681-c71d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:16:a6:2b:d6:4b:ef:c1:d4:f6:f8:03:b6:b2: 33:c8:79:6b:74:4a:3a:1d:58:36:2f:07:53:59:ed: 0b:20:29:d9:a4:b8:01:74:52:2f:42:ca:18:da:28: 07:cf:54:4a:86:2c:6b:94:19:af:92:e3:9b:fa:c7: c2:ae:19:98:da:86:06:68:2d:53:97:6a:7a:2a:5d: 29:5f:53:80:47:8e:99:24:a1:b6:d9:2a:a2:ba:35: 96:6d:9e:4a:0b:90:19:17:5a:53:34:a0:e1:71:af: a7:c2:1e:f2:e7:dc:ad:20:47:e2:25:43:32:ef:fb: 85:88:94:65:84:46:09:74:3c:b3:9e:e5:32:a5:4c: 44:75:13:bf:7c:5e:02:f7:9b:0c:69:eb:1f:45:ea: 94:2a:8a:b2:64:48:ca:f4:28:80:ac:5a:ce:82:c2: 4a:c5:84:c6:b5:3a:b1:f9:83:b1:82:f0:48:77:9c: b1:d5:42:20:ba:ae:c4:96:62:6d:d5:46:9e:84:e0: 36:69:07:1f:1c:65:6d:83:fc:fb:b6:66:46:95:03: de:e8:b8:10:11:b9:21:51:fb:4b:91:28:a3:b8:f6: f0:d7:92:05:a3:7c:a8:3a:a2:ce:48:08:73:73:98: 19:68:62:9c:69:3b:e9:13:42:d5:ca:07:4c:f3:e2: ac:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:06:FF:2D:FA:13:39:11:2C:07:86:90:81:17:CD:B8:38:21:21:54 X509v3 Authority Key Identifier: keyid:A5:E6:9D:A3:BB:FB:8E:5D:D3:96:48:E6:A4:3E:00:FA:72:3D:E6:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:2c:53:37:da:b8:b0:30:43:2a:53:9c:68:82:1e:fb:17:1b: d4:e7:e6:90:42:43:72:90:cc:93:54:00:a2:20:79:e0:5c:19: b1:4b:cb:29:22:cf:c2:74:57:17:b1:4a:38:c0:46:be:26:1d: 1f:f8:12:bf:55:2e:4b:43:97:3b:6b:78:bb:5e:d3:31:87:25: f4:8a:4d:22:32:23:78:07:6a:e1:13:87:32:46:8e:9c:86:08: 23:54:d9:0b:ff:7a:bd:34:e7:ad:95:30:f3:99:c4:84:ab:33: 42:5c:c4:16:7a:d4:33:43:26:34:23:5a:19:59:54:e4:7a:50: 43:ba:66:1d:bc:13:27:84:2f:81:c8:b8:3a:db:e2:a1:0e:7e: 8b:1b:39:ab:d1:e8:c6:23:12:70:8c:e3:5e:c0:e7:52:0f:a6: 05:36:19:6e:e0:16:3b:64:65:b9:71:dd:10:30:10:69:ec:c8: b6:72:9a:2e:c9:d5:5c:35:13:3b:34:fa:cd:67:63:33:34:e8: 55:79:00:a6:d0:f9:e9:1d:57:22:f6:a4:b0:c8:c5:06:ba:e7: df:ab:02:c1:ae:64:4f:a2:c9:54:a5:a6:5f:e6:0e:1d:21:06: ff:55:a4:20:76:1a:a2:cb:c8:f6:a2:fe:09:85:38:8d:b4:71: 7f:74:db:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkwQjQxMTAvBgNVBAUTKEE1RTY5REEzQkJGQjhFNUREMzk2NDhFNkE0M0UwMEZB NzIzREU2NTgwHhcNMjUwNTE2MTk0ODE3WhcNMjUwNTIzMTk0ODE3WjAYMRYwFAYD VQQDEw02ODI3OTY4MS1jNzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3hamK9ZL78HU9vgDtrIzyHlrdEo6HVg2LwdTWe0LICnZpLgBdFIvQsoY2igH z1RKhixrlBmvkuOb+sfCrhmY2oYGaC1Tl2p6Kl0pX1OAR46ZJKG22SqiujWWbZ5K C5AZF1pTNKDhca+nwh7y59ytIEfiJUMy7/uFiJRlhEYJdDyznuUypUxEdRO/fF4C 95sMaesfReqUKoqyZEjK9CiArFrOgsJKxYTGtTqx+YOxgvBId5yx1UIguq7ElmJt 1UaehOA2aQcfHGVtg/z7tmZGlQPe6LgQEbkhUftLkSijuPbw15IFo3yoOqLOSAhz c5gZaGKcaTvpE0LVygdM8+KssQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIG/y36 EzkRLAeGkIEXzbg4ISFUMB8GA1UdIwQYMBaAFKXmnaO7+45d05ZI5qQ+APpyPeZY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTBCNC9CQzhDMTBBRTU3 M0MxMUVBQjBBNEUzMzVDNEY5QUUwMi9wZWFkbzd2N2psM1Rsa2ptcEQ0QS1uSTk1 bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BlYWRvN3Y3amwzVGxram1wRDRBLW5JOTVsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTBCNC9CQzhDMTBBRTU3M0MxMUVBQjBBNEUzMzVDNEY5QUUwMi9wZWFkbzd2N2ps M1Rsa2ptcEQ0QS1uSTk1bGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdLFM32riwMEMqU5xogh77FxvU5+aQQkNykMyTVACiIHngXBmxS8sp Is/CdFcXsUo4wEa+Jh0f+BK/VS5LQ5c7a3i7XtMxhyX0ik0iMiN4B2rhE4cyRo6c hggjVNkL/3q9NOetlTDzmcSEqzNCXMQWetQzQyY0I1oZWVTkelBDumYdvBMnhC+B yLg62+KhDn6LGzmr0ejGIxJwjONewOdSD6YFNhlu4BY7ZGW5cd0QMBBp7Mi2cpou ydVcNRM7NPrNZ2MzNOhVeQCm0PnpHVci9qSwyMUGuuffqwLBrmRPoslUpaZf5g4d IQb/VaQgdhqiy8j2ov4JhTiNtHF/dNtl -----END CERTIFICATE-----Generated at Sat May 17 04:21:12 2025 by rpki-client