$ rpki-client -vvf rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft File: E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft (raw, json) Hash identifier: dOj0i/9jBCniWpN4CXbxS6PKgEmSKQwsMsSSoP2QA7Y= Subject key identifier: 5E:E2:79:F7:4E:01:55:B7:AC:7B:5B:7E:A8:FB:54:37:46:0B:45:CA Authority key identifier: 13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4 Certificate issuer: /CN=A91334F0/serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4 Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft Manifest number: A5 Signing time: Thu 15 May 2025 05:26:27 +0000 Manifest this update: Thu 15 May 2025 05:26:27 +0000 Manifest next update: Thu 22 May 2025 05:26:27 +0000 Files and hashes: 1: E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl (hash: xeMLuO5Bp0BIuwdczjW+zYEHHzRbSSmLn31L6c3BU+w=) 2: 836F847C340011EFA88BE541C4F9AE02.roa (hash: fcp/kSCKLyceNrAoRX8L9CBT7OWwtj1KK81m97wM7rw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91334F0, serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4 Validity Not Before: May 15 05:26:27 2025 GMT Not After : May 22 05:26:27 2025 GMT Subject: CN=68257b03-ee06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f4:54:80:79:32:83:93:d3:41:6a:96:a1:0d: d3:e8:f4:35:1b:01:d0:59:3f:3f:86:ba:ec:c3:d8: 12:94:15:90:4d:45:3a:e8:aa:75:79:4c:1e:31:e0: f6:8f:b1:f9:13:0d:74:79:6c:84:31:6b:f6:0a:85: f9:6b:9e:c6:60:8b:61:7d:5f:14:71:54:a2:87:ea: 3b:8f:2a:57:0b:9d:c1:47:6a:69:fb:23:44:26:0a: 6c:ea:6a:4d:00:a3:c1:ee:e8:a7:aa:c7:d5:84:9f: 25:e5:e9:cc:8c:be:13:41:a4:ee:c2:d7:6e:f4:d7: a9:a6:b3:77:83:2a:57:95:23:01:ad:23:6b:ba:91: 78:cf:25:c2:dd:08:54:0b:24:41:e4:a9:02:0c:23: 59:ff:e6:a4:bf:7b:1f:e6:7b:90:26:84:81:29:25: 42:3d:66:e8:b1:2f:87:04:bf:46:54:f2:2e:60:10: f0:d1:d0:8e:be:b7:ba:5c:62:44:82:9b:13:83:f6: a9:84:ff:a1:c5:ef:89:dd:7d:97:0b:8f:0b:07:77: 50:12:fa:15:c8:04:e1:0d:83:81:23:96:9f:51:80: fc:a5:14:b3:69:7f:53:c8:d4:07:5f:10:a6:28:33: 71:43:f5:fc:ed:f5:72:46:75:05:34:fb:aa:49:33: 85:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E2:79:F7:4E:01:55:B7:AC:7B:5B:7E:A8:FB:54:37:46:0B:45:CA X509v3 Authority Key Identifier: keyid:13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:c4:72:38:31:40:a4:27:e9:6b:00:2c:24:bc:05:2e:c3:1e: b3:0d:7c:07:a9:d6:3a:e8:ef:dc:c2:32:26:85:a5:bc:8c:2e: 3d:d0:d8:ba:e5:c4:41:83:2d:f3:13:a2:9f:b9:2e:29:09:75: a4:b1:ef:c8:6b:77:dc:63:dd:0a:66:48:ec:9d:6e:10:d5:87: 83:72:63:e3:6d:b5:22:11:b6:a7:f4:d7:cd:8f:3b:68:f2:6b: dd:43:27:f1:3f:aa:c9:74:68:6b:0b:0e:ac:a8:0f:7a:fd:c0: 62:36:79:f6:53:e3:f5:3f:22:4d:27:d6:a9:e4:a3:9f:93:c1: 96:50:56:53:1b:69:75:0f:a3:8d:3d:8e:12:47:8e:e8:7c:3a: 99:71:3a:c0:2f:f0:d4:3f:9f:61:21:35:c4:62:07:8e:9a:34: c6:02:76:44:a7:78:b7:cc:1b:c2:f1:3c:35:c2:e3:14:c1:7a: 9c:19:dd:af:52:a2:aa:b9:ef:aa:6b:4a:51:65:9b:35:f1:05: 45:4b:1c:b8:1e:e4:fd:fe:12:fd:4c:1e:dc:0f:a4:91:84:34: 91:af:5c:db:5c:47:62:5e:3c:56:f6:c1:c9:9a:f6:3d:e8:a5: 92:d8:62:7c:cf:3c:fb:30:16:8a:b4:30:72:47:53:d3:74:45: f2:8c:ef:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0RjAxMTAvBgNVBAUTKDEzNDZGNjVENjI5RkZGOTM2QjBGQzRDRjEyNzUwOUI2 ODJFOEUzRTQwHhcNMjUwNTE1MDUyNjI3WhcNMjUwNTIyMDUyNjI3WjAYMRYwFAYD VQQDEw02ODI1N2IwMy1lZTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufRUgHkyg5PTQWqWoQ3T6PQ1GwHQWT8/hrrsw9gSlBWQTUU66Kp1eUweMeD2 j7H5Ew10eWyEMWv2CoX5a57GYIthfV8UcVSih+o7jypXC53BR2pp+yNEJgps6mpN AKPB7uinqsfVhJ8l5enMjL4TQaTuwtdu9NepprN3gypXlSMBrSNrupF4zyXC3QhU CyRB5KkCDCNZ/+akv3sf5nuQJoSBKSVCPWbosS+HBL9GVPIuYBDw0dCOvre6XGJE gpsTg/aphP+hxe+J3X2XC48LB3dQEvoVyAThDYOBI5afUYD8pRSzaX9TyNQHXxCm KDNxQ/X87fVyRnUFNPuqSTOF/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7iefdO AVW3rHtbfqj7VDdGC0XKMB8GA1UdIwQYMBaAFBNG9l1in/+Taw/EzxJ1CbaC6OPk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzRGMC8wRDQ2Q0JFODM0 MDAxMUVGOTQ3Nzk1NDBDNEY5QUUwMi9FMGIyWFdLZl81TnJEOFRQRW5VSnRvTG80 LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0UwYjJYV0tmXzVOckQ4VFBFblVKdG9MbzQtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzRGMC8wRDQ2Q0JFODM0MDAxMUVGOTQ3Nzk1NDBDNEY5QUUwMi9FMGIyWFdLZl81 TnJEOFRQRW5VSnRvTG80LVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5xHI4MUCkJ+lrACwkvAUuwx6zDXwHqdY66O/cwjImhaW8jC490Ni6 5cRBgy3zE6KfuS4pCXWkse/Ia3fcY90KZkjsnW4Q1YeDcmPjbbUiEban9NfNjzto 8mvdQyfxP6rJdGhrCw6sqA96/cBiNnn2U+P1PyJNJ9ap5KOfk8GWUFZTG2l1D6ON PY4SR47ofDqZcTrAL/DUP59hITXEYgeOmjTGAnZEp3i3zBvC8Tw1wuMUwXqcGd2v UqKque+qa0pRZZs18QVFSxy4HuT9/hL9TB7cD6SRhDSRr1zbXEdiXjxW9sHJmvY9 6KWS2GJ8zzz7MBaKtDByR1PTdEXyjO9q -----END CERTIFICATE-----Generated at Fri May 16 05:09:10 2025 by rpki-client