$ rpki-client -vvf rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft File: ELQL29GDlBfXrRIzKwvm-fxugQU.mft (raw, json) Hash identifier: 94PTxG/A7LDUCoLPO4IQYlVRHFrVu082fKJ5r+5DZRw= Subject key identifier: 3D:9F:E0:12:FC:A5:10:FE:EB:91:67:35:E7:B9:59:FB:48:DD:48:6B Authority key identifier: 10:B4:0B:DB:D1:83:94:17:D7:AD:12:33:2B:0B:E6:F9:FC:6E:81:05 Certificate issuer: /CN=A914189D/serialNumber=10B40BDBD1839417D7AD12332B0BE6F9FC6E8105 Certificate serial: 03E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft Manifest number: 03DA Signing time: Sun 11 May 2025 00:09:39 +0000 Manifest this update: Sun 11 May 2025 00:09:39 +0000 Manifest next update: Sun 18 May 2025 00:09:39 +0000 Files and hashes: 1: ELQL29GDlBfXrRIzKwvm-fxugQU.crl (hash: XnIN0/dlr8XyCjnUi5TKULaAxAvKUtsP/llJX09G30Q=) 2: 05A179C2B02E11ECA990305CC4F9AE02.roa (hash: yxgOM7Alp9+Etb0L7ZdDdvPfWsF/rS6M3JXXFnzbA5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.crl rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:09:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 996 (0x3e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914189D, serialNumber=10B40BDBD1839417D7AD12332B0BE6F9FC6E8105 Validity Not Before: May 11 00:09:39 2025 GMT Not After : May 18 00:09:39 2025 GMT Subject: CN=681feac3-2a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0e:8f:13:77:49:ce:04:5e:f8:b6:d0:95:79: 5b:b8:f2:e8:ea:1c:bd:17:19:0e:6e:a7:19:23:81: f8:df:6e:64:fe:69:8c:ad:c2:f4:62:77:b5:9a:10: cc:23:9d:ae:24:bb:d1:4b:17:15:26:65:22:e5:e5: 80:1c:94:05:21:5a:e3:dc:e3:c9:3f:28:3f:c7:23: c1:dd:d6:e1:4b:a0:29:6a:91:9d:4e:3f:ea:52:38: 17:39:b0:28:33:cd:95:65:76:3f:17:d1:9d:64:80: 23:aa:75:ba:3e:0f:6f:30:43:b7:82:b9:15:89:3e: f7:b2:91:2d:60:d3:6f:63:15:d5:67:65:d9:e3:60: a7:f8:d8:4b:b6:7d:18:9a:74:07:46:27:c5:0f:41: 3c:7b:0f:bd:a7:d0:a6:b2:7b:a2:03:0f:e7:cd:72: 1d:b8:1f:c8:56:5f:11:39:2b:7d:2e:76:e9:24:97: 02:89:63:e3:9b:33:af:26:94:3c:e5:dc:f2:49:47: 01:34:6c:45:7f:28:a6:be:0b:9e:10:41:ec:33:49: 84:40:7d:62:ce:e0:5b:b0:61:89:cc:50:44:6c:c3: 53:c9:29:69:4b:91:13:04:22:2a:ff:0d:75:a6:ea: 1c:3e:20:a7:21:f2:f8:c6:a0:02:c5:52:ec:91:e4: f7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9F:E0:12:FC:A5:10:FE:EB:91:67:35:E7:B9:59:FB:48:DD:48:6B X509v3 Authority Key Identifier: keyid:10:B4:0B:DB:D1:83:94:17:D7:AD:12:33:2B:0B:E6:F9:FC:6E:81:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:89:80:7d:5c:06:8b:6e:15:00:aa:a6:db:6a:7f:b8:ee:c4: c2:7f:80:3a:b6:fa:45:06:8b:4d:34:de:fd:b1:78:3e:c7:4f: f3:a0:86:fe:ef:f1:87:70:b9:f7:dc:74:8f:48:11:7e:f5:0b: 59:86:36:b2:5a:d9:3a:59:dd:53:0f:e9:05:c0:9c:4f:76:2a: 0e:ef:84:29:dd:49:76:39:88:90:55:c3:91:f6:88:d4:10:61: db:32:37:3e:70:57:1c:74:d8:5f:42:03:37:21:17:0b:a0:93: 08:aa:2d:ae:fb:94:47:33:ec:ec:de:98:75:cd:42:6e:1c:4e: 22:0c:ad:00:54:45:6b:ce:9b:3b:61:30:23:94:c9:9e:a7:47: 11:25:db:bd:fd:3a:c3:38:bc:b3:7b:14:d1:b8:2c:df:f3:2e: 8f:b7:e2:4b:0a:1e:c2:74:43:e3:27:fa:bc:b0:3e:18:2c:b9: 93:4d:32:35:7a:ba:72:0a:6a:51:6b:0a:c5:80:44:09:46:63: 96:16:24:41:d0:de:09:fc:2c:a5:50:62:33:6c:87:17:2d:ad: 86:64:b8:1e:71:1c:a9:f8:09:09:22:6b:90:7c:5c:ab:c6:f0: 5f:40:7a:31:12:1d:71:9c:2f:a3:19:74:2b:fa:2c:b3:c1:49: 13:99:46:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE4OUQxMTAvBgNVBAUTKDEwQjQwQkRCRDE4Mzk0MTdEN0FEMTIzMzJCMEJFNkY5 RkM2RTgxMDUwHhcNMjUwNTExMDAwOTM5WhcNMjUwNTE4MDAwOTM5WjAYMRYwFAYD VQQDEw02ODFmZWFjMy0yYTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQ6PE3dJzgRe+LbQlXlbuPLo6hy9FxkObqcZI4H4325k/mmMrcL0Yne1mhDM I52uJLvRSxcVJmUi5eWAHJQFIVrj3OPJPyg/xyPB3dbhS6ApapGdTj/qUjgXObAo M82VZXY/F9GdZIAjqnW6Pg9vMEO3grkViT73spEtYNNvYxXVZ2XZ42Cn+NhLtn0Y mnQHRifFD0E8ew+9p9CmsnuiAw/nzXIduB/IVl8ROSt9LnbpJJcCiWPjmzOvJpQ8 5dzySUcBNGxFfyimvgueEEHsM0mEQH1izuBbsGGJzFBEbMNTySlpS5ETBCIq/w11 puocPiCnIfL4xqACxVLskeT3nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2f4BL8 pRD+65FnNee5WftI3UhrMB8GA1UdIwQYMBaAFBC0C9vRg5QX160SMysL5vn8boEF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTg5RC9GNDRGNTZFMjgx QzcxMUVDOTk1MjMyNERDNEY5QUUwMi9FTFFMMjlHRGxCZlhyUkl6S3d2bS1meHVn UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VMUUwyOUdEbEJmWHJSSXpLd3ZtLWZ4dWdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTg5RC9GNDRGNTZFMjgxQzcxMUVDOTk1MjMyNERDNEY5QUUwMi9FTFFMMjlHRGxC ZlhyUkl6S3d2bS1meHVnUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwiYB9XAaLbhUAqqbban+47sTCf4A6tvpFBotNNN79sXg+x0/zoIb+ 7/GHcLn33HSPSBF+9QtZhjayWtk6Wd1TD+kFwJxPdioO74Qp3Ul2OYiQVcOR9ojU EGHbMjc+cFccdNhfQgM3IRcLoJMIqi2u+5RHM+zs3ph1zUJuHE4iDK0AVEVrzps7 YTAjlMmep0cRJdu9/TrDOLyzexTRuCzf8y6Pt+JLCh7CdEPjJ/q8sD4YLLmTTTI1 erpyCmpRawrFgEQJRmOWFiRB0N4J/CylUGIzbIcXLa2GZLgecRyp+AkJImuQfFyr xvBfQHoxEh1xnC+jGXQr+iyzwUkTmUa8 -----END CERTIFICATE-----Generated at Sun May 11 10:25:21 2025 by rpki-client