$ rpki-client -vvf rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft File: edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft (raw, json) Hash identifier: TIz+IqRpdk7GBI37rmtDVHYkze+3xq/m5Azn3Guie7A= Subject key identifier: F9:F2:E4:45:74:E9:2F:C3:41:7E:E0:7C:01:7D:84:09:46:83:45:FB Authority key identifier: 79:D6:30:5F:A2:2F:FD:F7:E3:51:06:74:97:86:2C:64:A1:65:47:2F Certificate issuer: /CN=A914541C/serialNumber=79D6305FA22FFDF7E351067497862C64A165472F Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft Manifest number: D5 Signing time: Tue 13 May 2025 04:47:58 +0000 Manifest this update: Tue 13 May 2025 04:47:58 +0000 Manifest next update: Tue 20 May 2025 04:47:57 +0000 Files and hashes: 1: edYwX6Iv_ffjUQZ0l4YsZKFlRy8.crl (hash: +WlzjNZKbVnZVVHN5X3RBPp+9z+q4kw2T34tSf/Rws0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.crl rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914541C, serialNumber=79D6305FA22FFDF7E351067497862C64A165472F Validity Not Before: May 13 04:47:58 2025 GMT Not After : May 20 04:47:57 2025 GMT Subject: CN=6822cefe-c6bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:dd:71:4e:9e:e0:9d:2c:a5:3f:e4:43:37:76: 33:4c:35:43:e9:09:8c:84:9a:5d:81:1e:b3:ee:77: 5c:e3:5e:73:0c:47:c7:ba:a6:ff:b7:46:15:be:42: 42:cf:fe:b4:b3:76:a7:4c:56:7d:0e:2b:94:6d:0a: a4:b2:61:ac:4d:ba:81:d4:f5:06:c9:f2:75:7f:47: 40:fb:b3:c9:a4:88:d8:25:cb:fb:57:ca:ed:d7:f5: eb:da:cb:4e:0d:07:f8:6a:7d:db:85:84:76:c9:3f: 78:c1:8a:3b:0d:f1:09:20:2a:46:3b:c8:ef:4e:b9: 92:35:b3:1a:68:99:bd:09:43:04:4b:33:8b:9e:a9: 46:5a:5d:1d:85:1e:30:09:0e:e2:2d:51:de:e9:09: 76:0e:9b:78:01:8c:44:1d:0f:93:3d:07:6f:1b:df: 39:6f:8f:a5:93:4c:61:24:ba:75:59:f8:14:14:80: 42:9b:10:9d:d5:ae:ee:c5:21:16:fa:c4:34:5b:5d: ba:05:68:c7:4b:8b:81:34:42:e1:56:a3:d3:6e:d5: 3c:18:75:a8:3a:1a:a5:b0:1b:f9:33:40:01:3e:e6: 48:0e:32:c4:33:b3:fe:2f:7e:86:bd:fc:af:a0:d1: b3:dd:1b:e4:2a:b2:4f:6b:fd:f3:01:a7:52:b8:3b: 30:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F2:E4:45:74:E9:2F:C3:41:7E:E0:7C:01:7D:84:09:46:83:45:FB X509v3 Authority Key Identifier: keyid:79:D6:30:5F:A2:2F:FD:F7:E3:51:06:74:97:86:2C:64:A1:65:47:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:b3:95:af:3d:40:8c:f5:3b:cd:45:67:15:78:45:95:ae:4f: 9b:e8:1b:e6:29:47:d6:a7:d9:03:c3:7e:cc:78:68:cd:31:c3: 50:b4:00:ef:79:5d:fe:58:9c:63:4a:9d:48:fd:c5:3f:8d:27: db:9d:5b:9c:6b:58:aa:30:c6:d5:39:00:06:9a:c9:47:a4:6d: 59:d4:c0:f5:1e:26:03:9e:8b:88:48:ad:17:bf:89:74:02:b9: 11:52:0e:b6:a6:6a:87:51:7d:5c:37:d0:64:e3:28:31:f6:98: c1:cd:be:11:54:a9:b0:be:ff:f0:87:34:ba:03:81:97:7b:c9: 05:dd:f5:c1:c9:09:db:0b:a2:6f:2c:aa:6d:a1:03:40:17:47: e1:11:16:49:3b:76:92:bf:ac:94:4e:3c:f6:0f:da:fe:33:86: 19:a8:6a:82:c7:67:d7:a8:0e:49:7f:e0:c4:b5:f2:b1:ee:05: 7a:38:5e:13:6d:5c:71:52:40:bf:c9:a0:b5:35:63:34:a7:49: 39:6c:dc:4d:f8:2f:89:fb:7d:04:2b:f4:4f:98:cc:a0:a1:3c: dd:a6:2f:b8:97:39:0b:6a:34:97:0e:1d:b1:4a:e1:b8:91:dd: 9e:69:4d:4a:3b:db:7d:eb:e1:62:8f:25:75:4e:56:27:94:97: b1:96:44:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0MUMxMTAvBgNVBAUTKDc5RDYzMDVGQTIyRkZERjdFMzUxMDY3NDk3ODYyQzY0 QTE2NTQ3MkYwHhcNMjUwNTEzMDQ0NzU4WhcNMjUwNTIwMDQ0NzU3WjAYMRYwFAYD VQQDEw02ODIyY2VmZS1jNmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwN1xTp7gnSylP+RDN3YzTDVD6QmMhJpdgR6z7ndc415zDEfHuqb/t0YVvkJC z/60s3anTFZ9DiuUbQqksmGsTbqB1PUGyfJ1f0dA+7PJpIjYJcv7V8rt1/Xr2stO DQf4an3bhYR2yT94wYo7DfEJICpGO8jvTrmSNbMaaJm9CUMESzOLnqlGWl0dhR4w CQ7iLVHe6Ql2Dpt4AYxEHQ+TPQdvG985b4+lk0xhJLp1WfgUFIBCmxCd1a7uxSEW +sQ0W126BWjHS4uBNELhVqPTbtU8GHWoOhqlsBv5M0ABPuZIDjLEM7P+L36Gvfyv oNGz3RvkKrJPa/3zAadSuDswawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPny5EV0 6S/DQX7gfAF9hAlGg0X7MB8GA1UdIwQYMBaAFHnWMF+iL/3341EGdJeGLGShZUcv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTQxQy81M0FBQjRFNkU3 MkYxMUVFQjcyQzZFNjhDNEY5QUUwMi9lZFl3WDZJdl9mZmpVUVowbDRZc1pLRmxS eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2VkWXdYNkl2X2ZmalVRWjBsNFlzWktGbFJ5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTQxQy81M0FBQjRFNkU3MkYxMUVFQjcyQzZFNjhDNEY5QUUwMi9lZFl3WDZJdl9m ZmpVUVowbDRZc1pLRmxSeTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYs5WvPUCM9TvNRWcVeEWVrk+b6BvmKUfWp9kDw37MeGjNMcNQtADv eV3+WJxjSp1I/cU/jSfbnVuca1iqMMbVOQAGmslHpG1Z1MD1HiYDnouISK0Xv4l0 ArkRUg62pmqHUX1cN9Bk4ygx9pjBzb4RVKmwvv/whzS6A4GXe8kF3fXByQnbC6Jv LKptoQNAF0fhERZJO3aSv6yUTjz2D9r+M4YZqGqCx2fXqA5Jf+DEtfKx7gV6OF4T bVxxUkC/yaC1NWM0p0k5bNxN+C+J+30EK/RPmMygoTzdpi+4lzkLajSXDh2xSuG4 kd2eaU1KO9t96+FijyV1TlYnlJexlkRy -----END CERTIFICATE-----Generated at Wed May 14 12:46:29 2025 by rpki-client