$ rpki-client -vvf rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft File: eSD4yoTskTxpqY1UNxIJtDTDMZE.mft (raw, json) Hash identifier: ZEV9EYjPuyffvu8t+u+y/Uce0bpVnPcr303U3Ls2YfQ= Subject key identifier: A0:83:09:D0:55:24:55:53:DB:29:DC:88:4E:0D:C0:5C:9B:60:EE:8B Authority key identifier: 79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91 Certificate issuer: /CN=A914A554/serialNumber=7920F8CA84EC913C69A98D54371209B434C33191 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft Manifest number: 6D Signing time: Thu 15 May 2025 06:15:01 +0000 Manifest this update: Thu 15 May 2025 06:15:00 +0000 Manifest next update: Thu 22 May 2025 06:15:00 +0000 Files and hashes: 1: eSD4yoTskTxpqY1UNxIJtDTDMZE.crl (hash: f8DRLfUUgvQPMrY2OgW9NGVmRW48/dljs8cuWsZ3nMk=) 2: E188EE7A935711EFBE98944CC4F9AE02.roa (hash: X4btbpCoiYoIXbuMOSmCOyUWCj9oTbrBupewiVqB8lU=) 3: F561A3BE935811EF97E1194EC4F9AE02.roa (hash: aPfjmDHXujlDq60sfxkeUX3+9b02nUsv2TYNf5bZEBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A554, serialNumber=7920F8CA84EC913C69A98D54371209B434C33191 Validity Not Before: May 15 06:15:00 2025 GMT Not After : May 22 06:15:00 2025 GMT Subject: CN=68258664-108e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a9:ec:d0:6d:c2:b2:4c:4b:72:85:5d:62:04: 8a:84:2c:81:1d:04:4e:fa:38:72:da:46:65:27:b3: c1:14:8d:b8:45:68:7d:e0:8b:a1:97:c6:cb:6b:fe: 3c:03:c3:d6:4c:2d:e4:23:ba:8c:aa:56:7d:19:e3: b8:8f:79:c8:3f:98:7e:d6:a2:a6:0d:13:d1:90:ab: 7f:61:58:67:30:9f:98:eb:f5:c0:1a:b4:0e:24:d0: c1:bc:3e:38:b0:f6:e7:bd:f7:9b:e4:a1:54:e0:03: 66:53:68:85:d7:ba:41:66:6c:d2:ef:44:7c:d1:12: c6:6f:85:10:b1:b0:7c:0d:1f:42:2d:dc:3b:c2:e5: 7e:f6:0a:4c:a1:95:85:4e:dd:99:d3:fc:7f:2f:60: b2:99:6f:07:28:24:a4:8d:b8:29:c8:b5:ec:f1:34: b3:82:1a:66:88:d8:16:48:77:42:b1:3e:7f:4e:fe: cd:2e:a3:29:ca:96:29:bc:ea:29:3d:4f:a7:4d:c5: 4c:6c:6d:ad:1c:74:40:1f:b5:33:c5:f0:db:55:26: f9:23:52:91:08:01:3e:78:13:01:a0:77:78:02:2b: f4:81:b5:83:8c:14:a3:d2:31:ff:6b:aa:29:56:a8: c3:8c:19:9e:0c:68:68:cb:81:80:dd:c5:9e:67:4f: 6f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:83:09:D0:55:24:55:53:DB:29:DC:88:4E:0D:C0:5C:9B:60:EE:8B X509v3 Authority Key Identifier: keyid:79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:66:2c:17:9b:46:04:70:b3:c2:e8:e6:f6:2c:76:a0:f9:e5: 0a:72:b2:f1:b4:29:b5:4f:d7:ad:85:8a:a0:62:8e:94:a0:96: 0f:cc:8d:5c:b9:b3:6c:f7:23:2a:2f:45:f1:6e:8e:45:82:29: 5a:65:e2:7e:33:7e:68:72:59:a3:6d:fa:c7:68:ca:f7:97:93: 7a:1d:0c:da:19:42:21:69:71:ba:f6:93:9b:8c:d1:b7:ff:39: 09:9c:c4:b2:71:fd:f3:db:13:bf:79:49:b6:46:b6:44:92:1d: d9:1e:51:f7:51:0f:17:ef:82:de:cb:a2:be:e3:05:8d:e2:47: 87:3d:b2:59:a0:5e:28:c9:90:d1:06:90:f3:eb:9e:e7:2d:c0: b6:c3:81:a1:e5:3a:4a:4d:0e:c8:dd:e5:74:80:67:e2:31:56: fe:18:5e:97:97:25:c9:6f:7f:46:de:ea:19:0f:f6:68:c9:57: d5:48:48:29:4c:7a:04:82:3a:1c:d0:12:f2:83:be:d6:b8:3f: 90:8c:0c:a0:98:be:8e:0e:75:03:30:20:b7:d2:ce:f1:5c:16: 07:12:6d:10:44:ac:ab:e1:e2:b5:cc:2e:f8:c3:04:14:c9:cf: d7:26:23:dc:eb:ba:d1:c5:77:da:8f:ec:32:94:17:6e:1b:af: bd:8d:0e:1d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QTU1NDExMC8GA1UEBRMoNzkyMEY4Q0E4NEVDOTEzQzY5QTk4RDU0MzcxMjA5QjQz NEMzMzE5MTAeFw0yNTA1MTUwNjE1MDBaFw0yNTA1MjIwNjE1MDBaMBgxFjAUBgNV BAMTDTY4MjU4NjY0LTEwOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmqezQbcKyTEtyhV1iBIqELIEdBE76OHLaRmUns8EUjbhFaH3gi6GXxstr/jwD w9ZMLeQjuoyqVn0Z47iPecg/mH7WoqYNE9GQq39hWGcwn5jr9cAatA4k0MG8Pjiw 9ue995vkoVTgA2ZTaIXXukFmbNLvRHzREsZvhRCxsHwNH0It3DvC5X72CkyhlYVO 3ZnT/H8vYLKZbwcoJKSNuCnItezxNLOCGmaI2BZId0KxPn9O/s0uoynKlim86ik9 T6dNxUxsba0cdEAftTPF8NtVJvkjUpEIAT54EwGgd3gCK/SBtYOMFKPSMf9rqilW qMOMGZ4MaGjLgYDdxZ5nT2+LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoIMJ0FUk VVPbKdyITg3AXJtg7oswHwYDVR0jBBgwFoAUeSD4yoTskTxpqY1UNxIJtDTDMZEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRBNTU0Lzc5Rjg5OTgyOTM1 NjExRUZBOEVERUIzM0M0RjlBRTAyL2VTRDR5b1Rza1R4cHFZMVVOeElKdERURE1a RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZVNENHlvVHNrVHhwcVkxVU54SUp0RFRETVpFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRB NTU0Lzc5Rjg5OTgyOTM1NjExRUZBOEVERUIzM0M0RjlBRTAyL2VTRDR5b1Rza1R4 cHFZMVVOeElKdERURE1aRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANdmLBebRgRws8Lo5vYsdqD55QpysvG0KbVP162FiqBijpSglg/MjVy5 s2z3IyovRfFujkWCKVpl4n4zfmhyWaNt+sdoyveXk3odDNoZQiFpcbr2k5uM0bf/ OQmcxLJx/fPbE795SbZGtkSSHdkeUfdRDxfvgt7Lor7jBY3iR4c9slmgXijJkNEG kPPrnuctwLbDgaHlOkpNDsjd5XSAZ+IxVv4YXpeXJclvf0be6hkP9mjJV9VISClM egSCOhzQEvKDvta4P5CMDKCYvo4OdQMwILfSzvFcFgcSbRBErKvh4rXMLvjDBBTJ z9cmI9zrutHFd9qP7DKUF24br72NDh0= -----END CERTIFICATE-----Generated at Fri May 16 22:41:58 2025 by rpki-client