$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft File: EY5vss8Va51aJq7AUfscX37-AeM.mft (raw, json) Hash identifier: 0dvuoH/kLv7iTcLBYKZwC2qh8flv+lt7T8TL1UPxAps= Subject key identifier: 9A:E5:5D:FD:BC:BD:42:FF:E4:42:B6:63:D9:20:4D:6E:03:59:52:89 Authority key identifier: 11:8E:6F:B2:CF:15:6B:9D:5A:26:AE:C0:51:FB:1C:5F:7E:FE:01:E3 Certificate issuer: /CN=A914DA3F/serialNumber=118E6FB2CF156B9D5A26AEC051FB1C5F7EFE01E3 Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft Manifest number: 01AF Signing time: Sat 17 May 2025 02:54:22 +0000 Manifest this update: Sat 17 May 2025 02:54:22 +0000 Manifest next update: Sat 24 May 2025 02:54:22 +0000 Files and hashes: 1: EY5vss8Va51aJq7AUfscX37-AeM.crl (hash: UwpEn9R56J6YN6qQFi2gE7sbj6FOOEToNFBBqZxJTEE=) 2: 612568D2A6D011ED8FBD0A82C4F9AE02.roa (hash: nm2zg9mKvyo9+lsb6e1TLrNeopFW/UoV47vdvbrHk8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.crl rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DA3F, serialNumber=118E6FB2CF156B9D5A26AEC051FB1C5F7EFE01E3 Validity Not Before: May 17 02:54:22 2025 GMT Not After : May 24 02:54:22 2025 GMT Subject: CN=6827fa5e-9be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e7:0e:80:8e:d4:c6:50:af:ca:22:e6:96:c4: 5c:d4:9b:f1:83:8e:a2:98:d5:2f:79:f4:3b:05:b6: 0e:ec:41:e2:3b:85:96:98:c7:d7:13:2a:83:50:b9: f7:f2:25:dd:ef:a1:b0:ee:0b:a6:09:8d:bd:f5:ca: f1:80:2d:dd:a4:d9:02:39:dd:66:78:ea:a3:f4:a9: fc:83:ca:94:d7:ef:19:33:e2:2e:e5:1a:20:4a:59: ca:ec:33:a3:a8:07:b7:0e:64:68:ac:2c:4c:10:06: de:7c:5c:92:9e:ec:dc:00:bc:28:5c:0d:4a:a4:c0: fc:31:86:e8:2c:52:51:b9:63:9e:d5:f9:b9:97:7b: d3:f8:f4:57:27:91:df:f0:a7:64:d5:e9:a1:14:e3: 1e:75:eb:51:c1:0c:65:24:76:3e:e1:bd:01:ed:3c: ca:37:cd:09:20:08:81:ec:34:ce:8f:d1:30:09:b0: ee:4a:aa:f3:06:a0:fb:6b:14:75:86:d8:e2:83:b8: 78:7f:da:35:17:12:ef:75:06:46:e4:b4:16:07:fe: 8c:12:56:fe:d4:4e:a8:98:0c:aa:b6:15:e7:4e:4e: 72:c3:31:8c:ec:3f:d4:0d:69:19:05:8e:11:94:bd: dd:6c:43:43:50:65:08:10:b8:6e:25:70:62:4b:31: 55:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E5:5D:FD:BC:BD:42:FF:E4:42:B6:63:D9:20:4D:6E:03:59:52:89 X509v3 Authority Key Identifier: keyid:11:8E:6F:B2:CF:15:6B:9D:5A:26:AE:C0:51:FB:1C:5F:7E:FE:01:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:e7:ee:4c:8e:fc:20:e1:6b:c3:01:cf:48:4d:b4:00:65:84: 80:43:c5:b5:e0:e8:d3:4d:65:17:47:3e:ac:10:d9:9c:e9:64: ef:98:1a:d6:0d:ff:5d:bd:ab:28:da:d9:48:55:61:91:6e:c6: c6:b5:d7:52:67:18:c3:81:ab:27:d2:b3:d1:7f:26:25:e2:cf: d0:f9:dc:b6:9b:1d:cf:71:66:8a:82:1a:2c:59:b9:e8:01:f7: cf:1f:9f:51:a6:f5:2d:b5:2c:ad:8b:f8:43:24:d4:63:8a:08: 0a:71:13:a4:d7:ea:13:04:b5:4b:3e:82:62:76:e4:ab:3d:90: a9:9d:84:4a:c9:91:37:37:68:b3:b0:90:b3:ad:df:71:e3:e1: e9:8e:19:b0:86:bb:f6:45:94:18:77:1b:2b:18:6f:99:e6:c3: 0c:96:cc:17:e5:38:e3:a3:d3:53:0d:e1:e5:be:ff:7f:f3:30: a7:b8:67:d6:f1:ed:cb:ad:4e:ac:b7:b8:ce:75:a0:92:53:5e: 55:02:cb:1e:7d:e7:f8:fd:20:5d:83:df:dd:b4:6f:4c:5b:83: 6c:56:e0:49:e6:9e:12:61:84:4e:25:e5:c3:d0:89:e1:0c:a1: 3f:07:91:a3:cd:ed:91:fc:97:04:07:c7:3d:a2:c8:5e:21:3d: 0e:92:fa:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERBM0YxMTAvBgNVBAUTKDExOEU2RkIyQ0YxNTZCOUQ1QTI2QUVDMDUxRkIxQzVG N0VGRTAxRTMwHhcNMjUwNTE3MDI1NDIyWhcNMjUwNTI0MDI1NDIyWjAYMRYwFAYD VQQDEw02ODI3ZmE1ZS05YmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+cOgI7UxlCvyiLmlsRc1Jvxg46imNUvefQ7BbYO7EHiO4WWmMfXEyqDULn3 8iXd76Gw7gumCY299crxgC3dpNkCOd1meOqj9Kn8g8qU1+8ZM+Iu5RogSlnK7DOj qAe3DmRorCxMEAbefFySnuzcALwoXA1KpMD8MYboLFJRuWOe1fm5l3vT+PRXJ5Hf 8Kdk1emhFOMedetRwQxlJHY+4b0B7TzKN80JIAiB7DTOj9EwCbDuSqrzBqD7axR1 htjig7h4f9o1FxLvdQZG5LQWB/6MElb+1E6omAyqthXnTk5ywzGM7D/UDWkZBY4R lL3dbENDUGUIELhuJXBiSzFVLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJrlXf28 vUL/5EK2Y9kgTW4DWVKJMB8GA1UdIwQYMBaAFBGOb7LPFWudWiauwFH7HF9+/gHj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEzRi80NjlCMTc2QUE2 Q0ExMUVEOEQxMDk5NzhDNEY5QUUwMi9FWTV2c3M4VmE1MWFKcTdBVWZzY1gzNy1B ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VZNXZzczhWYTUxYUpxN0FVZnNjWDM3LUFlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REEzRi80NjlCMTc2QUE2Q0ExMUVEOEQxMDk5NzhDNEY5QUUwMi9FWTV2c3M4VmE1 MWFKcTdBVWZzY1gzNy1BZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc5+5Mjvwg4WvDAc9ITbQAZYSAQ8W14OjTTWUXRz6sENmc6WTvmBrW Df9dvaso2tlIVWGRbsbGtddSZxjDgasn0rPRfyYl4s/Q+dy2mx3PcWaKghosWbno AffPH59RpvUttSyti/hDJNRjiggKcROk1+oTBLVLPoJiduSrPZCpnYRKyZE3N2iz sJCzrd9x4+Hpjhmwhrv2RZQYdxsrGG+Z5sMMlswX5Tjjo9NTDeHlvv9/8zCnuGfW 8e3LrU6st7jOdaCSU15VAssefef4/SBdg9/dtG9MW4NsVuBJ5p4SYYROJeXD0Inh DKE/B5Gjze2R/JcEB8c9osheIT0OkvqO -----END CERTIFICATE-----Generated at Sat May 17 05:54:03 2025 by rpki-client