$ rpki-client -vvf rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft File: E5bqlAlF_CBf8uPRsr4bkNcsxek.mft (raw, json) Hash identifier: MqQkpMkGHesmKIu9MqSrTaTQlnPKFITCVzdkBT1fINI= Subject key identifier: 3E:3C:1B:63:ED:AA:07:E1:1E:8D:AF:B8:0F:9C:5D:10:65:3F:54:06 Authority key identifier: 13:96:EA:94:09:45:FC:20:5F:F2:E3:D1:B2:BE:1B:90:D7:2C:C5:E9 Certificate issuer: /CN=A914DF56/serialNumber=1396EA940945FC205FF2E3D1B2BE1B90D72CC5E9 Certificate serial: 04FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5bqlAlF_CBf8uPRsr4bkNcsxek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft Manifest number: 04F3 Signing time: Wed 14 May 2025 23:46:54 +0000 Manifest this update: Wed 14 May 2025 23:46:53 +0000 Manifest next update: Wed 21 May 2025 23:46:53 +0000 Files and hashes: 1: E5bqlAlF_CBf8uPRsr4bkNcsxek.crl (hash: tP86pneMetCTkRYOFP4eUIaZlQYYO9at2RwPzdGTNX8=) 2: EB17A8C2152511ECAD055780C4F9AE02.roa (hash: 3Who1qUDm6eD8QDguJD4EaJb2KgGViSYhJ9baOpktjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.crl rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5bqlAlF_CBf8uPRsr4bkNcsxek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 23:46:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1275 (0x4fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DF56, serialNumber=1396EA940945FC205FF2E3D1B2BE1B90D72CC5E9 Validity Not Before: May 14 23:46:53 2025 GMT Not After : May 21 23:46:53 2025 GMT Subject: CN=68252b6e-ef52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c1:81:f8:82:61:7b:da:0d:1d:ea:94:32:4b: 7e:5f:54:e3:f0:c1:28:8e:62:4d:fc:83:6c:d7:cd: b2:ed:87:ee:bc:a2:c5:0e:22:dd:0b:86:e7:c6:8e: ad:02:5e:99:3f:2d:8a:af:6b:d7:0c:d7:c9:22:45: fd:76:c7:d7:37:5d:dd:cd:d7:64:9f:cd:f1:e9:01: e9:99:6c:90:57:53:3f:92:eb:51:45:4e:b0:d2:af: bb:7e:4c:6b:f2:49:d1:9c:2f:5b:4b:29:a8:70:73: e8:4e:dc:50:b0:8b:7c:77:d0:88:c0:f7:76:e2:fb: 37:eb:2d:f9:7d:ca:7c:bc:33:bf:13:c4:b5:71:5f: 67:8d:b5:c0:ac:d0:4a:e0:31:1a:d9:2b:96:80:26: 16:e8:4f:a2:5e:15:00:3b:99:b1:39:e4:66:07:ce: e9:d4:e2:99:99:74:7a:e3:3d:08:4a:2f:bb:17:55: cf:f7:72:6b:bf:b5:0c:d9:18:5a:83:b1:25:33:1c: dd:54:a3:df:ea:82:e2:6b:f6:73:10:90:52:40:1e: c6:dd:6e:1e:85:98:59:5b:c8:24:29:63:dc:9a:ca: 0c:ca:cf:e8:4f:c9:a5:2e:91:ff:45:2d:4d:62:d7: bc:1b:49:0f:18:6a:fc:81:02:20:30:c1:84:99:63: 53:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3C:1B:63:ED:AA:07:E1:1E:8D:AF:B8:0F:9C:5D:10:65:3F:54:06 X509v3 Authority Key Identifier: keyid:13:96:EA:94:09:45:FC:20:5F:F2:E3:D1:B2:BE:1B:90:D7:2C:C5:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5bqlAlF_CBf8uPRsr4bkNcsxek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:d5:9a:0b:a1:cd:c3:6a:05:8d:72:66:fc:f2:8e:b6:ff:a9: b3:97:1c:86:94:bc:35:23:7f:0f:d6:02:94:c4:ce:c9:a8:1b: 4f:1c:42:ea:dd:cf:2f:ab:0e:80:4c:e4:00:8c:46:0f:e8:1e: 58:5a:49:2d:2f:4f:20:0c:32:98:4b:d6:05:ed:c5:ad:bf:c2: 3f:86:4a:df:31:3b:44:b8:cf:84:da:de:0a:9b:41:30:5f:e1: a1:68:3c:ef:3b:2a:b2:c7:c3:51:a6:3d:6d:1d:bb:01:02:61: 6e:93:a3:04:b5:c9:61:05:bf:5f:80:cb:8d:7a:0a:d4:d7:0c: 3e:ee:61:7d:80:0a:3c:43:56:ab:d8:86:e3:7a:45:91:38:d0: c5:67:36:3a:8f:43:80:e2:e7:88:b5:c9:be:c0:e2:62:ce:f3: 1a:5c:b5:4b:ca:50:6d:47:76:d0:10:fe:8a:95:ce:50:76:08: 78:27:1a:7e:bf:25:1c:51:0c:00:a8:dd:d9:aa:df:96:ba:2a: 9b:49:9d:22:76:e3:d6:5e:76:da:22:de:32:8f:d3:f5:5a:b9: 38:29:0c:ba:e8:6a:7b:aa:88:60:e7:2f:e7:7a:ac:44:65:8d: e5:74:d5:a1:34:94:72:cd:07:80:4e:65:e9:1c:61:46:25:67: 3d:cb:f1:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERGNTYxMTAvBgNVBAUTKDEzOTZFQTk0MDk0NUZDMjA1RkYyRTNEMUIyQkUxQjkw RDcyQ0M1RTkwHhcNMjUwNTE0MjM0NjUzWhcNMjUwNTIxMjM0NjUzWjAYMRYwFAYD VQQDEw02ODI1MmI2ZS1lZjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMGB+IJhe9oNHeqUMkt+X1Tj8MEojmJN/INs182y7YfuvKLFDiLdC4bnxo6t Al6ZPy2Kr2vXDNfJIkX9dsfXN13dzddkn83x6QHpmWyQV1M/kutRRU6w0q+7fkxr 8knRnC9bSymocHPoTtxQsIt8d9CIwPd24vs36y35fcp8vDO/E8S1cV9njbXArNBK 4DEa2SuWgCYW6E+iXhUAO5mxOeRmB87p1OKZmXR64z0ISi+7F1XP93Jrv7UM2Rha g7ElMxzdVKPf6oLia/ZzEJBSQB7G3W4ehZhZW8gkKWPcmsoMys/oT8mlLpH/RS1N Yte8G0kPGGr8gQIgMMGEmWNTXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD48G2Pt qgfhHo2vuA+cXRBlP1QGMB8GA1UdIwQYMBaAFBOW6pQJRfwgX/Lj0bK+G5DXLMXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REY1Ni9CRDdGQTAzODE1 MjMxMUVDQjc0RjIwODBDNEY5QUUwMi9FNWJxbEFsRl9DQmY4dVBSc3I0YmtOY3N4 ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U1YnFsQWxGX0NCZjh1UFJzcjRia05jc3hlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REY1Ni9CRDdGQTAzODE1MjMxMUVDQjc0RjIwODBDNEY5QUUwMi9FNWJxbEFsRl9D QmY4dVBSc3I0YmtOY3N4ZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy1ZoLoc3DagWNcmb88o62/6mzlxyGlLw1I38P1gKUxM7JqBtPHELq 3c8vqw6ATOQAjEYP6B5YWkktL08gDDKYS9YF7cWtv8I/hkrfMTtEuM+E2t4Km0Ew X+GhaDzvOyqyx8NRpj1tHbsBAmFuk6MEtclhBb9fgMuNegrU1ww+7mF9gAo8Q1ar 2IbjekWRONDFZzY6j0OA4ueItcm+wOJizvMaXLVLylBtR3bQEP6Klc5Qdgh4Jxp+ vyUcUQwAqN3Zqt+WuiqbSZ0iduPWXnbaIt4yj9P1Wrk4KQy66Gp7qohg5y/neqxE ZY3ldNWhNJRyzQeATmXpHGFGJWc9y/G6 -----END CERTIFICATE-----Generated at Thu May 15 05:42:07 2025 by rpki-client