$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft File: e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft (raw, json) Hash identifier: xLGCFCSFZZMgvFZ2v46MlVSsspvTc40O7xNzJi9i09E= Subject key identifier: 61:8E:02:1C:0A:6F:E1:58:0C:FB:48:02:55:BC:8F:4A:75:5C:F3:A3 Authority key identifier: 7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F Certificate issuer: /CN=A916D36A/serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft Manifest number: 0123 Signing time: Sat 10 May 2025 16:25:53 +0000 Manifest this update: Sat 10 May 2025 16:25:52 +0000 Manifest next update: Sat 17 May 2025 16:25:52 +0000 Files and hashes: 1: e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl (hash: yuVnszoJ4wnGEoShFYilhULF5QYcJeyFg3Y+nYhxEYU=) 2: 21A970BC737211EEB3112437C4F9AE02.roa (hash: aUIyfh4rOAFfQ6V1QGk9Ci9jD2H4crp4Ilb6Y+4J9lg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:25:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D36A, serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F Validity Not Before: May 10 16:25:52 2025 GMT Not After : May 17 16:25:52 2025 GMT Subject: CN=681f7e10-9933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:35:a9:93:70:49:13:51:14:aa:c4:f3:a5:20: 6e:15:79:76:48:a4:45:21:57:9b:7a:e6:d7:e1:e0: 7e:89:87:f7:5c:0c:ba:1d:c2:2e:60:44:a3:3a:69: 5f:54:cd:e1:89:50:ad:02:3f:8e:7b:ac:57:7e:14: 20:f8:96:16:c4:43:bd:d1:34:d5:8e:cd:a7:bd:c1: 84:40:54:64:0f:30:af:eb:4f:d8:df:15:2f:1f:aa: 53:fe:62:38:60:ed:8d:03:6b:8c:d0:30:56:5b:6d: d7:1e:47:b5:57:e2:d7:a0:63:af:ac:19:db:50:c3: 82:ea:94:83:7c:3d:8f:f6:5b:62:33:4e:37:9e:72: d0:be:27:1e:bf:fd:43:70:da:ea:b4:ce:cf:ec:57: 3d:f0:d7:21:01:74:36:4b:9f:e1:e0:e5:5f:56:33: eb:0b:ed:a9:a9:17:e0:7c:af:d9:6f:cb:f9:67:79: a4:e4:c8:81:47:fc:52:33:bf:1f:c2:36:fb:89:f8: f1:82:94:ed:59:de:78:1a:c3:01:8c:7b:df:39:a5: fe:b7:e7:bf:f5:cb:1f:70:d2:37:99:34:a0:96:8f: 33:11:b8:5d:05:de:54:53:88:70:b5:22:28:ec:7a: b3:8d:d9:c6:2a:df:47:61:1c:75:49:61:92:dc:b1: 17:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:8E:02:1C:0A:6F:E1:58:0C:FB:48:02:55:BC:8F:4A:75:5C:F3:A3 X509v3 Authority Key Identifier: keyid:7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:cc:c1:9f:4b:16:b9:eb:6f:93:a4:9f:57:03:e3:3a:72:66: 52:cc:82:bd:d0:f6:cd:62:6b:6c:cb:da:a6:be:ce:de:26:b4: 35:4d:53:05:37:bb:4b:ca:79:87:9e:fc:a4:c9:62:9c:01:42: f5:e7:6e:b7:47:9f:87:80:13:97:63:6e:96:fd:bc:37:4a:0f: a5:7d:6b:71:4b:ae:10:6d:c0:95:82:46:2b:91:10:61:b8:be: 48:2c:38:b1:81:58:20:fa:72:27:cf:22:61:e2:b8:43:9d:6e: 81:50:0d:66:be:92:28:e9:cb:ea:39:17:fb:55:29:4b:ce:e6: f0:a0:af:2d:44:91:3a:02:7c:fc:11:62:b4:21:9e:36:bc:7e: 61:f2:8f:9a:0a:d3:f9:d4:68:fc:0e:57:d9:69:f3:4f:63:95: 6c:fd:b2:51:13:ef:76:3f:3d:a2:60:ae:2e:d5:1a:6a:85:d5: 54:06:e1:df:da:71:0d:6d:e7:a9:03:36:19:b8:bb:82:0f:d1: e3:09:d4:30:aa:09:49:41:5f:cb:80:fb:da:4c:77:2c:19:68: db:70:27:05:88:0a:b0:b7:d8:4a:d7:52:81:c4:3c:de:74:0f: ab:b6:a0:18:e1:37:18:8a:92:dd:83:2c:2e:29:ce:0f:7e:ce: cd:e7:17:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQzNkExMTAvBgNVBAUTKDdCOUNFREM4MzI4MDI4QTc0NTZFOUM0MTRCQjc3REFG RUJDRTc2NUYwHhcNMjUwNTEwMTYyNTUyWhcNMjUwNTE3MTYyNTUyWjAYMRYwFAYD VQQDEw02ODFmN2UxMC05OTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDWpk3BJE1EUqsTzpSBuFXl2SKRFIVebeubX4eB+iYf3XAy6HcIuYESjOmlf VM3hiVCtAj+Oe6xXfhQg+JYWxEO90TTVjs2nvcGEQFRkDzCv60/Y3xUvH6pT/mI4 YO2NA2uM0DBWW23XHke1V+LXoGOvrBnbUMOC6pSDfD2P9ltiM043nnLQvicev/1D cNrqtM7P7Fc98NchAXQ2S5/h4OVfVjPrC+2pqRfgfK/Zb8v5Z3mk5MiBR/xSM78f wjb7ifjxgpTtWd54GsMBjHvfOaX+t+e/9csfcNI3mTSglo8zEbhdBd5UU4hwtSIo 7HqzjdnGKt9HYRx1SWGS3LEXvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGOAhwK b+FYDPtIAlW8j0p1XPOjMB8GA1UdIwQYMBaAFHuc7cgygCinRW6cQUu3fa/rznZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDM2QS9DNkRENTFCNDcz NkYxMUVFOTE3RDAzMzRDNEY5QUUwMi9lNXp0eURLQUtLZEZicHhCUzdkOXItdk9k bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2U1enR5REtBS0tkRmJweEJTN2Q5ci12T2RsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDM2QS9DNkRENTFCNDczNkYxMUVFOTE3RDAzMzRDNEY5QUUwMi9lNXp0eURLQUtL ZEZicHhCUzdkOXItdk9kbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyzMGfSxa562+TpJ9XA+M6cmZSzIK90PbNYmtsy9qmvs7eJrQ1TVMF N7tLynmHnvykyWKcAUL15263R5+HgBOXY26W/bw3Sg+lfWtxS64QbcCVgkYrkRBh uL5ILDixgVgg+nInzyJh4rhDnW6BUA1mvpIo6cvqORf7VSlLzubwoK8tRJE6Anz8 EWK0IZ42vH5h8o+aCtP51Gj8DlfZafNPY5Vs/bJRE+92Pz2iYK4u1RpqhdVUBuHf 2nENbeepAzYZuLuCD9HjCdQwqglJQV/LgPvaTHcsGWjbcCcFiAqwt9hK11KBxDze dA+rtqAY4TcYipLdgywuKc4Pfs7N5xeV -----END CERTIFICATE-----Generated at Mon May 12 07:07:16 2025 by rpki-client