$ rpki-client -vvf rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft File: DEft4wSONabm6MsM5E_IQ3Jx6z0.mft (raw, json) Hash identifier: Uopy7d7Ar+u6Nnw/e6QuCXVpKtnMNrzAG75Y4nZ8yNQ= Subject key identifier: BF:7B:57:96:4F:61:E3:21:EF:2D:66:E7:85:95:55:82:8C:1E:D3:90 Authority key identifier: 0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D Certificate issuer: /CN=A917B51E/serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D Certificate serial: 0789 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft Manifest number: 0780 Signing time: Thu 08 May 2025 21:17:27 +0000 Manifest this update: Thu 08 May 2025 21:17:27 +0000 Manifest next update: Thu 15 May 2025 21:17:27 +0000 Files and hashes: 1: DEft4wSONabm6MsM5E_IQ3Jx6z0.crl (hash: f5lsAKoHqRoroSgH9JC7nIC1uhn1WJjQ+vInkqXJOAw=) 2: EFA17F260FEA11EB8FA8CB2AC4F9AE02.roa (hash: jLCgtQuVltt3/VZJ3eAvwdfbtQsE4HY8zDX+9B0R7hY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 21:17:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1929 (0x789) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B51E, serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D Validity Not Before: May 8 21:17:27 2025 GMT Not After : May 15 21:17:27 2025 GMT Subject: CN=681d1f67-c8a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:78:a1:95:23:d4:92:47:0d:2d:31:5a:4c:15: 62:45:05:9d:5b:5a:45:83:d7:53:3a:58:16:eb:e7: d4:7d:2d:01:4f:a3:69:03:36:8e:bf:a4:d2:f0:a7: f8:5a:fa:f2:e8:a4:33:f0:1b:e4:06:2b:b0:a8:b8: a3:8e:28:1b:59:d3:dd:be:68:ee:58:07:3e:fa:df: 95:d4:59:92:54:03:83:56:bc:6b:f6:64:3f:fe:f8: 53:ea:1d:70:6e:f5:c2:cd:a5:98:21:81:75:2e:e1: ac:6a:9b:34:6b:ce:0a:9a:68:51:54:b3:a9:48:1a: be:35:43:fa:5a:4b:e8:47:32:80:b2:85:b3:3d:7f: 59:63:b7:24:96:c9:d9:05:1a:48:96:d7:01:6f:8a: 21:d2:af:41:c6:c1:4a:65:ca:e7:cf:a1:2f:66:08: 8f:93:21:bc:2c:33:90:94:dd:3c:78:08:da:3d:4c: c6:f4:1f:ab:e6:a7:c9:46:3a:15:fa:dc:a7:0e:2e: 51:d2:69:59:87:87:42:fd:ec:f6:f1:37:60:dc:80: 18:15:5b:14:38:5e:f5:c3:75:1f:d2:08:31:3c:a1: be:0a:3b:a1:d5:71:79:4f:ae:b6:bf:4b:3e:29:05: 25:64:58:e4:6e:fd:bd:24:c9:54:bf:1a:d6:76:b3: a7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7B:57:96:4F:61:E3:21:EF:2D:66:E7:85:95:55:82:8C:1E:D3:90 X509v3 Authority Key Identifier: keyid:0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:ca:05:09:93:85:2a:f0:b3:e9:d0:2f:fd:f6:8e:1c:ca:cd: 57:dc:59:0a:bf:79:4b:ab:38:36:42:6a:cd:0b:fe:c9:12:45: 44:31:82:68:35:41:b7:74:72:33:3a:dd:5a:6d:3d:5c:0c:03: 0e:8a:45:2d:d6:f5:86:b0:1a:eb:ac:e9:1f:8e:1c:fe:8f:94: d6:12:57:22:a5:87:1f:b6:a3:91:67:d0:b9:12:f7:40:32:31: 86:36:d4:6a:36:24:c0:f7:85:8a:9b:82:dd:42:26:5c:33:db: 3f:f2:96:b1:63:4f:c5:9f:9a:58:4c:84:94:9c:d2:a5:a6:b0: 74:d8:54:f0:d8:03:72:38:5b:7a:4a:3f:94:b6:35:63:0c:da: 0b:88:81:04:12:8f:70:fd:67:16:09:96:ef:26:1e:b7:45:b9: 3f:c2:8b:95:9b:0f:45:57:cc:6b:67:b6:5e:5f:aa:23:b2:fe: 42:e0:64:cb:71:14:4a:ee:63:6d:a9:9a:e4:bd:86:bf:98:e3: 24:f9:80:b4:fc:7c:16:0a:4a:77:dd:f7:e5:9b:52:26:bd:63: 95:cb:ad:ec:6a:f7:0e:d5:29:a9:ed:00:3d:6b:cc:87:99:31: a3:f2:f2:5a:c9:48:1d:73:96:a5:51:39:33:41:49:75:c2:62: e7:3e:bb:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MUUxMTAvBgNVBAUTKDBDNDdFREUzMDQ4RTM1QTZFNkU4Q0IwQ0U0NEZDODQz NzI3MUVCM0QwHhcNMjUwNTA4MjExNzI3WhcNMjUwNTE1MjExNzI3WjAYMRYwFAYD VQQDEw02ODFkMWY2Ny1jOGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7HihlSPUkkcNLTFaTBViRQWdW1pFg9dTOlgW6+fUfS0BT6NpAzaOv6TS8Kf4 Wvry6KQz8BvkBiuwqLijjigbWdPdvmjuWAc++t+V1FmSVAODVrxr9mQ//vhT6h1w bvXCzaWYIYF1LuGsaps0a84KmmhRVLOpSBq+NUP6WkvoRzKAsoWzPX9ZY7cklsnZ BRpIltcBb4oh0q9BxsFKZcrnz6EvZgiPkyG8LDOQlN08eAjaPUzG9B+r5qfJRjoV +tynDi5R0mlZh4dC/ez28Tdg3IAYFVsUOF71w3Uf0ggxPKG+Cjuh1XF5T662v0s+ KQUlZFjkbv29JMlUvxrWdrOn0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL97V5ZP YeMh7y1m54WVVYKMHtOQMB8GA1UdIwQYMBaAFAxH7eMEjjWm5ujLDORPyENyces9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUxRS81OUNERDU0QTBG RTkxMUVCOUYzMEM3MjVDNEY5QUUwMi9ERWZ0NHdTT05hYm02TXNNNUVfSVEzSng2 ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RFZnQ0d1NPTmFibTZNc001RV9JUTNKeDZ6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUxRS81OUNERDU0QTBGRTkxMUVCOUYzMEM3MjVDNEY5QUUwMi9ERWZ0NHdTT05h Ym02TXNNNUVfSVEzSng2ejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXygUJk4Uq8LPp0C/99o4cys1X3FkKv3lLqzg2QmrNC/7JEkVEMYJo NUG3dHIzOt1abT1cDAMOikUt1vWGsBrrrOkfjhz+j5TWElcipYcftqORZ9C5EvdA MjGGNtRqNiTA94WKm4LdQiZcM9s/8paxY0/Fn5pYTISUnNKlprB02FTw2ANyOFt6 Sj+UtjVjDNoLiIEEEo9w/WcWCZbvJh63Rbk/wouVmw9FV8xrZ7ZeX6ojsv5C4GTL cRRK7mNtqZrkvYa/mOMk+YC0/HwWCkp33fflm1ImvWOVy63savcO1Smp7QA9a8yH mTGj8vJayUgdc5alUTkzQUl1wmLnPrtX -----END CERTIFICATE-----Generated at Fri May 9 20:55:57 2025 by rpki-client