$ rpki-client -vvf rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft File: et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft (raw, json) Hash identifier: zKlY2r8icOatx4BsPIp3Zmi+LyM+zOXIDitX8aM4AVA= Subject key identifier: 2D:90:4B:FC:3A:F9:D2:02:30:24:00:14:FC:B4:E5:27:EE:2E:56:0D Authority key identifier: 7A:DE:40:93:5A:00:7E:0B:5B:E1:76:14:05:06:4E:C9:43:AF:E0:C1 Certificate issuer: /CN=A918E1CC/serialNumber=7ADE40935A007E0B5BE1761405064EC943AFE0C1 Certificate serial: 06B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft Manifest number: 06AC Signing time: Mon 12 May 2025 21:57:48 +0000 Manifest this update: Mon 12 May 2025 21:57:48 +0000 Manifest next update: Mon 19 May 2025 21:57:48 +0000 Files and hashes: 1: et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl (hash: OYq8pfHL1NDrQ/hcJ+cL8tilF+Epf0FE1obBnE1ZVYM=) 2: 210E6234639E11EB81185C31C4F9AE02.roa (hash: lpW0NjdmrOMG9GEGghvuTfgytfrpOcK9mbpw3h0K59c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:57:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1715 (0x6b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E1CC, serialNumber=7ADE40935A007E0B5BE1761405064EC943AFE0C1 Validity Not Before: May 12 21:57:48 2025 GMT Not After : May 19 21:57:48 2025 GMT Subject: CN=68226edc-0743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c2:51:5d:e1:2b:a9:7d:37:c9:01:e6:dd:69: ad:e9:4d:80:1a:9a:8d:15:08:26:1f:2e:48:a6:e1: 74:04:f6:2a:7a:69:88:f9:89:f1:9e:50:ab:13:0c: dd:5d:7f:76:dc:2f:1e:04:20:d2:64:14:ba:0b:68: db:28:40:bc:7a:d4:25:02:82:f4:c7:7a:3c:1b:c9: 53:d4:3d:e2:62:3a:4b:de:84:8e:52:93:27:d1:2e: bb:3a:7b:27:20:f1:cf:72:96:27:d4:9d:13:65:e3: 01:4b:c3:5f:91:45:d2:fd:aa:05:28:60:2e:1b:cb: 2b:75:3b:ad:9b:7b:d0:01:f4:c0:95:a5:cd:38:e7: b5:a6:dc:48:60:c4:f5:ab:de:63:b2:55:34:a1:f6: 04:e4:8a:89:9a:f2:34:6a:8f:b9:04:18:cd:7e:90: 56:17:03:4e:89:bd:d5:7f:6d:9d:1d:40:fe:a5:ae: 12:f6:79:08:24:48:fd:3a:f6:44:44:2b:63:09:85: 8c:e9:8b:f0:9e:57:64:6c:91:c8:e7:1f:f3:cc:5f: a8:a6:73:01:8d:8e:b9:48:85:a5:69:c2:78:6c:bf: dc:cf:08:1c:af:57:de:93:c6:05:43:dd:1a:7c:1b: f6:b4:b5:75:aa:af:8d:c1:32:4a:52:46:8d:d9:87: 95:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:90:4B:FC:3A:F9:D2:02:30:24:00:14:FC:B4:E5:27:EE:2E:56:0D X509v3 Authority Key Identifier: keyid:7A:DE:40:93:5A:00:7E:0B:5B:E1:76:14:05:06:4E:C9:43:AF:E0:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:22:06:ca:c9:05:51:bf:95:9b:16:60:84:2a:dc:7c:b2:8b: 48:25:c1:33:66:57:66:58:9b:3f:33:bf:1d:3e:55:8d:41:d0: 6d:1c:db:78:3a:a5:63:71:ac:d6:a8:a7:c6:47:8a:06:7a:54: 4e:81:56:13:b7:32:1a:e3:2f:f2:fa:8d:1d:0e:d6:85:21:75: 77:d7:7d:13:8e:90:45:38:59:2f:a5:96:6d:e7:03:ff:17:42: d1:3a:84:e9:63:2b:53:25:74:92:41:98:46:cc:2a:94:ec:d1: e1:37:ca:7c:0b:7d:6b:b8:29:b3:4c:30:b3:62:8c:2b:85:f2: eb:90:82:38:2b:81:cb:2c:79:fa:6d:0e:3a:b5:d2:00:9b:2b: b4:88:87:23:5a:54:74:ea:dc:d7:e0:40:a6:a1:e8:09:a8:92: c7:23:df:e6:1f:ce:2e:6c:b6:e5:69:aa:6c:2f:41:3f:be:1b: 17:5a:39:9f:73:0c:11:e1:13:bc:99:e9:23:cd:e6:0e:34:2c: ab:11:61:e0:86:fd:4b:28:cb:73:f3:9d:13:ec:a2:51:a4:f3: 48:7d:77:27:80:ff:43:dd:b4:8c:5d:39:ec:0e:5a:90:94:53: 00:b3:f4:45:ee:fa:ed:43:73:f5:53:7d:87:01:6f:2b:9c:d6: 78:8a:94:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUxQ0MxMTAvBgNVBAUTKDdBREU0MDkzNUEwMDdFMEI1QkUxNzYxNDA1MDY0RUM5 NDNBRkUwQzEwHhcNMjUwNTEyMjE1NzQ4WhcNMjUwNTE5MjE1NzQ4WjAYMRYwFAYD VQQDEw02ODIyNmVkYy0wNzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8JRXeErqX03yQHm3Wmt6U2AGpqNFQgmHy5IpuF0BPYqemmI+YnxnlCrEwzd XX923C8eBCDSZBS6C2jbKEC8etQlAoL0x3o8G8lT1D3iYjpL3oSOUpMn0S67Onsn IPHPcpYn1J0TZeMBS8NfkUXS/aoFKGAuG8srdTutm3vQAfTAlaXNOOe1ptxIYMT1 q95jslU0ofYE5IqJmvI0ao+5BBjNfpBWFwNOib3Vf22dHUD+pa4S9nkIJEj9OvZE RCtjCYWM6YvwnldkbJHI5x/zzF+opnMBjY65SIWlacJ4bL/czwgcr1fek8YFQ90a fBv2tLV1qq+NwTJKUkaN2YeVwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2QS/w6 +dICMCQAFPy05SfuLlYNMB8GA1UdIwQYMBaAFHreQJNaAH4LW+F2FAUGTslDr+DB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTFDQy81RkVGREE4RTYz OUMxMUVCOTBCODMwMTNDNEY5QUUwMi9ldDVBazFvQWZndGI0WFlVQlFaT3lVT3Y0 TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V0NUFrMW9BZmd0YjRYWVVCUVpPeVVPdjRNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTFDQy81RkVGREE4RTYzOUMxMUVCOTBCODMwMTNDNEY5QUUwMi9ldDVBazFvQWZn dGI0WFlVQlFaT3lVT3Y0TUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeIgbKyQVRv5WbFmCEKtx8sotIJcEzZldmWJs/M78dPlWNQdBtHNt4 OqVjcazWqKfGR4oGelROgVYTtzIa4y/y+o0dDtaFIXV3130TjpBFOFkvpZZt5wP/ F0LROoTpYytTJXSSQZhGzCqU7NHhN8p8C31ruCmzTDCzYowrhfLrkII4K4HLLHn6 bQ46tdIAmyu0iIcjWlR06tzX4ECmoegJqJLHI9/mH84ubLblaapsL0E/vhsXWjmf cwwR4RO8mekjzeYONCyrEWHghv1LKMtz850T7KJRpPNIfXcngP9D3bSMXTnsDlqQ lFMAs/RF7vrtQ3P1U32HAW8rnNZ4ipTp -----END CERTIFICATE-----Generated at Wed May 14 09:35:52 2025 by rpki-client