$ rpki-client -vvf rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.mft File: PeqLG7hy3RJspkfMN1wgdgJAw4U.mft (raw, json) Hash identifier: T69Dz5a/XomrUZbaVjancEbn+/D3fl3wyrLT5kVLARU= Subject key identifier: DD:A6:6F:A4:F6:63:8C:2C:71:11:CB:D9:B7:B9:DA:B6:87:12:8D:9B Authority key identifier: 3D:EA:8B:1B:B8:72:DD:12:6C:A6:47:CC:37:5C:20:76:02:40:C3:85 Certificate issuer: /CN=A918F0E2/serialNumber=3DEA8B1BB872DD126CA647CC375C20760240C385 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PeqLG7hy3RJspkfMN1wgdgJAw4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.mft Manifest number: 5E Signing time: Sun 11 May 2025 05:51:30 +0000 Manifest this update: Sun 11 May 2025 05:51:30 +0000 Manifest next update: Sun 18 May 2025 05:51:30 +0000 Files and hashes: 1: PeqLG7hy3RJspkfMN1wgdgJAw4U.crl (hash: ClCfxpR7wnML33uKnmU257gKWAFaA9PrEnhA48wU0VQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.crl rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PeqLG7hy3RJspkfMN1wgdgJAw4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F0E2, serialNumber=3DEA8B1BB872DD126CA647CC375C20760240C385 Validity Not Before: May 11 05:51:30 2025 GMT Not After : May 18 05:51:30 2025 GMT Subject: CN=68203ae2-da0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ea:24:03:13:ef:5e:66:e1:08:44:7a:77:79: cd:dd:8a:07:21:b4:62:88:b1:78:d4:07:ee:6f:45: 34:44:a5:75:9b:29:73:36:4b:d0:37:47:bd:2f:92: 73:a8:e0:23:35:92:9c:93:a6:90:e3:7c:69:de:04: 84:fd:81:7a:61:1a:80:d6:6e:96:fc:7c:37:b7:0a: 7e:5b:ba:a1:75:4d:0b:57:ea:af:b9:f0:82:9b:5d: 10:3e:0a:f7:17:46:a3:a0:d5:23:8b:11:b9:68:d4: c1:a9:e6:be:7a:5f:73:3b:16:81:10:eb:f5:60:61: de:72:5a:e6:49:a0:42:9b:82:62:3e:15:b9:1e:0e: fb:cf:9f:bc:b9:da:bc:7c:ac:57:73:2b:8d:79:59: 97:b4:c7:d4:a6:a8:fd:41:21:9e:35:7e:ab:49:76: 35:ce:91:d7:bb:d4:77:e0:00:04:e2:70:14:42:0f: 20:30:2e:1d:2f:5d:18:b9:46:83:c8:42:4d:e1:09: 05:28:f4:6a:25:39:41:a5:ff:43:d1:de:7d:df:9a: 1e:d1:ee:d6:95:5a:53:f6:62:5a:24:c7:db:d4:61: 84:12:61:a0:3a:8b:00:6e:57:39:06:98:06:fd:91: 87:8b:3f:26:d1:db:90:ae:b5:a7:9f:bc:0a:bd:65: ed:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A6:6F:A4:F6:63:8C:2C:71:11:CB:D9:B7:B9:DA:B6:87:12:8D:9B X509v3 Authority Key Identifier: keyid:3D:EA:8B:1B:B8:72:DD:12:6C:A6:47:CC:37:5C:20:76:02:40:C3:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PeqLG7hy3RJspkfMN1wgdgJAw4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:01:8a:83:47:06:ce:f2:11:f7:e3:bf:24:b3:05:75:75:13: f8:3f:ea:9e:9c:f2:04:66:cf:41:9b:9d:b5:0b:53:ca:f7:a7: 54:17:cb:d9:69:87:da:f5:a6:51:94:cc:e9:b2:3c:ec:8b:f6: b6:bc:cb:22:b2:c6:06:c5:eb:88:60:31:70:e9:47:29:52:2b: ac:ef:51:4b:9e:a1:b4:9f:8b:da:9b:7b:74:f7:e5:c0:12:d7: de:3e:62:83:a0:08:5e:09:af:42:d7:be:2a:a5:e0:ea:92:14: 24:eb:e2:a2:d9:43:83:19:72:76:fa:b1:4e:ea:25:63:ff:f0: 53:33:92:16:8a:d2:b5:70:a0:20:c4:96:61:02:1c:68:13:bb: ec:9e:b3:91:f0:4a:e2:83:a7:22:a6:5c:dc:e3:e5:12:9f:b8: 8a:78:32:53:18:b4:82:b9:7e:c7:ce:e4:e4:e6:0a:ce:1b:8e: 2a:a1:cd:de:af:d4:66:ea:1b:48:5e:df:04:95:68:b8:6f:c5: ca:75:36:7d:a3:66:0b:4f:87:b4:21:b2:eb:0f:84:a4:5a:43: 4a:31:d2:68:62:a8:97:e7:eb:d0:57:34:87:31:35:f8:d9:13: fe:e2:5b:e2:34:31:09:b2:af:c1:16:22:8b:30:bc:d2:27:59: 79:0f:57:b7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RjBFMjExMC8GA1UEBRMoM0RFQThCMUJCODcyREQxMjZDQTY0N0NDMzc1QzIwNzYw MjQwQzM4NTAeFw0yNTA1MTEwNTUxMzBaFw0yNTA1MTgwNTUxMzBaMBgxFjAUBgNV BAMTDTY4MjAzYWUyLWRhMGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCx6iQDE+9eZuEIRHp3ec3digchtGKIsXjUB+5vRTREpXWbKXM2S9A3R70vknOo 4CM1kpyTppDjfGneBIT9gXphGoDWbpb8fDe3Cn5buqF1TQtX6q+58IKbXRA+CvcX RqOg1SOLEblo1MGp5r56X3M7FoEQ6/VgYd5yWuZJoEKbgmI+FbkeDvvPn7y52rx8 rFdzK415WZe0x9SmqP1BIZ41fqtJdjXOkde71HfgAATicBRCDyAwLh0vXRi5RoPI Qk3hCQUo9GolOUGl/0PR3n3fmh7R7taVWlP2Ylokx9vUYYQSYaA6iwBuVzkGmAb9 kYeLPybR25CutaefvAq9Ze1jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3aZvpPZj jCxxEcvZt7natocSjZswHwYDVR0jBBgwFoAUPeqLG7hy3RJspkfMN1wgdgJAw4Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGMEUyLzM0OERFMUNFQTI1 RTExRUZBMzhEOTM3NUM0RjlBRTAyL1BlcUxHN2h5M1JKc3BrZk1OMXdnZGdKQXc0 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUGVxTEc3aHkzUkpzcGtmTU4xd2dkZ0pBdzRVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG MEUyLzM0OERFMUNFQTI1RTExRUZBMzhEOTM3NUM0RjlBRTAyL1BlcUxHN2h5M1JK c3BrZk1OMXdnZGdKQXc0VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHsBioNHBs7yEffjvySzBXV1E/g/6p6c8gRmz0GbnbULU8r3p1QXy9lp h9r1plGUzOmyPOyL9ra8yyKyxgbF64hgMXDpRylSK6zvUUueobSfi9qbe3T35cAS 194+YoOgCF4Jr0LXviql4OqSFCTr4qLZQ4MZcnb6sU7qJWP/8FMzkhaK0rVwoCDE lmECHGgTu+yes5HwSuKDpyKmXNzj5RKfuIp4MlMYtIK5fsfO5OTmCs4bjiqhzd6v 1GbqG0he3wSVaLhvxcp1Nn2jZgtPh7QhsusPhKRaQ0ox0mhiqJfn69BXNIcxNfjZ E/7iW+I0MQmyr8EWIoswvNInWXkPV7c= -----END CERTIFICATE-----Generated at Sun May 11 15:13:04 2025 by rpki-client