$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft File: 584ZoXhVIoFdq2P_ZttviQP8-fo.mft (raw, json) Hash identifier: MnvmaM48otYd19GpWinPH/KgVPbthjjpnGboHTrdrbM= Subject key identifier: 8D:18:C7:4E:4C:6A:D7:2A:C9:E1:24:13:61:F8:FB:EF:ED:B6:28:E1 Authority key identifier: E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA Certificate issuer: /CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft Manifest number: 01E5 Signing time: Thu 15 May 2025 02:15:46 +0000 Manifest this update: Thu 15 May 2025 02:15:46 +0000 Manifest next update: Thu 22 May 2025 02:15:46 +0000 Files and hashes: 1: 584ZoXhVIoFdq2P_ZttviQP8-fo.crl (hash: 0uxgyXS9l6aPLjJ5m9frhiRv7KLs30yRqbkplXHctCs=) 2: 0BC0C374A7D711EEB631CA47C4F9AE02.roa (hash: tLqebEf3q2YpfUgMNK/KEWR6AH6sMM3xnkpAYgAF8CI=) 3: 455D199EE38B11EE84566164C4F9AE02.roa (hash: QIfFh4ayHyE+fbiYpOjvVIDqpWczkf3Nd//Ot2hnu8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190CC7, serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA Validity Not Before: May 15 02:15:46 2025 GMT Not After : May 22 02:15:46 2025 GMT Subject: CN=68254e52-a67b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:90:1c:e2:83:07:84:8d:58:d1:92:b0:fd:6f: 0f:e2:32:1b:b3:00:99:93:fb:0c:6e:52:93:eb:07: ce:20:ed:a2:c9:4e:b3:ee:21:63:28:51:32:8d:4b: 5d:a3:db:e3:b5:1b:fe:ec:91:1f:21:7d:1e:eb:1f: ee:4c:f6:33:8a:11:c6:bd:73:7a:c5:c3:22:b3:e4: 69:a5:c6:af:e2:34:83:12:17:b9:9d:24:31:b3:6b: ee:91:f2:99:33:87:02:1c:22:72:88:1a:1e:45:e6: 6b:35:4c:3d:df:a9:1f:f7:ab:16:bd:62:e9:1d:71: 59:ea:a8:a7:4f:72:56:1f:16:7e:0a:8d:51:d4:31: d5:cd:f6:08:11:df:5b:ae:96:4b:e5:e0:9f:be:40: 4e:26:5b:84:d8:5f:7b:a8:dd:8f:67:49:c2:6a:d8: ab:ec:31:0f:3e:97:30:1a:9a:72:7a:12:86:77:7a: 4d:b4:e7:54:42:30:1b:d1:64:a9:b4:b3:76:d8:84: 62:de:10:e6:e5:bf:35:59:76:42:0e:72:6a:81:99: a6:b5:2d:1e:f1:c3:b5:6f:10:45:35:06:3b:9a:b8: 6b:eb:af:44:af:63:f6:14:d8:b1:fe:48:78:89:23: b8:55:0e:1c:0c:6d:a5:30:4a:bc:49:43:30:7c:2a: 27:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:18:C7:4E:4C:6A:D7:2A:C9:E1:24:13:61:F8:FB:EF:ED:B6:28:E1 X509v3 Authority Key Identifier: keyid:E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:92:d8:5b:7b:a8:4a:9b:af:51:2e:5e:fb:70:20:16:78:5e: ca:19:49:b9:a8:14:16:ff:6f:71:33:6c:9f:0c:8f:7e:c2:fa: ea:37:28:f1:57:37:59:14:17:08:d5:6e:5d:be:f1:7f:65:81: 29:f5:80:5c:97:97:32:bb:32:1d:b3:03:e8:a4:7d:21:2c:0b: 42:25:28:02:a7:2d:5a:03:8e:d1:a1:95:6f:8d:84:30:5c:f9: 43:c8:6a:ae:4a:f5:e0:92:a7:b6:4a:f0:a8:26:82:19:5c:f4: 1c:9c:02:b6:f7:82:03:4a:f5:4f:62:c3:4e:7e:c8:aa:92:2a: ae:65:79:bd:a8:01:05:92:dc:60:4d:d1:47:4b:18:ac:92:66: 8b:b9:ea:11:21:c6:10:7e:b9:7d:c6:ec:a6:b0:ba:d2:5e:b2: ee:43:da:1e:ee:09:63:f4:2c:0f:93:f3:f3:a7:52:a9:86:4b: e4:67:78:db:55:1c:2b:a1:10:11:92:5e:55:4d:42:b9:cd:49: 64:10:f1:28:31:f4:3e:a4:ea:ab:31:b2:27:fe:f0:a5:11:07: f1:8b:f6:e8:72:50:7d:ca:9c:29:03:ca:13:3f:1c:48:2e:3d: f0:99:7c:e7:8a:e6:9a:9f:ac:81:e7:1d:1e:81:4d:66:a4:82: e4:f6:40:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBDQzcxMTAvBgNVBAUTKEU3Q0UxOUExNzg1NTIyODE1REFCNjNGRjY2REI2Rjg5 MDNGQ0Y5RkEwHhcNMjUwNTE1MDIxNTQ2WhcNMjUwNTIyMDIxNTQ2WjAYMRYwFAYD VQQDEw02ODI1NGU1Mi1hNjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5Ac4oMHhI1Y0ZKw/W8P4jIbswCZk/sMblKT6wfOIO2iyU6z7iFjKFEyjUtd o9vjtRv+7JEfIX0e6x/uTPYzihHGvXN6xcMis+Rppcav4jSDEhe5nSQxs2vukfKZ M4cCHCJyiBoeReZrNUw936kf96sWvWLpHXFZ6qinT3JWHxZ+Co1R1DHVzfYIEd9b rpZL5eCfvkBOJluE2F97qN2PZ0nCatir7DEPPpcwGppyehKGd3pNtOdUQjAb0WSp tLN22IRi3hDm5b81WXZCDnJqgZmmtS0e8cO1bxBFNQY7mrhr669Er2P2FNix/kh4 iSO4VQ4cDG2lMEq8SUMwfConLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0Yx05M atcqyeEkE2H4++/ttijhMB8GA1UdIwQYMBaAFOfOGaF4VSKBXatj/2bbb4kD/Pn6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MENDNy8wMzRGQzYxQTY0 MTUxMUVEOThGMkU1NTRDNEY5QUUwMi81ODRab1hoVklvRmRxMlBfWnR0dmlRUDgt Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU4NFpvWGhWSW9GZHEyUF9adHR2aVFQOC1mby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MENDNy8wMzRGQzYxQTY0MTUxMUVEOThGMkU1NTRDNEY5QUUwMi81ODRab1hoVklv RmRxMlBfWnR0dmlRUDgtZm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2kthbe6hKm69RLl77cCAWeF7KGUm5qBQW/29xM2yfDI9+wvrqNyjx VzdZFBcI1W5dvvF/ZYEp9YBcl5cyuzIdswPopH0hLAtCJSgCpy1aA47RoZVvjYQw XPlDyGquSvXgkqe2SvCoJoIZXPQcnAK294IDSvVPYsNOfsiqkiquZXm9qAEFktxg TdFHSxiskmaLueoRIcYQfrl9xuymsLrSXrLuQ9oe7glj9CwPk/Pzp1KphkvkZ3jb VRwroRARkl5VTUK5zUlkEPEoMfQ+pOqrMbIn/vClEQfxi/boclB9ypwpA8oTPxxI Lj3wmXzniuaan6yB5x0egU1mpILk9kB0 -----END CERTIFICATE-----Generated at Thu May 15 19:13:25 2025 by rpki-client