$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft File: lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft (raw, json) Hash identifier: z43yDHIx08cjkQkZKYeXT+c0WUgNIjcWMIFWeuJrRog= Subject key identifier: 17:9C:99:A4:D3:F7:BB:88:B5:93:9A:89:08:56:3D:8D:3F:33:9B:67 Authority key identifier: 94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3 Certificate issuer: /CN=A91A3E3F/serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3 Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft Manifest number: 01CE Signing time: Sun 11 May 2025 01:56:35 +0000 Manifest this update: Sun 11 May 2025 01:56:34 +0000 Manifest next update: Sun 18 May 2025 01:56:34 +0000 Files and hashes: 1: lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl (hash: TOAmzGkCO3to5dV8jdJZjsKhc5Gn1hxw1o2XXznmlCo=) 2: 0DCBAC3863C111EE9A8AA77AC4F9AE02.roa (hash: inCWlFg4eyi3SZb4mhg7QgWhnaX3zI3I9iGqmhoauLc=) 3: 9ADB02A27F4E11EDB22F3582C4F9AE02.roa (hash: 9Oyy54xhiWuTllhGlORwlpgALp6JCiYOJTYLu9JoBj0=) 4: 5420A28C7F5211ED8A16EF81C4F9AE02.roa (hash: 5EKiWHDPeMiKNhe7uJ6GnZoz2bb2Ob3eC5qrY4BOvLk=) 5: 912586FA7F4F11ED96FDE369C4F9AE02.roa (hash: vg/uug9ogWENghuoz8JvK8TWhFT7WTN1jNAJcLX1AUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:56:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3E3F, serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3 Validity Not Before: May 11 01:56:34 2025 GMT Not After : May 18 01:56:34 2025 GMT Subject: CN=682003d2-ed7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ab:62:08:ea:f6:50:20:9e:da:02:5d:db:e7: a3:39:0e:b0:07:e7:96:d0:42:b9:50:d5:f5:4c:0b: f4:7b:38:63:cd:11:ec:94:fd:9c:89:68:17:58:c2: c7:ac:9f:d1:d0:c5:04:16:05:bb:9f:43:fa:4a:de: 1a:b0:49:0e:e8:07:a0:de:84:f6:95:5c:5e:76:76: bd:a2:f9:fe:5f:6e:63:40:65:a5:7f:63:03:a3:a7: d6:43:99:5c:60:7c:4c:62:39:ce:b2:9a:ee:a3:63: 3e:ca:87:3b:53:ad:3e:24:41:df:71:9a:eb:e2:07: b7:dd:db:51:a8:88:0b:f0:af:62:3c:c0:f4:d3:a5: 2e:ea:e2:e5:72:62:46:e3:21:20:a1:48:1a:ec:55: 10:9c:d8:bb:1b:6b:bd:e5:6d:ad:90:96:94:1b:69: ac:8a:1b:f0:49:3a:0b:a0:5e:d6:e7:74:e9:65:5f: 7f:88:ba:06:6c:a6:c6:7e:e6:0f:cc:57:a6:20:f0: 5d:6a:3c:1b:ce:06:e3:2f:97:06:d1:e3:2f:a0:2f: db:c8:98:af:5e:5d:a4:52:4b:46:1b:b8:35:58:5b: 96:bf:71:7d:8c:27:c5:35:ca:90:23:39:a8:09:4d: a5:31:86:bd:0c:e5:0c:04:30:8a:1d:cb:1d:4e:33: c0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9C:99:A4:D3:F7:BB:88:B5:93:9A:89:08:56:3D:8D:3F:33:9B:67 X509v3 Authority Key Identifier: keyid:94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:5b:17:fb:2e:31:12:9e:c7:86:14:a6:97:83:00:7a:bf:50: 4f:f3:09:48:d9:e2:dd:85:cd:ee:67:1d:70:0d:06:f5:70:9d: bd:6d:e7:6b:8d:8d:f8:80:91:8d:5e:35:9c:af:e0:ec:89:ee: 22:4e:39:c1:12:95:3e:60:aa:5a:03:dc:9e:f9:c6:02:68:1a: 57:a7:8d:71:d1:57:25:77:d4:5c:63:37:fb:c9:b9:cd:eb:f9: 37:fc:ff:06:9b:7d:04:e0:dc:27:e6:22:29:21:09:8e:b8:70: dd:66:49:94:13:07:02:db:e6:b1:0c:86:4d:89:4b:0e:64:07: de:48:c8:82:5c:d0:8b:93:b4:82:1b:ed:a4:a0:3f:ca:4e:68: 19:de:37:a4:ce:2a:06:b3:e1:6d:4f:0d:45:4c:82:b5:0b:5d: 99:60:8d:f6:fb:f7:25:69:d5:16:cc:63:a9:99:56:6b:04:a1: db:90:98:17:90:0e:86:63:64:c3:62:6d:9f:23:69:95:9d:01: 11:a7:6b:32:af:61:b2:42:a4:06:e9:ab:27:86:a4:32:7c:3f: 9a:8f:2c:0c:34:6b:34:8b:8d:cc:4b:b8:1f:b3:63:09:40:9d: 31:89:c1:6c:e8:a5:8e:af:ed:ff:1d:0a:4a:44:4f:c4:5f:11: d3:d9:d2:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNFM0YxMTAvBgNVBAUTKDk0M0QzRTEwQjhCQkUxMzhCNDc3MzQ1NTRCNjkwNTMx MTBENDVCRTMwHhcNMjUwNTExMDE1NjM0WhcNMjUwNTE4MDE1NjM0WjAYMRYwFAYD VQQDEw02ODIwMDNkMi1lZDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6tiCOr2UCCe2gJd2+ejOQ6wB+eW0EK5UNX1TAv0ezhjzRHslP2ciWgXWMLH rJ/R0MUEFgW7n0P6St4asEkO6Aeg3oT2lVxedna9ovn+X25jQGWlf2MDo6fWQ5lc YHxMYjnOspruo2M+yoc7U60+JEHfcZrr4ge33dtRqIgL8K9iPMD006Uu6uLlcmJG 4yEgoUga7FUQnNi7G2u95W2tkJaUG2msihvwSToLoF7W53TpZV9/iLoGbKbGfuYP zFemIPBdajwbzgbjL5cG0eMvoC/byJivXl2kUktGG7g1WFuWv3F9jCfFNcqQIzmo CU2lMYa9DOUMBDCKHcsdTjPABwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBecmaTT 97uItZOaiQhWPY0/M5tnMB8GA1UdIwQYMBaAFJQ9PhC4u+E4tHc0VUtpBTEQ1Fvj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0UzRi8zMDVFQjg3NjdD REIxMUVEQUI4NDRDMTlDNEY5QUUwMi9sRDAtRUxpNzRUaTBkelJWUzJrRk1SRFVX LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xEMC1FTGk3NFRpMGR6UlZTMmtGTVJEVVctTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0UzRi8zMDVFQjg3NjdDREIxMUVEQUI4NDRDMTlDNEY5QUUwMi9sRDAtRUxpNzRU aTBkelJWUzJrRk1SRFVXLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGWxf7LjESnseGFKaXgwB6v1BP8wlI2eLdhc3uZx1wDQb1cJ29bedr jY34gJGNXjWcr+Dsie4iTjnBEpU+YKpaA9ye+cYCaBpXp41x0Vcld9RcYzf7ybnN 6/k3/P8Gm30E4Nwn5iIpIQmOuHDdZkmUEwcC2+axDIZNiUsOZAfeSMiCXNCLk7SC G+2koD/KTmgZ3jekzioGs+FtTw1FTIK1C12ZYI32+/cladUWzGOpmVZrBKHbkJgX kA6GY2TDYm2fI2mVnQERp2syr2GyQqQG6asnhqQyfD+ajywMNGs0i43MS7gfs2MJ QJ0xicFs6KWOr+3/HQpKRE/EXxHT2dKD -----END CERTIFICATE-----Generated at Sun May 11 15:39:44 2025 by rpki-client