$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft File: elBsIXoxB45CF4FgOA3SyDko2S4.mft (raw, json) Hash identifier: cePLAwocGuBxc+iZDMuHhfD3NGctE67EVYDliM+qNrs= Subject key identifier: 31:6F:83:51:1E:25:1E:01:0E:B8:BD:5F:40:3A:EE:26:E8:7C:89:C8 Authority key identifier: 7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E Certificate issuer: /CN=A91A6DF8/serialNumber=7A506C217A31078E42178160380DD2C83928D92E Certificate serial: 0C9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft Manifest number: 0C92 Signing time: Sat 10 May 2025 18:00:56 +0000 Manifest this update: Sat 10 May 2025 18:00:56 +0000 Manifest next update: Sat 17 May 2025 18:00:56 +0000 Files and hashes: 1: elBsIXoxB45CF4FgOA3SyDko2S4.crl (hash: 4RaE7bXZ3C5fRxou+H/tp3RHs4DHweBhe2Gi3Db/bTE=) 2: 07B85890C29D11EBBAF29939C4F9AE02.roa (hash: Wbd4SNbG7n2IN5fFqW7xiw4LueCafFj4BsRNKFvE840=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3226 (0xc9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6DF8, serialNumber=7A506C217A31078E42178160380DD2C83928D92E Validity Not Before: May 10 18:00:56 2025 GMT Not After : May 17 18:00:56 2025 GMT Subject: CN=681f9458-d8e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:26:26:a6:c2:8d:70:05:c0:8d:54:cb:76:df: a2:ac:9d:a0:90:1d:e1:d5:e5:a8:73:5a:45:ca:54: 23:cb:19:c9:8f:51:2b:4b:c4:59:be:62:31:b6:bb: 76:a8:a0:72:9a:51:20:68:37:89:85:f4:d2:01:13: 57:50:dd:01:a3:76:6a:e4:5c:32:83:fd:52:bb:81: 1f:28:23:36:b2:0c:9f:be:e5:21:06:49:0b:70:16: 15:80:73:49:7e:39:e7:15:d3:c0:cd:75:d4:37:f7: e2:ae:cb:29:d9:14:12:5e:fa:51:04:08:3a:fc:a1: cd:bb:ff:70:8f:f7:32:b8:3e:0e:73:1b:40:59:2f: e3:76:12:e6:4b:6a:92:b4:7d:6a:8b:9e:a1:ef:fb: 5d:ee:bc:fc:17:a7:9f:9b:f8:58:06:ce:37:d9:20: 55:6c:e6:7d:ce:3e:24:87:2d:f0:10:0e:cd:86:2f: 1c:6f:9e:1e:d2:ae:58:60:37:45:b8:17:14:5f:7d: 9f:0e:e1:b8:7a:11:7a:29:55:1d:92:6b:e3:f8:a2: 30:85:55:0d:30:d9:15:08:14:e0:89:18:ea:ef:d6: 6c:7f:bb:7e:29:e2:0a:c3:e5:53:cf:7d:8f:a5:c8: 91:64:3c:e2:ca:d6:6c:3c:79:12:f9:c4:a2:99:02: 87:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:6F:83:51:1E:25:1E:01:0E:B8:BD:5F:40:3A:EE:26:E8:7C:89:C8 X509v3 Authority Key Identifier: keyid:7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:38:cc:f8:9d:72:90:9d:51:6f:78:ab:bc:99:bd:e5:bc:34: c2:1b:02:02:1e:ca:ef:99:39:0f:fc:8b:99:a3:52:90:bd:d9: 12:bb:74:22:4f:e6:6b:2f:1f:df:ef:9c:95:7e:d0:fe:5f:a1: e7:93:6d:78:c2:81:ef:61:45:a8:04:18:56:5c:ad:de:21:27: 99:9e:89:58:a9:02:64:52:df:8b:06:2a:f4:77:f3:c3:50:7a: 12:68:f3:bb:bc:a0:ef:68:0e:0a:f7:e1:7f:b4:49:08:ed:39: 6f:47:b7:7f:09:bf:7e:4c:2e:dc:ee:c7:62:b3:d3:00:ad:c3: cd:e3:5d:69:ff:2e:09:4a:7f:ac:4b:47:f4:9c:16:ca:b3:f9: 27:f3:f4:47:1a:68:4f:ab:fc:e2:af:9d:30:3f:b8:eb:79:90: 57:43:05:a0:d4:cd:5a:0d:14:a2:36:30:4f:22:57:5a:51:8a: 18:8f:2a:60:a0:c4:a7:54:7a:fc:54:4c:f8:89:d7:71:0b:df: c5:a4:42:08:c8:57:a0:83:5f:80:78:34:fe:d2:0a:b8:09:02: 08:1b:6c:de:62:f3:a3:45:70:3a:19:96:aa:78:74:75:9d:4c: 50:0b:43:68:4a:09:18:71:98:2e:1c:bb:45:b9:a9:29:ed:a9: a5:5e:f1:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZERjgxMTAvBgNVBAUTKDdBNTA2QzIxN0EzMTA3OEU0MjE3ODE2MDM4MEREMkM4 MzkyOEQ5MkUwHhcNMjUwNTEwMTgwMDU2WhcNMjUwNTE3MTgwMDU2WjAYMRYwFAYD VQQDEw02ODFmOTQ1OC1kOGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviYmpsKNcAXAjVTLdt+irJ2gkB3h1eWoc1pFylQjyxnJj1ErS8RZvmIxtrt2 qKBymlEgaDeJhfTSARNXUN0Bo3Zq5Fwyg/1Su4EfKCM2sgyfvuUhBkkLcBYVgHNJ fjnnFdPAzXXUN/firssp2RQSXvpRBAg6/KHNu/9wj/cyuD4OcxtAWS/jdhLmS2qS tH1qi56h7/td7rz8F6efm/hYBs432SBVbOZ9zj4khy3wEA7Nhi8cb54e0q5YYDdF uBcUX32fDuG4ehF6KVUdkmvj+KIwhVUNMNkVCBTgiRjq79Zsf7t+KeIKw+VTz32P pciRZDziytZsPHkS+cSimQKHnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFvg1Ee JR4BDri9X0A67ibofInIMB8GA1UdIwQYMBaAFHpQbCF6MQeOQheBYDgN0sg5KNku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkRGOC83Njc2RjVEQ0Yz Q0ExMUU5QUFCQTUzN0ZDNEY5QUUwMi9lbEJzSVhveEI0NUNGNEZnT0EzU3lEa28y UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VsQnNJWG94QjQ1Q0Y0RmdPQTNTeURrbzJTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkRGOC83Njc2RjVEQ0YzQ0ExMUU5QUFCQTUzN0ZDNEY5QUUwMi9lbEJzSVhveEI0 NUNGNEZnT0EzU3lEa28yUzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6OMz4nXKQnVFveKu8mb3lvDTCGwICHsrvmTkP/IuZo1KQvdkSu3Qi T+ZrLx/f75yVftD+X6Hnk214woHvYUWoBBhWXK3eISeZnolYqQJkUt+LBir0d/PD UHoSaPO7vKDvaA4K9+F/tEkI7TlvR7d/Cb9+TC7c7sdis9MArcPN411p/y4JSn+s S0f0nBbKs/kn8/RHGmhPq/zir50wP7jreZBXQwWg1M1aDRSiNjBPIldaUYoYjypg oMSnVHr8VEz4iddxC9/FpEIIyFegg1+AeDT+0gq4CQIIG2zeYvOjRXA6GZaqeHR1 nUxQC0NoSgkYcZguHLtFuakp7amlXvER -----END CERTIFICATE-----Generated at Mon May 12 04:21:24 2025 by rpki-client