$ rpki-client -vvf rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft File: pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft (raw, json) Hash identifier: Jqgmby76zOkw5mGWE8UoBOhZsBSvQQfXBFDUpcU9Bzw= Subject key identifier: 8B:52:1A:6D:B3:33:EE:50:A7:07:1C:43:E0:DE:B7:5F:E3:CB:B8:20 Authority key identifier: A5:EB:DF:98:39:19:C6:0F:62:2F:34:EF:8F:C5:21:E7:24:89:D1:CD Certificate issuer: /CN=A91A995E/serialNumber=A5EBDF983919C60F622F34EF8FC521E72489D1CD Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft Manifest number: 27 Signing time: Sun 11 May 2025 06:32:31 +0000 Manifest this update: Sun 11 May 2025 06:32:31 +0000 Manifest next update: Sun 18 May 2025 06:32:31 +0000 Files and hashes: 1: pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl (hash: zNoKmVkSSYxXmas54i7XHO52hzko+1FYjNVLFHJ0jsQ=) 2: B3E4D03621B111F089CE216DC4F9AE02.roa (hash: VCQENYwleJhQRqqUILKpkln6ADdmKoB6HviWfuCE7i4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:32:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A995E, serialNumber=A5EBDF983919C60F622F34EF8FC521E72489D1CD Validity Not Before: May 11 06:32:31 2025 GMT Not After : May 18 06:32:31 2025 GMT Subject: CN=6820447f-3bcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2b:19:b8:7f:63:22:61:dc:e7:24:88:20:a0: 2b:c5:18:86:d7:22:9f:fc:f2:19:a8:c5:8e:bc:2a: 29:3b:9b:d9:20:28:ce:e9:76:8a:fa:ad:75:75:2c: 42:96:e4:cc:69:00:d8:92:f6:d8:f1:03:08:c0:c1: 44:38:b3:35:72:81:b3:8a:19:7c:8d:e3:58:9e:27: ae:c0:09:62:70:aa:36:c8:67:e3:74:20:11:a0:da: 79:0a:4a:dd:0b:7a:8c:75:51:7d:be:7e:66:d0:77: 72:f9:9e:79:44:9d:c1:75:9e:6a:e8:d4:b2:27:8a: 01:f7:f0:de:17:8d:27:96:dc:30:55:cb:52:57:32: 4d:d0:5e:40:22:87:18:15:67:f7:7d:90:d2:b5:df: 7a:38:72:93:ad:27:ce:52:97:c0:f4:b5:c3:ae:fa: 36:9a:f4:44:41:56:2c:8e:08:bf:2e:d3:af:43:f1: 6f:ae:3d:4b:ef:32:66:4c:7d:56:4a:da:43:6e:25: ec:b8:5e:cd:28:5b:eb:9f:77:62:30:ce:58:c0:27: 55:2d:59:44:47:be:65:98:9a:a5:a8:f0:3c:ba:50: f7:96:14:63:c4:c1:7b:02:b2:2e:87:dc:7f:f9:85: fa:8a:27:b2:4e:6b:33:48:3a:5e:54:06:4f:3d:ed: 04:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:52:1A:6D:B3:33:EE:50:A7:07:1C:43:E0:DE:B7:5F:E3:CB:B8:20 X509v3 Authority Key Identifier: keyid:A5:EB:DF:98:39:19:C6:0F:62:2F:34:EF:8F:C5:21:E7:24:89:D1:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:d8:8c:8a:76:44:6f:29:2e:2c:be:cc:1c:76:65:5a:03:69: 1b:b8:4a:67:da:74:dd:ac:9b:e5:35:2e:8b:ac:a2:55:39:b9: 81:57:9f:12:29:bd:fa:2c:be:46:72:9f:6f:51:6a:61:ec:e9: 17:be:4c:ba:33:87:a2:4e:c4:e6:5f:85:ed:36:7b:06:d0:9d: 99:f1:ac:b3:92:d0:76:57:53:3c:1c:ae:23:0d:72:38:4a:11: 85:40:b2:52:b7:aa:78:05:45:94:d0:06:93:49:3b:44:d5:b1: 76:2a:56:48:5e:89:fa:a6:03:27:e5:98:26:24:26:05:f7:1e: b4:a4:cd:4e:d0:da:e7:d0:4d:56:c3:4f:6f:f0:1f:20:70:fe: 7e:b9:e9:ef:6c:c4:e8:85:43:64:b0:ee:9d:1d:3f:62:da:e5: 3b:3e:dc:4d:bd:e2:73:aa:e3:b3:5e:18:7b:1d:97:2f:e0:bc: d0:81:ad:60:b4:ec:0b:08:0f:92:cf:3a:f8:27:dc:76:67:98: f5:8e:fc:d0:1a:b5:2a:08:db:66:9c:95:2a:eb:d5:4a:a5:38: 16:07:b1:73:98:81:9b:c3:58:98:72:14:fb:4c:fc:dd:60:76: 30:50:c9:83:d0:88:da:7d:1c:f6:ec:46:f3:31:60:e7:a4:b5: bf:7a:55:2a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTk1RTExMC8GA1UEBRMoQTVFQkRGOTgzOTE5QzYwRjYyMkYzNEVGOEZDNTIxRTcy NDg5RDFDRDAeFw0yNTA1MTEwNjMyMzFaFw0yNTA1MTgwNjMyMzFaMBgxFjAUBgNV BAMTDTY4MjA0NDdmLTNiY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGKxm4f2MiYdznJIggoCvFGIbXIp/88hmoxY68Kik7m9kgKM7pdor6rXV1LEKW 5MxpANiS9tjxAwjAwUQ4szVygbOKGXyN41ieJ67ACWJwqjbIZ+N0IBGg2nkKSt0L eox1UX2+fmbQd3L5nnlEncF1nmro1LInigH38N4XjSeW3DBVy1JXMk3QXkAihxgV Z/d9kNK133o4cpOtJ85Sl8D0tcOu+jaa9ERBViyOCL8u069D8W+uPUvvMmZMfVZK 2kNuJey4Xs0oW+ufd2IwzljAJ1UtWURHvmWYmqWo8Dy6UPeWFGPEwXsCsi6H3H/5 hfqKJ7JOazNIOl5UBk897QQZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUi1IabbMz 7lCnBxxD4N63X+PLuCAwHwYDVR0jBBgwFoAUpevfmDkZxg9iLzTvj8Uh5ySJ0c0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5OTVFLzM3QkI1RjgyRkE2 MjExRUY5NTU1NUMwRUM0RjlBRTAyL3BldmZtRGtaeGc5aUx6VHZqOFVoNXlTSjBj MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcGV2Zm1Ea1p4ZzlpTHpUdmo4VWg1eVNKMGMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 OTVFLzM3QkI1RjgyRkE2MjExRUY5NTU1NUMwRUM0RjlBRTAyL3BldmZtRGtaeGc5 aUx6VHZqOFVoNXlTSjBjMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABLYjIp2RG8pLiy+zBx2ZVoDaRu4SmfadN2sm+U1LousolU5uYFXnxIp vfosvkZyn29RamHs6Re+TLozh6JOxOZfhe02ewbQnZnxrLOS0HZXUzwcriMNcjhK EYVAslK3qngFRZTQBpNJO0TVsXYqVkheifqmAyflmCYkJgX3HrSkzU7Q2ufQTVbD T2/wHyBw/n656e9sxOiFQ2Sw7p0dP2La5Ts+3E294nOq47NeGHsdly/gvNCBrWC0 7AsID5LPOvgn3HZnmPWO/NAatSoI22aclSrr1UqlOBYHsXOYgZvDWJhyFPtM/N1g djBQyYPQiNp9HPbsRvMxYOektb96VSo= -----END CERTIFICATE-----Generated at Mon May 12 19:09:57 2025 by rpki-client