$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.mft File: deIxCEEFtBXk1XmhraSOU5dW17M.mft (raw, json) Hash identifier: kk8C4Cgn6uemOL5HR3dBIno6kZHMKPJn9L+6YAdQrtg= Subject key identifier: 8D:20:90:C9:A7:54:74:4D:1E:A7:18:C5:F7:35:6F:BE:7D:D4:DC:3E Authority key identifier: 75:E2:31:08:41:05:B4:15:E4:D5:79:A1:AD:A4:8E:53:97:56:D7:B3 Certificate issuer: /CN=A91AD9EF/serialNumber=75E231084105B415E4D579A1ADA48E539756D7B3 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/deIxCEEFtBXk1XmhraSOU5dW17M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.mft Manifest number: 0130 Signing time: Sun 11 May 2025 03:23:35 +0000 Manifest this update: Sun 11 May 2025 03:23:34 +0000 Manifest next update: Sun 18 May 2025 03:23:34 +0000 Files and hashes: 1: deIxCEEFtBXk1XmhraSOU5dW17M.crl (hash: Y18DDXWd+OasXHElb7DhiBWiu1CREjNI6CaA/Ps0uyo=) 2: 39F3DEAC5BE711EE8D63E752C4F9AE02.roa (hash: HRm3TzztD8oTXqZ2+rt8UziAB3hTaIAcFHe9LeA0DJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.crl rsync://rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/deIxCEEFtBXk1XmhraSOU5dW17M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:23:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD9EF, serialNumber=75E231084105B415E4D579A1ADA48E539756D7B3 Validity Not Before: May 11 03:23:34 2025 GMT Not After : May 18 03:23:34 2025 GMT Subject: CN=68201836-8cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ae:b3:43:44:ad:6a:14:7a:70:d9:5f:a1:83: 2d:23:5a:89:18:47:b7:eb:85:89:82:64:95:95:98: f3:e7:3a:38:19:60:23:74:0d:b3:17:68:b2:53:6b: ef:d3:4c:c6:2c:cc:8a:9c:2d:6e:08:83:29:ca:06: ab:3a:4c:0f:3e:d6:cf:35:34:7b:e4:32:48:2d:ff: a7:99:dd:9d:09:76:44:21:ec:3c:c6:20:84:5d:cc: 91:7e:82:8d:ed:d9:df:ea:de:aa:79:39:03:9e:0d: 48:ae:c3:dd:ed:61:af:c3:d7:50:f2:ec:68:2e:12: bd:db:d8:73:9a:64:c6:6a:23:17:d4:f6:90:5b:7e: b4:70:da:57:fd:8c:c3:19:c0:81:2f:39:05:11:ed: 0d:8a:d2:92:13:92:c4:fa:d6:c5:72:cb:4e:f2:50: 28:6a:4d:16:fe:49:88:cd:be:87:30:98:21:39:08: fd:6d:0d:02:c8:1a:8d:37:fd:38:f9:59:f0:44:ee: 8e:78:4e:90:c7:8f:18:73:a2:75:16:70:18:cd:6a: 86:73:a7:46:f3:71:bb:8f:88:e9:dd:37:bb:e6:e1: dc:e0:9b:52:b4:da:bc:b5:7f:96:db:bd:da:9a:17: c2:24:a8:d2:d4:90:17:6d:aa:9b:d2:fd:8a:91:00: 61:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:20:90:C9:A7:54:74:4D:1E:A7:18:C5:F7:35:6F:BE:7D:D4:DC:3E X509v3 Authority Key Identifier: keyid:75:E2:31:08:41:05:B4:15:E4:D5:79:A1:AD:A4:8E:53:97:56:D7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/deIxCEEFtBXk1XmhraSOU5dW17M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:36:13:8f:a3:d8:10:31:3c:ea:2e:35:c7:e8:b1:6e:07:2c: 16:03:1d:3c:ea:9b:64:4d:f0:d1:c4:f1:fd:f0:2f:6b:00:ec: ed:34:67:a2:be:3f:18:3b:07:a4:3b:cf:0c:84:ed:60:53:1d: 1c:70:61:38:c0:58:b0:7b:48:5b:95:07:e8:4b:2b:f1:ee:85: 1d:04:61:82:47:ec:29:73:5b:2e:2a:f5:14:b5:2f:71:79:43: 68:b1:79:54:8d:cc:62:70:a0:b2:5b:c5:e0:20:e6:cc:14:67: 05:11:94:52:b4:4c:53:26:27:eb:ac:68:68:c1:64:e6:30:48: ad:ca:30:c8:e6:62:c9:d8:a5:4b:f8:ec:0b:6f:65:5d:6e:9f: 0a:7f:1e:1f:58:4c:5a:a3:bc:24:c0:ce:45:86:6e:ba:54:8d: a3:91:70:9f:d9:96:f0:ae:00:68:6c:00:d6:60:e1:c2:2b:19: 31:93:36:e9:ad:5a:48:49:8e:2e:0b:f3:0e:14:8b:5b:be:c7: 51:45:de:1e:c9:11:1e:45:f8:d5:07:b8:91:e5:a9:ad:a6:39: 17:c5:7e:84:3b:7e:7b:70:59:ae:2f:07:86:19:61:2f:67:68: e7:ac:23:fa:a1:98:72:4b:d5:20:0a:53:85:b1:30:13:2e:2d: cc:ed:5b:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ5RUYxMTAvBgNVBAUTKDc1RTIzMTA4NDEwNUI0MTVFNEQ1NzlBMUFEQTQ4RTUz OTc1NkQ3QjMwHhcNMjUwNTExMDMyMzM0WhcNMjUwNTE4MDMyMzM0WjAYMRYwFAYD VQQDEw02ODIwMTgzNi04Y2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw66zQ0StahR6cNlfoYMtI1qJGEe364WJgmSVlZjz5zo4GWAjdA2zF2iyU2vv 00zGLMyKnC1uCIMpygarOkwPPtbPNTR75DJILf+nmd2dCXZEIew8xiCEXcyRfoKN 7dnf6t6qeTkDng1IrsPd7WGvw9dQ8uxoLhK929hzmmTGaiMX1PaQW360cNpX/YzD GcCBLzkFEe0NitKSE5LE+tbFcstO8lAoak0W/kmIzb6HMJghOQj9bQ0CyBqNN/04 +VnwRO6OeE6Qx48Yc6J1FnAYzWqGc6dG83G7j4jp3Te75uHc4JtStNq8tX+W273a mhfCJKjS1JAXbaqb0v2KkQBhRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0gkMmn VHRNHqcYxfc1b7591Nw+MB8GA1UdIwQYMBaAFHXiMQhBBbQV5NV5oa2kjlOXVtez MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDlFRi84RUIzRUVDRTVC RTYxMUVFQTcwNUE3NjVDNEY5QUUwMi9kZUl4Q0VFRnRCWGsxWG1ocmFTT1U1ZFcx N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RlSXhDRUVGdEJYazFYbWhyYVNPVTVkVzE3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDlFRi84RUIzRUVDRTVCRTYxMUVFQTcwNUE3NjVDNEY5QUUwMi9kZUl4Q0VFRnRC WGsxWG1ocmFTT1U1ZFcxN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAINhOPo9gQMTzqLjXH6LFuBywWAx086ptkTfDRxPH98C9rAOztNGei vj8YOwekO88MhO1gUx0ccGE4wFiwe0hblQfoSyvx7oUdBGGCR+wpc1suKvUUtS9x eUNosXlUjcxicKCyW8XgIObMFGcFEZRStExTJifrrGhowWTmMEityjDI5mLJ2KVL +OwLb2Vdbp8Kfx4fWExao7wkwM5Fhm66VI2jkXCf2ZbwrgBobADWYOHCKxkxkzbp rVpISY4uC/MOFItbvsdRRd4eyREeRfjVB7iR5amtpjkXxX6EO357cFmuLweGGWEv Z2jnrCP6oZhyS9UgClOFsTATLi3M7VvO -----END CERTIFICATE-----Generated at Mon May 12 11:17:17 2025 by rpki-client