$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft File: E1XVGH0uY9fm1JB42OcfoFHEVuM.mft (raw, json) Hash identifier: Fl9GR5Mqsbwtu4XCBXd0eljpCyC5D4ZqzPb9lyq8Kak= Subject key identifier: F5:B1:86:50:69:5A:E4:28:49:4C:2B:50:1A:A4:63:2C:08:6D:55:DA Authority key identifier: 13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3 Certificate issuer: /CN=A91B3CB5/serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3 Certificate serial: 0C65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft Manifest number: 0C4F Signing time: Wed 14 May 2025 18:35:25 +0000 Manifest this update: Wed 14 May 2025 18:35:24 +0000 Manifest next update: Wed 21 May 2025 18:35:24 +0000 Files and hashes: 1: E1XVGH0uY9fm1JB42OcfoFHEVuM.crl (hash: vsIotF2OT89twkNPfNeqlfmzr5Pls/oXBDtfMXrxT14=) 2: E26173CE050611EAA0470B49C4F9AE02.roa (hash: Xn8UFabkBh7C11XTNFuqVWX0DQ3YtKdO4oP8X6zIrEU=) 3: F2F8C8B2AAE311EFB889317FC4F9AE02.roa (hash: wQzyXgNB8e39dNmdtHKa5IWJxgKdAoXLBNvYY5X5/EU=) 4: 257E3B94E37B11EA84A20810C4F9AE02.roa (hash: ZW4D52b/QqoUPTvkPyb0ztzXgPBkyyW+b1SqWMCRNR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3173 (0xc65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3CB5, serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3 Validity Not Before: May 14 18:35:24 2025 GMT Not After : May 21 18:35:24 2025 GMT Subject: CN=6824e26c-aa00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:88:63:42:3d:03:61:7c:73:70:f3:40:cf:07: 00:53:47:bc:55:a7:37:32:35:42:13:11:42:e5:bb: 59:14:7a:f9:91:07:06:6f:0b:55:8b:69:da:dd:ef: 9e:32:a0:f5:fb:32:92:ee:9f:39:21:f1:ba:66:b5: b9:fc:3c:d6:9a:34:c8:e8:b1:c2:7f:e2:c2:a5:74: c5:55:54:43:ca:01:96:80:eb:7d:6c:27:a8:a8:d6: 16:8a:7e:1a:37:f8:1d:86:44:7e:cc:b2:db:ee:78: e9:46:5e:52:34:09:2a:59:90:ff:f4:95:12:32:55: 5e:13:43:f4:f8:68:c1:18:01:8a:d8:fa:82:5e:f4: 0b:07:9c:a9:60:14:14:31:e7:47:93:1d:84:94:e1: 42:81:b0:31:e7:33:01:55:22:13:36:76:76:ec:5c: 1b:65:f1:ee:d4:eb:d3:c2:1f:a5:e2:70:48:cc:8e: 97:65:db:9f:28:e7:b9:05:ea:e3:80:b9:49:2a:39: d2:e2:16:f4:a4:21:e7:3a:5a:75:2a:09:db:6a:95: e8:2a:2f:b4:93:51:bd:68:82:ab:40:3b:f7:fc:86: b9:de:2a:df:6b:61:83:b8:40:5f:b1:a7:c4:05:f8: 1f:d4:f0:ad:2e:2e:50:43:37:75:02:3d:37:90:25: aa:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B1:86:50:69:5A:E4:28:49:4C:2B:50:1A:A4:63:2C:08:6D:55:DA X509v3 Authority Key Identifier: keyid:13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:22:5d:ba:2a:92:11:a7:4c:d1:49:7a:61:bb:79:20:60:21: f9:0f:5d:6f:6b:2c:52:19:a4:a2:6d:1b:45:31:00:49:c4:50: ac:ab:05:b0:b1:20:41:f2:d3:df:d8:9b:1d:c6:8b:0f:f3:b5: 9a:cc:f7:bc:c2:1d:d6:a7:14:dd:c1:ef:c6:2c:63:7f:e1:e2: 09:a8:22:68:e7:28:88:a7:94:66:3c:dc:c6:2e:79:b2:a7:aa: 54:e3:22:bd:f3:ec:98:22:29:21:87:6b:2b:eb:8c:25:6d:5f: 02:25:8a:d1:af:4b:8f:28:fd:a2:28:b0:2c:d4:1f:35:83:12: 9e:ff:85:14:d7:67:41:d8:d0:39:83:9c:22:e9:90:65:4a:b1: 37:aa:ed:ce:b4:ca:00:e3:f9:6c:10:0b:18:ea:c3:c3:45:af: 2f:47:05:8f:e3:5f:6c:f6:00:c3:9a:14:fc:96:0b:03:55:95: 92:54:0f:f4:a1:61:6c:64:99:ee:d1:57:55:d5:30:f0:43:2b: 39:3b:58:91:3a:8c:8f:f2:2b:a3:30:92:0d:8f:a6:79:0b:19: de:d1:dd:0c:3a:b8:77:9a:d6:b5:ec:49:c9:a8:b0:cf:cd:5c: ff:56:dc:b4:5d:20:1e:9a:47:19:11:fa:49:33:57:ae:33:32: 37:eb:05:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNDQjUxMTAvBgNVBAUTKDEzNTVENTE4N0QyRTYzRDdFNkQ0OTA3OEQ4RTcxRkEw NTFDNDU2RTMwHhcNMjUwNTE0MTgzNTI0WhcNMjUwNTIxMTgzNTI0WjAYMRYwFAYD VQQDEw02ODI0ZTI2Yy1hYTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1IhjQj0DYXxzcPNAzwcAU0e8Vac3MjVCExFC5btZFHr5kQcGbwtVi2na3e+e MqD1+zKS7p85IfG6ZrW5/DzWmjTI6LHCf+LCpXTFVVRDygGWgOt9bCeoqNYWin4a N/gdhkR+zLLb7njpRl5SNAkqWZD/9JUSMlVeE0P0+GjBGAGK2PqCXvQLB5ypYBQU MedHkx2ElOFCgbAx5zMBVSITNnZ27FwbZfHu1OvTwh+l4nBIzI6XZdufKOe5Berj gLlJKjnS4hb0pCHnOlp1KgnbapXoKi+0k1G9aIKrQDv3/Ia53irfa2GDuEBfsafE Bfgf1PCtLi5QQzd1Aj03kCWqSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPWxhlBp WuQoSUwrUBqkYywIbVXaMB8GA1UdIwQYMBaAFBNV1Rh9LmPX5tSQeNjnH6BRxFbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0NCNS82MzI2NTBGODA1 MDUxMUVBQUE5MzRDNDNDNEY5QUUwMi9FMVhWR0gwdVk5Zm0xSkI0Mk9jZm9GSEVW dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UxWFZHSDB1WTlmbTFKQjQyT2Nmb0ZIRVZ1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0NCNS82MzI2NTBGODA1MDUxMUVBQUE5MzRDNDNDNEY5QUUwMi9FMVhWR0gwdVk5 Zm0xSkI0Mk9jZm9GSEVWdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlIl26KpIRp0zRSXphu3kgYCH5D11vayxSGaSibRtFMQBJxFCsqwWw sSBB8tPf2JsdxosP87WazPe8wh3WpxTdwe/GLGN/4eIJqCJo5yiIp5RmPNzGLnmy p6pU4yK98+yYIikhh2sr64wlbV8CJYrRr0uPKP2iKLAs1B81gxKe/4UU12dB2NA5 g5wi6ZBlSrE3qu3OtMoA4/lsEAsY6sPDRa8vRwWP419s9gDDmhT8lgsDVZWSVA/0 oWFsZJnu0VdV1TDwQys5O1iROoyP8iujMJINj6Z5Cxne0d0MOrh3mta17EnJqLDP zVz/Vty0XSAemkcZEfpJM1euMzI36wUR -----END CERTIFICATE-----Generated at Thu May 15 22:13:21 2025 by rpki-client