$ rpki-client -vvf rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft File: e8dWLzeFS9JjniQQ1nPld8v7MR8.mft (raw, json) Hash identifier: NSujd9nELDibAlN/4xX0yInz/d/nm6TLmUFlCm6Qb4k= Subject key identifier: D1:26:07:B5:60:45:35:89:33:8B:43:44:52:02:7E:54:AA:6E:47:83 Authority key identifier: 7B:C7:56:2F:37:85:4B:D2:63:9E:24:10:D6:73:E5:77:CB:FB:31:1F Certificate issuer: /CN=A91C36C2/serialNumber=7BC7562F37854BD2639E2410D673E577CBFB311F Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft Manifest number: 32 Signing time: Sun 11 May 2025 06:26:31 +0000 Manifest this update: Sun 11 May 2025 06:26:31 +0000 Manifest next update: Sun 18 May 2025 06:26:31 +0000 Files and hashes: 1: e8dWLzeFS9JjniQQ1nPld8v7MR8.crl (hash: 1743kcEEAQca1wC7+9y6IRBdWL/WRLMIm/Dim5l61Ps=) 2: C6D4BDF8ECFC11EF9447031DC4F9AE02.roa (hash: vKvGvc7f1ooIQwok9o5vzvjlKuAVRyu9TkNTlmBt1ZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.crl rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:26:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C36C2, serialNumber=7BC7562F37854BD2639E2410D673E577CBFB311F Validity Not Before: May 11 06:26:31 2025 GMT Not After : May 18 06:26:31 2025 GMT Subject: CN=68204317-5f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:50:90:05:46:84:e8:76:13:80:53:08:33:4a: 95:03:26:2a:b8:1a:f3:66:33:e2:a6:55:e6:19:c1: 89:da:8c:9d:0f:41:46:e8:d6:ed:a8:fa:df:10:09: 5e:0f:7c:7f:c1:5c:37:ff:9e:e3:d1:f8:04:e8:4b: 24:04:8d:f7:c0:0b:a6:ed:67:0b:a6:22:f6:93:a2: 33:c2:bb:cd:a8:35:06:4a:72:3d:0a:97:d1:6a:bc: 39:1e:ea:a1:2f:2c:f2:08:99:71:c6:bd:3d:b0:f6: 02:b5:ff:37:b0:9c:53:96:1f:58:79:fa:54:f5:53: 91:df:60:60:79:77:76:9b:9f:fd:ce:9c:be:bc:ad: a2:7f:ad:ae:4b:69:aa:71:30:1c:42:07:92:06:e9: a4:17:76:a7:17:b4:a5:3e:bd:22:4c:dc:e6:f7:16: bd:ed:5f:69:19:6a:1f:a6:5a:29:d4:b7:b0:ca:09: 28:76:4e:61:f0:1f:b7:1b:58:65:19:37:93:71:65: c1:cb:2f:58:b0:80:56:45:7f:69:79:7f:d4:0f:4f: 16:f0:85:93:90:dd:08:7e:81:f0:ac:fb:6f:aa:f9: b6:cd:db:73:89:10:78:96:2b:79:01:99:6b:13:35: 4f:a2:b0:d1:46:64:27:07:f9:35:bc:6f:47:f7:53: e9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:26:07:B5:60:45:35:89:33:8B:43:44:52:02:7E:54:AA:6E:47:83 X509v3 Authority Key Identifier: keyid:7B:C7:56:2F:37:85:4B:D2:63:9E:24:10:D6:73:E5:77:CB:FB:31:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:e8:5a:45:a4:3f:2e:58:08:71:30:a3:ea:dc:6d:63:c4:f4: 0f:e9:04:1b:12:24:cd:b2:21:bb:b7:da:77:34:69:2d:9c:90: 5b:f5:60:75:4c:1a:c8:7e:dc:8f:b3:fd:da:f8:e7:8c:93:ad: 9e:68:a1:8a:6e:cd:41:ce:f6:e4:4b:fb:52:38:d7:38:95:df: 6e:12:06:1a:7a:b4:17:03:3b:87:7f:29:c7:74:26:5d:06:ef: 8f:85:10:d1:48:48:20:d0:f1:3a:c2:73:dc:b3:85:f1:ec:05: a9:07:17:ff:a5:29:c4:33:08:be:fd:38:27:8b:f9:a2:5e:08: 30:8b:41:28:43:a0:23:6f:b4:44:7f:3b:49:3a:e9:71:6a:c7: 92:82:2d:76:cb:dd:3e:1a:1a:80:0e:22:ed:78:51:9c:a0:c6: ea:ba:5e:ac:a8:1c:06:c9:64:61:21:46:ec:34:21:c4:02:5b: ed:e6:83:41:e0:ce:14:bf:63:8c:87:03:48:d8:f5:1a:6f:fd: 79:ab:a8:59:66:88:69:c0:a3:ec:ac:85:2f:3f:db:7a:8f:62: ac:a2:20:98:94:cf:f6:5d:e0:3e:29:13:b5:83:14:51:96:75: 6c:62:0e:68:7d:93:30:df:a2:0b:f0:f3:28:33:ee:99:42:dd: 4e:2b:8b:8a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MzZDMjExMC8GA1UEBRMoN0JDNzU2MkYzNzg1NEJEMjYzOUUyNDEwRDY3M0U1NzdD QkZCMzExRjAeFw0yNTA1MTEwNjI2MzFaFw0yNTA1MTgwNjI2MzFaMBgxFjAUBgNV BAMTDTY4MjA0MzE3LTVmODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOUJAFRoTodhOAUwgzSpUDJiq4GvNmM+KmVeYZwYnajJ0PQUbo1u2o+t8QCV4P fH/BXDf/nuPR+AToSyQEjffAC6btZwumIvaTojPCu82oNQZKcj0Kl9FqvDke6qEv LPIImXHGvT2w9gK1/zewnFOWH1h5+lT1U5HfYGB5d3abn/3OnL68raJ/ra5Laapx MBxCB5IG6aQXdqcXtKU+vSJM3Ob3Fr3tX2kZah+mWinUt7DKCSh2TmHwH7cbWGUZ N5NxZcHLL1iwgFZFf2l5f9QPTxbwhZOQ3Qh+gfCs+2+q+bbN23OJEHiWK3kBmWsT NU+isNFGZCcH+TW8b0f3U+nvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0SYHtWBF NYkzi0NEUgJ+VKpuR4MwHwYDVR0jBBgwFoAUe8dWLzeFS9JjniQQ1nPld8v7MR8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMzNkMyLzUwRkI5MDcwRUMz OTExRUY4MUUwMDk4NkM0RjlBRTAyL2U4ZFdMemVGUzlKam5pUVExblBsZDh2N01S OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZThkV0x6ZUZTOUpqbmlRUTFuUGxkOHY3TVI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMz NkMyLzUwRkI5MDcwRUMzOTExRUY4MUUwMDk4NkM0RjlBRTAyL2U4ZFdMemVGUzlK am5pUVExblBsZDh2N01SOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALDoWkWkPy5YCHEwo+rcbWPE9A/pBBsSJM2yIbu32nc0aS2ckFv1YHVM Gsh+3I+z/dr454yTrZ5ooYpuzUHO9uRL+1I41ziV324SBhp6tBcDO4d/Kcd0Jl0G 74+FENFISCDQ8TrCc9yzhfHsBakHF/+lKcQzCL79OCeL+aJeCDCLQShDoCNvtER/ O0k66XFqx5KCLXbL3T4aGoAOIu14UZygxuq6XqyoHAbJZGEhRuw0IcQCW+3mg0Hg zhS/Y4yHA0jY9Rpv/XmrqFlmiGnAo+yshS8/23qPYqyiIJiUz/Zd4D4pE7WDFFGW dWxiDmh9kzDfogvw8ygz7plC3U4ri4o= -----END CERTIFICATE-----Generated at Mon May 12 04:22:24 2025 by rpki-client