$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft File: e5n41rlBPOKiluscfX7-bUfQy6Q.mft (raw, json) Hash identifier: EPLoqafkM7nOP4RO75cxpPmSN9hSJ7YFZ/Jo1ikOvws= Subject key identifier: D9:35:F3:E0:94:01:13:E5:F2:6C:C4:AC:E5:65:BE:48:61:6C:5D:FC Authority key identifier: 7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4 Certificate issuer: /CN=A91C4F1B/serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4 Certificate serial: 0897 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft Manifest number: 0890 Signing time: Sat 10 May 2025 20:18:05 +0000 Manifest this update: Sat 10 May 2025 20:18:04 +0000 Manifest next update: Sat 17 May 2025 20:18:04 +0000 Files and hashes: 1: e5n41rlBPOKiluscfX7-bUfQy6Q.crl (hash: T4dhE6X6Q4Co+cBigbUJU44ZjytyuBAOi6YOIzxsWaE=) 2: 059261A8BC5111EABE07AE32C4F9AE02.roa (hash: cybKavsK+KygtFzdLH5ZiH4HxzktrVv6nGmG8yvNLOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2199 (0x897) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F1B, serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4 Validity Not Before: May 10 20:18:04 2025 GMT Not After : May 17 20:18:04 2025 GMT Subject: CN=681fb47c-b26c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ee:ab:bd:69:1c:40:7f:a2:8e:68:38:85:6b: db:3a:86:be:75:37:f1:4b:1c:87:fc:8f:b7:b7:a1: 76:02:e1:de:c1:f8:6d:50:85:f1:08:bc:6a:ce:4e: e8:d1:95:db:ac:e9:65:9b:2d:c6:e2:7e:bf:ba:65: d5:ef:7a:3e:ac:69:ac:1a:79:a9:9a:25:b6:3e:d3: f3:c1:6b:bf:12:5b:9a:2b:29:ce:b2:94:e9:e5:35: e6:1b:ac:63:64:de:c5:04:f9:dc:75:d3:39:3a:87: 27:82:db:9c:3c:8d:91:ff:5f:20:d5:eb:38:d8:e8: f1:b1:1a:77:87:94:05:fd:d6:4b:99:25:32:9b:fb: cd:39:4d:a8:a4:c7:11:51:11:59:8e:f8:c9:03:66: f7:ed:dd:ea:96:46:f8:b2:e4:a1:5a:48:14:ec:e9: 56:c7:b2:41:6e:d6:15:80:d6:ce:be:3a:43:05:bc: bc:ff:6a:03:0a:1d:94:6c:91:40:4e:0d:f5:ca:7d: 23:37:b4:d0:cd:1a:3b:89:89:23:ee:52:50:5f:01: 17:b8:2f:23:c6:88:ae:71:8b:40:4b:71:26:0c:79: 7b:6c:ae:5c:af:47:9d:a6:bc:72:94:56:8f:98:57: a8:4d:d6:0f:9b:90:f8:41:09:b7:e5:c8:65:82:0f: f1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:35:F3:E0:94:01:13:E5:F2:6C:C4:AC:E5:65:BE:48:61:6C:5D:FC X509v3 Authority Key Identifier: keyid:7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c6:2e:45:16:50:2f:35:6b:38:df:e4:cf:e0:76:a2:0e:50: 83:00:3c:e3:a6:b6:73:9b:83:36:12:fd:43:12:bd:36:6b:4f: 38:5c:62:c5:ac:1f:2b:d3:21:66:7b:70:92:93:6d:40:f6:20: d5:a9:03:f6:1d:62:8b:44:06:27:5f:15:4e:24:12:6e:34:43: 3d:b5:03:ce:53:6a:d6:33:7f:a6:a9:94:84:98:d6:7d:e2:46: 39:83:b4:64:de:6c:f3:a6:bc:29:04:77:36:ed:ac:c4:e2:e9: bc:6b:eb:48:24:23:e6:51:42:db:df:41:1b:98:a1:8f:64:d7: 93:6e:7e:7f:69:d9:e5:3d:22:b8:5b:47:d6:a3:3d:5d:f0:a9: 55:04:4b:62:c1:7c:f1:d9:d5:c6:cc:04:20:87:ce:70:0e:55: 73:0c:20:8a:4e:3d:63:5d:af:7f:0a:80:61:36:88:ae:db:45: c4:c6:0e:49:db:f6:1b:a5:49:a5:86:f4:f3:65:ba:d3:ac:29: f8:7f:b2:55:97:98:df:a4:91:2f:22:5b:71:f1:e3:6d:b7:53: 03:d5:93:62:7e:74:3a:b2:85:8a:e8:33:08:79:3c:fb:d6:35: 7d:5c:e0:28:6c:88:6f:38:cc:b6:d9:04:f8:1b:b4:5c:4a:0c: b4:0b:f7:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMUIxMTAvBgNVBAUTKDdCOTlGOEQ2Qjk0MTNDRTJBMjk2RUIxQzdEN0VGRTZE NDdEMENCQTQwHhcNMjUwNTEwMjAxODA0WhcNMjUwNTE3MjAxODA0WjAYMRYwFAYD VQQDEw02ODFmYjQ3Yy1iMjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvu6rvWkcQH+ijmg4hWvbOoa+dTfxSxyH/I+3t6F2AuHewfhtUIXxCLxqzk7o 0ZXbrOllmy3G4n6/umXV73o+rGmsGnmpmiW2PtPzwWu/EluaKynOspTp5TXmG6xj ZN7FBPncddM5OocngtucPI2R/18g1es42OjxsRp3h5QF/dZLmSUym/vNOU2opMcR URFZjvjJA2b37d3qlkb4suShWkgU7OlWx7JBbtYVgNbOvjpDBby8/2oDCh2UbJFA Tg31yn0jN7TQzRo7iYkj7lJQXwEXuC8jxoiucYtAS3EmDHl7bK5cr0edprxylFaP mFeoTdYPm5D4QQm35chlgg/x/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNk18+CU ARPl8mzErOVlvkhhbF38MB8GA1UdIwQYMBaAFHuZ+Na5QTziopbrHH1+/m1H0Muk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYxQi8yM0YzMDU1MEJD NEYxMUVBQkE4Qzk2MkZDNEY5QUUwMi9lNW40MXJsQlBPS2lsdXNjZlg3LWJVZlF5 NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U1bjQxcmxCUE9LaWx1c2NmWDctYlVmUXk2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYxQi8yM0YzMDU1MEJDNEYxMUVBQkE4Qzk2MkZDNEY5QUUwMi9lNW40MXJsQlBP S2lsdXNjZlg3LWJVZlF5NlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfxi5FFlAvNWs43+TP4HaiDlCDADzjprZzm4M2Ev1DEr02a084XGLF rB8r0yFme3CSk21A9iDVqQP2HWKLRAYnXxVOJBJuNEM9tQPOU2rWM3+mqZSEmNZ9 4kY5g7Rk3mzzprwpBHc27azE4um8a+tIJCPmUULb30EbmKGPZNeTbn5/adnlPSK4 W0fWoz1d8KlVBEtiwXzx2dXGzAQgh85wDlVzDCCKTj1jXa9/CoBhNoiu20XExg5J 2/YbpUmlhvTzZbrTrCn4f7JVl5jfpJEvIltx8eNtt1MD1ZNifnQ6soWK6DMIeTz7 1jV9XOAobIhvOMy22QT4G7RcSgy0C/fO -----END CERTIFICATE-----Generated at Sun May 11 13:29:52 2025 by rpki-client