$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft File: MEsColZqFjrazh-lIaMKfmJqwR4.mft (raw, json) Hash identifier: iut8SVLIi5Xnoxe4lCDg44hbzqjlFlcEEs5M3LC4M48= Subject key identifier: 88:2C:DD:D4:64:E9:B7:30:36:03:2C:77:ED:14:20:07:4F:96:1D:A1 Authority key identifier: 30:4B:02:A2:56:6A:16:3A:DA:CE:1F:A5:21:A3:0A:7E:62:6A:C1:1E Certificate issuer: /CN=A91CAECE/serialNumber=304B02A2566A163ADACE1FA521A30A7E626AC11E Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft Manifest number: 10 Signing time: Mon 05 May 2025 06:52:43 +0000 Manifest this update: Mon 05 May 2025 06:52:43 +0000 Manifest next update: Mon 12 May 2025 06:52:43 +0000 Files and hashes: 1: MEsColZqFjrazh-lIaMKfmJqwR4.crl (hash: siKGKfUAMKS2f5SIXFfSFGDMQ6h3eJ2DoDqjCkEgOk0=) 2: 07063FA4134B11F0B48EFA0AC4F9AE02.roa (hash: WNVrInNAUMIDrW85MacHTXC8HeXu1LqrkLU97EbnyxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.crl rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 06:52:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAECE, serialNumber=304B02A2566A163ADACE1FA521A30A7E626AC11E Validity Not Before: May 5 06:52:43 2025 GMT Not After : May 12 06:52:43 2025 GMT Subject: CN=6818603b-3667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:cb:dd:6c:37:d3:86:ff:17:27:6e:95:af:8a: 36:21:ee:08:a8:4a:bd:50:4e:56:31:08:9f:a1:20: bd:ac:bc:9a:78:99:8d:93:20:e0:ca:1a:eb:67:48: f5:a5:bb:40:51:29:cd:f2:f8:2b:1c:36:58:25:25: 36:21:6e:c1:f7:65:33:73:6b:ce:1c:87:69:33:74: 96:6d:dd:c4:1b:21:ee:dc:76:00:a8:b7:c7:e3:20: 72:a6:a1:ae:fe:53:cf:3c:d5:c3:79:cf:47:6d:6c: 67:de:4d:77:99:b3:93:a7:b9:ec:db:37:d9:ae:74: 55:d9:76:21:72:6c:b8:03:22:26:45:a7:78:ad:2a: b0:f5:e0:4f:c8:11:16:a4:04:66:03:26:af:d0:8e: 0a:00:c9:41:1b:88:66:d8:ec:df:ca:48:9c:f7:3b: 27:7d:0c:e2:da:15:86:eb:df:08:d8:b7:77:62:9c: 36:a9:15:64:86:a2:09:6b:9f:17:ba:6e:32:0f:75: b2:51:47:bc:f7:44:6c:d9:d3:db:a2:25:58:41:51: e8:4a:3d:cc:2e:59:25:d2:06:e8:57:76:53:19:9c: b0:af:89:2f:b4:0e:1d:01:ba:61:bf:5b:89:55:b5: d4:ad:80:f5:fd:3b:76:47:e3:3e:65:87:03:a0:9b: fd:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2C:DD:D4:64:E9:B7:30:36:03:2C:77:ED:14:20:07:4F:96:1D:A1 X509v3 Authority Key Identifier: keyid:30:4B:02:A2:56:6A:16:3A:DA:CE:1F:A5:21:A3:0A:7E:62:6A:C1:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:26:13:40:91:b8:f3:48:af:8f:1b:42:71:9c:ad:84:07:a4: 90:3a:c8:2d:b4:2d:14:83:de:60:6f:25:28:eb:6c:30:6c:7c: 19:5e:5e:ae:43:a9:5d:f3:3d:bd:49:0f:dd:ab:fb:1b:1c:46: ae:95:18:49:bd:c2:cb:b2:f8:b6:62:37:1d:bf:6f:1a:d5:9a: d5:e3:19:e7:42:8d:a6:d5:ed:33:2f:bd:df:6b:e6:47:c7:fa: ce:00:79:38:42:f2:2e:8b:41:1f:30:dd:51:05:df:a3:21:75: 9d:fd:f1:d6:53:86:e3:b1:0a:44:e8:44:87:a4:1b:5d:12:64: d0:ec:8d:20:36:85:64:3d:40:93:cb:05:bc:75:59:ec:c3:32: cb:60:a0:2c:29:35:2c:21:72:75:4c:ed:9d:14:8f:03:85:b3: 28:f0:28:19:2f:07:6e:15:42:ad:2e:fa:dd:0d:14:d6:b7:71: 2e:e1:18:0f:72:1f:ee:ff:c0:2f:11:b1:e8:2c:82:b3:c7:55: 13:ce:17:50:49:84:02:b1:b0:70:f3:af:5e:c3:55:a3:aa:a8: 47:f2:71:df:15:5e:74:de:ec:30:be:5a:0a:a3:36:31:20:3f: eb:20:ae:3f:b0:e9:e2:29:72:74:d4:65:60:9f:7e:a7:b6:e7: 20:43:03:e9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QUVDRTExMC8GA1UEBRMoMzA0QjAyQTI1NjZBMTYzQURBQ0UxRkE1MjFBMzBBN0U2 MjZBQzExRTAeFw0yNTA1MDUwNjUyNDNaFw0yNTA1MTIwNjUyNDNaMBgxFjAUBgNV BAMTDTY4MTg2MDNiLTM2NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDyy91sN9OG/xcnbpWvijYh7gioSr1QTlYxCJ+hIL2svJp4mY2TIODKGutnSPWl u0BRKc3y+CscNlglJTYhbsH3ZTNza84ch2kzdJZt3cQbIe7cdgCot8fjIHKmoa7+ U8881cN5z0dtbGfeTXeZs5OnuezbN9mudFXZdiFybLgDIiZFp3itKrD14E/IERak BGYDJq/QjgoAyUEbiGbY7N/KSJz3Oyd9DOLaFYbr3wjYt3dinDapFWSGoglrnxe6 bjIPdbJRR7z3RGzZ09uiJVhBUehKPcwuWSXSBuhXdlMZnLCviS+0Dh0BumG/W4lV tdStgPX9O3ZH4z5lhwOgm/2rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiCzd1GTp tzA2Ayx37RQgB0+WHaEwHwYDVR0jBBgwFoAUMEsColZqFjrazh+lIaMKfmJqwR4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBRUNFLzNERjREQzkyMTM0 QTExRjBBNjk2ODQ4N0M0RjlBRTAyL01Fc0NvbFpxRmpyYXpoLWxJYU1LZm1KcXdS NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTUVzQ29sWnFGanJhemgtbElhTUtmbUpxd1I0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB RUNFLzNERjREQzkyMTM0QTExRjBBNjk2ODQ4N0M0RjlBRTAyL01Fc0NvbFpxRmpy YXpoLWxJYU1LZm1KcXdSNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACAmE0CRuPNIr48bQnGcrYQHpJA6yC20LRSD3mBvJSjrbDBsfBleXq5D qV3zPb1JD92r+xscRq6VGEm9wsuy+LZiNx2/bxrVmtXjGedCjabV7TMvvd9r5kfH +s4AeThC8i6LQR8w3VEF36MhdZ398dZThuOxCkToRIekG10SZNDsjSA2hWQ9QJPL Bbx1WezDMstgoCwpNSwhcnVM7Z0UjwOFsyjwKBkvB24VQq0u+t0NFNa3cS7hGA9y H+7/wC8RsegsgrPHVRPOF1BJhAKxsHDzr17DVaOqqEfycd8VXnTe7DC+WgqjNjEg P+sgrj+w6eIpcnTUZWCffqe25yBDA+k= -----END CERTIFICATE-----Generated at Mon May 5 17:06:47 2025 by rpki-client