$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft File: esDADw_KR57kZeT39UXoyUmT1hw.mft (raw, json) Hash identifier: S+WFmjxDwht60t5x0XbkNRE37cmuaz4vDc27wWnO6h8= Subject key identifier: 98:78:BC:D6:8E:DA:BF:8C:4A:BE:D0:00:85:64:75:E3:86:95:B0:B3 Authority key identifier: 7A:C0:C0:0F:0F:CA:47:9E:E4:65:E4:F7:F5:45:E8:C9:49:93:D6:1C Certificate issuer: /CN=A91D1691/serialNumber=7AC0C00F0FCA479EE465E4F7F545E8C94993D61C Certificate serial: 2440 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft Manifest number: 2415 Signing time: Wed 14 May 2025 15:53:48 +0000 Manifest this update: Wed 14 May 2025 15:53:47 +0000 Manifest next update: Wed 21 May 2025 15:53:47 +0000 Files and hashes: 1: esDADw_KR57kZeT39UXoyUmT1hw.crl (hash: rS/9B1shCFj47MqagJoX4aLIeUzLIx1dyB6wSZKONJc=) 2: E8976FF0928211EF8D2A551EC4F9AE02.roa (hash: ZQDzR5Xdny7JF3r/Zb16j0lL2mL345yAUojH7vcVjic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.crl rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 15:53:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9280 (0x2440) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1691, serialNumber=7AC0C00F0FCA479EE465E4F7F545E8C94993D61C Validity Not Before: May 14 15:53:47 2025 GMT Not After : May 21 15:53:47 2025 GMT Subject: CN=6824bc8b-d3f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:40:f2:f9:46:27:57:eb:07:43:79:21:db:6f: 0e:0a:37:d0:13:ae:6b:2f:a4:bd:87:7e:b8:a4:b6: a7:91:d9:ea:37:e8:00:b6:27:0e:3c:90:9e:a8:0e: b1:3f:ef:8d:13:ab:df:ad:62:b0:8e:f9:b8:3a:3b: cd:62:da:13:fb:d8:9a:42:74:c2:41:cd:6e:69:ed: ff:00:cd:4b:da:12:77:80:c9:c8:6f:51:43:5e:bc: e0:96:f2:ff:25:1b:b8:77:5e:ae:9e:72:65:7f:f9: b1:ea:22:68:dc:03:02:7e:39:56:fc:6a:c2:b2:60: 5e:20:d1:7e:23:dd:75:12:86:28:0b:98:c1:7e:1e: 5d:9b:10:be:f7:23:01:c7:d5:8c:07:6e:60:c2:65: b2:79:f7:c4:7e:c4:fc:c2:94:25:7a:3f:12:a6:33: d1:bc:aa:6b:a4:4c:9b:06:9e:c9:de:64:85:0d:1c: a6:be:d1:7c:98:b1:63:17:dc:14:d0:fd:88:12:ef: bf:64:c6:51:01:31:63:75:1b:3a:93:fb:a6:c4:c0: 04:2f:59:a6:40:91:cc:fe:c9:be:aa:ee:6c:9e:e6: 3a:d9:4e:c5:31:90:2d:d4:7c:cc:7c:12:46:87:94: 09:18:35:5f:24:5f:37:b5:f8:4d:c3:ee:4d:78:85: 53:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:78:BC:D6:8E:DA:BF:8C:4A:BE:D0:00:85:64:75:E3:86:95:B0:B3 X509v3 Authority Key Identifier: keyid:7A:C0:C0:0F:0F:CA:47:9E:E4:65:E4:F7:F5:45:E8:C9:49:93:D6:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:94:1e:b3:ca:b6:a6:32:1d:00:a1:5f:62:1b:19:bc:17:ca: e5:34:7c:ee:3d:8f:c4:0d:03:f6:97:95:9b:bd:ae:6f:93:68: a1:fd:d3:3d:61:50:d0:d2:e4:1b:9f:cd:14:14:26:fd:6f:d7: d8:ff:71:07:e7:4f:1f:2f:73:58:67:04:39:14:f7:35:af:53: f7:ae:b0:24:2a:5d:78:62:1f:22:9f:55:17:4b:ff:3e:bb:11: 7c:53:ee:38:e3:37:b3:e1:7e:f0:bd:64:d7:f8:1e:06:67:2c: ba:b0:5c:99:62:8a:6d:e1:63:f0:48:9d:45:2f:cc:63:2f:73: fe:78:0c:39:60:02:49:4f:b6:33:8c:65:32:7f:21:bb:9e:02: 63:41:5c:a8:e0:79:0c:6b:f5:d6:25:60:1d:87:4f:fa:35:eb: b1:95:81:79:cc:33:e1:5d:ba:66:3d:da:d1:93:3d:05:e6:f4: 80:cd:d8:18:d9:e0:b5:9b:73:f5:d5:d7:ae:83:3d:12:76:fe: 8d:5a:b5:1c:64:b7:59:a9:e0:03:8d:57:1b:1e:d7:c6:95:ee: b0:70:bc:4c:11:ec:88:85:4b:03:1d:52:d8:82:76:9e:2d:a2: 3b:bd:d6:74:d0:33:d9:f8:5b:12:52:28:0d:97:6f:3e:71:8e: 64:46:68:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2OTExMTAvBgNVBAUTKDdBQzBDMDBGMEZDQTQ3OUVFNDY1RTRGN0Y1NDVFOEM5 NDk5M0Q2MUMwHhcNMjUwNTE0MTU1MzQ3WhcNMjUwNTIxMTU1MzQ3WjAYMRYwFAYD VQQDEw02ODI0YmM4Yi1kM2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0Dy+UYnV+sHQ3kh228OCjfQE65rL6S9h364pLankdnqN+gAticOPJCeqA6x P++NE6vfrWKwjvm4OjvNYtoT+9iaQnTCQc1uae3/AM1L2hJ3gMnIb1FDXrzglvL/ JRu4d16unnJlf/mx6iJo3AMCfjlW/GrCsmBeINF+I911EoYoC5jBfh5dmxC+9yMB x9WMB25gwmWyeffEfsT8wpQlej8SpjPRvKprpEybBp7J3mSFDRymvtF8mLFjF9wU 0P2IEu+/ZMZRATFjdRs6k/umxMAEL1mmQJHM/sm+qu5snuY62U7FMZAt1HzMfBJG h5QJGDVfJF83tfhNw+5NeIVT6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJh4vNaO 2r+MSr7QAIVkdeOGlbCzMB8GA1UdIwQYMBaAFHrAwA8Pykee5GXk9/VF6MlJk9Yc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS81QUZDMjY5MjY1 MkIxMUU1OTdBODY4ODFDNEY5QUUwMi9lc0RBRHdfS1I1N2taZVQzOVVYb3lVbVQx aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VzREFEd19LUjU3a1plVDM5VVhveVVtVDFody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTY5MS81QUZDMjY5MjY1MkIxMUU1OTdBODY4ODFDNEY5QUUwMi9lc0RBRHdfS1I1 N2taZVQzOVVYb3lVbVQxaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdlB6zyramMh0AoV9iGxm8F8rlNHzuPY/EDQP2l5Wbva5vk2ih/dM9 YVDQ0uQbn80UFCb9b9fY/3EH508fL3NYZwQ5FPc1r1P3rrAkKl14Yh8in1UXS/8+ uxF8U+444zez4X7wvWTX+B4GZyy6sFyZYopt4WPwSJ1FL8xjL3P+eAw5YAJJT7Yz jGUyfyG7ngJjQVyo4HkMa/XWJWAdh0/6NeuxlYF5zDPhXbpmPdrRkz0F5vSAzdgY 2eC1m3P11deugz0Sdv6NWrUcZLdZqeADjVcbHtfGle6wcLxMEeyIhUsDHVLYgnae LaI7vdZ00DPZ+FsSUigNl28+cY5kRmhY -----END CERTIFICATE-----Generated at Thu May 15 22:40:44 2025 by rpki-client