$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft File: e14ORHE1uxchraYfZdx1yV9U2wI.mft (raw, json) Hash identifier: mZ0WQ9RCrlvLzTs1RcSqTXVAIvIdyaGz4Amx1+P7N6E= Subject key identifier: 35:95:72:20:FC:B4:5B:78:73:41:5C:60:B9:B7:33:28:2D:DE:99:60 Authority key identifier: 7B:5E:0E:44:71:35:BB:17:21:AD:A6:1F:65:DC:75:C9:5F:54:DB:02 Certificate issuer: /CN=A91D8226/serialNumber=7B5E0E447135BB1721ADA61F65DC75C95F54DB02 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e14ORHE1uxchraYfZdx1yV9U2wI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft Manifest number: 4F Signing time: Tue 13 May 2025 06:31:54 +0000 Manifest this update: Tue 13 May 2025 06:31:53 +0000 Manifest next update: Tue 20 May 2025 06:31:53 +0000 Files and hashes: 1: e14ORHE1uxchraYfZdx1yV9U2wI.crl (hash: 56MHb2WdC3E/Vz1g2OtLIeACYXLbpTYlcCPJXgyHzfM=) 2: E4086C08BC2311EF9A445084C4F9AE02.roa (hash: r/4IGYNLMpKuCk8NRggWB2EhHJYpkEkj/MdGzvjYmVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.crl rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e14ORHE1uxchraYfZdx1yV9U2wI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8226, serialNumber=7B5E0E447135BB1721ADA61F65DC75C95F54DB02 Validity Not Before: May 13 06:31:53 2025 GMT Not After : May 20 06:31:53 2025 GMT Subject: CN=6822e759-ec0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b7:52:8c:41:47:77:ea:50:d2:9c:a2:b4:2b: 0b:7b:b6:af:69:62:3e:a7:99:57:50:0c:87:36:25: 04:76:ea:c8:97:c7:7a:9b:60:5a:99:b6:d0:8f:5d: 3c:52:98:33:a1:cf:5f:37:29:7a:e0:db:aa:b0:25: d7:00:48:d7:3b:58:05:88:7a:5c:a8:6e:b3:8e:d6: 52:79:15:1b:68:54:a0:64:34:55:fe:ac:e0:96:77: c6:d6:0e:55:ce:a7:ed:c2:6f:53:6c:a1:44:b4:05: 13:49:59:05:8b:b4:41:ba:09:d6:b7:a6:5a:69:d9: 00:d8:a5:03:f8:6d:3d:a8:d3:38:82:eb:63:61:35: be:66:d9:fb:c8:6a:93:2b:f2:d7:39:10:06:56:47: 23:34:40:f3:65:d4:24:04:28:dc:21:a1:27:4f:b2: ca:c9:86:86:63:1f:6d:65:46:e8:56:ba:91:da:c5: 52:be:d7:4d:f7:f3:d7:ff:88:c1:d9:ff:31:56:c7: 28:0b:b7:f1:55:40:db:b9:6d:40:5f:11:9a:2e:27: 20:7a:24:66:e2:38:ce:59:ee:83:a0:62:68:50:58: 7a:37:a8:be:83:0b:c5:6f:91:17:df:54:3f:67:49: 51:9d:c3:a3:69:fd:5b:57:20:4c:d9:18:de:0f:05: e9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:95:72:20:FC:B4:5B:78:73:41:5C:60:B9:B7:33:28:2D:DE:99:60 X509v3 Authority Key Identifier: keyid:7B:5E:0E:44:71:35:BB:17:21:AD:A6:1F:65:DC:75:C9:5F:54:DB:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e14ORHE1uxchraYfZdx1yV9U2wI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:85:25:f4:6b:9f:b1:03:4b:91:91:76:c3:fb:76:c9:8f:04: 87:99:38:e8:a9:0d:0f:bb:c9:02:47:8c:54:b1:e6:8b:13:df: 43:da:1d:0a:03:21:c2:cb:81:13:fe:c4:b2:63:24:36:d4:54: db:4e:6e:74:5e:04:db:66:ba:2b:11:00:4a:40:c8:f9:01:26: 6a:3e:34:1e:82:17:4e:ec:19:f1:3d:04:df:d7:3b:be:24:6b: 7f:d0:d8:e6:ef:02:06:51:10:7e:31:3e:33:a1:dc:85:39:ea: a6:9e:ac:ac:a2:92:24:e4:ce:74:75:63:26:37:47:83:6e:28: 75:c9:3a:49:36:d2:8c:58:72:79:df:a8:66:23:23:74:79:89: 81:39:49:da:92:1f:40:cd:35:f4:da:18:ad:e0:e9:ed:b0:9c: ec:7d:ea:c0:65:5b:09:ec:ed:d3:d2:97:ac:25:16:53:91:c8: be:8d:2b:ef:4c:4a:e1:76:83:71:71:4c:86:5b:37:54:38:e5: 57:28:2a:ee:1b:dc:22:cb:73:eb:1c:82:64:47:e7:07:9d:75: ad:a3:10:73:30:de:ad:74:15:3a:e8:f5:f2:6a:84:b6:fd:a0: 2b:21:b5:84:72:2b:2e:8a:72:65:81:7e:69:91:55:f5:97:da: 77:4b:4f:0e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODIyNjExMC8GA1UEBRMoN0I1RTBFNDQ3MTM1QkIxNzIxQURBNjFGNjVEQzc1Qzk1 RjU0REIwMjAeFw0yNTA1MTMwNjMxNTNaFw0yNTA1MjAwNjMxNTNaMBgxFjAUBgNV BAMTDTY4MjJlNzU5LWVjMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqt1KMQUd36lDSnKK0Kwt7tq9pYj6nmVdQDIc2JQR26siXx3qbYFqZttCPXTxS mDOhz183KXrg26qwJdcASNc7WAWIelyobrOO1lJ5FRtoVKBkNFX+rOCWd8bWDlXO p+3Cb1NsoUS0BRNJWQWLtEG6Cda3plpp2QDYpQP4bT2o0ziC62NhNb5m2fvIapMr 8tc5EAZWRyM0QPNl1CQEKNwhoSdPssrJhoZjH21lRuhWupHaxVK+103389f/iMHZ /zFWxygLt/FVQNu5bUBfEZouJyB6JGbiOM5Z7oOgYmhQWHo3qL6DC8VvkRffVD9n SVGdw6Np/VtXIEzZGN4PBelxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNZVyIPy0 W3hzQVxgubczKC3emWAwHwYDVR0jBBgwFoAUe14ORHE1uxchraYfZdx1yV9U2wIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MjI2L0VDNERGMzE0QkMx RjExRUZBQURBNzQ1RkM0RjlBRTAyL2UxNE9SSEUxdXhjaHJhWWZaZHgxeVY5VTJ3 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZTE0T1JIRTF1eGNocmFZZlpkeDF5VjlVMndJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 MjI2L0VDNERGMzE0QkMxRjExRUZBQURBNzQ1RkM0RjlBRTAyL2UxNE9SSEUxdXhj aHJhWWZaZHgxeVY5VTJ3SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIaFJfRrn7EDS5GRdsP7dsmPBIeZOOipDQ+7yQJHjFSx5osT30PaHQoD IcLLgRP+xLJjJDbUVNtObnReBNtmuisRAEpAyPkBJmo+NB6CF07sGfE9BN/XO74k a3/Q2ObvAgZREH4xPjOh3IU56qaerKyikiTkznR1YyY3R4NuKHXJOkk20oxYcnnf qGYjI3R5iYE5SdqSH0DNNfTaGK3g6e2wnOx96sBlWwns7dPSl6wlFlORyL6NK+9M SuF2g3FxTIZbN1Q45VcoKu4b3CLLc+scgmRH5wedda2jEHMw3q10FTro9fJqhLb9 oCshtYRyKy6KcmWBfmmRVfWX2ndLTw4= -----END CERTIFICATE-----Generated at Tue May 13 16:13:31 2025 by rpki-client