$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft File: dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft (raw, json) Hash identifier: CEScPan6ZjcUj/xdEUqpu7qhAnI+QNz0o48P0HRbzT8= Subject key identifier: C3:C9:E6:36:82:53:A9:E8:F4:1A:95:86:05:40:52:74:3F:46:7B:1F Authority key identifier: 74:48:0F:37:C4:B6:57:62:A8:FD:81:BC:7E:DB:EB:DE:6C:81:64:5F Certificate issuer: /CN=A91E01AF/serialNumber=74480F37C4B65762A8FD81BC7EDBEBDE6C81645F Certificate serial: 05CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft Manifest number: 05C5 Signing time: Sat 10 May 2025 22:40:48 +0000 Manifest this update: Sat 10 May 2025 22:40:48 +0000 Manifest next update: Sat 17 May 2025 22:40:48 +0000 Files and hashes: 1: dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl (hash: z28/E7WtpdDcdUlYX3NM3M9qE1H/AldSpPxhnaziey8=) 2: 129AA26CBD2111EBA76A3E11C4F9AE02.roa (hash: YxPwMr4MBHxV8GdUwwcGZ9ThhhxxM846OSPi1905C3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1483 (0x5cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01AF, serialNumber=74480F37C4B65762A8FD81BC7EDBEBDE6C81645F Validity Not Before: May 10 22:40:48 2025 GMT Not After : May 17 22:40:48 2025 GMT Subject: CN=681fd5f0-4b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a4:6d:71:10:47:aa:c0:af:f4:c3:f9:8a:6b: 55:c4:8d:5c:fe:05:48:49:9c:64:e6:99:f3:77:95: e2:a2:f1:bc:68:68:f2:95:18:1b:03:b4:55:32:8d: 06:3e:fe:65:65:9d:8f:f8:4b:3e:b3:41:a8:b8:71: 12:d8:d0:12:30:f6:0a:c7:39:1b:ef:40:13:ca:a6: 36:55:69:42:03:2f:7e:16:a0:b1:c1:80:a8:f1:8b: 59:f5:aa:98:c8:61:f8:19:f3:47:a8:66:9d:92:79: e4:70:c2:30:54:8d:7f:b6:d8:c6:d9:9b:a4:dc:0d: 08:e4:75:63:fc:67:a5:ca:8e:95:53:fd:4e:4d:3e: ab:7b:53:af:80:8c:0c:83:4e:fe:c4:c1:31:a1:69: a0:2a:21:73:71:a6:f2:89:d8:62:0c:58:aa:f6:c7: 4d:2b:11:9d:2e:6d:d8:c4:48:aa:7d:e8:5e:f6:0d: 9c:da:c1:0f:e5:c2:e9:45:8e:67:db:85:88:1d:33: 88:2c:4a:38:b0:0c:da:6b:0c:94:7b:53:e4:9f:50: dc:0d:1d:d8:23:d5:1f:a7:2b:0a:03:91:56:24:ab: e0:7e:b9:98:2f:f1:26:96:d7:3a:9a:49:a7:16:8b: f3:f6:28:b7:98:c3:5c:f9:7c:2c:dd:61:e4:5c:77: 5f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C9:E6:36:82:53:A9:E8:F4:1A:95:86:05:40:52:74:3F:46:7B:1F X509v3 Authority Key Identifier: keyid:74:48:0F:37:C4:B6:57:62:A8:FD:81:BC:7E:DB:EB:DE:6C:81:64:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:23:61:0b:3b:99:3f:28:24:57:92:83:f9:76:87:94:56:b6: 6e:47:28:b6:46:5c:6e:57:13:37:98:f4:8c:31:0a:2e:5c:22: 61:d6:2f:79:05:77:ec:f2:ae:9a:cf:e1:2d:7b:cc:b6:2c:91: 49:b2:c0:99:01:7c:d2:3c:c4:ef:e3:59:62:f0:b7:1b:36:59: b3:6c:ec:f0:d5:35:bb:48:3d:36:39:dd:92:58:07:f8:dd:55: 23:d8:20:86:f1:99:88:b2:54:7f:86:10:c6:d8:a5:ff:98:16: 5f:dc:00:95:6f:0e:3d:d3:a0:74:55:5b:0e:05:5d:fa:7b:49: 67:8a:61:71:ce:2d:36:1b:2a:e4:57:5a:78:12:90:25:33:f1: f7:d6:3c:a7:ec:26:37:2d:40:2b:c4:0a:c3:60:01:7a:56:e8: 3b:e2:ce:d4:ee:40:33:fc:04:57:a4:28:3b:3a:d1:f1:ed:09: b7:22:84:78:7e:de:cc:16:e6:b6:26:25:72:7b:cf:4b:3b:2a: fe:a4:3f:7f:1b:d8:c9:8b:08:32:3a:9b:57:37:9f:08:b2:55: 7d:59:62:a5:ac:b2:08:6f:09:66:c5:d4:c9:11:0c:0f:62:b1: 8e:78:7d:0f:44:be:31:58:84:81:69:eb:f7:4d:4d:33:ae:e5: 70:19:0a:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxQUYxMTAvBgNVBAUTKDc0NDgwRjM3QzRCNjU3NjJBOEZEODFCQzdFREJFQkRF NkM4MTY0NUYwHhcNMjUwNTEwMjI0MDQ4WhcNMjUwNTE3MjI0MDQ4WjAYMRYwFAYD VQQDEw02ODFmZDVmMC00YjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKRtcRBHqsCv9MP5imtVxI1c/gVISZxk5pnzd5XiovG8aGjylRgbA7RVMo0G Pv5lZZ2P+Es+s0GouHES2NASMPYKxzkb70ATyqY2VWlCAy9+FqCxwYCo8YtZ9aqY yGH4GfNHqGadknnkcMIwVI1/ttjG2Zuk3A0I5HVj/Gelyo6VU/1OTT6re1OvgIwM g07+xMExoWmgKiFzcabyidhiDFiq9sdNKxGdLm3YxEiqfehe9g2c2sEP5cLpRY5n 24WIHTOILEo4sAzaawyUe1Pkn1DcDR3YI9UfpysKA5FWJKvgfrmYL/Emltc6mkmn Fovz9ii3mMNc+Xws3WHkXHdfYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPJ5jaC U6no9BqVhgVAUnQ/RnsfMB8GA1UdIwQYMBaAFHRIDzfEtldiqP2BvH7b695sgWRf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFBRi84Q0I4NTQ1NkJE MUYxMUVCQkFGRDNEMTBDNEY5QUUwMi9kRWdQTjhTMlYyS29fWUc4ZnR2cjNteUJa RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RFZ1BOOFMyVjJLb19ZRzhmdHZyM215QlpGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFBRi84Q0I4NTQ1NkJEMUYxMUVCQkFGRDNEMTBDNEY5QUUwMi9kRWdQTjhTMlYy S29fWUc4ZnR2cjNteUJaRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMI2ELO5k/KCRXkoP5doeUVrZuRyi2RlxuVxM3mPSMMQouXCJh1i95 BXfs8q6az+Ete8y2LJFJssCZAXzSPMTv41li8LcbNlmzbOzw1TW7SD02Od2SWAf4 3VUj2CCG8ZmIslR/hhDG2KX/mBZf3ACVbw4906B0VVsOBV36e0lnimFxzi02Gyrk V1p4EpAlM/H31jyn7CY3LUArxArDYAF6Vug74s7U7kAz/ARXpCg7OtHx7Qm3IoR4 ft7MFua2JiVye89LOyr+pD9/G9jJiwgyOptXN58IslV9WWKlrLIIbwlmxdTJEQwP YrGOeH0PRL4xWISBaev3TU0zruVwGQql -----END CERTIFICATE-----Generated at Sun May 11 03:45:04 2025 by rpki-client