$ rpki-client -vvf rpki.apnic.net/member_repository/A91E299A/A0AC0992DDF711EF80D2156FC4F9AE02/edSLikSpvRZsNNwg7IxXE_MJLss.mft File: edSLikSpvRZsNNwg7IxXE_MJLss.mft (raw, json) Hash identifier: sqgDAjpHNQb86RjjnS7LY6P1a/myvRCGAx95Sz+YPDs= Subject key identifier: 43:A8:2C:01:1A:C1:57:DF:80:DE:49:A1:CA:E3:3F:AD:09:1F:19:18 Authority key identifier: 79:D4:8B:8A:44:A9:BD:16:6C:34:DC:20:EC:8C:57:13:F3:09:2E:CB Certificate issuer: /CN=A91E299A/serialNumber=79D48B8A44A9BD166C34DC20EC8C5713F3092ECB Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edSLikSpvRZsNNwg7IxXE_MJLss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E299A/A0AC0992DDF711EF80D2156FC4F9AE02/edSLikSpvRZsNNwg7IxXE_MJLss.mft Manifest number: 36 Signing time: Sun 11 May 2025 06:19:16 +0000 Manifest this update: Sun 11 May 2025 06:19:16 +0000 Manifest next update: Sun 18 May 2025 06:19:15 +0000 Files and hashes: 1: edSLikSpvRZsNNwg7IxXE_MJLss.crl (hash: lV1ZCBin/YHZRBK3h0AK4JNV/DE/CrNrrD6XSYcy/5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E299A/A0AC0992DDF711EF80D2156FC4F9AE02/edSLikSpvRZsNNwg7IxXE_MJLss.crl rsync://rpki.apnic.net/member_repository/A91E299A/A0AC0992DDF711EF80D2156FC4F9AE02/edSLikSpvRZsNNwg7IxXE_MJLss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edSLikSpvRZsNNwg7IxXE_MJLss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E299A, serialNumber=79D48B8A44A9BD166C34DC20EC8C5713F3092ECB Validity Not Before: May 11 06:19:16 2025 GMT Not After : May 18 06:19:15 2025 GMT Subject: CN=68204164-e08d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8b:f0:bd:b8:32:42:80:52:7f:2a:bb:64:4a: a1:51:54:c5:3b:07:61:d9:68:69:99:be:f1:fb:a8: 10:a5:da:e5:28:6d:2f:2f:40:c5:0e:50:cc:8d:a3: 62:bb:1e:08:cb:77:22:86:60:21:97:f3:47:d0:91: d8:ad:27:91:f4:1c:d9:c6:70:98:ef:89:86:a5:2e: 84:36:9c:34:41:e7:fc:c5:0f:3e:56:33:c5:0c:59: 60:35:60:27:9f:44:55:91:a4:cb:a5:57:06:5a:4d: 39:eb:b4:5e:bf:6b:98:98:d3:46:00:e6:15:97:ff: 3d:87:39:53:99:ec:64:5c:d0:02:2c:1b:16:d0:66: ee:2e:c5:aa:47:0e:e8:07:26:d7:cd:2b:02:d7:cd: 59:a3:d4:ba:36:3e:47:47:9b:12:7c:ae:c9:61:f0: 2b:85:25:4e:ea:59:92:d8:4d:9d:b4:03:7c:12:9d: 9e:74:f1:ec:a7:c5:e8:a7:32:27:c7:10:cb:49:ff: 9a:06:7f:f3:46:18:36:7a:0c:b7:2d:57:08:b5:ce: 88:8c:da:78:1e:a1:fb:ab:78:62:3c:23:92:0b:34: f7:0b:b7:b6:c4:d4:73:df:ae:ff:f6:4d:6f:90:ed: 94:c0:36:e6:6e:a6:ac:42:10:37:a4:ee:7c:eb:e6: 2e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A8:2C:01:1A:C1:57:DF:80:DE:49:A1:CA:E3:3F:AD:09:1F:19:18 X509v3 Authority Key Identifier: keyid:79:D4:8B:8A:44:A9:BD:16:6C:34:DC:20:EC:8C:57:13:F3:09:2E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E299A/A0AC0992DDF711EF80D2156FC4F9AE02/edSLikSpvRZsNNwg7IxXE_MJLss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edSLikSpvRZsNNwg7IxXE_MJLss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E299A/A0AC0992DDF711EF80D2156FC4F9AE02/edSLikSpvRZsNNwg7IxXE_MJLss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:9e:1f:06:60:bf:eb:7a:20:ce:04:ee:cb:49:67:eb:c8:14: 0e:1e:ee:38:61:bb:4a:02:be:6e:7f:69:47:7d:ab:21:66:35: aa:cf:f9:b6:2f:49:df:7d:94:8f:98:87:23:92:55:53:4f:c8: 5e:cd:5d:91:df:68:bd:a4:67:9f:56:8d:d2:31:a6:96:45:7b: f1:c0:ed:8b:ff:fa:10:a1:f9:e3:88:ed:4b:1e:b6:58:10:ef: b4:ce:e6:68:bc:88:16:5a:ec:30:2a:fe:a6:c9:15:88:c8:f0: f3:88:5e:22:9f:29:bd:cb:eb:05:71:ba:f3:95:74:2b:b7:72: 9e:0f:70:3a:9d:54:ad:f1:4a:ac:44:27:9e:44:ba:eb:5c:1a: 43:a3:29:25:12:8c:09:02:76:a6:0e:5e:05:7b:a8:b0:ab:dc: 66:df:98:b5:b9:b5:a8:a4:70:3a:86:41:6b:46:27:74:02:53: 2f:cc:68:9a:d1:86:dd:66:ef:5b:4b:a7:a8:07:66:3f:1a:63: e8:bc:f5:3b:a3:51:36:b5:a2:cd:88:33:50:13:9e:2c:2c:01: a4:cf:ce:29:a4:d2:3a:e4:ad:50:61:15:70:95:30:d0:2e:f4: 2d:bb:3a:d8:b0:45:02:c6:a1:df:0a:4d:19:42:4c:0e:48:27: 43:26:ba:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF Mjk5QTExMC8GA1UEBRMoNzlENDhCOEE0NEE5QkQxNjZDMzREQzIwRUM4QzU3MTNG MzA5MkVDQjAeFw0yNTA1MTEwNjE5MTZaFw0yNTA1MTgwNjE5MTVaMBgxFjAUBgNV BAMTDTY4MjA0MTY0LWUwOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXi/C9uDJCgFJ/KrtkSqFRVMU7B2HZaGmZvvH7qBCl2uUobS8vQMUOUMyNo2K7 HgjLdyKGYCGX80fQkditJ5H0HNnGcJjviYalLoQ2nDRB5/zFDz5WM8UMWWA1YCef RFWRpMulVwZaTTnrtF6/a5iY00YA5hWX/z2HOVOZ7GRc0AIsGxbQZu4uxapHDugH JtfNKwLXzVmj1Lo2PkdHmxJ8rslh8CuFJU7qWZLYTZ20A3wSnZ508eynxeinMifH EMtJ/5oGf/NGGDZ6DLctVwi1zoiM2ngeofureGI8I5ILNPcLt7bE1HPfrv/2TW+Q 7ZTANuZupqxCEDek7nzr5i4dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQ6gsARrB V9+A3kmhyuM/rQkfGRgwHwYDVR0jBBgwFoAUedSLikSpvRZsNNwg7IxXE/MJLssw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUyOTlBL0EwQUMwOTkyRERG NzExRUY4MEQyMTU2RkM0RjlBRTAyL2VkU0xpa1NwdlJac05Od2c3SXhYRV9NSkxz cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZWRTTGlrU3B2UlpzTk53ZzdJeFhFX01KTHNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUy OTlBL0EwQUMwOTkyRERGNzExRUY4MEQyMTU2RkM0RjlBRTAyL2VkU0xpa1NwdlJa c05Od2c3SXhYRV9NSkxzcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEieHwZgv+t6IM4E7stJZ+vIFA4e7jhhu0oCvm5/aUd9qyFmNarP+bYv Sd99lI+YhyOSVVNPyF7NXZHfaL2kZ59WjdIxppZFe/HA7Yv/+hCh+eOI7UsetlgQ 77TO5mi8iBZa7DAq/qbJFYjI8POIXiKfKb3L6wVxuvOVdCu3cp4PcDqdVK3xSqxE J55EuutcGkOjKSUSjAkCdqYOXgV7qLCr3GbfmLW5taikcDqGQWtGJ3QCUy/MaJrR ht1m71tLp6gHZj8aY+i89TujUTa1os2IM1ATniwsAaTPzimk0jrkrVBhFXCVMNAu 9C27OtiwRQLGod8KTRlCTA5IJ0MmunA= -----END CERTIFICATE-----Generated at Sun May 11 13:40:34 2025 by rpki-client