$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft File: cL0eSV4lCyLieYKWlpeFotd9c38.mft (raw, json) Hash identifier: SBwAXAeshwTr6gEcT1Fq/HEi06Ol8HAYq3lGjdzSEQg= Subject key identifier: 85:64:B1:69:9F:9F:5F:3C:2D:C7:C3:D6:04:2F:24:54:1B:20:5D:1D Authority key identifier: 70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F Certificate issuer: /CN=A91EE1C4/serialNumber=70BD1E495E250B22E2798296969785A2D77D737F Certificate serial: 0738 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft Manifest number: 0729 Signing time: Sun 04 May 2025 21:29:08 +0000 Manifest this update: Sun 04 May 2025 21:29:08 +0000 Manifest next update: Sun 11 May 2025 21:29:08 +0000 Files and hashes: 1: cL0eSV4lCyLieYKWlpeFotd9c38.crl (hash: e6Y9Waw7FLV3YSnR5HTjtSWRv7I2s/9asEWMqIK8E+Y=) 2: AEFB1B262FB111EB89A04D37C4F9AE02.roa (hash: Wg8lhii6fS+ISW5JHYHpOa6pzoQlnpj7gMJiQaNStNA=) 3: D992CDCE2FBC11EB8E017F5CC4F9AE02.roa (hash: qKRjykDno1daJfQQjFQDgdcngx+c1WC/QlLs58bkJD4=) 4: D8EA255C2FBC11EB8E017F5CC4F9AE02.roa (hash: BkTcuyEezWUWEkhN6v2tftRUBORfyEfzklVup25IVEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 21:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1848 (0x738) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE1C4, serialNumber=70BD1E495E250B22E2798296969785A2D77D737F Validity Not Before: May 4 21:29:08 2025 GMT Not After : May 11 21:29:08 2025 GMT Subject: CN=6817dc24-e5f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:21:80:2a:d6:d0:3b:a5:0c:14:86:05:11:4b: a3:33:9c:91:c4:54:29:59:4b:bc:31:f9:e4:8a:a9: ec:40:bf:a3:50:48:98:48:cb:39:db:6d:b1:75:d0: 6f:cd:f0:5d:82:04:92:fc:9b:34:78:f9:8f:43:9f: ca:df:8f:a2:58:55:6f:52:c7:b5:bc:a2:e5:85:4a: de:c6:8a:03:48:1d:68:b2:3d:9e:b2:6c:07:d3:e8: 8a:98:29:94:b2:a6:0d:d3:62:b7:16:a3:e9:48:a7: 85:43:2a:05:cd:47:69:5f:f7:c9:58:53:f5:92:fa: 9b:09:0f:35:2c:2f:6a:ba:bc:81:ea:0d:05:a3:03: ff:9a:c3:7b:28:e9:dc:a7:bc:92:20:fa:77:11:3a: e4:34:63:a7:15:a7:d6:96:cc:31:91:1b:cb:9e:9c: 99:5b:22:20:d4:ed:19:9a:ea:2a:4e:e4:f8:60:47: 4e:64:a1:8f:f1:b4:6f:3a:7f:65:e1:25:f8:b4:e8: 56:ee:60:24:b2:b2:5f:36:e5:f9:e7:60:76:64:38: f8:9d:85:a0:36:f5:b4:01:89:fe:93:43:9c:1a:b3: 2e:d1:20:90:bf:bd:09:25:47:bc:65:84:22:fe:e7: 02:e2:71:d7:d1:08:24:26:fd:bc:1c:24:24:53:1c: c3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:64:B1:69:9F:9F:5F:3C:2D:C7:C3:D6:04:2F:24:54:1B:20:5D:1D X509v3 Authority Key Identifier: keyid:70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:48:63:1c:98:e7:7d:06:b3:0d:39:03:e9:f9:8f:e5:84:b5: ae:b8:73:08:f5:5b:cc:86:a2:88:cd:1c:5e:8a:c3:8c:c8:69: c9:38:0c:7d:9a:92:94:f8:30:5c:f1:14:c3:eb:a8:3c:19:6a: c8:bb:2c:ee:df:8c:4b:46:ba:da:66:7e:f6:8c:2c:2c:90:ea: c3:8f:d1:e5:b1:23:5f:37:2e:6e:f3:54:18:e6:b7:d3:4f:bf: 55:5a:19:ee:0c:24:4b:77:ea:fa:9d:d0:a4:4b:32:b4:61:d2: 77:76:a1:95:72:07:a6:7b:f8:14:51:06:f3:81:e0:78:75:9d: d0:78:0f:82:f8:07:23:92:66:03:c2:5b:e4:4e:1f:da:30:84: d2:f8:5b:7c:cc:64:f7:a2:1a:98:c9:e5:19:9d:bb:5d:08:d1: 8c:00:c8:1c:c7:6e:43:54:96:c0:c7:7d:9d:30:31:fb:71:a0: 61:db:2e:8b:a8:09:4b:19:ce:e5:eb:9b:92:5a:0f:f4:27:8d: ba:0d:76:8c:51:49:3f:15:c0:62:50:a8:ca:df:5a:1c:27:f9: fc:31:a5:e4:21:0e:84:cd:18:e5:f4:0c:d8:70:9c:72:a0:38: 41:05:3e:10:34:ec:fe:25:dd:20:d7:0a:4c:9a:8d:b2:ea:a4: 10:ac:14:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUxQzQxMTAvBgNVBAUTKDcwQkQxRTQ5NUUyNTBCMjJFMjc5ODI5Njk2OTc4NUEy RDc3RDczN0YwHhcNMjUwNTA0MjEyOTA4WhcNMjUwNTExMjEyOTA4WjAYMRYwFAYD VQQDEw02ODE3ZGMyNC1lNWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuiGAKtbQO6UMFIYFEUujM5yRxFQpWUu8MfnkiqnsQL+jUEiYSMs5222xddBv zfBdggSS/Js0ePmPQ5/K34+iWFVvUse1vKLlhUrexooDSB1osj2esmwH0+iKmCmU sqYN02K3FqPpSKeFQyoFzUdpX/fJWFP1kvqbCQ81LC9quryB6g0FowP/msN7KOnc p7ySIPp3ETrkNGOnFafWlswxkRvLnpyZWyIg1O0ZmuoqTuT4YEdOZKGP8bRvOn9l 4SX4tOhW7mAksrJfNuX552B2ZDj4nYWgNvW0AYn+k0OcGrMu0SCQv70JJUe8ZYQi /ucC4nHX0QgkJv28HCQkUxzDdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVksWmf n188LcfD1gQvJFQbIF0dMB8GA1UdIwQYMBaAFHC9HkleJQsi4nmClpaXhaLXfXN/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTFDNC9GQzY3MkI3MjJG QUYxMUVCOTQxNTVGMzNDNEY5QUUwMi9jTDBlU1Y0bEN5TGllWUtXbHBlRm90ZDlj MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMMGVTVjRsQ3lMaWVZS1dscGVGb3RkOWMzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTFDNC9GQzY3MkI3MjJGQUYxMUVCOTQxNTVGMzNDNEY5QUUwMi9jTDBlU1Y0bEN5 TGllWUtXbHBlRm90ZDljMzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGSGMcmOd9BrMNOQPp+Y/lhLWuuHMI9VvMhqKIzRxeisOMyGnJOAx9 mpKU+DBc8RTD66g8GWrIuyzu34xLRrraZn72jCwskOrDj9HlsSNfNy5u81QY5rfT T79VWhnuDCRLd+r6ndCkSzK0YdJ3dqGVcgeme/gUUQbzgeB4dZ3QeA+C+AcjkmYD wlvkTh/aMITS+Ft8zGT3ohqYyeUZnbtdCNGMAMgcx25DVJbAx32dMDH7caBh2y6L qAlLGc7l65uSWg/0J426DXaMUUk/FcBiUKjK31ocJ/n8MaXkIQ6EzRjl9AzYcJxy oDhBBT4QNOz+Jd0g1wpMmo2y6qQQrBSk -----END CERTIFICATE-----Generated at Mon May 5 09:59:04 2025 by rpki-client