$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft File: MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft (raw, json) Hash identifier: HJO/8+0ehTXaAtCozzOBeFem4InQQ2P+YmVgkbd9OcM= Subject key identifier: 03:C7:AA:9D:61:3B:E5:C1:28:E3:D3:51:E3:64:64:A0:71:33:09:A3 Authority key identifier: 30:E8:96:E7:89:D4:43:60:34:6E:A4:CB:B4:ED:45:91:4E:AD:02:7D Certificate issuer: /CN=A91EF73D/serialNumber=30E896E789D44360346EA4CBB4ED45914EAD027D Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft Manifest number: E5 Signing time: Sun 11 May 2025 04:14:05 +0000 Manifest this update: Sun 11 May 2025 04:14:04 +0000 Manifest next update: Sun 18 May 2025 04:14:04 +0000 Files and hashes: 1: MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl (hash: YLjS0Ei/THWJRX0ojlafLbIub2w446wdfjDxb+aVVtw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:14:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF73D, serialNumber=30E896E789D44360346EA4CBB4ED45914EAD027D Validity Not Before: May 11 04:14:04 2025 GMT Not After : May 18 04:14:04 2025 GMT Subject: CN=6820240d-49a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:73:32:cb:1a:f3:20:6e:6f:c9:c7:36:10:a0: 8d:24:45:d0:81:ec:ba:88:4d:c7:5c:ee:6c:b7:93: 37:cd:a2:94:e9:e3:1e:88:52:b3:5c:40:48:78:da: 23:dc:52:0e:9e:08:ca:17:c0:9c:6a:2b:ef:99:5f: cf:a7:ac:ea:06:2d:71:f0:75:44:eb:9f:70:d8:bb: a6:26:fa:a8:53:00:df:2b:5f:2c:32:58:84:b1:4d: f0:52:15:44:ba:20:65:c2:9b:5a:47:37:e2:29:ab: 43:81:3f:7b:f7:7e:1a:0f:02:f8:ff:56:4a:58:56: 3a:4a:d9:de:cc:17:94:ed:f3:99:51:81:14:1f:47: a0:3c:0f:be:96:77:34:20:13:4c:20:85:94:d2:54: 4b:8d:93:04:c6:aa:10:95:2b:94:d3:19:b4:00:cd: 3f:43:5b:36:35:43:5c:16:f1:b8:30:4b:a1:bd:e4: f4:1c:63:a1:e6:eb:e3:b9:aa:be:a2:8c:75:37:42: b4:2f:f7:aa:1b:56:30:3d:55:9c:1c:84:f4:d5:b7: 59:fa:22:e6:3e:5c:fc:dd:a0:84:53:fd:78:b7:62: 6b:e3:a5:11:a0:8a:3c:7e:a1:ff:d7:01:ea:cf:53: 87:12:1d:5d:54:fa:99:6a:36:5c:f4:b2:af:06:cd: a2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C7:AA:9D:61:3B:E5:C1:28:E3:D3:51:E3:64:64:A0:71:33:09:A3 X509v3 Authority Key Identifier: keyid:30:E8:96:E7:89:D4:43:60:34:6E:A4:CB:B4:ED:45:91:4E:AD:02:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:cf:18:2b:2e:02:bf:1d:92:ae:46:4c:21:54:e4:20:18:20: 03:68:5e:aa:d2:06:a7:c2:f7:ce:f4:be:92:1f:c5:3a:70:9e: cd:ad:f9:3c:2f:5d:96:d3:a9:8f:d4:69:e3:66:fe:0c:36:a2: 34:f0:1e:77:bb:19:8b:a4:62:3d:40:9e:7e:b4:27:df:1e:4a: 72:32:34:09:41:45:fd:7d:9f:e1:f4:42:3e:7d:2f:9b:a7:c3: 5f:80:12:b1:02:48:18:a4:8e:3e:12:2a:33:da:fd:57:25:12: e2:7c:9f:62:48:a2:46:d9:82:66:06:28:f1:22:d2:5c:e7:36: 8a:ec:b5:ee:06:e6:9d:3d:6f:b6:11:12:a7:55:65:06:37:7a: 34:8a:75:31:7e:b8:f1:2a:30:0f:64:ab:bc:f0:74:b6:92:b1: 79:40:b7:df:dd:73:a4:51:5c:8e:e4:58:10:27:87:fc:f8:c9: 84:e3:30:a0:84:62:6b:a3:44:6d:f0:49:27:1a:51:3b:52:34: fc:ad:8b:87:15:f6:ad:e5:dc:d4:01:dd:9c:ec:e2:20:48:a6: 07:93:d6:dd:ab:78:b0:4a:23:db:d7:f9:99:0a:61:59:30:2c: ee:bd:2f:58:05:7d:ce:f7:85:8e:da:f7:66:da:d2:90:50:cd: f3:1a:09:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3M0QxMTAvBgNVBAUTKDMwRTg5NkU3ODlENDQzNjAzNDZFQTRDQkI0RUQ0NTkx NEVBRDAyN0QwHhcNMjUwNTExMDQxNDA0WhcNMjUwNTE4MDQxNDA0WjAYMRYwFAYD VQQDEw02ODIwMjQwZC00OWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHMyyxrzIG5vycc2EKCNJEXQgey6iE3HXO5st5M3zaKU6eMeiFKzXEBIeNoj 3FIOngjKF8CcaivvmV/Pp6zqBi1x8HVE659w2LumJvqoUwDfK18sMliEsU3wUhVE uiBlwptaRzfiKatDgT97934aDwL4/1ZKWFY6StnezBeU7fOZUYEUH0egPA++lnc0 IBNMIIWU0lRLjZMExqoQlSuU0xm0AM0/Q1s2NUNcFvG4MEuhveT0HGOh5uvjuaq+ oox1N0K0L/eqG1YwPVWcHIT01bdZ+iLmPlz83aCEU/14t2Jr46URoIo8fqH/1wHq z1OHEh1dVPqZajZc9LKvBs2iOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPHqp1h O+XBKOPTUeNkZKBxMwmjMB8GA1UdIwQYMBaAFDDolueJ1ENgNG6ky7TtRZFOrQJ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjczRC9EMjcyMzBERUNF MUYxMUVFQUM2MjYxN0NDNEY5QUUwMi9NT2lXNTRuVVEyQTBicVRMdE8xRmtVNnRB bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PaVc1NG5VUTJBMGJxVEx0TzFGa1U2dEFuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjczRC9EMjcyMzBERUNFMUYxMUVFQUM2MjYxN0NDNEY5QUUwMi9NT2lXNTRuVVEy QTBicVRMdE8xRmtVNnRBbjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfzxgrLgK/HZKuRkwhVOQgGCADaF6q0ganwvfO9L6SH8U6cJ7Nrfk8 L12W06mP1GnjZv4MNqI08B53uxmLpGI9QJ5+tCffHkpyMjQJQUX9fZ/h9EI+fS+b p8NfgBKxAkgYpI4+Eioz2v1XJRLifJ9iSKJG2YJmBijxItJc5zaK7LXuBuadPW+2 ERKnVWUGN3o0inUxfrjxKjAPZKu88HS2krF5QLff3XOkUVyO5FgQJ4f8+MmE4zCg hGJro0Rt8EknGlE7UjT8rYuHFfat5dzUAd2c7OIgSKYHk9bdq3iwSiPb1/mZCmFZ MCzuvS9YBX3O94WO2vdm2tKQUM3zGglI -----END CERTIFICATE-----Generated at Mon May 12 16:40:29 2025 by rpki-client