$ rpki-client -vvf rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft File: 5EL5lVmsG6h-4TSLL8evCiL_smE.mft (raw, json) Hash identifier: hfmB8yx4FZ4Jd6HWlFB4Wq9z4IJOLsQvh6jbvg2W5YM= Subject key identifier: 4C:4A:69:5E:A8:A1:7C:06:76:4A:C7:8C:C6:04:08:11:74:E2:85:A2 Authority key identifier: E4:42:F9:95:59:AC:1B:A8:7E:E1:34:8B:2F:C7:AF:0A:22:FF:B2:61 Certificate issuer: /CN=A9143336/serialNumber=E442F99559AC1BA87EE1348B2FC7AF0A22FFB261 Certificate serial: 2AD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft Manifest number: 2AC6 Signing time: Tue 08 Apr 2025 15:34:57 +0000 Manifest this update: Tue 08 Apr 2025 15:34:57 +0000 Manifest next update: Tue 15 Apr 2025 15:34:57 +0000 Files and hashes: 1: 5EL5lVmsG6h-4TSLL8evCiL_smE.crl (hash: WuheUyiRvjVVVAKI7IUP4Jn3RI5UeBpm1LbdpMO629c=) 2: 5452AC309B4911EB9952394CC4F9AE02.roa (hash: l8JeN+xjbySFaTx51RAHTtCLIp0nPYZYJcYkSVQtE9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.crl rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 15:34:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10965 (0x2ad5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143336 Validity Not Before: Apr 8 15:34:57 2025 GMT Not After : Apr 15 15:34:57 2025 GMT Subject: CN=67f54221-3a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e2:59:ae:6a:45:fd:a1:d4:43:b0:c6:fd:5f: 55:44:05:59:06:57:ee:3e:d7:8e:4a:c1:4f:03:83: 8f:41:92:85:e6:e8:e6:51:74:c7:b2:51:1c:39:3a: 9c:5d:76:37:36:b9:c5:ab:09:11:a1:b2:5a:c7:20: da:26:34:9f:ef:e0:95:fd:37:60:d0:71:cb:17:af: 03:5f:ba:25:df:cc:99:95:36:46:45:9c:ee:e8:24: 08:77:b5:5e:de:7f:db:ea:a8:5e:20:6d:24:76:76: 0c:97:01:9b:cb:2e:2c:41:a9:5c:e5:9e:0d:b5:a1: 56:b6:e5:3c:b3:42:9b:ee:50:87:e4:94:92:ef:1c: 62:20:60:8a:63:a0:24:d8:fc:12:8f:4c:79:32:80: b1:33:ba:b2:5b:cf:54:67:db:9d:b2:74:a7:2a:07: 6d:2e:b8:c6:f3:5d:e5:ca:96:3f:11:eb:f4:71:19: 7a:cf:16:aa:2d:d9:3a:8f:5d:93:63:5a:1b:2a:48: 31:fe:57:0e:75:cb:ea:b4:af:3c:d3:06:cb:b4:b0: a4:6b:d0:99:8f:8d:0a:d9:0c:4f:c5:2a:0d:93:41: 0a:68:29:83:ec:df:c7:e5:71:97:30:d0:b9:3b:c1: 45:9b:b4:e3:1d:d2:df:d5:a3:99:6e:8b:d3:3d:25: e9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:4A:69:5E:A8:A1:7C:06:76:4A:C7:8C:C6:04:08:11:74:E2:85:A2 X509v3 Authority Key Identifier: keyid:E4:42:F9:95:59:AC:1B:A8:7E:E1:34:8B:2F:C7:AF:0A:22:FF:B2:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:3d:77:33:40:fb:ff:b5:c2:1d:be:8b:f9:5b:eb:96:43:56: 75:03:f9:e3:de:6c:2b:fb:9f:83:9c:c9:be:e3:a7:24:02:95: 5a:0c:91:34:4e:53:d6:2f:4e:1b:c6:54:e0:3f:a8:55:3d:57: 78:75:75:d0:b5:c8:9e:d4:38:10:3b:62:46:0c:ad:58:37:3f: e6:72:8d:67:54:7c:a1:ab:94:87:ac:01:e0:d9:c4:8e:d3:52: 27:90:62:99:00:91:1b:d7:af:5c:ae:5f:3b:1f:84:52:0a:9a: 00:6d:ef:6d:1a:a8:f4:51:b4:c2:07:6b:9b:96:30:7f:dd:c1: ae:4d:d6:d1:d1:8d:63:75:06:00:64:3c:97:fd:43:9c:2d:89: 42:ca:0c:eb:3b:43:f3:cd:07:09:e1:4d:a5:df:dd:a3:c1:e8: 96:85:dd:0d:43:b8:ae:0a:e9:80:6f:e6:fa:c1:23:ab:fe:5d: c9:19:ed:cd:58:5a:67:54:b8:4b:49:f1:9c:d6:2c:56:e2:7a: 41:09:d0:9b:32:71:81:34:da:c2:40:4e:92:00:6e:5f:22:7f: 3b:d5:76:62:e2:09:53:c7:32:02:9d:d8:2e:93:74:19:e0:88: 2c:8e:25:0d:e9:82:b4:9f:28:c0:7f:b8:3d:6c:62:78:47:c6: 64:87:31:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMzMzYxMTAvBgNVBAUTKEU0NDJGOTk1NTlBQzFCQTg3RUUxMzQ4QjJGQzdBRjBB MjJGRkIyNjEwHhcNMjUwNDA4MTUzNDU3WhcNMjUwNDE1MTUzNDU3WjAYMRYwFAYD VQQDEw02N2Y1NDIyMS0zYTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAreJZrmpF/aHUQ7DG/V9VRAVZBlfuPteOSsFPA4OPQZKF5ujmUXTHslEcOTqc XXY3NrnFqwkRobJaxyDaJjSf7+CV/Tdg0HHLF68DX7ol38yZlTZGRZzu6CQId7Ve 3n/b6qheIG0kdnYMlwGbyy4sQalc5Z4NtaFWtuU8s0Kb7lCH5JSS7xxiIGCKY6Ak 2PwSj0x5MoCxM7qyW89UZ9udsnSnKgdtLrjG813lypY/Eev0cRl6zxaqLdk6j12T Y1obKkgx/lcOdcvqtK880wbLtLCka9CZj40K2QxPxSoNk0EKaCmD7N/H5XGXMNC5 O8FFm7TjHdLf1aOZbovTPSXpdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExKaV6o oXwGdkrHjMYECBF04oWiMB8GA1UdIwQYMBaAFORC+ZVZrBuofuE0iy/Hrwoi/7Jh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzMzNi84RUU3RkMxRTA4 NTMxMUU0QjAyMzlFNjFDNEY5QUUwMi81RUw1bFZtc0c2aC00VFNMTDhldkNpTF9z bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVFTDVsVm1zRzZoLTRUU0xMOGV2Q2lMX3NtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzMzNi84RUU3RkMxRTA4NTMxMUU0QjAyMzlFNjFDNEY5QUUwMi81RUw1bFZtc0c2 aC00VFNMTDhldkNpTF9zbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwPXczQPv/tcIdvov5W+uWQ1Z1A/nj3mwr+5+DnMm+46ckApVaDJE0 TlPWL04bxlTgP6hVPVd4dXXQtcie1DgQO2JGDK1YNz/mco1nVHyhq5SHrAHg2cSO 01InkGKZAJEb169crl87H4RSCpoAbe9tGqj0UbTCB2ubljB/3cGuTdbR0Y1jdQYA ZDyX/UOcLYlCygzrO0PzzQcJ4U2l392jweiWhd0NQ7iuCumAb+b6wSOr/l3JGe3N WFpnVLhLSfGc1ixW4npBCdCbMnGBNNrCQE6SAG5fIn871XZi4glTxzICndguk3QZ 4IgsjiUN6YK0nyjAf7g9bGJ4R8ZkhzHU -----END CERTIFICATE-----Generated at Thu Apr 10 17:38:14 2025 by rpki-client