$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft File: 5esYDNbcUWxm01KwR7npxaUCcOM.mft (raw, json) Hash identifier: VKQWSCsVbIVK1W2Tznfg+EyjCIa1Fb9/3G7V2RRGciM= Subject key identifier: 43:EC:29:15:6E:C2:70:EC:27:D2:72:76:E5:C3:47:0B:98:6C:6D:1A Authority key identifier: E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3 Certificate issuer: /CN=A91ABFD9/serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3 Certificate serial: 08A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft Manifest number: 088C Signing time: Sat 12 Apr 2025 20:20:32 +0000 Manifest this update: Sat 12 Apr 2025 20:20:31 +0000 Manifest next update: Sat 19 Apr 2025 20:20:31 +0000 Files and hashes: 1: 5esYDNbcUWxm01KwR7npxaUCcOM.crl (hash: gPmQasm2pqryuvpuNEpucwGQ0enBeDeUncxfXRao5vY=) 2: E2E21364C4F811EAB8D31113C4F9AE02.roa (hash: KT6K45U/vV1zQkhhfiaxr9a9XeTKLIwG0eEDcyR3ERI=) 3: F1A54AC47A5611EB876D281FC4F9AE02.roa (hash: LbbFjEbhHg5fzKZNW2jokQ6UuaIS/rDPKgFU2q0pJeg=) 4: 36945EC2232711EBA0F14F17C4F9AE02.roa (hash: Gzcr6RaAc7WjlspRH4slQcyVh4i/nmyVkR/RXd4O0KM=) 5: 6AE50E1C21E011EBBF36CD21C4F9AE02.roa (hash: Lg2iSZUiBgCc3+l3q9JExUq+jxWe1fvszct9oy4Ys3k=) 6: E22ECDEAC4F811EAB8D31113C4F9AE02.roa (hash: tlDd7aRrzNeu6uslbfPluCcOk663EDpRsH8KL9nqlD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 20:20:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2216 (0x8a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABFD9, serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3 Validity Not Before: Apr 12 20:20:31 2025 GMT Not After : Apr 19 20:20:31 2025 GMT Subject: CN=67facb10-d90f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ea:4e:5b:2d:10:46:20:2e:9f:b1:87:5a:15: bb:ac:33:6d:52:b6:9f:d8:84:66:64:47:fe:7a:35: 66:1c:1e:2d:31:4d:11:ee:40:05:4e:8c:9a:e5:fe: 15:06:03:d4:11:54:99:b5:8d:81:23:56:21:c4:bf: 80:66:b9:0e:62:94:42:21:af:0c:e4:a0:e0:70:7a: 6d:d1:c2:1b:7f:08:00:d0:26:8c:dd:3c:1a:e0:ff: 19:8e:89:18:57:f0:3b:e0:bf:6f:61:92:31:ee:dd: 2f:7b:f2:1c:f0:26:33:12:aa:72:f8:d4:7b:80:24: 7e:f3:71:4f:dc:17:95:3c:c4:bb:74:42:83:ca:0a: a1:15:41:bd:fb:0e:e9:61:0d:b7:21:92:be:51:88: 0d:64:4a:a3:85:73:ac:a6:85:76:40:51:d6:b0:92: 58:4d:55:4b:4a:c4:74:ca:91:b7:13:4f:e0:ad:5d: d8:ee:d2:2c:19:80:d4:59:61:89:72:ed:fb:e5:64: 8c:ad:59:9f:14:e5:6c:ce:1c:4d:aa:73:60:3e:93: 00:df:85:cb:d0:8e:bf:f1:1e:b4:61:f7:f7:1c:ba: 21:62:58:19:ac:d2:a4:fd:2e:d5:ab:fe:40:d6:d4: 25:e1:62:91:87:8a:0a:26:6b:9b:86:59:43:5f:09: 65:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EC:29:15:6E:C2:70:EC:27:D2:72:76:E5:C3:47:0B:98:6C:6D:1A X509v3 Authority Key Identifier: keyid:E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:90:65:33:41:30:5f:55:d5:f9:9d:1e:f9:ce:71:44:95:07: 13:c6:79:7f:a0:1e:08:19:70:b8:b8:70:87:85:e4:fb:94:9e: 89:c2:93:89:18:a7:23:42:13:53:c2:d1:b5:0c:21:1b:9f:21: 52:21:d1:83:0e:af:8b:f1:38:a8:77:b6:2c:48:bd:4a:e3:cb: d5:71:50:a7:d0:61:e1:47:9e:a4:1a:84:23:bd:cf:28:eb:5a: 15:45:07:a9:a8:93:84:ef:63:9d:5f:46:d9:d5:d8:05:62:69: 05:e3:46:b9:03:0d:26:5e:94:6f:b1:83:77:df:f2:75:44:db: b7:5c:1e:9d:f5:11:6f:27:2f:04:93:7e:20:a6:02:e3:7c:cb: a6:7a:75:7c:94:80:d7:9d:1f:47:1f:08:fc:39:64:bd:7c:87: 57:8f:5d:6d:e1:d3:13:7c:db:2c:dd:a5:23:fe:38:32:72:1c: 46:d5:2f:90:19:f0:26:3f:e1:0f:6c:23:e2:31:10:1c:49:cd: fc:66:68:9f:ec:f9:53:d4:67:18:46:33:d1:fa:a5:c2:4c:60: 25:96:69:59:79:cf:80:46:ec:60:0a:a7:39:f3:fe:67:82:eb: 36:ee:bd:b0:63:2f:91:b0:c0:37:6b:0b:e7:63:29:c6:13:1c: 76:3d:3d:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJGRDkxMTAvBgNVBAUTKEU1RUIxODBDRDZEQzUxNkM2NkQzNTJCMDQ3QjlFOUM1 QTUwMjcwRTMwHhcNMjUwNDEyMjAyMDMxWhcNMjUwNDE5MjAyMDMxWjAYMRYwFAYD VQQDEw02N2ZhY2IxMC1kOTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsOpOWy0QRiAun7GHWhW7rDNtUraf2IRmZEf+ejVmHB4tMU0R7kAFToya5f4V BgPUEVSZtY2BI1YhxL+AZrkOYpRCIa8M5KDgcHpt0cIbfwgA0CaM3Twa4P8ZjokY V/A74L9vYZIx7t0ve/Ic8CYzEqpy+NR7gCR+83FP3BeVPMS7dEKDygqhFUG9+w7p YQ23IZK+UYgNZEqjhXOspoV2QFHWsJJYTVVLSsR0ypG3E0/grV3Y7tIsGYDUWWGJ cu375WSMrVmfFOVszhxNqnNgPpMA34XL0I6/8R60Yff3HLohYlgZrNKk/S7Vq/5A 1tQl4WKRh4oKJmubhllDXwllMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPsKRVu wnDsJ9JyduXDRwuYbG0aMB8GA1UdIwQYMBaAFOXrGAzW3FFsZtNSsEe56cWlAnDj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkZEOS80QUU4MDQxRUI5 RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VXeG0wMUt3UjducHhhVUNj T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVlc1lETmJjVVd4bTAxS3dSN25weGFVQ2NPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkZEOS80QUU4MDQxRUI5RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VX eG0wMUt3UjducHhhVUNjT00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+kGUzQTBfVdX5nR75znFElQcTxnl/oB4IGXC4uHCHheT7lJ6JwpOJ GKcjQhNTwtG1DCEbnyFSIdGDDq+L8Tiod7YsSL1K48vVcVCn0GHhR56kGoQjvc8o 61oVRQepqJOE72OdX0bZ1dgFYmkF40a5Aw0mXpRvsYN33/J1RNu3XB6d9RFvJy8E k34gpgLjfMumenV8lIDXnR9HHwj8OWS9fIdXj11t4dMTfNss3aUj/jgychxG1S+Q GfAmP+EPbCPiMRAcSc38Zmif7PlT1GcYRjPR+qXCTGAllmlZec+ARuxgCqc58/5n gus27r2wYy+RsMA3awvnYynGExx2PT3b -----END CERTIFICATE-----Generated at Sun Apr 13 03:57:54 2025 by rpki-client