$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft File: e5n41rlBPOKiluscfX7-bUfQy6Q.mft (raw, json) Hash identifier: T2PqWa4CceM/CPBhUaw0GX8pO1S8e9z/FlQoJhZEJUw= Subject key identifier: AD:D7:FA:DA:07:4E:C4:CC:69:92:F5:F5:D9:3E:5D:60:50:0D:F0:CB Authority key identifier: 7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4 Certificate issuer: /CN=A91C4F1B/serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4 Certificate serial: 088C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft Manifest number: 0885 Signing time: Fri 18 Apr 2025 20:41:57 +0000 Manifest this update: Fri 18 Apr 2025 20:41:56 +0000 Manifest next update: Fri 25 Apr 2025 20:41:56 +0000 Files and hashes: 1: e5n41rlBPOKiluscfX7-bUfQy6Q.crl (hash: k1I3bHMFNIh9oPOapxiotWlulxRyEZaR4AYVLmmzgWU=) 2: 059261A8BC5111EABE07AE32C4F9AE02.roa (hash: cybKavsK+KygtFzdLH5ZiH4HxzktrVv6nGmG8yvNLOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 20:41:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2188 (0x88c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F1B, serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4 Validity Not Before: Apr 18 20:41:56 2025 GMT Not After : Apr 25 20:41:56 2025 GMT Subject: CN=6802b914-f659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e0:12:59:65:0b:41:6c:7b:05:f3:cb:f7:a0: ff:1c:e8:61:fb:31:1b:a3:5b:4a:c2:bc:9b:94:0a: 79:ed:59:b6:91:e6:26:be:fb:ab:7e:c2:3b:7e:f7: f2:f3:a2:ee:b5:a9:ef:f0:25:ee:d0:ce:74:e0:2d: 3d:d6:bc:30:db:3b:84:67:b4:bf:ab:22:7c:8e:43: 2e:ec:ad:77:5b:14:93:a7:4e:a3:6c:0d:a6:80:a0: c5:88:9e:7e:f2:d5:25:66:f9:df:41:27:0c:28:cc: 3b:89:8d:8c:35:4f:d7:8a:7e:95:b4:f5:41:dd:84: 9b:a1:88:6c:c1:f9:f0:cc:19:de:be:f1:0e:54:7a: 1e:1b:70:d6:f7:21:5f:77:62:56:be:6f:31:4a:9c: c1:5c:0f:58:76:be:60:9c:2c:d3:da:d8:59:77:7e: 0c:19:ca:58:61:6e:3a:30:35:b7:82:0a:32:32:a8: 70:b0:ae:82:83:75:bd:18:f3:85:41:49:61:61:1c: b1:7a:0d:f7:d9:b9:9b:6d:59:f4:1f:4d:92:78:81: 26:01:f0:f9:93:2f:27:39:72:14:7c:d4:52:04:c6: 10:2f:eb:29:08:ba:3a:7f:56:20:75:b6:65:8e:66: 20:36:81:0b:b7:48:e8:1e:fd:75:ea:b9:b5:77:2e: 45:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D7:FA:DA:07:4E:C4:CC:69:92:F5:F5:D9:3E:5D:60:50:0D:F0:CB X509v3 Authority Key Identifier: keyid:7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:12:6a:40:80:8d:3a:b2:ec:38:50:23:23:b5:eb:f7:76:dd: 40:64:ac:4d:91:69:37:cd:ab:ae:4d:3d:44:fb:7c:c0:77:bd: 20:ba:b4:89:5e:35:07:ae:18:38:9e:ab:7e:d8:59:ef:95:2d: 3d:3c:2f:58:43:e7:00:c0:06:30:c1:c9:cb:71:c8:69:08:f9: 9d:18:e7:0f:f8:f0:f0:fc:dd:8c:91:7f:b5:95:3e:77:00:be: 1e:df:48:31:90:36:a0:52:7e:c6:2b:6d:c5:5e:e7:2c:43:a5: 77:ee:2f:4d:d4:6c:cd:5a:04:39:cd:40:ae:e9:f4:1f:f5:c4: e2:4f:2b:59:07:07:d4:6b:6b:53:f1:97:ba:1e:a9:fa:f8:b7: a3:f1:fe:c9:22:80:d4:da:e6:cc:f1:c7:47:a8:f1:30:1c:cb: 28:3e:f8:34:bd:6f:b3:3e:b2:6d:c3:23:43:18:55:a5:92:f0: 3c:55:a3:b7:de:f2:4e:09:50:ad:50:d1:6f:82:0b:01:db:99: 89:c4:dd:25:2e:dc:78:51:31:94:f0:9d:a8:d8:da:78:ac:94: 71:65:e1:c6:16:16:55:08:54:24:37:d5:71:89:54:c5:99:0a: a2:af:7c:47:e2:78:8b:9b:8b:2c:30:e1:1a:17:23:4e:73:c9: 0a:b2:e8:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMUIxMTAvBgNVBAUTKDdCOTlGOEQ2Qjk0MTNDRTJBMjk2RUIxQzdEN0VGRTZE NDdEMENCQTQwHhcNMjUwNDE4MjA0MTU2WhcNMjUwNDI1MjA0MTU2WjAYMRYwFAYD VQQDEw02ODAyYjkxNC1mNjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuASWWULQWx7BfPL96D/HOhh+zEbo1tKwryblAp57Vm2keYmvvurfsI7fvfy 86Lutanv8CXu0M504C091rww2zuEZ7S/qyJ8jkMu7K13WxSTp06jbA2mgKDFiJ5+ 8tUlZvnfQScMKMw7iY2MNU/Xin6VtPVB3YSboYhswfnwzBnevvEOVHoeG3DW9yFf d2JWvm8xSpzBXA9Ydr5gnCzT2thZd34MGcpYYW46MDW3ggoyMqhwsK6Cg3W9GPOF QUlhYRyxeg332bmbbVn0H02SeIEmAfD5ky8nOXIUfNRSBMYQL+spCLo6f1YgdbZl jmYgNoELt0joHv116rm1dy5FlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3X+toH TsTMaZL19dk+XWBQDfDLMB8GA1UdIwQYMBaAFHuZ+Na5QTziopbrHH1+/m1H0Muk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYxQi8yM0YzMDU1MEJD NEYxMUVBQkE4Qzk2MkZDNEY5QUUwMi9lNW40MXJsQlBPS2lsdXNjZlg3LWJVZlF5 NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U1bjQxcmxCUE9LaWx1c2NmWDctYlVmUXk2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYxQi8yM0YzMDU1MEJDNEYxMUVBQkE4Qzk2MkZDNEY5QUUwMi9lNW40MXJsQlBP S2lsdXNjZlg3LWJVZlF5NlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzEmpAgI06suw4UCMjtev3dt1AZKxNkWk3zauuTT1E+3zAd70gurSJ XjUHrhg4nqt+2FnvlS09PC9YQ+cAwAYwwcnLcchpCPmdGOcP+PDw/N2MkX+1lT53 AL4e30gxkDagUn7GK23FXucsQ6V37i9N1GzNWgQ5zUCu6fQf9cTiTytZBwfUa2tT 8Ze6Hqn6+Lej8f7JIoDU2ubM8cdHqPEwHMsoPvg0vW+zPrJtwyNDGFWlkvA8VaO3 3vJOCVCtUNFvggsB25mJxN0lLtx4UTGU8J2o2Np4rJRxZeHGFhZVCFQkN9VxiVTF mQqir3xH4niLm4ssMOEaFyNOc8kKsugm -----END CERTIFICATE-----Generated at Sat Apr 19 07:19:44 2025 by rpki-client