$ rpki-client -vvf rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft File: _egcp2lelKkL_f2D8Rp3NGMIF-g.mft (raw, json) Hash identifier: GQVnzJ2T8/cO/uSK5JdFe8fLcAu+zNvVOjtaWKEzn3w= Subject key identifier: 65:6B:39:AC:CC:8E:1B:E9:F0:88:F7:3B:0E:43:69:D3:8E:42:EB:C7 Authority key identifier: FD:E8:1C:A7:69:5E:94:A9:0B:FD:FD:83:F1:1A:77:34:63:08:17:E8 Certificate issuer: /CN=A91127B5/serialNumber=FDE81CA7695E94A90BFDFD83F11A7734630817E8 Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft Manifest number: 0123 Signing time: Sat 31 May 2025 04:23:35 +0000 Manifest this update: Sat 31 May 2025 04:23:35 +0000 Manifest next update: Sat 07 Jun 2025 04:23:35 +0000 Files and hashes: 1: _egcp2lelKkL_f2D8Rp3NGMIF-g.crl (hash: mcK7A3Wsb5oqMQksvT43ZI8ENbq1n/z/WJDD3F+eoIs=) 2: AA02862E890C11EE87862551C4F9AE02.roa (hash: iEIKCf+XGWrseL7l7p29L+eQtWAuRRnnoodUimUnIC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.crl rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:23:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91127B5, serialNumber=FDE81CA7695E94A90BFDFD83F11A7734630817E8 Validity Not Before: May 31 04:23:35 2025 GMT Not After : Jun 7 04:23:35 2025 GMT Subject: CN=683a8447-e28c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ba:16:bb:53:bf:16:dd:59:75:ba:d7:3e:c6: 18:37:93:2e:fa:e9:1c:30:86:4a:90:76:28:13:4c: 1c:21:3b:74:01:ba:67:c1:4c:fd:6b:70:54:3c:fb: 75:73:bc:e8:03:cb:b4:8f:4c:53:72:06:f9:dc:7b: 7f:31:fd:af:0b:1c:c2:8d:a6:93:0b:03:7e:7b:73: 95:9f:1a:f7:36:6a:95:6b:77:fc:a3:2f:a2:04:ac: 7a:df:42:ff:f6:0c:b9:15:7b:36:ae:8b:cf:2b:9f: 5a:39:3c:00:82:fd:07:11:93:ab:0a:26:18:e6:f1: de:93:41:05:96:10:d7:91:11:80:60:a8:5f:b9:d5: ad:f6:0e:d3:e6:7a:17:7a:a5:df:1f:47:11:0a:82: 62:5f:3d:85:34:0b:c3:1e:53:db:7d:b5:27:c2:4f: 8e:36:5f:31:4a:1d:b7:6c:0a:bc:66:91:17:ea:3b: 77:58:d0:6c:69:f7:d4:7c:87:f4:3e:a6:f3:31:4c: 25:3d:61:c2:7f:b3:c8:7f:59:26:06:ba:a0:54:5f: 6b:5b:09:eb:0f:03:28:cb:b7:ed:87:38:eb:6c:fe: ac:cd:4d:50:81:47:e8:19:b9:3d:f3:76:92:3c:23: de:a2:10:5b:cd:9e:8f:79:60:2c:86:76:a1:e7:18: 10:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6B:39:AC:CC:8E:1B:E9:F0:88:F7:3B:0E:43:69:D3:8E:42:EB:C7 X509v3 Authority Key Identifier: keyid:FD:E8:1C:A7:69:5E:94:A9:0B:FD:FD:83:F1:1A:77:34:63:08:17:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:64:8f:70:cf:50:b3:16:fc:8a:01:d6:40:e9:1f:d1:b5:25: 92:75:98:1b:cb:07:64:b8:fe:4f:85:8f:85:55:77:6f:f0:0a: da:15:c8:80:4f:79:68:0f:66:8c:0b:d2:10:08:7e:7c:fd:26: 27:0c:78:37:06:d9:7c:cf:e5:0f:d3:6a:5a:e5:14:b7:f9:d3: 57:2e:8f:0a:a0:dd:26:bf:cb:2c:74:ae:87:0b:c6:34:aa:9a: ae:d5:bc:4e:68:7b:38:b5:e8:09:a3:79:53:59:1a:dd:2f:a3: 23:be:e8:02:5f:c9:14:bb:09:33:33:b6:04:0f:3e:b5:2f:99: 95:2b:3e:96:2e:1b:3d:11:12:22:1f:1b:0e:15:00:5c:6e:ec: ed:1e:1d:e8:d2:e1:41:01:f8:22:f3:8a:49:a8:b3:b0:0a:bf: 59:46:86:ae:5b:5f:98:cb:8d:cd:f4:e3:b9:6a:f9:fd:0e:55: b0:d9:09:a1:17:ae:99:e7:65:a1:29:5c:30:af:20:4d:24:62: a3:c1:f4:ea:c4:d5:b7:08:94:1f:7e:0b:a9:50:ad:ba:01:9e: 41:f5:b1:e3:07:3e:34:62:7f:0c:06:d1:4a:3a:92:60:cb:ac: 91:4c:93:9e:90:78:1b:bd:5d:91:89:24:6a:58:0e:a6:44:8f: e7:3d:7d:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3QjUxMTAvBgNVBAUTKEZERTgxQ0E3Njk1RTk0QTkwQkZERkQ4M0YxMUE3NzM0 NjMwODE3RTgwHhcNMjUwNTMxMDQyMzM1WhcNMjUwNjA3MDQyMzM1WjAYMRYwFAYD VQQDEw02ODNhODQ0Ny1lMjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA27oWu1O/Ft1ZdbrXPsYYN5Mu+ukcMIZKkHYoE0wcITt0AbpnwUz9a3BUPPt1 c7zoA8u0j0xTcgb53Ht/Mf2vCxzCjaaTCwN+e3OVnxr3NmqVa3f8oy+iBKx630L/ 9gy5FXs2rovPK59aOTwAgv0HEZOrCiYY5vHek0EFlhDXkRGAYKhfudWt9g7T5noX eqXfH0cRCoJiXz2FNAvDHlPbfbUnwk+ONl8xSh23bAq8ZpEX6jt3WNBsaffUfIf0 PqbzMUwlPWHCf7PIf1kmBrqgVF9rWwnrDwMoy7fthzjrbP6szU1QgUfoGbk983aS PCPeohBbzZ6PeWAshnah5xgQPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVrOazM jhvp8Ij3Ow5DadOOQuvHMB8GA1UdIwQYMBaAFP3oHKdpXpSpC/39g/EadzRjCBfo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdCNS8wRjE5NEVBRTg5 MEMxMUVFOURGNzJDNTBDNEY5QUUwMi9fZWdjcDJsZWxLa0xfZjJEOFJwM05HTUlG LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19lZ2NwMmxlbEtrTF9mMkQ4UnAzTkdNSUYtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjdCNS8wRjE5NEVBRTg5MEMxMUVFOURGNzJDNTBDNEY5QUUwMi9fZWdjcDJsZWxL a0xfZjJEOFJwM05HTUlGLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFZI9wz1CzFvyKAdZA6R/RtSWSdZgbywdkuP5PhY+FVXdv8AraFciA T3loD2aMC9IQCH58/SYnDHg3Btl8z+UP02pa5RS3+dNXLo8KoN0mv8ssdK6HC8Y0 qpqu1bxOaHs4tegJo3lTWRrdL6MjvugCX8kUuwkzM7YEDz61L5mVKz6WLhs9ERIi HxsOFQBcbuztHh3o0uFBAfgi84pJqLOwCr9ZRoauW1+Yy43N9OO5avn9DlWw2Qmh F66Z52WhKVwwryBNJGKjwfTqxNW3CJQffgupUK26AZ5B9bHjBz40Yn8MBtFKOpJg y6yRTJOekHgbvV2RiSRqWA6mRI/nPX36 -----END CERTIFICATE-----Generated at Sat May 31 16:35:55 2025 by rpki-client