$ rpki-client -vvf rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft File: 5EL5lVmsG6h-4TSLL8evCiL_smE.mft (raw, json) Hash identifier: wIyIXW6GAL0VlZ5HB+jsHP9HVTEec6/94qrpEJXL1Ew= Subject key identifier: 05:87:05:99:A8:80:65:0F:DD:05:20:38:0D:AA:99:94:8C:A5:C0:9A Authority key identifier: E4:42:F9:95:59:AC:1B:A8:7E:E1:34:8B:2F:C7:AF:0A:22:FF:B2:61 Certificate issuer: /CN=A9143336/serialNumber=E442F99559AC1BA87EE1348B2FC7AF0A22FFB261 Certificate serial: 2AF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft Manifest number: 2AE2 Signing time: Fri 30 May 2025 15:42:23 +0000 Manifest this update: Fri 30 May 2025 15:42:22 +0000 Manifest next update: Fri 06 Jun 2025 15:42:22 +0000 Files and hashes: 1: 5EL5lVmsG6h-4TSLL8evCiL_smE.crl (hash: lBIarbG4biMVUiMRdGKJYMJSJrM247J9ezmPlMMyg5o=) 2: 5452AC309B4911EB9952394CC4F9AE02.roa (hash: 3EBZNTlM2pSnC9HcQ0kJddDB9AhHcVhBduQrWy64qKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.crl rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:42:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10994 (0x2af2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143336, serialNumber=E442F99559AC1BA87EE1348B2FC7AF0A22FFB261 Validity Not Before: May 30 15:42:22 2025 GMT Not After : Jun 6 15:42:22 2025 GMT Subject: CN=6839d1df-b895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:06:be:e7:c3:5e:d7:58:51:3f:ce:c0:9b:89: 57:be:a2:08:49:d9:58:0c:17:1d:0e:f0:91:a6:bf: f3:2b:f1:78:40:bd:75:0e:c9:79:10:bd:5f:73:6f: da:d0:49:3a:6f:a5:1f:86:fe:98:b7:ca:f8:14:8c: c5:40:90:f4:d5:1c:51:2e:c9:c5:d1:93:28:37:f5: b1:56:fe:f4:4d:f4:03:29:15:a3:72:4b:af:95:9c: 8d:a0:de:45:fb:58:5f:ae:b2:8b:10:da:39:71:fa: 5d:9b:7d:e1:d9:fa:dd:d7:df:57:8b:30:00:da:0f: 9d:e1:fa:13:6d:f0:fc:aa:13:94:19:bf:35:56:f7: f9:71:12:3e:30:57:1c:81:07:84:f9:22:a9:f1:93: 50:89:0c:6c:bd:4f:91:e5:12:23:5d:d1:11:a2:28: 77:c5:1b:da:b7:a6:70:95:42:e9:74:d9:f7:56:a8: f2:17:1b:98:b4:a4:87:30:20:d7:38:bf:e1:77:4d: 0a:17:d3:bf:31:af:13:22:19:c4:a6:ed:01:8d:ed: b8:99:eb:93:64:6a:b1:31:13:e7:b0:d6:1e:fc:4b: 11:60:0c:47:17:32:e1:d8:16:46:3d:de:90:50:bc: 97:0f:27:0e:68:5c:14:04:d6:16:2d:1f:b7:29:0e: c9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:87:05:99:A8:80:65:0F:DD:05:20:38:0D:AA:99:94:8C:A5:C0:9A X509v3 Authority Key Identifier: keyid:E4:42:F9:95:59:AC:1B:A8:7E:E1:34:8B:2F:C7:AF:0A:22:FF:B2:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:2d:db:82:28:bc:96:68:59:a5:e7:13:2e:f2:43:3e:c3:a2: ad:74:f9:b5:38:f5:30:2e:d3:82:e8:87:cb:bf:f0:52:b9:ad: 83:cf:d5:a2:07:d5:8e:ab:bd:6b:74:ad:82:2a:be:dd:b0:42: 22:7e:e6:6a:c5:b3:17:14:b2:54:e1:39:71:6f:62:79:b2:b8: 93:05:04:9e:0f:6f:98:e0:4b:9a:2b:84:7a:68:8e:5a:87:c6: c8:ac:8a:84:ec:95:15:dd:5d:36:1a:11:72:dc:1a:21:3c:5e: 3a:a2:f4:d5:53:a0:fc:e1:4d:24:b4:53:07:f7:b8:08:f6:cc: f1:e9:75:fc:9c:cc:09:b2:79:a0:36:0d:a3:48:0f:af:1f:fd: 63:46:12:e1:4b:5f:c6:09:97:c4:16:99:51:76:b5:e9:06:81: 99:93:86:4c:44:15:67:85:08:23:09:93:c1:bf:f8:8c:c4:8a: 69:20:56:92:ce:88:3d:40:04:b0:1f:48:0a:65:3d:09:bf:0f: 44:6e:24:de:d8:60:37:b3:f9:03:d8:8a:40:e9:76:60:37:57: d3:d7:66:1b:86:66:0a:26:5f:f5:96:20:68:61:a7:88:3e:59: 60:e3:26:a5:b4:33:41:02:ef:01:22:d4:07:a6:7c:fb:34:1c: 88:22:58:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMzMzYxMTAvBgNVBAUTKEU0NDJGOTk1NTlBQzFCQTg3RUUxMzQ4QjJGQzdBRjBB MjJGRkIyNjEwHhcNMjUwNTMwMTU0MjIyWhcNMjUwNjA2MTU0MjIyWjAYMRYwFAYD VQQDEw02ODM5ZDFkZi1iODk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwa+58Ne11hRP87Am4lXvqIISdlYDBcdDvCRpr/zK/F4QL11Dsl5EL1fc2/a 0Ek6b6Ufhv6Yt8r4FIzFQJD01RxRLsnF0ZMoN/WxVv70TfQDKRWjckuvlZyNoN5F +1hfrrKLENo5cfpdm33h2frd199XizAA2g+d4foTbfD8qhOUGb81Vvf5cRI+MFcc gQeE+SKp8ZNQiQxsvU+R5RIjXdERoih3xRvat6ZwlULpdNn3VqjyFxuYtKSHMCDX OL/hd00KF9O/Ma8TIhnEpu0Bje24meuTZGqxMRPnsNYe/EsRYAxHFzLh2BZGPd6Q ULyXDycOaFwUBNYWLR+3KQ7JhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAWHBZmo gGUP3QUgOA2qmZSMpcCaMB8GA1UdIwQYMBaAFORC+ZVZrBuofuE0iy/Hrwoi/7Jh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzMzNi84RUU3RkMxRTA4 NTMxMUU0QjAyMzlFNjFDNEY5QUUwMi81RUw1bFZtc0c2aC00VFNMTDhldkNpTF9z bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVFTDVsVm1zRzZoLTRUU0xMOGV2Q2lMX3NtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzMzNi84RUU3RkMxRTA4NTMxMUU0QjAyMzlFNjFDNEY5QUUwMi81RUw1bFZtc0c2 aC00VFNMTDhldkNpTF9zbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDLduCKLyWaFml5xMu8kM+w6KtdPm1OPUwLtOC6IfLv/BSua2Dz9Wi B9WOq71rdK2CKr7dsEIifuZqxbMXFLJU4Tlxb2J5sriTBQSeD2+Y4EuaK4R6aI5a h8bIrIqE7JUV3V02GhFy3BohPF46ovTVU6D84U0ktFMH97gI9szx6XX8nMwJsnmg Ng2jSA+vH/1jRhLhS1/GCZfEFplRdrXpBoGZk4ZMRBVnhQgjCZPBv/iMxIppIFaS zog9QASwH0gKZT0Jvw9EbiTe2GA3s/kD2IpA6XZgN1fT12YbhmYKJl/1liBoYaeI Pllg4yaltDNBAu8BItQHpnz7NByIIlgs -----END CERTIFICATE-----Generated at Sat May 31 16:38:59 2025 by rpki-client