$ rpki-client -vvf rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.mft File: E39piIvunMg7q0H68slC0Qryy2U.mft (raw, json) Hash identifier: M3MUD5sZlqnv3+2IpGgWXx/ITKO0B3pUiSQ4CkYSZH4= Subject key identifier: CB:A8:4C:CA:23:4C:AA:AF:F5:19:4D:30:B6:00:36:61:24:21:CD:06 Authority key identifier: 13:7F:69:88:8B:EE:9C:C8:3B:AB:41:FA:F2:C9:42:D1:0A:F2:CB:65 Certificate issuer: /CN=A914B30A/serialNumber=137F69888BEE9CC83BAB41FAF2C942D10AF2CB65 Certificate serial: 0478 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E39piIvunMg7q0H68slC0Qryy2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.mft Manifest number: 0473 Signing time: Sat 31 May 2025 00:17:48 +0000 Manifest this update: Sat 31 May 2025 00:17:47 +0000 Manifest next update: Sat 07 Jun 2025 00:17:47 +0000 Files and hashes: 1: E39piIvunMg7q0H68slC0Qryy2U.crl (hash: gblwCtajV6A/lqm0qpiXDCV5tRSz4RyBL9RnmYGc0vo=) 2: 279EE41683E111ECBB82F47DC4F9AE02.roa (hash: qE3lLSo7fB7VrFOUOH9TpjKgPsy7cNI6EqgXlJf8kVM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.crl rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E39piIvunMg7q0H68slC0Qryy2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1144 (0x478) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B30A, serialNumber=137F69888BEE9CC83BAB41FAF2C942D10AF2CB65 Validity Not Before: May 31 00:17:47 2025 GMT Not After : Jun 7 00:17:47 2025 GMT Subject: CN=683a4aac-9a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:67:32:e7:9a:09:9b:41:e7:3c:02:dd:3c:1d: 04:b1:1f:a2:3c:4e:eb:d3:92:c2:73:1b:32:de:f7: 40:2e:af:13:73:c2:9d:33:14:b9:1b:b0:da:0f:77: d4:d2:a1:ba:e4:e8:ae:69:85:4c:dc:bd:c4:17:ab: 81:34:b8:f0:ae:64:2c:87:5b:13:62:2c:d1:3f:9e: bd:d5:0b:8a:06:1a:39:db:9a:05:a9:71:d9:9b:8e: 83:7c:43:c5:89:c1:b2:b2:f4:a4:1f:e6:41:cf:6e: 7d:49:6a:d9:62:0f:17:25:12:54:51:ea:31:e5:60: 75:26:52:23:a0:01:f7:90:da:41:80:09:da:bb:fc: 89:38:cd:ac:46:af:1d:6a:53:b7:7a:eb:16:11:cb: 30:c4:54:6c:0a:d9:a0:cc:5e:33:b7:5c:9b:61:2a: c6:fb:be:15:e5:4c:4f:8e:61:fc:22:76:91:f3:e4: 15:3a:80:9f:ee:85:38:92:3c:b3:ca:09:01:2c:70: bf:48:eb:36:5b:7c:d7:5a:11:b9:0a:23:dd:61:9d: 68:40:c7:af:1a:c7:a0:d3:a7:83:57:00:13:86:c3: 81:e8:72:7b:d4:ce:06:33:47:95:92:3b:dd:56:17: 5f:d8:d0:e2:63:23:9b:b4:33:20:b3:1e:50:47:63: e9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A8:4C:CA:23:4C:AA:AF:F5:19:4D:30:B6:00:36:61:24:21:CD:06 X509v3 Authority Key Identifier: keyid:13:7F:69:88:8B:EE:9C:C8:3B:AB:41:FA:F2:C9:42:D1:0A:F2:CB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E39piIvunMg7q0H68slC0Qryy2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:84:63:63:d5:6a:51:90:7a:65:2f:71:74:f0:a8:ee:ad:3a: f3:ed:eb:34:77:3b:1b:58:5e:7c:92:d6:f1:3a:49:16:9b:56: 6a:b3:ea:3f:83:12:05:90:35:04:c8:3f:97:50:6d:04:2a:38: 5c:7b:3f:af:0e:80:ee:28:32:b6:c4:55:f6:3a:22:b6:27:09: a1:b4:12:b8:e7:29:2f:7e:cd:2f:2f:1f:d2:3f:e6:67:6a:95: a9:64:24:ec:25:e2:44:c6:1a:a8:9c:fc:b3:e6:07:e8:3f:1e: 58:f5:8d:db:9e:dd:32:1b:c9:f0:9c:94:20:c9:04:f9:28:36: 45:58:aa:ad:01:b7:cc:84:5e:06:49:e6:58:30:ed:b1:66:f1: 3a:b2:b6:5a:58:b0:29:ff:ba:8d:c7:ec:a6:2f:71:79:f8:8e: 9d:7a:67:07:92:2a:bf:4a:2d:c4:4e:75:57:30:fc:83:b6:02: 9c:26:78:5f:e3:fa:2f:44:93:3c:b8:2d:3e:51:24:5b:5b:15: d7:f2:40:ad:29:75:20:17:61:94:72:57:fc:e9:f8:f8:aa:55: 51:0f:d6:b7:b1:fa:d6:a2:62:24:0d:4a:5a:46:6c:dc:89:60: 7d:0c:a1:3c:36:87:5c:22:39:19:65:48:2c:ea:5c:ed:a3:97: f5:55:7f:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIzMEExMTAvBgNVBAUTKDEzN0Y2OTg4OEJFRTlDQzgzQkFCNDFGQUYyQzk0MkQx MEFGMkNCNjUwHhcNMjUwNTMxMDAxNzQ3WhcNMjUwNjA3MDAxNzQ3WjAYMRYwFAYD VQQDEw02ODNhNGFhYy05YTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnWcy55oJm0HnPALdPB0EsR+iPE7r05LCcxsy3vdALq8Tc8KdMxS5G7DaD3fU 0qG65OiuaYVM3L3EF6uBNLjwrmQsh1sTYizRP5691QuKBho525oFqXHZm46DfEPF icGysvSkH+ZBz259SWrZYg8XJRJUUeox5WB1JlIjoAH3kNpBgAnau/yJOM2sRq8d alO3eusWEcswxFRsCtmgzF4zt1ybYSrG+74V5UxPjmH8InaR8+QVOoCf7oU4kjyz ygkBLHC/SOs2W3zXWhG5CiPdYZ1oQMevGseg06eDVwAThsOB6HJ71M4GM0eVkjvd Vhdf2NDiYyObtDMgsx5QR2PpSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMuoTMoj TKqv9RlNMLYANmEkIc0GMB8GA1UdIwQYMBaAFBN/aYiL7pzIO6tB+vLJQtEK8stl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjMwQS85MUFFNjlBQTQ2 N0MxMUVDQkQ2NjEyNkJDNEY5QUUwMi9FMzlwaUl2dW5NZzdxMEg2OHNsQzBRcnl5 MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzOXBpSXZ1bk1nN3EwSDY4c2xDMFFyeXkyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjMwQS85MUFFNjlBQTQ2N0MxMUVDQkQ2NjEyNkJDNEY5QUUwMi9FMzlwaUl2dW5N ZzdxMEg2OHNsQzBRcnl5MlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClhGNj1WpRkHplL3F08KjurTrz7es0dzsbWF58ktbxOkkWm1Zqs+o/ gxIFkDUEyD+XUG0EKjhcez+vDoDuKDK2xFX2OiK2JwmhtBK45ykvfs0vLx/SP+Zn apWpZCTsJeJExhqonPyz5gfoPx5Y9Y3bnt0yG8nwnJQgyQT5KDZFWKqtAbfMhF4G SeZYMO2xZvE6srZaWLAp/7qNx+ymL3F5+I6demcHkiq/Si3ETnVXMPyDtgKcJnhf 4/ovRJM8uC0+USRbWxXX8kCtKXUgF2GUclf86fj4qlVRD9a3sfrWomIkDUpaRmzc iWB9DKE8NodcIjkZZUgs6lzto5f1VX+w -----END CERTIFICATE-----Generated at Sat May 31 17:42:41 2025 by rpki-client