$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft File: EY5vss8Va51aJq7AUfscX37-AeM.mft (raw, json) Hash identifier: amqLJ1L8U4hgLILmnHlerb3TBo+yglJhYkBwU6y4qmk= Subject key identifier: 9A:A3:27:D2:1A:D5:57:2C:3E:DC:3D:97:E1:D2:B4:0E:E1:1F:E1:7B Authority key identifier: 11:8E:6F:B2:CF:15:6B:9D:5A:26:AE:C0:51:FB:1C:5F:7E:FE:01:E3 Certificate issuer: /CN=A914DA3F/serialNumber=118E6FB2CF156B9D5A26AEC051FB1C5F7EFE01E3 Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft Manifest number: 01B5 Signing time: Sat 31 May 2025 02:51:55 +0000 Manifest this update: Sat 31 May 2025 02:51:54 +0000 Manifest next update: Sat 07 Jun 2025 02:51:54 +0000 Files and hashes: 1: EY5vss8Va51aJq7AUfscX37-AeM.crl (hash: R8Lf2UcmMYQfBz4PtokM4V5TjJ7dfHopP6bPZaAkLWc=) 2: 612568D2A6D011ED8FBD0A82C4F9AE02.roa (hash: nm2zg9mKvyo9+lsb6e1TLrNeopFW/UoV47vdvbrHk8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.crl rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DA3F, serialNumber=118E6FB2CF156B9D5A26AEC051FB1C5F7EFE01E3 Validity Not Before: May 31 02:51:54 2025 GMT Not After : Jun 7 02:51:54 2025 GMT Subject: CN=683a6eca-64e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e4:db:7d:69:2d:23:c4:d7:b2:76:80:40:bd: fb:46:55:72:32:b8:05:ca:0f:bb:23:a9:fd:ae:c8: 9c:0e:bc:a1:88:08:d0:f5:47:a3:1e:8a:1d:3b:70: a3:18:b9:11:44:60:af:b9:7f:5b:56:08:55:d2:3b: 4c:c0:60:68:81:db:c2:35:ac:5f:4b:fd:c6:9b:9f: 7b:dc:f0:e2:d0:12:e1:47:4f:89:c2:5a:bc:c4:e6: 5d:40:50:93:37:b0:63:bb:ee:40:39:64:03:12:b7: b8:a7:60:29:65:02:bf:0c:1f:35:b9:b5:1f:80:12: 14:af:8c:66:5f:34:45:bb:bf:8f:9e:93:b9:14:ea: 62:2f:7b:a5:97:56:69:cd:5e:15:95:b5:26:06:bc: 8e:b5:52:0c:4f:05:aa:f4:96:7e:a0:65:f2:37:6a: 72:28:a1:3d:96:b3:4b:b1:39:67:a6:15:df:ee:71: 15:79:5b:8c:c4:d1:bc:61:9a:d4:2a:9f:2f:7f:e1: d5:f0:dd:d3:6b:18:6e:bc:3f:98:31:87:1a:04:68: 84:25:23:72:7d:2a:16:97:05:5d:8f:0f:c0:84:a3: f5:96:74:14:20:7e:e3:54:4e:3e:39:5e:33:5c:a8: 64:db:03:57:c4:d0:4e:cc:5d:ea:a0:24:8a:9a:a5: ae:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A3:27:D2:1A:D5:57:2C:3E:DC:3D:97:E1:D2:B4:0E:E1:1F:E1:7B X509v3 Authority Key Identifier: keyid:11:8E:6F:B2:CF:15:6B:9D:5A:26:AE:C0:51:FB:1C:5F:7E:FE:01:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c3:73:3a:d6:f9:14:55:4f:f1:3f:c1:d1:43:8d:89:75:87: 21:32:f6:33:4f:51:ed:b3:78:dd:45:17:f8:99:5a:d6:a0:54: 2f:dd:9d:b3:2c:2e:b4:34:e8:68:35:bd:87:76:df:92:f7:eb: 48:3c:d2:52:57:24:a7:e9:77:b0:a6:02:fd:ab:0b:9c:88:25: c2:fe:32:68:0f:68:ec:c2:3a:92:24:f6:2b:36:ba:df:31:05: c3:bb:1d:e3:00:b9:56:60:28:b5:39:ed:2f:a4:59:3b:db:69: 43:95:dc:42:d1:8e:67:86:0d:62:ba:42:21:c9:48:c3:96:9c: bd:5e:76:30:fa:a0:91:47:bb:8e:db:d9:5d:ae:aa:d6:df:0b: 5d:a3:e7:1a:a3:4c:2a:03:9e:89:2a:bb:41:76:03:b4:9b:f5: b4:b5:13:cc:58:1b:d3:a7:e0:69:a7:4a:2a:c4:be:a1:27:1d: 6b:38:39:8f:31:c3:3d:d1:14:b8:1f:63:02:1f:35:23:c5:66: d0:a7:b4:55:cf:74:c8:dd:bd:c0:d8:b0:2c:24:ce:7a:9d:8a: b7:5a:36:3c:48:b3:7d:23:4b:c5:ea:75:61:e5:69:80:f9:31: aa:be:c1:50:89:cc:a6:33:c7:0a:90:1a:0c:d1:6a:11:39:3a: 0c:f6:ba:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERBM0YxMTAvBgNVBAUTKDExOEU2RkIyQ0YxNTZCOUQ1QTI2QUVDMDUxRkIxQzVG N0VGRTAxRTMwHhcNMjUwNTMxMDI1MTU0WhcNMjUwNjA3MDI1MTU0WjAYMRYwFAYD VQQDEw02ODNhNmVjYS02NGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0uTbfWktI8TXsnaAQL37RlVyMrgFyg+7I6n9rsicDryhiAjQ9UejHoodO3Cj GLkRRGCvuX9bVghV0jtMwGBogdvCNaxfS/3Gm5973PDi0BLhR0+Jwlq8xOZdQFCT N7Bju+5AOWQDEre4p2ApZQK/DB81ubUfgBIUr4xmXzRFu7+PnpO5FOpiL3ull1Zp zV4VlbUmBryOtVIMTwWq9JZ+oGXyN2pyKKE9lrNLsTlnphXf7nEVeVuMxNG8YZrU Kp8vf+HV8N3TaxhuvD+YMYcaBGiEJSNyfSoWlwVdjw/AhKP1lnQUIH7jVE4+OV4z XKhk2wNXxNBOzF3qoCSKmqWuxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqjJ9Ia 1VcsPtw9l+HStA7hH+F7MB8GA1UdIwQYMBaAFBGOb7LPFWudWiauwFH7HF9+/gHj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEzRi80NjlCMTc2QUE2 Q0ExMUVEOEQxMDk5NzhDNEY5QUUwMi9FWTV2c3M4VmE1MWFKcTdBVWZzY1gzNy1B ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VZNXZzczhWYTUxYUpxN0FVZnNjWDM3LUFlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REEzRi80NjlCMTc2QUE2Q0ExMUVEOEQxMDk5NzhDNEY5QUUwMi9FWTV2c3M4VmE1 MWFKcTdBVWZzY1gzNy1BZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKw3M61vkUVU/xP8HRQ42JdYchMvYzT1Hts3jdRRf4mVrWoFQv3Z2z LC60NOhoNb2Hdt+S9+tIPNJSVySn6XewpgL9qwuciCXC/jJoD2jswjqSJPYrNrrf MQXDux3jALlWYCi1Oe0vpFk722lDldxC0Y5nhg1iukIhyUjDlpy9XnYw+qCRR7uO 29ldrqrW3wtdo+cao0wqA56JKrtBdgO0m/W0tRPMWBvTp+Bpp0oqxL6hJx1rODmP McM90RS4H2MCHzUjxWbQp7RVz3TI3b3A2LAsJM56nYq3WjY8SLN9I0vF6nVh5WmA +TGqvsFQicymM8cKkBoM0WoROToM9ro2 -----END CERTIFICATE-----Generated at Sat May 31 17:50:44 2025 by rpki-client