$ rpki-client -vvf rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft File: E5bqlAlF_CBf8uPRsr4bkNcsxek.mft (raw, json) Hash identifier: Ol29tv/v/HHmdMi4Xa+DZsj9eFfUB4PoYJNcPrFmKA8= Subject key identifier: 17:7F:ED:D4:37:CC:91:72:9C:4F:22:CE:31:07:81:3C:E5:BB:27:6D Authority key identifier: 13:96:EA:94:09:45:FC:20:5F:F2:E3:D1:B2:BE:1B:90:D7:2C:C5:E9 Certificate issuer: /CN=A914DF56/serialNumber=1396EA940945FC205FF2E3D1B2BE1B90D72CC5E9 Certificate serial: 0502 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5bqlAlF_CBf8uPRsr4bkNcsxek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft Manifest number: 04FA Signing time: Fri 30 May 2025 23:55:18 +0000 Manifest this update: Fri 30 May 2025 23:55:17 +0000 Manifest next update: Fri 06 Jun 2025 23:55:17 +0000 Files and hashes: 1: E5bqlAlF_CBf8uPRsr4bkNcsxek.crl (hash: cAkhzPHhkMMnQAU8/e7JOoSSnokXzuqbihzxEgFUr+w=) 2: EB17A8C2152511ECAD055780C4F9AE02.roa (hash: 3Who1qUDm6eD8QDguJD4EaJb2KgGViSYhJ9baOpktjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.crl rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5bqlAlF_CBf8uPRsr4bkNcsxek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1282 (0x502) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DF56, serialNumber=1396EA940945FC205FF2E3D1B2BE1B90D72CC5E9 Validity Not Before: May 30 23:55:17 2025 GMT Not After : Jun 6 23:55:17 2025 GMT Subject: CN=683a4566-72a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1b:52:20:45:36:7a:e2:b3:23:02:78:2e:e1: 2d:4b:0f:aa:2b:8d:b3:8d:06:c7:13:b3:13:ff:eb: 73:ea:b9:8f:a6:5c:26:53:91:00:2e:29:8a:c8:b5: 42:7f:87:de:fc:56:fe:28:fb:e7:2b:29:e8:5d:e0: f3:4e:28:b0:a1:97:8b:21:da:63:e6:34:9e:0d:ac: 7c:a0:15:0a:e7:ec:7d:4b:e2:dc:ea:f6:d5:89:eb: e9:86:75:c0:a2:ff:6b:37:f3:cb:da:21:77:70:ae: ef:14:0f:7b:df:81:4f:6f:a6:4c:3e:38:62:ad:de: f6:ae:8b:40:cf:61:2d:f3:fb:ee:d0:a5:6e:79:22: 32:84:98:a1:a7:64:89:86:15:c2:c3:e3:4a:8c:d0: 1f:03:23:4a:ce:da:34:a5:bf:a5:27:99:08:11:9a: 67:a0:9f:e9:4a:9b:a5:13:41:69:2e:bf:ad:05:68: 3b:55:39:8d:8d:90:ea:33:bb:fa:58:72:77:24:6c: 2d:38:ea:e2:27:02:10:6e:cc:ce:c3:bb:87:2e:32: 3a:8d:3d:09:29:9b:94:8d:b7:53:11:a0:71:af:bf: 49:81:ec:88:03:09:52:52:d9:3d:94:b6:d0:a7:37: 1b:80:97:05:a6:a7:b8:cb:18:66:17:0b:35:d1:c0: 91:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:7F:ED:D4:37:CC:91:72:9C:4F:22:CE:31:07:81:3C:E5:BB:27:6D X509v3 Authority Key Identifier: keyid:13:96:EA:94:09:45:FC:20:5F:F2:E3:D1:B2:BE:1B:90:D7:2C:C5:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5bqlAlF_CBf8uPRsr4bkNcsxek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:26:d0:a9:86:14:f9:9d:30:4c:9c:7e:60:41:c9:59:90:57: 2d:a2:03:1f:f3:82:d7:1e:b3:49:3c:9f:1d:90:9b:12:f7:35: 4a:ff:f6:f4:c1:01:c2:74:c5:f4:89:9d:17:08:3b:fe:16:db: f4:28:f1:7a:02:ee:2a:d2:91:1f:96:7e:d1:c2:fe:99:55:3f: e8:98:27:66:54:be:51:a8:26:9f:f1:c7:a4:f4:e7:59:4b:16: 2d:60:4d:f4:2e:95:4a:c4:fa:f8:cc:20:99:8e:b8:cd:3d:a7: 51:b0:75:e8:1b:ae:a1:bc:dd:4b:b0:56:10:72:71:24:f5:cb: 02:ff:eb:f7:0c:7f:21:fe:eb:8d:1b:2d:7d:c3:30:40:60:70: 5b:1c:ea:d7:a1:14:5d:cf:14:54:97:29:66:f2:24:24:44:fd: dd:e8:8f:c3:e9:4b:2d:af:fb:7f:fa:ce:02:af:bd:91:8d:a2: 13:bb:f0:f0:4e:54:42:fc:ee:0d:d2:f4:6b:83:16:91:7a:4e: 7e:6b:47:0e:bc:20:89:fe:b0:1c:90:57:03:06:f0:34:48:e9: b9:07:5d:b6:0c:f8:49:58:05:14:18:88:11:0a:e0:70:27:e8: ea:1a:83:8c:d6:6c:6b:cb:7b:e2:ef:75:34:6d:49:e3:ac:87: 10:c7:e1:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERGNTYxMTAvBgNVBAUTKDEzOTZFQTk0MDk0NUZDMjA1RkYyRTNEMUIyQkUxQjkw RDcyQ0M1RTkwHhcNMjUwNTMwMjM1NTE3WhcNMjUwNjA2MjM1NTE3WjAYMRYwFAYD VQQDEw02ODNhNDU2Ni03MmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRtSIEU2euKzIwJ4LuEtSw+qK42zjQbHE7MT/+tz6rmPplwmU5EALimKyLVC f4fe/Fb+KPvnKynoXeDzTiiwoZeLIdpj5jSeDax8oBUK5+x9S+Lc6vbVievphnXA ov9rN/PL2iF3cK7vFA9734FPb6ZMPjhird72rotAz2Et8/vu0KVueSIyhJihp2SJ hhXCw+NKjNAfAyNKzto0pb+lJ5kIEZpnoJ/pSpulE0FpLr+tBWg7VTmNjZDqM7v6 WHJ3JGwtOOriJwIQbszOw7uHLjI6jT0JKZuUjbdTEaBxr79JgeyIAwlSUtk9lLbQ pzcbgJcFpqe4yxhmFws10cCRnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBd/7dQ3 zJFynE8izjEHgTzluydtMB8GA1UdIwQYMBaAFBOW6pQJRfwgX/Lj0bK+G5DXLMXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REY1Ni9CRDdGQTAzODE1 MjMxMUVDQjc0RjIwODBDNEY5QUUwMi9FNWJxbEFsRl9DQmY4dVBSc3I0YmtOY3N4 ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U1YnFsQWxGX0NCZjh1UFJzcjRia05jc3hlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REY1Ni9CRDdGQTAzODE1MjMxMUVDQjc0RjIwODBDNEY5QUUwMi9FNWJxbEFsRl9D QmY4dVBSc3I0YmtOY3N4ZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3JtCphhT5nTBMnH5gQclZkFctogMf84LXHrNJPJ8dkJsS9zVK//b0 wQHCdMX0iZ0XCDv+Ftv0KPF6Au4q0pEfln7Rwv6ZVT/omCdmVL5RqCaf8cek9OdZ SxYtYE30LpVKxPr4zCCZjrjNPadRsHXoG66hvN1LsFYQcnEk9csC/+v3DH8h/uuN Gy19wzBAYHBbHOrXoRRdzxRUlylm8iQkRP3d6I/D6Ustr/t/+s4Cr72RjaITu/Dw TlRC/O4N0vRrgxaRek5+a0cOvCCJ/rAckFcDBvA0SOm5B122DPhJWAUUGIgRCuBw J+jqGoOM1mxry3vi73U0bUnjrIcQx+GV -----END CERTIFICATE-----Generated at Sat May 31 16:46:54 2025 by rpki-client