$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft File: l_PsEBRVjghHCgOpR4yE8j5FADo.mft (raw, json) Hash identifier: X2bNOQMxosu6YN88MCRVEaVlazZAhyc38OB+HcoRlG4= Subject key identifier: 50:0D:C0:52:16:A8:9C:4F:3A:35:92:4F:B0:64:97:57:D6:F8:2A:DB Authority key identifier: 97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A Certificate issuer: /CN=A91E2E92/serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A Certificate serial: 018B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft Manifest number: 017E Signing time: Sat 31 May 2025 03:28:44 +0000 Manifest this update: Sat 31 May 2025 03:28:44 +0000 Manifest next update: Sat 07 Jun 2025 03:28:44 +0000 Files and hashes: 1: l_PsEBRVjghHCgOpR4yE8j5FADo.crl (hash: FmDAx8AaNZL67ibYQVEnsvWu3Bd6PyDdpwyxetgPzMA=) 2: B7D34CC444ED11EE8D931624C4F9AE02.roa (hash: o91C1jFze1aQemqWDwZsi+b9/Rmy3VyieJUeIkyvzoc=) 3: D78EA2DE44ED11EEA6685324C4F9AE02.roa (hash: /JrzSFgR8sIchQqbAkxuKHvug5BLuVR/st4b3ZlxES8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2E92, serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A Validity Not Before: May 31 03:28:44 2025 GMT Not After : Jun 7 03:28:44 2025 GMT Subject: CN=683a776c-15cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:67:0f:bb:57:9a:55:cf:d0:eb:b5:6e:2a:09: 81:88:b8:c6:25:f1:69:96:90:c2:0c:74:20:f7:a2: 8a:ac:9b:0a:cf:25:74:79:08:0a:e8:1b:7e:fd:9a: 8a:e0:cf:a5:d7:47:89:e4:3e:6f:c4:84:98:f8:36: 46:48:25:ff:e5:46:62:b5:29:32:03:2a:05:d7:be: 62:36:fb:b5:d7:b9:8a:88:d4:f8:7c:65:ff:79:79: 05:6e:22:13:b1:d6:77:97:5c:2f:11:1b:96:44:3a: 40:6d:3c:61:21:3b:f5:a0:99:df:e6:e7:b3:7d:aa: 4e:d2:78:5a:7c:ed:9a:d9:70:fa:b2:e0:23:84:ef: a2:aa:40:f0:b3:be:d8:87:45:b3:61:c6:92:67:26: 8e:09:2d:40:0d:85:50:f5:2b:e0:76:e2:0c:76:bc: b3:5f:3f:39:7b:90:ed:2e:dd:ce:83:be:d5:7a:92: 66:64:5d:06:06:c1:6a:a9:85:8b:a0:6e:f0:09:4d: 47:7d:9b:06:8f:5a:89:2e:ff:c9:5b:ca:30:d3:31: 93:f7:92:be:9a:53:1c:5d:59:5c:16:e6:f8:a2:34: b5:ed:1f:cf:b0:0a:ad:54:6e:49:8f:81:af:92:d9: e1:a9:07:94:e7:9c:df:28:57:92:3b:af:be:f8:40: db:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:0D:C0:52:16:A8:9C:4F:3A:35:92:4F:B0:64:97:57:D6:F8:2A:DB X509v3 Authority Key Identifier: keyid:97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:c1:73:6a:5c:5d:a8:d6:14:c9:8b:97:1b:9f:27:44:d4:91: 79:3b:0b:8b:e1:45:df:9e:11:ab:ca:ee:ec:9e:f1:24:86:67: 96:1c:76:d9:40:d0:a1:2a:b7:b3:72:83:d2:6f:7c:f5:ac:5d: d9:fd:2e:af:52:e1:76:c2:27:be:7d:69:33:8f:9e:d1:6f:08: a9:f5:95:af:95:ec:99:97:89:4c:38:26:00:24:a5:4f:05:a8: df:05:9a:c8:98:e2:96:e5:84:a8:d2:a9:59:aa:9b:c5:6f:60: a6:ea:b7:22:5f:c0:ea:12:f4:01:b8:4b:e2:b4:6c:cd:1b:e7: aa:6b:c9:9e:77:e3:d3:71:18:5c:c9:a0:6c:6a:ff:0b:10:ce: a2:b3:d6:41:6e:cd:b7:cd:32:d4:1a:5c:61:d4:2a:3d:05:22: 6c:05:3f:7b:fe:39:56:9d:9e:d6:5e:f8:80:d4:08:9a:f2:0c: 34:ca:b1:9e:4d:66:12:65:1a:13:88:92:9e:ce:0b:9a:87:7f: 52:8b:fe:9a:85:d6:4e:bf:9a:d8:9e:ad:1a:0b:8f:b8:8f:4b: d0:d4:ba:e6:84:30:70:c1:88:f5:da:ea:a5:91:d0:2d:48:5c: 35:ab:a6:52:74:0a:77:bb:41:3e:db:1c:49:98:2c:82:06:57: eb:48:53:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFOTIxMTAvBgNVBAUTKDk3RjNFQzEwMTQ1NThFMDg0NzBBMDNBOTQ3OEM4NEYy M0U0NTAwM0EwHhcNMjUwNTMxMDMyODQ0WhcNMjUwNjA3MDMyODQ0WjAYMRYwFAYD VQQDEw02ODNhNzc2Yy0xNWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA32cPu1eaVc/Q67VuKgmBiLjGJfFplpDCDHQg96KKrJsKzyV0eQgK6Bt+/ZqK 4M+l10eJ5D5vxISY+DZGSCX/5UZitSkyAyoF175iNvu117mKiNT4fGX/eXkFbiIT sdZ3l1wvERuWRDpAbTxhITv1oJnf5uezfapO0nhafO2a2XD6suAjhO+iqkDws77Y h0WzYcaSZyaOCS1ADYVQ9SvgduIMdryzXz85e5DtLt3Og77VepJmZF0GBsFqqYWL oG7wCU1HfZsGj1qJLv/JW8ow0zGT95K+mlMcXVlcFub4ojS17R/PsAqtVG5Jj4Gv ktnhqQeU55zfKFeSO6+++EDb5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFANwFIW qJxPOjWST7Bkl1fW+CrbMB8GA1UdIwQYMBaAFJfz7BAUVY4IRwoDqUeMhPI+RQA6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkU5Mi8xODg1QTZEMjA2 Q0YxMUVFOUM5NzEyN0JDNEY5QUUwMi9sX1BzRUJSVmpnaEhDZ09wUjR5RThqNUZB RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xfUHNFQlJWamdoSENnT3BSNHlFOGo1RkFEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkU5Mi8xODg1QTZEMjA2Q0YxMUVFOUM5NzEyN0JDNEY5QUUwMi9sX1BzRUJSVmpn aEhDZ09wUjR5RThqNUZBRG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvwXNqXF2o1hTJi5cbnydE1JF5OwuL4UXfnhGryu7snvEkhmeWHHbZ QNChKrezcoPSb3z1rF3Z/S6vUuF2wie+fWkzj57Rbwip9ZWvleyZl4lMOCYAJKVP BajfBZrImOKW5YSo0qlZqpvFb2Cm6rciX8DqEvQBuEvitGzNG+eqa8med+PTcRhc yaBsav8LEM6is9ZBbs23zTLUGlxh1Co9BSJsBT97/jlWnZ7WXviA1Aia8gw0yrGe TWYSZRoTiJKezguah39Si/6ahdZOv5rYnq0aC4+4j0vQ1LrmhDBwwYj12uqlkdAt SFw1q6ZSdAp3u0E+2xxJmCyCBlfrSFMV -----END CERTIFICATE-----Generated at Sat May 31 16:43:53 2025 by rpki-client