$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft File: e1ZuSGesy4G3S6nWZiJObARfDCc.mft (raw, json) Hash identifier: 9x6sRjOpcvQgcevU+gQ/tvrfLU3r+eFxJGZU6wuC3s0= Subject key identifier: 1F:65:86:FB:BF:FD:3B:E3:F3:1F:0B:80:6D:53:5F:E4:5F:BD:62:41 Authority key identifier: 7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27 Certificate issuer: /CN=A91F2DFB/serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27 Certificate serial: 0398 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft Manifest number: 0391 Signing time: Sat 31 May 2025 01:02:44 +0000 Manifest this update: Sat 31 May 2025 01:02:43 +0000 Manifest next update: Sat 07 Jun 2025 01:02:43 +0000 Files and hashes: 1: e1ZuSGesy4G3S6nWZiJObARfDCc.crl (hash: EV5KsNMPL28JS4MboWasg2gWqiS8ou31R3tWFBFhrcU=) 2: 6808AEBA278511F09AB25F80C4F9AE02.roa (hash: wCf4g6o5WScb6RGG49PPoBi+hb01eShp6RghG0g0MJ8=) 3: F85D97D8278411F0B46E4A7FC4F9AE02.roa (hash: gNV6yCoYOHvCUxwy2Tl0FTscxDv6xhq7lZUCCqRtA/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 920 (0x398) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2DFB, serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27 Validity Not Before: May 31 01:02:43 2025 GMT Not After : Jun 7 01:02:43 2025 GMT Subject: CN=683a5534-0858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fb:7d:b7:5e:c9:16:c3:22:db:9f:a6:59:f6: 7b:8c:ff:0d:82:54:e0:f5:a9:49:08:63:1d:b3:b1: a4:c6:73:a6:70:00:89:58:45:78:8a:c4:1d:7d:7a: 39:37:f8:ee:93:08:10:c0:07:83:bc:6a:ec:80:d5: f0:13:32:b0:bd:23:a3:91:2a:43:b0:71:e1:57:91: dc:81:8e:5e:88:50:ad:8f:b5:c1:5e:68:e3:61:b2: 2c:4c:03:6a:69:0d:7b:d8:04:5a:e3:d9:61:bd:95: c2:2d:ae:1d:53:fd:f1:33:21:e0:ae:70:66:e7:04: 65:3f:db:c6:93:ea:cd:4d:f6:49:50:48:d8:3b:51: 98:d6:8e:65:31:28:f5:75:6e:93:8a:3e:29:87:da: 3a:f8:b5:a7:56:29:f6:95:48:3e:8c:41:40:58:65: 00:2d:5c:ff:d9:bd:f2:50:5e:5b:39:3a:35:30:bd: ba:9a:3b:9b:67:0a:99:cd:d1:2c:23:28:ed:72:d7: 00:af:28:12:89:17:ab:15:c4:fa:1d:c3:7e:d1:6f: e2:86:d8:1f:d7:03:ed:11:75:92:fc:aa:c8:2b:47: 6a:af:aa:3f:38:19:2c:a8:b6:96:fa:23:b8:a6:b5: 7c:58:47:ed:66:fb:36:3b:20:c7:6f:7a:4c:70:57: 16:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:65:86:FB:BF:FD:3B:E3:F3:1F:0B:80:6D:53:5F:E4:5F:BD:62:41 X509v3 Authority Key Identifier: keyid:7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:be:49:50:9e:ca:5b:93:12:1c:bd:87:4d:77:32:9e:d3:67: 62:76:c8:14:0e:a6:e5:7b:bc:cb:eb:fa:b6:5e:08:56:f0:c2: d8:d8:82:16:a4:64:8a:8c:a4:29:49:08:13:8c:ef:79:d1:19: ca:73:8c:60:0e:54:9c:4b:8f:63:d5:4d:28:1f:67:1c:61:36: f3:1f:19:13:e0:29:bf:e5:74:c6:44:25:fd:15:74:5c:ea:a2: 68:94:ed:bf:b0:7b:10:b9:55:95:06:4f:67:52:d8:ca:13:a8: 81:f2:67:fd:ae:d8:1b:ca:3e:b8:54:ec:0d:bd:85:a8:fd:94: 67:56:db:41:79:00:fc:de:47:3a:58:23:d1:e6:18:7c:06:7f: b4:d0:f0:c3:18:d5:43:03:f2:d9:98:5e:f2:27:14:66:be:80: 48:70:d6:fd:4a:66:25:7a:54:c5:cd:fb:79:bf:0a:98:98:6a: bb:d0:08:f7:84:de:b3:b4:6c:bb:63:be:a8:26:6e:53:82:f6: 3b:b0:b0:82:5e:bb:b2:11:11:5a:14:2e:bb:58:f1:47:1c:b7: 02:f6:c7:de:4a:de:f4:a7:7e:57:99:bf:af:03:d7:c2:6d:5d: a5:2c:53:c4:92:32:3f:36:b3:26:0d:61:da:6d:38:ca:5b:ad: f6:75:3a:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJERkIxMTAvBgNVBAUTKDdCNTY2RTQ4NjdBQ0NCODFCNzRCQTlENjY2MjI0RTZD MDQ1RjBDMjcwHhcNMjUwNTMxMDEwMjQzWhcNMjUwNjA3MDEwMjQzWjAYMRYwFAYD VQQDEw02ODNhNTUzNC0wODU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/t9t17JFsMi25+mWfZ7jP8NglTg9alJCGMds7GkxnOmcACJWEV4isQdfXo5 N/jukwgQwAeDvGrsgNXwEzKwvSOjkSpDsHHhV5HcgY5eiFCtj7XBXmjjYbIsTANq aQ172ARa49lhvZXCLa4dU/3xMyHgrnBm5wRlP9vGk+rNTfZJUEjYO1GY1o5lMSj1 dW6Tij4ph9o6+LWnVin2lUg+jEFAWGUALVz/2b3yUF5bOTo1ML26mjubZwqZzdEs IyjtctcArygSiRerFcT6HcN+0W/ihtgf1wPtEXWS/KrIK0dqr6o/OBksqLaW+iO4 prV8WEftZvs2OyDHb3pMcFcWNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9lhvu/ /Tvj8x8LgG1TX+RfvWJBMB8GA1UdIwQYMBaAFHtWbkhnrMuBt0up1mYiTmwEXwwn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkRGQi85RkNBQURGRUEw NTAxMUVDOTdCRjhENzJDNEY5QUUwMi9lMVp1U0dlc3k0RzNTNm5XWmlKT2JBUmZE Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UxWnVTR2VzeTRHM1M2bldaaUpPYkFSZkRDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkRGQi85RkNBQURGRUEwNTAxMUVDOTdCRjhENzJDNEY5QUUwMi9lMVp1U0dlc3k0 RzNTNm5XWmlKT2JBUmZEQ2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBevklQnspbkxIcvYdNdzKe02didsgUDqble7zL6/q2XghW8MLY2IIW pGSKjKQpSQgTjO950RnKc4xgDlScS49j1U0oH2ccYTbzHxkT4Cm/5XTGRCX9FXRc 6qJolO2/sHsQuVWVBk9nUtjKE6iB8mf9rtgbyj64VOwNvYWo/ZRnVttBeQD83kc6 WCPR5hh8Bn+00PDDGNVDA/LZmF7yJxRmvoBIcNb9SmYlelTFzft5vwqYmGq70Aj3 hN6ztGy7Y76oJm5TgvY7sLCCXruyERFaFC67WPFHHLcC9sfeSt70p35Xmb+vA9fC bV2lLFPEkjI/NrMmDWHabTjKW632dTqO -----END CERTIFICATE-----Generated at Sat May 31 16:36:55 2025 by rpki-client