$ rpki-client -vvf rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft File: _egcp2lelKkL_f2D8Rp3NGMIF-g.mft (raw, json) Hash identifier: jpChenyC0tOg/N4W3E+nlKcKCrMbMGkPoFpBDdWbTUs= Subject key identifier: 68:44:7A:C0:B8:09:C6:74:85:50:D7:52:B1:8C:08:5D:B2:4E:DC:C6 Authority key identifier: FD:E8:1C:A7:69:5E:94:A9:0B:FD:FD:83:F1:1A:77:34:63:08:17:E8 Certificate issuer: /CN=A91127B5/serialNumber=FDE81CA7695E94A90BFDFD83F11A7734630817E8 Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft Manifest number: 0112 Signing time: Fri 25 Apr 2025 04:02:10 +0000 Manifest this update: Fri 25 Apr 2025 04:02:09 +0000 Manifest next update: Fri 02 May 2025 04:02:09 +0000 Files and hashes: 1: _egcp2lelKkL_f2D8Rp3NGMIF-g.crl (hash: wuZAutsVrDpl2e6MyAn+faFmqAEXA/pABHdZhxEgTK0=) 2: AA02862E890C11EE87862551C4F9AE02.roa (hash: iEIKCf+XGWrseL7l7p29L+eQtWAuRRnnoodUimUnIC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.crl rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91127B5, serialNumber=FDE81CA7695E94A90BFDFD83F11A7734630817E8 Validity Not Before: Apr 25 04:02:09 2025 GMT Not After : May 2 04:02:09 2025 GMT Subject: CN=680b0941-0384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ac:4b:24:34:f9:fb:11:01:0d:aa:94:91:0b: be:c2:f9:84:f9:2a:09:14:f8:e9:f3:8b:ee:31:a0: 50:17:e1:86:91:27:93:b2:a7:35:e2:61:8c:2e:f8: af:33:9b:72:f9:ad:34:99:52:5a:45:6e:3c:c7:46: 90:01:8c:c0:23:77:c7:7f:bb:ca:2d:91:49:85:9a: ee:28:9c:f0:40:9b:4e:6e:45:d4:7e:8e:db:8c:8a: 9b:31:db:83:cf:58:a5:cf:69:cc:b5:de:84:bb:f6: 06:ad:5f:86:42:07:4a:63:05:bd:80:8e:47:d9:c5: fd:a4:1d:dc:0e:03:06:7f:89:be:1e:e5:d5:98:fd: 3f:cd:f0:b0:04:3b:ac:de:d7:b0:7e:90:29:e5:55: ca:4b:ab:d1:55:5d:63:c8:96:d6:e4:13:94:af:7a: bb:89:30:2f:cb:5a:a6:c8:ac:87:5c:7b:be:74:c0: 0d:34:01:e7:d3:c2:22:00:e9:bf:05:3a:53:c3:94: 93:ed:8b:9a:97:80:47:f2:cc:e2:8b:21:b4:f9:fd: 5f:5c:df:66:75:fd:64:9b:7b:69:64:af:45:38:ca: 6e:be:24:97:d8:c8:77:09:76:bf:17:8a:01:5a:dc: db:ed:16:4c:bc:cc:bc:1d:5a:13:3c:e4:2c:c2:c9: c8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:44:7A:C0:B8:09:C6:74:85:50:D7:52:B1:8C:08:5D:B2:4E:DC:C6 X509v3 Authority Key Identifier: keyid:FD:E8:1C:A7:69:5E:94:A9:0B:FD:FD:83:F1:1A:77:34:63:08:17:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:be:1d:5e:e1:1d:13:53:b4:bb:03:a4:bd:f9:d5:4a:c8:ca: dc:53:44:34:01:26:4f:a5:5f:90:80:2a:75:35:5e:1a:04:23: da:eb:5c:0a:af:b4:bb:eb:40:e2:94:3d:7a:7d:ac:ff:6e:d3: df:81:6e:f4:cd:df:47:a8:06:c5:f8:fe:f6:21:eb:a5:5b:c8: e9:c9:1c:8c:73:3a:c9:a6:12:a0:5b:28:60:7b:a8:a7:90:9c: 09:89:45:59:8d:7f:ca:24:1f:45:95:ff:b5:0b:7f:2c:76:4b: 18:57:6b:29:3e:60:c6:1e:86:71:4c:d2:e5:3b:07:df:69:90: 0b:73:30:58:77:e8:b0:78:47:2b:72:ff:9b:58:a6:c9:08:3a: 25:03:a1:2d:f8:71:96:33:ee:04:fc:74:0d:a6:e2:d5:90:dc: cb:f5:11:aa:67:71:7e:f9:9d:d2:e6:59:a5:1e:41:b6:18:f4: 46:e8:4b:17:b0:68:b2:4b:64:4b:85:e3:9f:5b:05:f8:08:01: 15:7f:fa:19:36:88:87:c2:3e:75:4a:cd:ff:52:ad:d4:56:a1: 44:3a:6c:a1:7f:b3:8e:cd:c6:f5:a4:9d:43:a7:7d:16:3d:2f: 1b:7e:4c:70:72:d7:35:91:90:da:c9:6c:63:c1:ec:8f:a7:15: fc:b6:be:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3QjUxMTAvBgNVBAUTKEZERTgxQ0E3Njk1RTk0QTkwQkZERkQ4M0YxMUE3NzM0 NjMwODE3RTgwHhcNMjUwNDI1MDQwMjA5WhcNMjUwNTAyMDQwMjA5WjAYMRYwFAYD VQQDEw02ODBiMDk0MS0wMzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqxLJDT5+xEBDaqUkQu+wvmE+SoJFPjp84vuMaBQF+GGkSeTsqc14mGMLviv M5ty+a00mVJaRW48x0aQAYzAI3fHf7vKLZFJhZruKJzwQJtObkXUfo7bjIqbMduD z1ilz2nMtd6Eu/YGrV+GQgdKYwW9gI5H2cX9pB3cDgMGf4m+HuXVmP0/zfCwBDus 3tewfpAp5VXKS6vRVV1jyJbW5BOUr3q7iTAvy1qmyKyHXHu+dMANNAHn08IiAOm/ BTpTw5ST7Yual4BH8sziiyG0+f1fXN9mdf1km3tpZK9FOMpuviSX2Mh3CXa/F4oB Wtzb7RZMvMy8HVoTPOQswsnI6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhEesC4 CcZ0hVDXUrGMCF2yTtzGMB8GA1UdIwQYMBaAFP3oHKdpXpSpC/39g/EadzRjCBfo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdCNS8wRjE5NEVBRTg5 MEMxMUVFOURGNzJDNTBDNEY5QUUwMi9fZWdjcDJsZWxLa0xfZjJEOFJwM05HTUlG LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19lZ2NwMmxlbEtrTF9mMkQ4UnAzTkdNSUYtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjdCNS8wRjE5NEVBRTg5MEMxMUVFOURGNzJDNTBDNEY5QUUwMi9fZWdjcDJsZWxL a0xfZjJEOFJwM05HTUlGLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtvh1e4R0TU7S7A6S9+dVKyMrcU0Q0ASZPpV+QgCp1NV4aBCPa61wK r7S760DilD16faz/btPfgW70zd9HqAbF+P72IeulW8jpyRyMczrJphKgWyhge6in kJwJiUVZjX/KJB9Flf+1C38sdksYV2spPmDGHoZxTNLlOwffaZALczBYd+iweEcr cv+bWKbJCDolA6Et+HGWM+4E/HQNpuLVkNzL9RGqZ3F++Z3S5lmlHkG2GPRG6EsX sGiyS2RLheOfWwX4CAEVf/oZNoiHwj51Ss3/Uq3UVqFEOmyhf7OOzcb1pJ1Dp30W PS8bfkxwctc1kZDayWxjweyPpxX8tr7t -----END CERTIFICATE-----Generated at Sat Apr 26 14:58:57 2025 by rpki-client