$ rpki-client -vvf rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft File: peado7v7jl3TlkjmpD4A-nI95lg.mft (raw, json) Hash identifier: II+tJlto0f03nfq3iiR4RxVbivqXu/Ne67aiuI7lEL0= Subject key identifier: 8F:D9:7E:9B:6B:EC:5B:6F:27:8A:4C:5A:8D:C4:30:77:BD:62:D3:30 Authority key identifier: A5:E6:9D:A3:BB:FB:8E:5D:D3:96:48:E6:A4:3E:00:FA:72:3D:E6:58 Certificate issuer: /CN=A91190B4/serialNumber=A5E69DA3BBFB8E5DD39648E6A43E00FA723DE658 Certificate serial: 0A9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft Manifest number: 0A96 Signing time: Sun 04 May 2025 19:22:49 +0000 Manifest this update: Sun 04 May 2025 19:22:49 +0000 Manifest next update: Sun 11 May 2025 19:22:49 +0000 Files and hashes: 1: peado7v7jl3TlkjmpD4A-nI95lg.crl (hash: dhfNKmtIjMtqhVpt2S3xsW+dVJkQK2wgnCSxZZ2yeB0=) 2: 55BC5674573F11EAA8901D3EC4F9AE02.roa (hash: GpKaeFCXgLqKWUd4/mw0J3pe4Cuty7kr/IEGoWg6an0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.crl rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 19:22:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2718 (0xa9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91190B4, serialNumber=A5E69DA3BBFB8E5DD39648E6A43E00FA723DE658 Validity Not Before: May 4 19:22:49 2025 GMT Not After : May 11 19:22:49 2025 GMT Subject: CN=6817be89-7102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:95:76:86:57:e9:2e:3c:d1:c1:56:67:22:fe: 8e:47:31:d5:52:b7:a4:2b:58:ac:b9:b5:83:dc:46: 00:61:c8:2d:b0:c5:59:c7:36:9c:b8:0c:56:a0:d2: 80:a9:39:38:2f:e0:94:2e:09:4c:6d:fd:7c:c8:d0: 97:a3:3d:ad:7a:c0:3f:c3:d9:4b:b1:29:e5:e3:34: 77:af:17:a7:42:62:73:f9:fe:3c:c4:24:b2:97:53: a4:4e:db:5b:c8:67:ef:b4:d8:d3:1f:aa:d6:74:9b: 5f:dc:8f:01:e5:b4:91:57:ce:c1:c1:fb:28:35:34: 12:d0:01:c8:28:12:81:68:81:ca:2b:65:72:b3:6f: 05:af:aa:03:11:14:57:83:c5:25:41:fd:24:02:58: 48:51:85:b9:47:0b:05:0f:8e:7d:55:5a:36:2c:c7: d1:a6:1d:fc:f4:76:5d:12:35:10:93:57:d5:b5:d1: d4:f0:02:65:4b:83:1c:2b:6d:1b:44:38:b9:39:61: 91:9e:e6:d6:a3:40:b8:72:de:10:bc:78:bb:a0:5b: 00:5d:58:f3:a4:c4:e2:80:bd:8d:78:49:6a:1f:ab: ad:9c:27:9b:b1:7c:15:06:98:dd:5c:57:7b:3f:62: fc:b4:52:5b:f0:f6:02:33:eb:a8:37:04:1a:68:48: 44:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D9:7E:9B:6B:EC:5B:6F:27:8A:4C:5A:8D:C4:30:77:BD:62:D3:30 X509v3 Authority Key Identifier: keyid:A5:E6:9D:A3:BB:FB:8E:5D:D3:96:48:E6:A4:3E:00:FA:72:3D:E6:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:33:11:33:76:bd:ce:c6:59:9e:d3:8f:28:45:f8:d9:e7:4b: 26:e6:16:01:33:b1:9c:f4:34:12:c1:6a:13:f5:fe:68:66:a7: ea:1f:38:a7:37:cf:d1:cb:3c:67:d7:16:b0:b3:25:e9:cd:6d: 21:b6:21:91:38:9f:65:9c:4d:cc:1b:28:8c:92:06:11:26:9e: 45:e6:78:31:1e:37:f5:8e:4e:37:b6:23:0f:a6:0d:66:32:7c: 1f:9b:37:ee:8b:29:7d:b8:ae:52:0e:26:cf:10:4f:73:32:b8: 93:90:a7:11:c4:9d:6d:82:16:82:de:f6:c3:06:b6:f2:0e:84: ee:b7:7d:fa:5d:84:74:73:0e:b9:1e:c6:92:c8:ac:d2:8b:f0: 4f:5a:da:ea:8d:06:d1:3d:b3:03:4d:ba:6e:bb:3d:32:f1:54: 03:20:0d:d0:9e:7b:3b:82:59:d4:ad:55:5d:e0:c8:09:f4:52: a6:cb:4c:83:16:dc:de:ef:79:44:ed:ed:36:0a:96:64:84:0c: ca:b1:a1:28:81:d5:49:e6:ca:d0:9d:83:f8:2c:44:ca:4d:00: 83:63:26:75:ff:22:df:6f:e6:40:9b:9e:af:93:49:06:43:6a: af:c2:f4:7e:1f:e6:2b:a2:f8:49:6f:f0:68:d6:d9:dc:26:25: 42:21:67:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkwQjQxMTAvBgNVBAUTKEE1RTY5REEzQkJGQjhFNUREMzk2NDhFNkE0M0UwMEZB NzIzREU2NTgwHhcNMjUwNTA0MTkyMjQ5WhcNMjUwNTExMTkyMjQ5WjAYMRYwFAYD VQQDEw02ODE3YmU4OS03MTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5V2hlfpLjzRwVZnIv6ORzHVUrekK1isubWD3EYAYcgtsMVZxzacuAxWoNKA qTk4L+CULglMbf18yNCXoz2tesA/w9lLsSnl4zR3rxenQmJz+f48xCSyl1OkTttb yGfvtNjTH6rWdJtf3I8B5bSRV87BwfsoNTQS0AHIKBKBaIHKK2Vys28Fr6oDERRX g8UlQf0kAlhIUYW5RwsFD459VVo2LMfRph389HZdEjUQk1fVtdHU8AJlS4McK20b RDi5OWGRnubWo0C4ct4QvHi7oFsAXVjzpMTigL2NeElqH6utnCebsXwVBpjdXFd7 P2L8tFJb8PYCM+uoNwQaaEhEBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/Zfptr 7FtvJ4pMWo3EMHe9YtMwMB8GA1UdIwQYMBaAFKXmnaO7+45d05ZI5qQ+APpyPeZY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTBCNC9CQzhDMTBBRTU3 M0MxMUVBQjBBNEUzMzVDNEY5QUUwMi9wZWFkbzd2N2psM1Rsa2ptcEQ0QS1uSTk1 bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BlYWRvN3Y3amwzVGxram1wRDRBLW5JOTVsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTBCNC9CQzhDMTBBRTU3M0MxMUVBQjBBNEUzMzVDNEY5QUUwMi9wZWFkbzd2N2ps M1Rsa2ptcEQ0QS1uSTk1bGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdMxEzdr3Oxlme048oRfjZ50sm5hYBM7Gc9DQSwWoT9f5oZqfqHzin N8/Ryzxn1xawsyXpzW0htiGROJ9lnE3MGyiMkgYRJp5F5ngxHjf1jk43tiMPpg1m Mnwfmzfuiyl9uK5SDibPEE9zMriTkKcRxJ1tghaC3vbDBrbyDoTut336XYR0cw65 HsaSyKzSi/BPWtrqjQbRPbMDTbpuuz0y8VQDIA3Qnns7glnUrVVd4MgJ9FKmy0yD Ftze73lE7e02CpZkhAzKsaEogdVJ5srQnYP4LETKTQCDYyZ1/yLfb+ZAm56vk0kG Q2qvwvR+H+YrovhJb/Bo1tncJiVCIWfk -----END CERTIFICATE-----Generated at Mon May 5 15:37:04 2025 by rpki-client