$ rpki-client -vvf rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft File: 5EL5lVmsG6h-4TSLL8evCiL_smE.mft (raw, json) Hash identifier: 3dqzhONH1pIKinSj5lGdIN2oCQUmmzvB/VcfCl9/IA0= Subject key identifier: CE:00:B4:C7:5E:EA:A3:16:0B:76:1B:19:C1:B2:98:B2:2C:5C:5C:53 Authority key identifier: E4:42:F9:95:59:AC:1B:A8:7E:E1:34:8B:2F:C7:AF:0A:22:FF:B2:61 Certificate issuer: /CN=A9143336/serialNumber=E442F99559AC1BA87EE1348B2FC7AF0A22FFB261 Certificate serial: 2ADD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft Manifest number: 2ACE Signing time: Thu 24 Apr 2025 15:33:52 +0000 Manifest this update: Thu 24 Apr 2025 15:33:52 +0000 Manifest next update: Thu 01 May 2025 15:33:52 +0000 Files and hashes: 1: 5EL5lVmsG6h-4TSLL8evCiL_smE.crl (hash: +s+qpeswUYb8GZ9ckCX3NvwO5/Q9rNdb08NM9HnSOFg=) 2: 5452AC309B4911EB9952394CC4F9AE02.roa (hash: l8JeN+xjbySFaTx51RAHTtCLIp0nPYZYJcYkSVQtE9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.crl rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10973 (0x2add) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143336, serialNumber=E442F99559AC1BA87EE1348B2FC7AF0A22FFB261 Validity Not Before: Apr 24 15:33:52 2025 GMT Not After : May 1 15:33:52 2025 GMT Subject: CN=680a59e0-ab1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:96:b1:74:5d:f4:07:21:0d:7e:53:b1:44:5d: b1:ab:a7:d1:ea:da:3a:2a:58:93:88:fb:aa:f0:dc: e0:80:dd:7d:1b:12:f8:97:cf:98:16:e2:84:22:96: ae:bc:a4:d7:04:f2:f2:7f:8c:8c:06:96:d2:62:18: 01:61:e7:aa:9b:aa:98:3d:60:82:c8:e7:66:7d:fa: bc:a0:1e:76:1c:bf:ff:c4:2d:f0:2e:03:74:89:3a: 3e:c5:b1:e9:d2:6f:1c:bd:51:8b:54:85:e4:0d:34: 1f:90:7d:ab:13:a5:37:60:bf:c0:c6:49:2f:56:9b: f3:a1:79:6c:7b:ad:78:a8:01:a9:53:86:61:05:ef: 6b:a0:67:e5:e4:dc:d5:66:63:23:38:85:e0:82:83: ab:e3:fe:c2:2f:8f:5f:82:00:d3:75:54:fa:dc:70: 7f:f9:6c:e8:1c:10:e7:aa:70:33:5a:1e:2b:e7:c1: e1:35:aa:8f:98:37:9b:49:11:02:4f:0a:8b:5b:12: 0c:63:c9:6e:9f:5e:89:e8:da:80:1d:a2:5c:c6:9b: 50:ff:28:c2:12:d9:79:da:4a:5c:5b:6e:20:61:2f: 3d:6e:50:6f:63:5b:a8:18:8f:32:7f:aa:73:59:aa: ca:a4:4f:96:15:9a:70:0b:7e:dd:72:a4:0c:8a:0d: 12:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:00:B4:C7:5E:EA:A3:16:0B:76:1B:19:C1:B2:98:B2:2C:5C:5C:53 X509v3 Authority Key Identifier: keyid:E4:42:F9:95:59:AC:1B:A8:7E:E1:34:8B:2F:C7:AF:0A:22:FF:B2:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:ea:2f:b0:f3:03:b0:28:ab:4a:93:dc:af:0f:c0:d5:cb:7b: 4b:de:13:f1:7a:a8:71:db:46:d3:77:00:33:66:de:7c:bc:d6: c6:f6:39:db:61:3b:dd:db:ff:4c:5c:18:d9:bc:bc:3c:0b:43: bb:55:35:bc:5e:b4:8d:b3:fd:05:54:5f:84:e6:b0:71:09:bf: 5f:0b:02:cb:d8:9f:f2:11:59:da:8e:23:09:70:62:d9:1c:35: 1e:2b:37:f7:06:62:4f:15:73:60:3a:ca:a5:05:11:73:88:f7: 44:82:9d:5f:e1:0f:26:66:d2:05:11:ee:96:69:04:24:e5:45: 3f:77:c8:09:c1:38:40:f8:f3:c3:ad:61:06:02:15:77:c5:6d: df:c1:db:c5:f2:f2:19:64:ee:e1:cd:b9:8e:21:76:17:97:b1: f6:ee:fe:eb:1d:a2:27:0d:a6:2d:c3:b0:9d:9c:31:e2:ae:0a: ab:c6:b1:7a:6d:de:5b:df:cd:18:d5:c0:7f:ee:54:a9:15:ed: f4:62:41:5b:d5:28:b8:ae:fa:2f:af:04:a6:d0:49:2a:b9:ae: 93:db:9c:ea:4b:19:14:19:3b:5c:13:e0:ee:03:2c:d1:28:de: bf:db:28:c8:53:47:4d:9b:99:af:74:8d:cf:f2:21:3f:b2:69: cb:fe:aa:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMzMzYxMTAvBgNVBAUTKEU0NDJGOTk1NTlBQzFCQTg3RUUxMzQ4QjJGQzdBRjBB MjJGRkIyNjEwHhcNMjUwNDI0MTUzMzUyWhcNMjUwNTAxMTUzMzUyWjAYMRYwFAYD VQQDEw02ODBhNTllMC1hYjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZaxdF30ByENflOxRF2xq6fR6to6KliTiPuq8NzggN19GxL4l8+YFuKEIpau vKTXBPLyf4yMBpbSYhgBYeeqm6qYPWCCyOdmffq8oB52HL//xC3wLgN0iTo+xbHp 0m8cvVGLVIXkDTQfkH2rE6U3YL/AxkkvVpvzoXlse614qAGpU4ZhBe9roGfl5NzV ZmMjOIXggoOr4/7CL49fggDTdVT63HB/+WzoHBDnqnAzWh4r58HhNaqPmDebSREC TwqLWxIMY8lun16J6NqAHaJcxptQ/yjCEtl52kpcW24gYS89blBvY1uoGI8yf6pz WarKpE+WFZpwC37dcqQMig0SfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM4AtMde 6qMWC3YbGcGymLIsXFxTMB8GA1UdIwQYMBaAFORC+ZVZrBuofuE0iy/Hrwoi/7Jh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzMzNi84RUU3RkMxRTA4 NTMxMUU0QjAyMzlFNjFDNEY5QUUwMi81RUw1bFZtc0c2aC00VFNMTDhldkNpTF9z bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVFTDVsVm1zRzZoLTRUU0xMOGV2Q2lMX3NtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzMzNi84RUU3RkMxRTA4NTMxMUU0QjAyMzlFNjFDNEY5QUUwMi81RUw1bFZtc0c2 aC00VFNMTDhldkNpTF9zbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo6i+w8wOwKKtKk9yvD8DVy3tL3hPxeqhx20bTdwAzZt58vNbG9jnb YTvd2/9MXBjZvLw8C0O7VTW8XrSNs/0FVF+E5rBxCb9fCwLL2J/yEVnajiMJcGLZ HDUeKzf3BmJPFXNgOsqlBRFziPdEgp1f4Q8mZtIFEe6WaQQk5UU/d8gJwThA+PPD rWEGAhV3xW3fwdvF8vIZZO7hzbmOIXYXl7H27v7rHaInDaYtw7CdnDHirgqrxrF6 bd5b380Y1cB/7lSpFe30YkFb1Si4rvovrwSm0Ekqua6T25zqSxkUGTtcE+DuAyzR KN6/2yjIU0dNm5mvdI3P8iE/smnL/qrh -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:59 2025 by rpki-client