$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft File: RDE2OBW8XQu3pCth2SMLTa4ixTw.mft (raw, json) Hash identifier: HosCzXDAnSYV5aLe2iKwJJKzlmQbB2/oqZF4GB8Ti4s= Subject key identifier: 8A:A4:31:93:2F:94:D1:E6:4D:44:C2:4E:64:94:40:78:93:3B:0F:22 Authority key identifier: 44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C Certificate issuer: /CN=A9149ADB/serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft Manifest number: E5 Signing time: Fri 25 Apr 2025 04:31:02 +0000 Manifest this update: Fri 25 Apr 2025 04:31:01 +0000 Manifest next update: Fri 02 May 2025 04:31:01 +0000 Files and hashes: 1: RDE2OBW8XQu3pCth2SMLTa4ixTw.crl (hash: EXYcxEwprqx8so3u2ITJceumMhRvecgYgwh5kQjaj/o=) 2: ADCDA1F83A0F11EFAB312630C4F9AE02.roa (hash: 8SYA3R8gtlu3Yfmt/OFb7lvOOBmgG2rmJfQokI/04ZM=) 3: FDDFE12EC78C11EE911F1A30C4F9AE02.roa (hash: XDvJ7OAZIZH9Y1m5zAYI1aNVQygP0iZogi7EtsDf/ZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149ADB, serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C Validity Not Before: Apr 25 04:31:01 2025 GMT Not After : May 2 04:31:01 2025 GMT Subject: CN=680b1005-1ef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:20:f4:f2:28:c2:85:74:49:89:52:c2:41:74: a5:a6:7d:e2:ad:e5:d2:84:ba:fb:f6:3b:d8:dc:3d: 75:c1:20:69:a0:ec:26:2e:b6:0b:2a:a6:45:d9:29: 14:b5:28:4f:8e:81:81:d1:25:ef:ea:b4:e6:17:be: 63:be:1d:af:26:a1:45:4c:03:c4:29:0d:c3:e0:28: f4:53:ef:d8:a5:e2:f2:79:31:7e:5b:b1:a3:6a:36: d6:28:70:97:fb:05:9f:6a:38:e9:43:c4:1b:40:e0: 28:fb:5b:d8:f3:4c:97:7c:9e:0b:5c:f0:d4:5c:3e: d0:0d:f9:e6:b7:29:bc:8c:85:71:fe:a2:5f:93:88: ee:d9:c1:e0:c0:fd:a3:db:2d:2c:06:7a:e1:68:f1: e1:67:f7:2d:db:f8:de:35:ce:02:e5:ba:d6:b1:ce: f0:aa:dc:85:a3:7b:f7:04:4a:63:46:f3:bc:48:a0: 87:5b:13:39:c6:9f:6c:aa:67:73:42:7a:60:f5:0e: e9:f8:c4:63:8b:3b:78:8d:ee:a8:24:c9:24:fc:fa: 22:7e:ff:ba:e8:68:2f:7f:34:c4:12:89:fe:b1:08: cf:27:05:ff:19:a0:85:11:96:9f:e2:d4:3e:ea:35: 93:14:87:af:da:c4:5b:14:84:ac:20:4d:73:53:f8: 58:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A4:31:93:2F:94:D1:E6:4D:44:C2:4E:64:94:40:78:93:3B:0F:22 X509v3 Authority Key Identifier: keyid:44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d1:bc:0f:23:ed:c6:23:87:02:ce:15:0a:62:ae:09:12:ab: 15:3f:0a:1d:c2:d0:9e:48:2a:bc:8c:7f:e9:67:bf:32:22:1c: ec:0d:a3:cc:5c:04:2e:34:cb:0b:a8:90:19:50:21:b7:31:2c: f3:54:4d:5f:77:73:b0:50:b4:ac:d3:f0:0e:6a:76:01:6f:00: b0:29:66:e3:60:ce:2f:f5:31:db:35:41:a5:e2:a6:44:65:22: a3:b4:b4:33:fb:37:d6:04:86:03:cb:97:73:82:92:6b:cb:80: 92:31:c3:7d:0e:45:e0:d8:c5:55:a5:6c:01:c1:72:b9:aa:78: 61:0c:2c:b7:54:61:b1:4b:97:7c:3c:1b:bc:d9:1b:65:d3:72: c0:4a:cd:f3:7c:f8:08:91:be:7b:bb:70:72:6d:89:53:8f:2f: d7:c8:84:a5:5c:a8:80:0f:7f:e6:d7:71:ae:42:dd:71:c5:f3: d7:b8:9d:94:70:fd:44:10:89:50:ab:74:fa:0d:36:2c:47:31: d7:22:41:df:8b:75:9d:a3:d0:79:88:d6:d7:ef:ca:12:0b:ac: e3:b5:3e:78:43:d6:d1:48:d6:fc:6a:45:56:c8:af:b4:88:e0: 56:d0:b1:92:db:dc:15:9f:e3:09:0b:c8:ee:75:e2:11:8c:50: b0:7e:a6:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlBREIxMTAvBgNVBAUTKDQ0MzEzNjM4MTVCQzVEMEJCN0E0MkI2MUQ5MjMwQjRE QUUyMkM1M0MwHhcNMjUwNDI1MDQzMTAxWhcNMjUwNTAyMDQzMTAxWjAYMRYwFAYD VQQDEw02ODBiMTAwNS0xZWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9iD08ijChXRJiVLCQXSlpn3ireXShLr79jvY3D11wSBpoOwmLrYLKqZF2SkU tShPjoGB0SXv6rTmF75jvh2vJqFFTAPEKQ3D4Cj0U+/YpeLyeTF+W7GjajbWKHCX +wWfajjpQ8QbQOAo+1vY80yXfJ4LXPDUXD7QDfnmtym8jIVx/qJfk4ju2cHgwP2j 2y0sBnrhaPHhZ/ct2/jeNc4C5brWsc7wqtyFo3v3BEpjRvO8SKCHWxM5xp9sqmdz Qnpg9Q7p+MRjizt4je6oJMkk/Poifv+66GgvfzTEEon+sQjPJwX/GaCFEZaf4tQ+ 6jWTFIev2sRbFISsIE1zU/hYywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqkMZMv lNHmTUTCTmSUQHiTOw8iMB8GA1UdIwQYMBaAFEQxNjgVvF0Lt6QrYdkjC02uIsU8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUFEQi84MUYzODg4NkM3 OEMxMUVFOTdFNDM4MkZDNEY5QUUwMi9SREUyT0JXOFhRdTNwQ3RoMlNNTFRhNGl4 VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JERTJPQlc4WFF1M3BDdGgyU01MVGE0aXhUdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUFEQi84MUYzODg4NkM3OEMxMUVFOTdFNDM4MkZDNEY5QUUwMi9SREUyT0JXOFhR dTNwQ3RoMlNNTFRhNGl4VHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+0bwPI+3GI4cCzhUKYq4JEqsVPwodwtCeSCq8jH/pZ78yIhzsDaPM XAQuNMsLqJAZUCG3MSzzVE1fd3OwULSs0/AOanYBbwCwKWbjYM4v9THbNUGl4qZE ZSKjtLQz+zfWBIYDy5dzgpJry4CSMcN9DkXg2MVVpWwBwXK5qnhhDCy3VGGxS5d8 PBu82Rtl03LASs3zfPgIkb57u3BybYlTjy/XyISlXKiAD3/m13GuQt1xxfPXuJ2U cP1EEIlQq3T6DTYsRzHXIkHfi3Wdo9B5iNbX78oSC6zjtT54Q9bRSNb8akVWyK+0 iOBW0LGS29wVn+MJC8judeIRjFCwfqav -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:14 2025 by rpki-client