$ rpki-client -vvf rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.mft File: E39piIvunMg7q0H68slC0Qryy2U.mft (raw, json) Hash identifier: gjLK4YL+p5wCwJSCdv5+CvidhoXm0ComZTppwi0Hxyw= Subject key identifier: 52:CD:17:3D:78:7E:83:79:96:0A:ED:5B:50:AB:91:06:51:4B:CB:33 Authority key identifier: 13:7F:69:88:8B:EE:9C:C8:3B:AB:41:FA:F2:C9:42:D1:0A:F2:CB:65 Certificate issuer: /CN=A914B30A/serialNumber=137F69888BEE9CC83BAB41FAF2C942D10AF2CB65 Certificate serial: 0467 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E39piIvunMg7q0H68slC0Qryy2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.mft Manifest number: 0462 Signing time: Thu 24 Apr 2025 23:55:15 +0000 Manifest this update: Thu 24 Apr 2025 23:55:14 +0000 Manifest next update: Thu 01 May 2025 23:55:14 +0000 Files and hashes: 1: E39piIvunMg7q0H68slC0Qryy2U.crl (hash: Ydng7cuMLocRGGYrIlpwMM4950chh3xXi3I7xkDeMNk=) 2: 279EE41683E111ECBB82F47DC4F9AE02.roa (hash: qE3lLSo7fB7VrFOUOH9TpjKgPsy7cNI6EqgXlJf8kVM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.crl rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E39piIvunMg7q0H68slC0Qryy2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1127 (0x467) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B30A, serialNumber=137F69888BEE9CC83BAB41FAF2C942D10AF2CB65 Validity Not Before: Apr 24 23:55:14 2025 GMT Not After : May 1 23:55:14 2025 GMT Subject: CN=680acf62-a8dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:28:e1:68:07:a8:3b:51:26:21:8c:4b:93:fb: 66:57:64:85:c9:0f:f8:e0:3b:f3:e5:33:20:55:d3: 2e:3a:d4:d1:c4:22:82:7e:0b:7d:39:62:fd:26:b1: 46:2f:45:00:f6:da:8c:d2:59:46:dd:f3:71:bf:1b: c6:f2:d9:e8:88:7a:49:66:49:81:5a:d3:06:51:6f: 7b:8b:44:0e:33:c5:c7:3d:ae:d8:60:97:96:84:67: 6f:df:e5:24:85:24:fc:5a:14:bc:82:87:b3:10:bb: 58:a7:90:a7:5e:22:c2:a7:e4:c1:a7:b4:c5:f9:83: e9:53:6d:f1:aa:06:af:4c:91:a2:5a:ce:bf:18:41: d8:11:ff:05:97:a4:71:e4:7f:7e:6c:78:77:67:0f: 62:04:4b:f3:75:d8:0c:31:14:00:89:9d:0d:49:c8: c9:06:6a:81:69:ff:30:72:f1:5e:da:72:2f:ca:94: be:05:75:19:57:a5:a1:e8:02:48:a6:23:4b:28:45: c9:27:db:3f:dd:42:9c:ec:c8:79:06:df:1c:c5:9f: 48:cb:ea:d0:09:5a:94:c0:62:99:1e:c4:da:54:fa: 54:93:f7:8b:38:d6:32:dd:db:d8:3b:cb:c0:33:85: 52:98:bf:6a:09:a8:1c:55:7d:97:39:17:51:13:97: 70:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:CD:17:3D:78:7E:83:79:96:0A:ED:5B:50:AB:91:06:51:4B:CB:33 X509v3 Authority Key Identifier: keyid:13:7F:69:88:8B:EE:9C:C8:3B:AB:41:FA:F2:C9:42:D1:0A:F2:CB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E39piIvunMg7q0H68slC0Qryy2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:7e:9a:27:58:a8:71:8f:2a:5b:27:99:1f:34:eb:63:9f:5a: ff:97:bf:50:d9:57:1a:ad:35:10:ed:56:b2:27:89:a1:fe:c4: 1a:da:ff:2d:21:1b:be:41:d0:ca:01:6a:3b:97:00:36:3c:a1: 82:0e:e5:5a:e4:c6:45:41:b6:db:f7:b2:dc:d0:19:fc:b0:8b: 66:88:22:05:c4:f6:69:25:d5:b9:0c:d7:4b:03:9f:ae:b4:d2: 12:1d:11:71:6f:9d:40:e9:4b:c7:a9:6d:09:27:de:fd:02:d0: 8b:a8:24:15:04:21:8b:d6:f1:9f:87:a1:09:b6:b8:1f:c8:07: 2c:48:ba:71:46:b7:12:2f:40:07:00:1e:e9:de:df:4c:41:fb: 09:03:64:64:d8:6e:0a:50:99:56:f5:57:16:8c:d4:c7:24:f9: 9a:df:c8:06:87:92:8b:e9:cc:ed:da:9d:2e:f2:a5:62:48:3b: ca:18:2f:d3:63:88:71:36:90:36:7d:e9:f3:00:20:97:67:bf: b0:cf:63:f0:cd:fb:44:a0:aa:ad:cb:e1:34:29:6a:86:0a:f7: 73:7f:05:a8:21:d1:9c:e5:66:98:94:58:5c:b5:65:7a:12:b3: 5c:01:ac:f7:02:10:f7:87:7f:d8:4b:ca:48:48:ac:e4:d9:32: 42:89:8c:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIzMEExMTAvBgNVBAUTKDEzN0Y2OTg4OEJFRTlDQzgzQkFCNDFGQUYyQzk0MkQx MEFGMkNCNjUwHhcNMjUwNDI0MjM1NTE0WhcNMjUwNTAxMjM1NTE0WjAYMRYwFAYD VQQDEw02ODBhY2Y2Mi1hOGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCjhaAeoO1EmIYxLk/tmV2SFyQ/44Dvz5TMgVdMuOtTRxCKCfgt9OWL9JrFG L0UA9tqM0llG3fNxvxvG8tnoiHpJZkmBWtMGUW97i0QOM8XHPa7YYJeWhGdv3+Uk hST8WhS8goezELtYp5CnXiLCp+TBp7TF+YPpU23xqgavTJGiWs6/GEHYEf8Fl6Rx 5H9+bHh3Zw9iBEvzddgMMRQAiZ0NScjJBmqBaf8wcvFe2nIvypS+BXUZV6Wh6AJI piNLKEXJJ9s/3UKc7Mh5Bt8cxZ9Iy+rQCVqUwGKZHsTaVPpUk/eLONYy3dvYO8vA M4VSmL9qCagcVX2XORdRE5dw0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLNFz14 foN5lgrtW1CrkQZRS8szMB8GA1UdIwQYMBaAFBN/aYiL7pzIO6tB+vLJQtEK8stl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjMwQS85MUFFNjlBQTQ2 N0MxMUVDQkQ2NjEyNkJDNEY5QUUwMi9FMzlwaUl2dW5NZzdxMEg2OHNsQzBRcnl5 MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzOXBpSXZ1bk1nN3EwSDY4c2xDMFFyeXkyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjMwQS85MUFFNjlBQTQ2N0MxMUVDQkQ2NjEyNkJDNEY5QUUwMi9FMzlwaUl2dW5N ZzdxMEg2OHNsQzBRcnl5MlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgfponWKhxjypbJ5kfNOtjn1r/l79Q2VcarTUQ7VayJ4mh/sQa2v8t IRu+QdDKAWo7lwA2PKGCDuVa5MZFQbbb97Lc0Bn8sItmiCIFxPZpJdW5DNdLA5+u tNISHRFxb51A6UvHqW0JJ979AtCLqCQVBCGL1vGfh6EJtrgfyAcsSLpxRrcSL0AH AB7p3t9MQfsJA2Rk2G4KUJlW9VcWjNTHJPma38gGh5KL6czt2p0u8qViSDvKGC/T Y4hxNpA2fenzACCXZ7+wz2PwzftEoKqty+E0KWqGCvdzfwWoIdGc5WaYlFhctWV6 ErNcAaz3AhD3h3/YS8pISKzk2TJCiYyZ -----END CERTIFICATE-----Generated at Sat Apr 26 13:07:30 2025 by rpki-client