$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft File: EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft (raw, json) Hash identifier: vCHqOHL2u5llqsab31lMgD6JVDi0HSfMZblDBtN99Fc= Subject key identifier: 38:7F:3F:CE:FF:20:8E:9C:6D:F3:8E:C4:59:0E:AF:46:70:99:10:94 Authority key identifier: 10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98 Certificate issuer: /CN=A914C10B/serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798 Certificate serial: 05E5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft Manifest number: 05E0 Signing time: Sat 26 Apr 2025 22:38:42 +0000 Manifest this update: Sat 26 Apr 2025 22:38:42 +0000 Manifest next update: Sat 03 May 2025 22:38:42 +0000 Files and hashes: 1: EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl (hash: 8i765tXjvcIWdTOqmcpwIRZVUC/W/3SyADnzN13nt1U=) 2: CFBB0C48B28A11EBB4CE6E70C4F9AE02.roa (hash: KeDjzKypgQHXzMMCw525U76eYPfXZKl/2OFa/SSqsKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1509 (0x5e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C10B, serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798 Validity Not Before: Apr 26 22:38:42 2025 GMT Not After : May 3 22:38:42 2025 GMT Subject: CN=680d6072-6c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2c:ae:04:6c:aa:6f:8a:d5:41:39:23:92:fe: a0:60:d0:69:18:7e:9e:b0:55:7c:63:f4:2d:5d:4c: 85:03:da:19:c6:63:af:fa:24:24:82:09:15:63:e4: bc:e7:33:21:64:db:07:4b:57:2b:9f:6b:62:6c:ba: 0a:fd:5d:a4:e7:db:cc:73:b3:06:ba:95:7b:91:c9: 5c:90:4e:0c:1c:15:48:4c:f8:52:b9:d2:3e:1c:31: 70:55:59:05:bb:33:99:21:0c:17:30:a6:f5:12:4c: d4:54:d3:d9:77:e4:3f:d5:e7:ef:5a:88:84:ad:de: ab:5f:f8:b0:0f:91:40:d2:36:97:46:36:c5:56:1e: b8:10:f6:34:03:f5:4c:27:db:76:bd:fc:fa:d3:ff: 13:23:34:28:87:76:9c:56:83:6f:92:df:f4:2d:12: 2d:3f:59:28:1d:a6:7f:f4:a3:91:ef:97:9f:c2:4d: 58:ac:cf:93:4b:82:be:4f:4c:80:d9:94:e5:7a:cf: bd:91:df:c7:ab:45:b0:95:1e:ba:0a:42:23:e3:65: 6c:03:bf:69:45:45:3c:af:b6:db:bf:09:4d:41:0e: fb:32:df:f7:4e:3c:72:fc:d7:71:ef:3c:c5:4a:83: ed:4e:71:b6:3a:b2:56:23:aa:ba:15:de:81:1a:1d: 63:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:7F:3F:CE:FF:20:8E:9C:6D:F3:8E:C4:59:0E:AF:46:70:99:10:94 X509v3 Authority Key Identifier: keyid:10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:41:0f:91:d5:d0:0b:37:d1:7b:39:b5:9e:69:43:e0:8d:bc: ca:31:fd:d8:2a:44:cc:86:c1:21:d8:80:eb:a2:3a:5f:3a:30: bc:e6:ac:f1:a5:0d:52:43:e6:57:fe:2c:b3:5e:c0:49:3b:00: 88:cf:cc:6f:57:c7:2d:5c:8b:b3:e9:c1:99:ea:d7:08:66:ee: c2:86:a6:6b:18:a7:f1:d1:c5:29:04:e5:c1:8d:fe:b8:5c:f4: d7:b2:1b:0e:b9:74:24:f1:37:7d:57:b8:72:e6:da:59:b8:e4: 66:f7:57:54:09:25:e2:f7:43:a1:72:1e:ff:43:5f:0b:ac:52: 2a:11:91:43:38:0f:76:7c:fc:29:ef:bb:c2:07:66:8a:81:f9: ee:e5:86:46:40:c3:c6:7b:6a:58:20:ac:09:0b:9d:3e:69:b3: 2d:76:9d:5e:cc:40:e7:72:9f:ce:8b:28:0f:fd:81:69:0d:68: cb:25:ce:ae:d6:f6:b3:4f:47:a0:f6:66:ca:9d:42:49:2d:b0: f1:3e:9f:e4:ed:a1:c1:d4:5b:5d:7e:c7:d6:b0:ca:9f:c9:bd: 34:46:7b:e5:f9:e2:03:06:24:ae:24:55:ae:6d:6d:c4:c5:d1: 7e:21:92:51:3e:9c:67:5d:5b:cd:dc:2a:6f:ac:c4:d2:bd:bb: 9f:50:fe:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMxMEIxMTAvBgNVBAUTKDEwOUNCNzFCNEY2NDE2NkYxRERBNDIyQ0VCNzIxRUUz RUQxOTY3OTgwHhcNMjUwNDI2MjIzODQyWhcNMjUwNTAzMjIzODQyWjAYMRYwFAYD VQQDEw02ODBkNjA3Mi02YzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSyuBGyqb4rVQTkjkv6gYNBpGH6esFV8Y/QtXUyFA9oZxmOv+iQkggkVY+S8 5zMhZNsHS1crn2tibLoK/V2k59vMc7MGupV7kclckE4MHBVITPhSudI+HDFwVVkF uzOZIQwXMKb1EkzUVNPZd+Q/1efvWoiErd6rX/iwD5FA0jaXRjbFVh64EPY0A/VM J9t2vfz60/8TIzQoh3acVoNvkt/0LRItP1koHaZ/9KOR75efwk1YrM+TS4K+T0yA 2ZTles+9kd/Hq0WwlR66CkIj42VsA79pRUU8r7bbvwlNQQ77Mt/3Tjxy/Ndx7zzF SoPtTnG2OrJWI6q6Fd6BGh1jRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDh/P87/ II6cbfOOxFkOr0ZwmRCUMB8GA1UdIwQYMBaAFBCctxtPZBZvHdpCLOtyHuPtGWeY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzEwQi83MjMxQzNEQUFG NjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9FSnkzRzA5a0ZtOGQya0lzNjNJZTQtMFpa NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VKeTNHMDlrRm04ZDJrSXM2M0llNC0wWlo1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzEwQi83MjMxQzNEQUFGNjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9FSnkzRzA5a0Zt OGQya0lzNjNJZTQtMFpaNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuQQ+R1dALN9F7ObWeaUPgjbzKMf3YKkTMhsEh2IDrojpfOjC85qzx pQ1SQ+ZX/iyzXsBJOwCIz8xvV8ctXIuz6cGZ6tcIZu7ChqZrGKfx0cUpBOXBjf64 XPTXshsOuXQk8Td9V7hy5tpZuORm91dUCSXi90Ohch7/Q18LrFIqEZFDOA92fPwp 77vCB2aKgfnu5YZGQMPGe2pYIKwJC50+abMtdp1ezEDncp/OiygP/YFpDWjLJc6u 1vazT0eg9mbKnUJJLbDxPp/k7aHB1FtdfsfWsMqfyb00Rnvl+eIDBiSuJFWubW3E xdF+IZJRPpxnXVvN3CpvrMTSvbufUP5i -----END CERTIFICATE-----Generated at Sun Apr 27 02:21:52 2025 by rpki-client