$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft File: EY5vss8Va51aJq7AUfscX37-AeM.mft (raw, json) Hash identifier: iAjyPN5jWC4OjSwYe1+k2DLYHK+FwzML69633OH9zDE= Subject key identifier: 5D:B8:92:54:FD:E8:92:A4:FE:4C:05:1C:66:B6:28:46:0D:5F:65:8B Authority key identifier: 11:8E:6F:B2:CF:15:6B:9D:5A:26:AE:C0:51:FB:1C:5F:7E:FE:01:E3 Certificate issuer: /CN=A914DA3F/serialNumber=118E6FB2CF156B9D5A26AEC051FB1C5F7EFE01E3 Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft Manifest number: 01A4 Signing time: Fri 25 Apr 2025 02:29:36 +0000 Manifest this update: Fri 25 Apr 2025 02:29:36 +0000 Manifest next update: Fri 02 May 2025 02:29:36 +0000 Files and hashes: 1: EY5vss8Va51aJq7AUfscX37-AeM.crl (hash: zaGTKGyVqPC8S/qMQHFNlJWVAMZ88YjKINoJ4hBGI9g=) 2: 612568D2A6D011ED8FBD0A82C4F9AE02.roa (hash: nm2zg9mKvyo9+lsb6e1TLrNeopFW/UoV47vdvbrHk8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.crl rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:29:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DA3F, serialNumber=118E6FB2CF156B9D5A26AEC051FB1C5F7EFE01E3 Validity Not Before: Apr 25 02:29:36 2025 GMT Not After : May 2 02:29:36 2025 GMT Subject: CN=680af390-4750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:12:ea:29:9a:2a:ca:85:f6:4a:3b:35:18:5e: 0b:73:cd:cd:90:c6:c1:b6:b5:ed:4a:a1:7f:b0:67: e2:f9:f6:18:67:81:1e:7c:c4:e0:88:53:eb:fd:f3: d5:24:d9:08:92:07:96:7b:72:dc:02:66:d7:25:e7: bf:dd:47:2f:b5:3f:32:6d:36:25:be:bb:27:1c:f1: c2:52:cb:97:de:e1:91:cb:a6:19:d5:9c:ea:f3:41: 04:c3:f6:db:3e:14:4a:45:ed:2e:c8:98:41:f2:79: c2:7e:ec:15:0a:c1:ea:b0:80:20:e9:c9:01:39:b2: d6:44:0a:98:ba:45:6d:51:9b:fb:ea:fa:bf:39:ae: d6:8f:98:03:93:a6:da:58:96:2c:8d:72:4b:b0:1b: 16:5f:11:f4:66:2b:65:90:8d:d3:3d:34:34:30:1b: 5b:39:3e:6c:60:d2:a8:32:a6:45:37:2c:c5:eb:e1: 54:19:3d:bd:7e:37:eb:36:f0:43:73:35:85:3f:12: 9b:9f:0c:13:cc:75:8e:57:8f:dc:fa:93:8e:83:0d: bd:4a:cf:fc:c0:e8:3e:ed:62:75:61:5d:cc:e1:24: cc:46:57:41:20:d0:3d:d6:fe:62:12:48:85:db:cd: 66:c6:f2:e9:78:9c:2a:13:cb:38:d9:d0:8d:e8:02: 5d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B8:92:54:FD:E8:92:A4:FE:4C:05:1C:66:B6:28:46:0D:5F:65:8B X509v3 Authority Key Identifier: keyid:11:8E:6F:B2:CF:15:6B:9D:5A:26:AE:C0:51:FB:1C:5F:7E:FE:01:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ac:db:7a:90:b5:a3:f1:84:fb:72:00:cc:e1:b6:66:bd:7e: 87:60:15:dc:08:41:28:3b:b7:8e:bc:ed:b4:dd:86:42:e6:2d: c2:27:33:48:1f:7a:2f:78:72:ac:89:82:3c:cf:ed:51:ce:b2: ac:4d:b0:23:7b:89:4c:04:07:62:46:f3:bf:43:c1:69:1f:3f: 90:9f:b6:3d:bb:7c:e3:48:d7:63:a6:d8:f1:22:a3:1c:4f:5b: bb:11:7e:26:05:b0:57:89:95:02:7d:4f:67:da:b0:17:2d:56: d2:6c:85:b7:db:ac:18:0c:39:a3:0d:7c:5d:eb:5e:ba:35:bf: 21:98:82:50:7f:e1:14:a1:ff:77:e6:a7:77:24:69:a5:4d:ce: 57:19:72:89:5d:e7:e6:9f:8f:81:ef:c1:bd:3a:13:aa:c1:d2: d0:0e:ff:91:a2:04:a4:9a:7f:3a:86:c8:4e:2b:84:88:8b:75: 78:2f:de:f1:a0:72:f2:9b:d1:ce:d0:52:e2:9f:7f:e5:b7:a8: 20:91:2e:9f:bc:8b:ec:5f:de:b9:d5:9e:2f:61:1b:90:9c:79: 8c:b3:19:d8:54:e0:c7:d5:03:c2:15:77:fc:13:e0:5a:50:76: b3:88:60:f6:ae:0e:a2:ae:4c:46:4d:60:d0:a6:98:33:32:12: fd:b1:db:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERBM0YxMTAvBgNVBAUTKDExOEU2RkIyQ0YxNTZCOUQ1QTI2QUVDMDUxRkIxQzVG N0VGRTAxRTMwHhcNMjUwNDI1MDIyOTM2WhcNMjUwNTAyMDIyOTM2WjAYMRYwFAYD VQQDEw02ODBhZjM5MC00NzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAohLqKZoqyoX2Sjs1GF4Lc83NkMbBtrXtSqF/sGfi+fYYZ4EefMTgiFPr/fPV JNkIkgeWe3LcAmbXJee/3UcvtT8ybTYlvrsnHPHCUsuX3uGRy6YZ1Zzq80EEw/bb PhRKRe0uyJhB8nnCfuwVCsHqsIAg6ckBObLWRAqYukVtUZv76vq/Oa7Wj5gDk6ba WJYsjXJLsBsWXxH0ZitlkI3TPTQ0MBtbOT5sYNKoMqZFNyzF6+FUGT29fjfrNvBD czWFPxKbnwwTzHWOV4/c+pOOgw29Ss/8wOg+7WJ1YV3M4STMRldBINA91v5iEkiF 281mxvLpeJwqE8s42dCN6AJdywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF24klT9 6JKk/kwFHGa2KEYNX2WLMB8GA1UdIwQYMBaAFBGOb7LPFWudWiauwFH7HF9+/gHj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEzRi80NjlCMTc2QUE2 Q0ExMUVEOEQxMDk5NzhDNEY5QUUwMi9FWTV2c3M4VmE1MWFKcTdBVWZzY1gzNy1B ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VZNXZzczhWYTUxYUpxN0FVZnNjWDM3LUFlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REEzRi80NjlCMTc2QUE2Q0ExMUVEOEQxMDk5NzhDNEY5QUUwMi9FWTV2c3M4VmE1 MWFKcTdBVWZzY1gzNy1BZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfrNt6kLWj8YT7cgDM4bZmvX6HYBXcCEEoO7eOvO203YZC5i3CJzNI H3oveHKsiYI8z+1RzrKsTbAje4lMBAdiRvO/Q8FpHz+Qn7Y9u3zjSNdjptjxIqMc T1u7EX4mBbBXiZUCfU9n2rAXLVbSbIW326wYDDmjDXxd6166Nb8hmIJQf+EUof93 5qd3JGmlTc5XGXKJXefmn4+B78G9OhOqwdLQDv+RogSkmn86hshOK4SIi3V4L97x oHLym9HO0FLin3/lt6ggkS6fvIvsX9651Z4vYRuQnHmMsxnYVODH1QPCFXf8E+Ba UHaziGD2rg6irkxGTWDQppgzMhL9sdum -----END CERTIFICATE-----Generated at Sat Apr 26 05:30:08 2025 by rpki-client