$ rpki-client -vvf rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft File: pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft (raw, json) Hash identifier: y1msOO/zIt5EtZHHfo1n1jD8sW+amNfxBgSMMedRbak= Subject key identifier: CC:27:B9:77:26:25:45:90:F3:EC:0D:C0:B1:AE:AF:14:99:4B:2D:AB Authority key identifier: A5:EB:DF:98:39:19:C6:0F:62:2F:34:EF:8F:C5:21:E7:24:89:D1:CD Certificate issuer: /CN=A91A995E/serialNumber=A5EBDF983919C60F622F34EF8FC521E72489D1CD Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft Manifest number: 1F Signing time: Fri 25 Apr 2025 08:45:59 +0000 Manifest this update: Fri 25 Apr 2025 08:45:59 +0000 Manifest next update: Fri 02 May 2025 08:45:59 +0000 Files and hashes: 1: pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl (hash: hM/tw3eeSqPSCQGq7/+nJ45lgOuRa02qv0LOTx1XFs0=) 2: B3E4D03621B111F089CE216DC4F9AE02.roa (hash: VCQENYwleJhQRqqUILKpkln6ADdmKoB6HviWfuCE7i4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 08:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A995E, serialNumber=A5EBDF983919C60F622F34EF8FC521E72489D1CD Validity Not Before: Apr 25 08:45:59 2025 GMT Not After : May 2 08:45:59 2025 GMT Subject: CN=680b4bc7-dc5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:99:8b:fc:8e:00:6d:84:29:73:82:53:54:21: 7a:e2:4a:f3:1b:16:0c:15:fa:44:83:82:9b:40:d8: 60:8f:6e:24:8a:31:94:c2:c9:6a:cf:37:7d:b0:68: 80:62:f3:5c:25:48:cc:21:44:58:c9:e6:39:65:e6: c1:d0:20:6c:63:e2:3d:94:f1:fc:3c:94:49:87:bc: 24:fd:9f:b4:a5:01:3e:8b:41:ef:7a:83:da:6b:68: 6a:b1:f2:01:ee:65:60:ab:ad:2e:7d:91:56:52:4c: 64:0a:a3:9a:6e:55:c4:0c:f8:9a:0a:b6:3d:cb:65: e2:1d:f2:06:d5:92:82:32:7c:09:45:e9:b0:98:00: 5b:19:b3:b2:86:10:0d:32:20:fd:ea:7f:1b:ed:3a: 6b:33:4d:e5:7b:f8:9b:c2:fd:2c:03:65:88:53:79: 47:1e:64:71:eb:0f:94:c0:51:46:7a:df:a4:84:50: 0b:0e:71:c5:24:10:a6:f9:f9:34:30:0d:eb:a9:54: 62:e0:6a:24:d4:ce:09:16:5c:5e:1b:55:4f:53:be: ac:fa:22:19:0b:40:66:6d:38:f9:aa:48:22:6d:e2: a9:06:c8:88:6c:0a:4b:b8:32:f8:86:b4:5a:ee:fe: 62:42:64:6c:6c:9f:8f:57:49:97:7e:c9:ef:f1:69: d9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:27:B9:77:26:25:45:90:F3:EC:0D:C0:B1:AE:AF:14:99:4B:2D:AB X509v3 Authority Key Identifier: keyid:A5:EB:DF:98:39:19:C6:0F:62:2F:34:EF:8F:C5:21:E7:24:89:D1:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:ee:36:e2:83:ab:37:fd:e8:c1:c5:a2:61:b7:bf:be:aa:fb: fd:1f:b7:d2:bf:65:e0:49:20:49:8d:56:d8:71:9e:5f:1d:5c: 1b:9b:d3:84:46:29:be:37:ab:b1:29:bc:dd:d3:12:b5:7c:68: b9:8a:4a:a0:aa:10:1f:73:f4:24:f2:c0:58:85:e7:ea:cd:75: af:80:9f:57:d5:7c:18:86:fa:58:97:0c:3b:35:67:9d:25:55: 80:ea:c2:00:78:9d:ad:b3:53:fe:ca:6a:fc:5a:9a:6c:91:4d: c9:72:31:e2:05:9d:59:a6:70:dc:44:44:f0:e1:10:2e:a7:cb: ee:c6:ac:56:7a:1f:0a:5f:17:e7:a0:d7:14:b6:b4:e4:92:13: 59:28:41:89:93:d9:e3:c5:5f:f0:dc:54:d4:a2:da:79:ac:bc: a3:0c:ec:6f:16:63:79:85:38:d6:7e:85:5e:cf:67:2e:e1:58: a6:0c:cd:87:93:1c:a4:41:85:90:0a:e4:16:db:fb:cd:a6:1b: fe:ff:68:77:38:91:28:ef:ed:17:ad:24:54:82:f0:2b:b2:0d: a2:b5:e8:34:62:c0:e0:ae:0e:d1:f6:73:c3:c2:24:7f:03:94: fa:01:57:33:6a:41:dc:b0:5f:d3:47:64:6d:88:3d:d6:ad:c4: 90:40:a9:29 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTk1RTExMC8GA1UEBRMoQTVFQkRGOTgzOTE5QzYwRjYyMkYzNEVGOEZDNTIxRTcy NDg5RDFDRDAeFw0yNTA0MjUwODQ1NTlaFw0yNTA1MDIwODQ1NTlaMBgxFjAUBgNV BAMTDTY4MGI0YmM3LWRjNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCWmYv8jgBthClzglNUIXriSvMbFgwV+kSDgptA2GCPbiSKMZTCyWrPN32waIBi 81wlSMwhRFjJ5jll5sHQIGxj4j2U8fw8lEmHvCT9n7SlAT6LQe96g9praGqx8gHu ZWCrrS59kVZSTGQKo5puVcQM+JoKtj3LZeId8gbVkoIyfAlF6bCYAFsZs7KGEA0y IP3qfxvtOmszTeV7+JvC/SwDZYhTeUceZHHrD5TAUUZ636SEUAsOccUkEKb5+TQw DeupVGLgaiTUzgkWXF4bVU9Tvqz6IhkLQGZtOPmqSCJt4qkGyIhsCku4MviGtFru /mJCZGxsn49XSZd+ye/xadnfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzCe5dyYl RZDz7A3Asa6vFJlLLaswHwYDVR0jBBgwFoAUpevfmDkZxg9iLzTvj8Uh5ySJ0c0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5OTVFLzM3QkI1RjgyRkE2 MjExRUY5NTU1NUMwRUM0RjlBRTAyL3BldmZtRGtaeGc5aUx6VHZqOFVoNXlTSjBj MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcGV2Zm1Ea1p4ZzlpTHpUdmo4VWg1eVNKMGMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 OTVFLzM3QkI1RjgyRkE2MjExRUY5NTU1NUMwRUM0RjlBRTAyL3BldmZtRGtaeGc5 aUx6VHZqOFVoNXlTSjBjMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKTuNuKDqzf96MHFomG3v76q+/0ft9K/ZeBJIEmNVthxnl8dXBub04RG Kb43q7EpvN3TErV8aLmKSqCqEB9z9CTywFiF5+rNda+An1fVfBiG+liXDDs1Z50l VYDqwgB4na2zU/7KavxammyRTclyMeIFnVmmcNxERPDhEC6ny+7GrFZ6HwpfF+eg 1xS2tOSSE1koQYmT2ePFX/DcVNSi2nmsvKMM7G8WY3mFONZ+hV7PZy7hWKYMzYeT HKRBhZAK5Bbb+82mG/7/aHc4kSjv7RetJFSC8CuyDaK16DRiwOCuDtH2c8PCJH8D lPoBVzNqQdywX9NHZG2IPdatxJBAqSk= -----END CERTIFICATE-----Generated at Sat Apr 26 16:52:28 2025 by rpki-client