$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft File: 5esYDNbcUWxm01KwR7npxaUCcOM.mft (raw, json) Hash identifier: eUp/XsB2U+famBFh9b0oJHm+ARxKX5q3Hp1wvxL51XI= Subject key identifier: D7:8B:43:CD:E6:37:BC:0B:AC:7F:88:16:50:74:22:BF:C8:6C:D1:D2 Authority key identifier: E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3 Certificate issuer: /CN=A91ABFD9/serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3 Certificate serial: 08AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft Manifest number: 0892 Signing time: Thu 24 Apr 2025 20:25:56 +0000 Manifest this update: Thu 24 Apr 2025 20:25:56 +0000 Manifest next update: Thu 01 May 2025 20:25:56 +0000 Files and hashes: 1: 5esYDNbcUWxm01KwR7npxaUCcOM.crl (hash: W/2Pz+24u1NBDyqQ+h/h0HksCsaEYC5+r63WcPjFZ6A=) 2: E2E21364C4F811EAB8D31113C4F9AE02.roa (hash: KT6K45U/vV1zQkhhfiaxr9a9XeTKLIwG0eEDcyR3ERI=) 3: F1A54AC47A5611EB876D281FC4F9AE02.roa (hash: LbbFjEbhHg5fzKZNW2jokQ6UuaIS/rDPKgFU2q0pJeg=) 4: 36945EC2232711EBA0F14F17C4F9AE02.roa (hash: Gzcr6RaAc7WjlspRH4slQcyVh4i/nmyVkR/RXd4O0KM=) 5: 6AE50E1C21E011EBBF36CD21C4F9AE02.roa (hash: Lg2iSZUiBgCc3+l3q9JExUq+jxWe1fvszct9oy4Ys3k=) 6: E22ECDEAC4F811EAB8D31113C4F9AE02.roa (hash: tlDd7aRrzNeu6uslbfPluCcOk663EDpRsH8KL9nqlD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:25:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2222 (0x8ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABFD9, serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3 Validity Not Before: Apr 24 20:25:56 2025 GMT Not After : May 1 20:25:56 2025 GMT Subject: CN=680a9e54-3b3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b8:68:5d:29:f6:b3:27:81:8b:99:c2:cd:e6: 36:00:28:2d:d2:77:45:ed:71:f5:9e:74:a5:bd:47: b8:ff:66:e2:0e:f6:7f:fe:b0:12:9d:6b:2b:5b:93: a8:1f:76:68:c4:af:6a:98:92:00:a8:c3:ec:01:dd: aa:a5:0f:ae:c9:d0:db:01:cd:46:b4:55:76:a4:d7: d5:8e:07:70:ac:f6:d4:e3:ec:e4:75:e1:6a:60:07: 8b:89:83:3f:06:cd:f7:00:73:87:3a:24:5b:54:75: b5:21:21:70:94:86:91:53:66:08:1f:43:52:43:d9: f0:8e:a1:40:9f:ea:96:39:ee:2f:6c:4f:b2:0d:42: e7:a4:62:4b:ce:a9:85:54:cc:a7:19:ea:2a:e3:9b: fd:89:50:fa:c0:04:99:53:34:f7:e3:0a:73:f4:58: 75:42:1b:b3:2b:54:43:5d:49:f1:6d:22:41:ef:e5: 57:86:86:80:8b:45:2a:80:f6:ad:be:9f:ce:e5:4a: 14:2c:76:bf:37:12:df:dc:94:48:5e:32:ae:85:c3: ee:34:c3:db:63:1f:8b:f1:0a:e5:c9:ae:f3:cb:7a: 2f:4a:3f:f5:aa:04:26:95:75:b4:49:7d:ec:7f:c5: 05:9b:0c:52:4c:29:97:17:80:52:4b:8a:e7:66:70: ae:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:8B:43:CD:E6:37:BC:0B:AC:7F:88:16:50:74:22:BF:C8:6C:D1:D2 X509v3 Authority Key Identifier: keyid:E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:4d:52:50:d8:ef:69:e6:63:e5:d7:01:ea:87:fe:39:19:f4: 83:24:08:78:f1:4d:87:6d:6f:fb:de:e5:2c:83:87:fe:e1:35: ca:90:b3:b3:79:0f:6e:1a:f5:7e:40:ee:e1:f5:97:94:84:06: e1:46:22:82:96:48:27:a4:29:5e:20:9d:47:5f:92:90:dd:a1: c3:02:ab:84:62:2e:71:e2:c8:f8:4a:ae:e8:9a:36:79:80:43: c1:4a:b1:31:c1:24:fa:e1:87:1d:19:11:b4:36:e2:62:78:97: 2b:a1:c8:7d:46:dd:e5:31:e5:94:fe:ba:4e:ba:07:19:2f:97: 2b:55:81:95:ec:96:20:c9:a3:6b:e1:6b:d4:ad:c3:df:d1:b2: b9:9c:c3:07:32:ab:40:2f:49:67:10:63:46:ec:20:9d:a2:33: 9a:b9:52:15:8b:6e:58:a9:4d:5e:5a:3b:87:8c:1f:7d:a5:53: f7:24:1d:11:d0:84:46:ab:55:d3:98:30:0f:cf:a9:98:0a:9b: 1c:eb:a7:aa:de:0f:9c:29:9d:0e:f8:d8:8c:c9:d8:61:55:ce: f2:be:e5:2f:b5:81:e4:f7:b1:46:50:4b:9c:1f:af:8c:0c:b0: 98:eb:3a:7b:a8:50:8f:a5:60:af:8f:25:e1:28:f7:5c:79:7b: e6:96:4e:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJGRDkxMTAvBgNVBAUTKEU1RUIxODBDRDZEQzUxNkM2NkQzNTJCMDQ3QjlFOUM1 QTUwMjcwRTMwHhcNMjUwNDI0MjAyNTU2WhcNMjUwNTAxMjAyNTU2WjAYMRYwFAYD VQQDEw02ODBhOWU1NC0zYjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrhoXSn2syeBi5nCzeY2ACgt0ndF7XH1nnSlvUe4/2biDvZ//rASnWsrW5Oo H3ZoxK9qmJIAqMPsAd2qpQ+uydDbAc1GtFV2pNfVjgdwrPbU4+zkdeFqYAeLiYM/ Bs33AHOHOiRbVHW1ISFwlIaRU2YIH0NSQ9nwjqFAn+qWOe4vbE+yDULnpGJLzqmF VMynGeoq45v9iVD6wASZUzT34wpz9Fh1QhuzK1RDXUnxbSJB7+VXhoaAi0UqgPat vp/O5UoULHa/NxLf3JRIXjKuhcPuNMPbYx+L8Qrlya7zy3ovSj/1qgQmlXW0SX3s f8UFmwxSTCmXF4BSS4rnZnCuYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNeLQ83m N7wLrH+IFlB0Ir/IbNHSMB8GA1UdIwQYMBaAFOXrGAzW3FFsZtNSsEe56cWlAnDj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkZEOS80QUU4MDQxRUI5 RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VXeG0wMUt3UjducHhhVUNj T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVlc1lETmJjVVd4bTAxS3dSN25weGFVQ2NPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkZEOS80QUU4MDQxRUI5RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VX eG0wMUt3UjducHhhVUNjT00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbTVJQ2O9p5mPl1wHqh/45GfSDJAh48U2HbW/73uUsg4f+4TXKkLOz eQ9uGvV+QO7h9ZeUhAbhRiKClkgnpCleIJ1HX5KQ3aHDAquEYi5x4sj4Sq7omjZ5 gEPBSrExwST64YcdGRG0NuJieJcroch9Rt3lMeWU/rpOugcZL5crVYGV7JYgyaNr 4WvUrcPf0bK5nMMHMqtAL0lnEGNG7CCdojOauVIVi25YqU1eWjuHjB99pVP3JB0R 0IRGq1XTmDAPz6mYCpsc66eq3g+cKZ0O+NiMydhhVc7yvuUvtYHk97FGUEucH6+M DLCY6zp7qFCPpWCvjyXhKPdceXvmlk74 -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:16 2025 by rpki-client