$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.mft File: deIxCEEFtBXk1XmhraSOU5dW17M.mft (raw, json) Hash identifier: lqpuWcmYxs6L3zenr4m3jDCQ0fsr+9YCTVjrPL5e8fg= Subject key identifier: D4:0F:91:2C:D0:49:19:A4:1C:E9:88:50:DD:9E:BF:D6:C7:8E:8A:51 Authority key identifier: 75:E2:31:08:41:05:B4:15:E4:D5:79:A1:AD:A4:8E:53:97:56:D7:B3 Certificate issuer: /CN=A91AD9EF/serialNumber=75E231084105B415E4D579A1ADA48E539756D7B3 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/deIxCEEFtBXk1XmhraSOU5dW17M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.mft Manifest number: 0128 Signing time: Fri 25 Apr 2025 03:42:25 +0000 Manifest this update: Fri 25 Apr 2025 03:42:24 +0000 Manifest next update: Fri 02 May 2025 03:42:24 +0000 Files and hashes: 1: deIxCEEFtBXk1XmhraSOU5dW17M.crl (hash: eJvzz52n5mHO/tgXx8a0V/xCfbTFaKjOvQhZwd/Fd3U=) 2: 39F3DEAC5BE711EE8D63E752C4F9AE02.roa (hash: HRm3TzztD8oTXqZ2+rt8UziAB3hTaIAcFHe9LeA0DJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.crl rsync://rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/deIxCEEFtBXk1XmhraSOU5dW17M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:42:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD9EF, serialNumber=75E231084105B415E4D579A1ADA48E539756D7B3 Validity Not Before: Apr 25 03:42:24 2025 GMT Not After : May 2 03:42:24 2025 GMT Subject: CN=680b04a1-b218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cd:0e:1e:8c:f3:bb:bb:e5:de:11:98:22:32: 86:4c:3d:5b:3b:02:51:96:b1:c9:e5:72:be:0a:d7: f8:a3:bd:2d:bb:bb:3a:3b:cc:ea:97:eb:64:4e:bb: 08:82:3e:66:0e:fe:e0:11:cb:e7:6b:bb:e3:86:c8: 60:dc:bf:22:f6:5a:ff:89:e9:b7:12:71:a7:ea:72: 88:9c:1f:9f:5a:07:c7:7a:26:07:83:17:a4:03:4a: ff:93:84:f6:24:d4:74:d1:fb:b8:cb:a3:17:b0:0b: 7e:62:82:90:7f:fd:87:9d:ef:40:26:f2:62:4d:20: 16:ad:e9:72:9c:95:49:dc:cc:e6:5f:14:8c:fe:b0: 41:9b:75:ac:a9:f5:f6:c4:c1:36:2d:68:f1:36:5f: 39:41:ed:dc:3d:72:8d:5b:38:66:7a:72:ef:b9:5e: fe:f1:ff:bc:2b:f4:b8:bc:c9:24:02:9c:27:ce:04: 04:f5:81:d4:86:77:8e:90:da:ac:65:4b:3c:5e:23: a8:06:16:62:e4:17:f6:ae:75:72:00:cc:90:0b:03: c4:82:f7:ae:4e:a2:47:7b:ec:dd:f1:f8:ac:6f:c7: 06:28:7f:eb:f7:8a:69:ec:c8:03:e9:b7:ba:e1:a8: b8:e5:c7:18:d1:9f:97:b4:2f:98:f2:f0:c9:23:ed: 02:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0F:91:2C:D0:49:19:A4:1C:E9:88:50:DD:9E:BF:D6:C7:8E:8A:51 X509v3 Authority Key Identifier: keyid:75:E2:31:08:41:05:B4:15:E4:D5:79:A1:AD:A4:8E:53:97:56:D7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/deIxCEEFtBXk1XmhraSOU5dW17M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:8d:8d:db:2f:11:d9:9e:c3:08:48:92:2f:19:33:5d:2d:8f: da:74:63:9f:16:f7:b8:a0:10:71:3a:35:e4:02:11:f4:81:ea: dc:86:15:81:1c:46:00:47:1a:09:8e:4f:87:59:e4:41:e2:ee: 39:90:eb:73:ef:17:da:7c:4f:a4:e5:ea:de:f1:eb:40:b9:79: 53:1e:eb:9e:0a:3f:ec:a2:08:b1:ed:2f:a3:a3:14:8f:27:e2: 89:31:82:57:66:28:49:88:20:cb:0e:d0:a9:9e:fb:1c:16:45: 59:a4:77:6c:6a:d2:20:37:0b:29:64:65:1b:de:1f:a4:3d:85: cb:44:6b:25:42:57:7e:98:e6:f7:de:9c:6b:75:91:33:2d:81: e3:c2:63:98:b4:15:ee:b4:af:4c:2f:44:d9:24:f5:e8:98:a7: 62:6a:b3:de:eb:b7:9b:14:51:54:ab:42:7c:12:e1:26:06:fe: db:d6:eb:a5:a0:cc:e7:4e:f0:41:5e:3b:9f:07:00:be:f8:d6: e3:a9:54:87:0a:46:7a:6f:c1:7e:85:73:79:71:67:ce:4d:0f: fe:fa:5b:f1:1f:11:ea:57:8d:2f:89:23:a0:5b:46:9a:1c:1f: f3:23:3c:e1:79:47:f7:ec:df:7d:ad:1a:e6:4a:1c:13:91:7b: 80:84:56:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ5RUYxMTAvBgNVBAUTKDc1RTIzMTA4NDEwNUI0MTVFNEQ1NzlBMUFEQTQ4RTUz OTc1NkQ3QjMwHhcNMjUwNDI1MDM0MjI0WhcNMjUwNTAyMDM0MjI0WjAYMRYwFAYD VQQDEw02ODBiMDRhMS1iMjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyM0OHozzu7vl3hGYIjKGTD1bOwJRlrHJ5XK+Ctf4o70tu7s6O8zql+tkTrsI gj5mDv7gEcvna7vjhshg3L8i9lr/iem3EnGn6nKInB+fWgfHeiYHgxekA0r/k4T2 JNR00fu4y6MXsAt+YoKQf/2Hne9AJvJiTSAWrelynJVJ3MzmXxSM/rBBm3WsqfX2 xME2LWjxNl85Qe3cPXKNWzhmenLvuV7+8f+8K/S4vMkkApwnzgQE9YHUhneOkNqs ZUs8XiOoBhZi5Bf2rnVyAMyQCwPEgveuTqJHe+zd8fisb8cGKH/r94pp7MgD6be6 4ai45ccY0Z+XtC+Y8vDJI+0CRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQPkSzQ SRmkHOmIUN2ev9bHjopRMB8GA1UdIwQYMBaAFHXiMQhBBbQV5NV5oa2kjlOXVtez MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDlFRi84RUIzRUVDRTVC RTYxMUVFQTcwNUE3NjVDNEY5QUUwMi9kZUl4Q0VFRnRCWGsxWG1ocmFTT1U1ZFcx N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RlSXhDRUVGdEJYazFYbWhyYVNPVTVkVzE3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDlFRi84RUIzRUVDRTVCRTYxMUVFQTcwNUE3NjVDNEY5QUUwMi9kZUl4Q0VFRnRC WGsxWG1ocmFTT1U1ZFcxN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7jY3bLxHZnsMISJIvGTNdLY/adGOfFve4oBBxOjXkAhH0gerchhWB HEYARxoJjk+HWeRB4u45kOtz7xfafE+k5ere8etAuXlTHuueCj/sogix7S+joxSP J+KJMYJXZihJiCDLDtCpnvscFkVZpHdsatIgNwspZGUb3h+kPYXLRGslQld+mOb3 3pxrdZEzLYHjwmOYtBXutK9ML0TZJPXomKdiarPe67ebFFFUq0J8EuEmBv7b1uul oMznTvBBXjufBwC++NbjqVSHCkZ6b8F+hXN5cWfOTQ/++lvxHxHqV40viSOgW0aa HB/zIzzheUf37N99rRrmShwTkXuAhFbf -----END CERTIFICATE-----Generated at Sat Apr 26 04:21:00 2025 by rpki-client