$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft File: e5n41rlBPOKiluscfX7-bUfQy6Q.mft (raw, json) Hash identifier: XLJXDSYAY2eDhkbyPmAvtxxoLBkSa9tAJjdYJH+ptDU= Subject key identifier: F1:45:38:3F:52:7D:E6:44:17:97:2C:4A:FE:A2:93:62:C9:35:47:DD Authority key identifier: 7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4 Certificate issuer: /CN=A91C4F1B/serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4 Certificate serial: 088F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft Manifest number: 0888 Signing time: Thu 24 Apr 2025 20:28:44 +0000 Manifest this update: Thu 24 Apr 2025 20:28:44 +0000 Manifest next update: Thu 01 May 2025 20:28:44 +0000 Files and hashes: 1: e5n41rlBPOKiluscfX7-bUfQy6Q.crl (hash: 2gEppWh32Zx7uBmQFpYG682gesUQOmyd43ebNRkyXoo=) 2: 059261A8BC5111EABE07AE32C4F9AE02.roa (hash: cybKavsK+KygtFzdLH5ZiH4HxzktrVv6nGmG8yvNLOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2191 (0x88f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F1B, serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4 Validity Not Before: Apr 24 20:28:44 2025 GMT Not After : May 1 20:28:44 2025 GMT Subject: CN=680a9efc-0edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ff:22:a9:99:2f:2f:bb:05:9d:74:2a:40:a9: ab:82:27:df:38:be:26:73:4b:e8:19:56:c9:b7:a6: c2:18:6a:20:67:96:6b:d2:32:5e:99:42:34:cc:f4: 72:12:97:ab:a9:1c:85:21:b0:cd:ea:dd:20:10:33: d1:b8:67:a3:d2:ec:94:01:ca:d7:b2:ab:68:1d:c5: 2f:16:48:cb:7a:a7:67:56:d3:61:88:63:9d:b2:2c: 8b:cf:d1:70:e5:22:c3:10:c9:f4:41:40:6a:57:29: f6:2f:fe:45:7e:f0:a6:b0:e6:97:d8:6b:bf:33:b7: 69:62:5d:56:06:fd:a2:67:b0:1e:c5:8a:68:3f:b4: 98:6d:d2:a7:17:67:29:7b:9c:54:b2:68:12:84:4b: 58:e1:a2:06:c4:c0:1d:c4:81:a9:5f:0a:5b:60:e2: 87:df:d5:2c:76:c2:d1:1a:38:f8:05:8d:f1:00:17: b7:44:cf:c9:e9:c1:a8:1f:4e:a3:f9:99:af:12:d0: 2e:1a:aa:f1:2b:50:1e:e9:98:b3:f6:b1:f7:2a:58: 19:13:c2:6b:9e:28:df:3d:86:09:2e:f8:19:be:16: e9:f2:28:b3:ff:35:7e:52:7f:21:3a:e5:b5:d0:69: 6f:0d:5d:0e:cb:8c:ee:a0:6a:3e:02:c5:24:32:df: 33:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:45:38:3F:52:7D:E6:44:17:97:2C:4A:FE:A2:93:62:C9:35:47:DD X509v3 Authority Key Identifier: keyid:7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:f9:a7:c6:c5:26:2c:aa:26:bd:84:cd:6a:76:c7:68:74:9f: c4:78:5e:9c:6a:5c:03:0f:47:b4:ee:7d:e4:5c:a2:2a:5c:00: 9c:13:c4:7c:e4:c8:51:b5:18:8c:ab:cc:c5:e7:97:b3:42:63: c8:32:eb:54:af:19:8a:a3:5b:dd:d4:80:f8:96:67:e6:d9:02: 7c:57:76:22:22:40:19:cc:c6:49:f0:27:81:1d:14:f8:d2:f8: c9:27:cb:6f:1a:3c:b2:9d:d1:bd:fd:9a:7d:e1:24:20:d8:ea: 51:34:d3:cc:01:3d:da:79:7e:ab:a2:1d:30:99:da:78:d1:fb: 77:86:d4:3b:83:39:f5:45:a9:bf:35:89:6c:b2:8f:39:8c:5f: c9:19:77:9f:06:3d:cf:f0:2d:1b:06:e9:f6:94:6c:c3:f0:1b: 75:6e:b4:f6:0e:0b:d7:f7:5f:d3:0a:a5:d7:9a:ea:c4:10:b8: 71:cc:00:b3:36:2d:39:31:c0:f3:df:30:11:3d:d6:ae:bf:9b: f8:d0:1c:10:f6:17:69:fc:8e:0a:89:3e:27:6e:e3:37:1b:44: d2:e8:e2:34:dd:81:bc:00:ed:ea:57:48:47:e8:7b:d7:18:1c: eb:5b:24:d8:ae:39:98:a1:c4:2a:3b:e5:30:48:0e:f2:f8:9c: 46:ca:ca:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMUIxMTAvBgNVBAUTKDdCOTlGOEQ2Qjk0MTNDRTJBMjk2RUIxQzdEN0VGRTZE NDdEMENCQTQwHhcNMjUwNDI0MjAyODQ0WhcNMjUwNTAxMjAyODQ0WjAYMRYwFAYD VQQDEw02ODBhOWVmYy0wZWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4P8iqZkvL7sFnXQqQKmrgiffOL4mc0voGVbJt6bCGGogZ5Zr0jJemUI0zPRy EperqRyFIbDN6t0gEDPRuGej0uyUAcrXsqtoHcUvFkjLeqdnVtNhiGOdsiyLz9Fw 5SLDEMn0QUBqVyn2L/5FfvCmsOaX2Gu/M7dpYl1WBv2iZ7AexYpoP7SYbdKnF2cp e5xUsmgShEtY4aIGxMAdxIGpXwpbYOKH39UsdsLRGjj4BY3xABe3RM/J6cGoH06j +ZmvEtAuGqrxK1Ae6Ziz9rH3KlgZE8JrnijfPYYJLvgZvhbp8iiz/zV+Un8hOuW1 0GlvDV0Oy4zuoGo+AsUkMt8zHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFFOD9S feZEF5csSv6ik2LJNUfdMB8GA1UdIwQYMBaAFHuZ+Na5QTziopbrHH1+/m1H0Muk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYxQi8yM0YzMDU1MEJD NEYxMUVBQkE4Qzk2MkZDNEY5QUUwMi9lNW40MXJsQlBPS2lsdXNjZlg3LWJVZlF5 NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U1bjQxcmxCUE9LaWx1c2NmWDctYlVmUXk2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYxQi8yM0YzMDU1MEJDNEYxMUVBQkE4Qzk2MkZDNEY5QUUwMi9lNW40MXJsQlBP S2lsdXNjZlg3LWJVZlF5NlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe+afGxSYsqia9hM1qdsdodJ/EeF6calwDD0e07n3kXKIqXACcE8R8 5MhRtRiMq8zF55ezQmPIMutUrxmKo1vd1ID4lmfm2QJ8V3YiIkAZzMZJ8CeBHRT4 0vjJJ8tvGjyyndG9/Zp94SQg2OpRNNPMAT3aeX6roh0wmdp40ft3htQ7gzn1Ram/ NYlsso85jF/JGXefBj3P8C0bBun2lGzD8Bt1brT2DgvX91/TCqXXmurEELhxzACz Ni05McDz3zARPdauv5v40BwQ9hdp/I4KiT4nbuM3G0TS6OI03YG8AO3qV0hH6HvX GBzrWyTYrjmYocQqO+UwSA7y+JxGysoY -----END CERTIFICATE-----Generated at Sat Apr 26 12:23:36 2025 by rpki-client