$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft File: e14ORHE1uxchraYfZdx1yV9U2wI.mft (raw, json) Hash identifier: 1eaERq6rzEiJ3SytaoAITtwb5U0R3wtV+HntXFUPy4w= Subject key identifier: 1C:14:B9:30:B4:8C:B0:49:A6:49:BE:20:74:5A:AF:C7:27:92:AB:12 Authority key identifier: 7B:5E:0E:44:71:35:BB:17:21:AD:A6:1F:65:DC:75:C9:5F:54:DB:02 Certificate issuer: /CN=A91D8226/serialNumber=7B5E0E447135BB1721ADA61F65DC75C95F54DB02 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e14ORHE1uxchraYfZdx1yV9U2wI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft Manifest number: 46 Signing time: Fri 25 Apr 2025 06:25:33 +0000 Manifest this update: Fri 25 Apr 2025 06:25:33 +0000 Manifest next update: Fri 02 May 2025 06:25:33 +0000 Files and hashes: 1: e14ORHE1uxchraYfZdx1yV9U2wI.crl (hash: mzE6ocgN4TsBnDmBvNvg7u7EY1jWIL/ItcCBlmuPeh0=) 2: E4086C08BC2311EF9A445084C4F9AE02.roa (hash: r/4IGYNLMpKuCk8NRggWB2EhHJYpkEkj/MdGzvjYmVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.crl rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e14ORHE1uxchraYfZdx1yV9U2wI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8226, serialNumber=7B5E0E447135BB1721ADA61F65DC75C95F54DB02 Validity Not Before: Apr 25 06:25:33 2025 GMT Not After : May 2 06:25:33 2025 GMT Subject: CN=680b2add-421b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d6:2c:59:e8:1c:43:6b:7d:c3:54:d8:fa:08: fd:43:cd:3d:fb:c0:ef:e9:27:c8:c2:06:81:e0:c9: fd:07:a1:0c:3c:c0:fd:df:92:e1:04:05:3a:33:a4: 35:cb:de:60:ea:e8:cd:23:e3:90:9f:56:a7:56:50: e8:9d:a7:e6:45:ca:44:f5:81:bd:bd:57:16:ee:ec: b0:70:e3:dd:c1:5a:5b:ec:06:73:2b:e1:cf:06:b7: 19:eb:0d:9b:b0:19:ad:ef:a8:c1:b5:8e:6d:16:8f: 7b:55:6e:d4:16:14:aa:02:d3:e2:c5:d3:0a:15:d0: ac:0f:b1:b8:0e:af:83:8b:d1:87:64:39:95:e8:14: b4:bf:02:06:e6:c7:df:81:49:9a:f0:6c:96:cb:d7: dc:cb:3f:45:12:6c:c3:6d:43:f8:f2:1d:0f:eb:2e: 09:81:31:0d:6a:18:ca:c5:e9:61:53:fd:f0:56:0c: 0b:6e:da:cf:61:59:61:11:44:16:2b:e6:00:a9:a7: 51:91:c3:ab:2a:58:e7:a8:f7:b2:a0:c0:c2:a5:ca: 63:5b:8c:bd:bd:77:80:ad:da:ac:bf:f1:08:36:bc: 2c:6e:67:7b:0b:a2:54:58:d9:0c:10:95:c9:d9:17: 46:b3:35:e5:ac:b6:64:16:7f:93:fb:ac:a5:00:45: 0f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:14:B9:30:B4:8C:B0:49:A6:49:BE:20:74:5A:AF:C7:27:92:AB:12 X509v3 Authority Key Identifier: keyid:7B:5E:0E:44:71:35:BB:17:21:AD:A6:1F:65:DC:75:C9:5F:54:DB:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e14ORHE1uxchraYfZdx1yV9U2wI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ee:97:77:3c:dc:29:55:55:0e:40:d2:3c:c4:25:1d:c5:15: 76:4b:f1:fc:fa:a4:7a:a8:53:a4:0b:10:f2:63:df:e6:30:dd: 80:e6:b4:c7:67:d3:57:72:1a:1c:68:5e:98:37:99:7f:ab:b7: 9d:0e:cd:1b:0f:62:26:f3:15:6b:63:f5:72:9a:fc:f7:97:59: f0:e9:77:de:47:5d:7d:81:9c:f3:11:79:ac:6c:93:83:5f:ee: d3:59:db:f4:e3:dd:0f:07:06:ce:8a:ad:ec:03:75:2b:20:c6: 91:8c:51:44:54:e7:5c:10:fb:9b:ec:c0:79:7e:c1:29:37:f0: ac:1b:bf:91:a4:23:12:67:e5:dd:93:05:e0:a7:12:3b:e1:a4: 3e:ad:bf:13:f3:3d:8a:9d:72:67:16:f8:76:dd:b7:29:57:e0: 2e:fe:e0:12:9a:ed:29:da:d8:9c:75:62:14:ef:13:3b:2b:3c: 3c:88:a4:3e:bb:e4:dc:36:9f:b1:73:6e:e8:8e:d8:28:df:1d: 41:b0:bf:58:e6:ee:da:cb:d6:90:0f:da:2d:da:27:4b:3f:ee: f6:ed:18:96:35:2e:3a:43:50:37:fd:f7:09:29:24:91:80:20: b7:3b:d0:99:ec:31:39:fb:53:c6:2d:b8:13:2d:79:f5:07:02: d7:8a:bf:01 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODIyNjExMC8GA1UEBRMoN0I1RTBFNDQ3MTM1QkIxNzIxQURBNjFGNjVEQzc1Qzk1 RjU0REIwMjAeFw0yNTA0MjUwNjI1MzNaFw0yNTA1MDIwNjI1MzNaMBgxFjAUBgNV BAMTDTY4MGIyYWRkLTQyMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDI1ixZ6BxDa33DVNj6CP1DzT37wO/pJ8jCBoHgyf0HoQw8wP3fkuEEBTozpDXL 3mDq6M0j45CfVqdWUOidp+ZFykT1gb29Vxbu7LBw493BWlvsBnMr4c8GtxnrDZuw Ga3vqMG1jm0Wj3tVbtQWFKoC0+LF0woV0KwPsbgOr4OL0YdkOZXoFLS/Agbmx9+B SZrwbJbL19zLP0USbMNtQ/jyHQ/rLgmBMQ1qGMrF6WFT/fBWDAtu2s9hWWERRBYr 5gCpp1GRw6sqWOeo97KgwMKlymNbjL29d4Ct2qy/8Qg2vCxuZ3sLolRY2QwQlcnZ F0azNeWstmQWf5P7rKUARQ8XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHBS5MLSM sEmmSb4gdFqvxyeSqxIwHwYDVR0jBBgwFoAUe14ORHE1uxchraYfZdx1yV9U2wIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MjI2L0VDNERGMzE0QkMx RjExRUZBQURBNzQ1RkM0RjlBRTAyL2UxNE9SSEUxdXhjaHJhWWZaZHgxeVY5VTJ3 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZTE0T1JIRTF1eGNocmFZZlpkeDF5VjlVMndJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 MjI2L0VDNERGMzE0QkMxRjExRUZBQURBNzQ1RkM0RjlBRTAyL2UxNE9SSEUxdXhj aHJhWWZaZHgxeVY5VTJ3SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFvul3c83ClVVQ5A0jzEJR3FFXZL8fz6pHqoU6QLEPJj3+Yw3YDmtMdn 01dyGhxoXpg3mX+rt50OzRsPYibzFWtj9XKa/PeXWfDpd95HXX2BnPMReaxsk4Nf 7tNZ2/Tj3Q8HBs6KrewDdSsgxpGMUURU51wQ+5vswHl+wSk38Kwbv5GkIxJn5d2T BeCnEjvhpD6tvxPzPYqdcmcW+HbdtylX4C7+4BKa7Sna2Jx1YhTvEzsrPDyIpD67 5Nw2n7FzbuiO2CjfHUGwv1jm7trL1pAP2i3aJ0s/7vbtGJY1LjpDUDf99wkpJJGA ILc70JnsMTn7U8YtuBMtefUHAteKvwE= -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:51 2025 by rpki-client