$ rpki-client -vvf rpki.apnic.net/member_repository/A91E299A/A0AC0992DDF711EF80D2156FC4F9AE02/edSLikSpvRZsNNwg7IxXE_MJLss.mft File: edSLikSpvRZsNNwg7IxXE_MJLss.mft (raw, json) Hash identifier: rxhEFENLeGq65AVXt9QQuRyE0XxKxHFo5mNaeL0gxwU= Subject key identifier: D5:BE:D2:C7:71:12:42:46:8D:EE:1A:CF:07:C5:7A:F9:F5:D6:93:24 Authority key identifier: 79:D4:8B:8A:44:A9:BD:16:6C:34:DC:20:EC:8C:57:13:F3:09:2E:CB Certificate issuer: /CN=A91E299A/serialNumber=79D48B8A44A9BD166C34DC20EC8C5713F3092ECB Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edSLikSpvRZsNNwg7IxXE_MJLss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E299A/A0AC0992DDF711EF80D2156FC4F9AE02/edSLikSpvRZsNNwg7IxXE_MJLss.mft Manifest number: 2E Signing time: Fri 25 Apr 2025 06:40:16 +0000 Manifest this update: Fri 25 Apr 2025 06:40:15 +0000 Manifest next update: Fri 02 May 2025 06:40:15 +0000 Files and hashes: 1: edSLikSpvRZsNNwg7IxXE_MJLss.crl (hash: 5iE9S2WSTs3xU5Wmch8JmBn7MNVWhxLu58rzLBZd8XE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E299A/A0AC0992DDF711EF80D2156FC4F9AE02/edSLikSpvRZsNNwg7IxXE_MJLss.crl rsync://rpki.apnic.net/member_repository/A91E299A/A0AC0992DDF711EF80D2156FC4F9AE02/edSLikSpvRZsNNwg7IxXE_MJLss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edSLikSpvRZsNNwg7IxXE_MJLss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:40:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E299A, serialNumber=79D48B8A44A9BD166C34DC20EC8C5713F3092ECB Validity Not Before: Apr 25 06:40:15 2025 GMT Not After : May 2 06:40:15 2025 GMT Subject: CN=680b2e50-eed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9e:bf:fe:bf:e8:8c:9f:fe:68:0d:a6:c6:a7: ec:21:86:ca:7b:26:de:22:ed:cf:72:04:2a:3b:80: 1c:a7:ae:88:b4:f2:85:eb:41:b1:49:60:08:55:72: d1:40:10:7a:a1:5a:4f:00:98:77:f8:e0:a9:bf:a5: 1b:12:fb:f5:84:02:19:b4:0e:3d:56:52:1d:a3:23: ff:3c:7d:4e:03:8c:57:45:c5:28:0b:73:de:f3:6d: 95:92:dd:4a:dd:df:3a:d7:68:4a:6f:b3:0b:bd:fa: 29:95:ff:02:c4:b3:be:01:a0:77:d6:ba:e5:e8:75: c1:ac:d6:50:80:cf:8b:f4:91:ef:43:ff:6f:0d:c6: 39:9a:a9:f5:48:04:ad:1a:34:00:d3:dc:3e:00:f4: 2b:14:a8:bd:31:a9:51:ba:0d:d0:eb:ea:5f:2d:5f: 7e:42:60:40:cf:86:43:c5:7f:04:f3:ee:d0:6c:ca: b5:8d:45:3e:fe:7e:b7:2a:88:aa:09:f0:d6:61:ba: 5b:c5:35:71:f0:df:37:7a:88:c6:c1:bc:c2:53:8d: c0:cb:e7:2b:4d:80:48:26:70:bd:07:97:54:c7:ae: 63:8e:97:f1:96:c0:fa:d2:b5:fb:94:98:ee:f2:80: 58:28:50:e8:38:80:b6:31:13:4d:01:b8:c3:67:77: 7c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BE:D2:C7:71:12:42:46:8D:EE:1A:CF:07:C5:7A:F9:F5:D6:93:24 X509v3 Authority Key Identifier: keyid:79:D4:8B:8A:44:A9:BD:16:6C:34:DC:20:EC:8C:57:13:F3:09:2E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E299A/A0AC0992DDF711EF80D2156FC4F9AE02/edSLikSpvRZsNNwg7IxXE_MJLss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edSLikSpvRZsNNwg7IxXE_MJLss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E299A/A0AC0992DDF711EF80D2156FC4F9AE02/edSLikSpvRZsNNwg7IxXE_MJLss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:d7:9f:8a:99:e4:ba:ab:e1:64:89:fc:b4:0a:11:dd:59:8c: ed:2e:76:9f:d2:21:d4:48:ea:09:2c:97:9b:2c:86:f8:b5:6d: 2c:39:dc:df:98:fb:8a:bb:3c:7e:c9:85:2e:87:74:be:05:8b: 1d:0a:38:b5:79:bb:7c:90:7c:a6:8a:5d:59:9b:88:64:f2:b7: dd:86:57:79:7f:5c:fe:03:b7:81:76:b5:2e:09:ee:40:d1:3b: d4:00:d8:1f:83:ed:a7:93:ed:a7:28:8a:1a:34:94:5c:68:35: 4c:85:b3:95:e0:a0:ad:fc:da:a8:c0:f5:9b:93:80:91:09:aa: 28:fc:c4:da:b4:c6:5d:5d:19:66:d1:ee:9c:94:0e:eb:a2:da: 2c:c2:b8:73:42:31:bb:05:d2:0c:56:eb:f8:6e:c0:dc:89:04: ce:31:0c:57:95:33:88:5a:85:f0:b2:d0:f7:1d:89:82:ff:8e: f8:fa:a9:ff:56:93:52:09:e6:24:2e:9f:38:9e:42:2c:f8:12: 39:e3:a7:21:ea:55:0d:ea:81:9f:e2:67:37:a7:0b:40:74:9a: 53:00:a3:cf:08:58:f0:c5:47:59:eb:31:7f:49:00:ed:1f:e0: 49:0d:08:7c:bb:81:0d:0a:38:62:b8:09:90:0a:ef:a9:6a:0a: d6:57:43:ba -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF Mjk5QTExMC8GA1UEBRMoNzlENDhCOEE0NEE5QkQxNjZDMzREQzIwRUM4QzU3MTNG MzA5MkVDQjAeFw0yNTA0MjUwNjQwMTVaFw0yNTA1MDIwNjQwMTVaMBgxFjAUBgNV BAMTDTY4MGIyZTUwLWVlZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0nr/+v+iMn/5oDabGp+whhsp7Jt4i7c9yBCo7gBynroi08oXrQbFJYAhVctFA EHqhWk8AmHf44Km/pRsS+/WEAhm0Dj1WUh2jI/88fU4DjFdFxSgLc97zbZWS3Urd 3zrXaEpvswu9+imV/wLEs74BoHfWuuXodcGs1lCAz4v0ke9D/28NxjmaqfVIBK0a NADT3D4A9CsUqL0xqVG6DdDr6l8tX35CYEDPhkPFfwTz7tBsyrWNRT7+frcqiKoJ 8NZhulvFNXHw3zd6iMbBvMJTjcDL5ytNgEgmcL0Hl1THrmOOl/GWwPrStfuUmO7y gFgoUOg4gLYxE00BuMNnd3zDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1b7Sx3ES QkaN7hrPB8V6+fXWkyQwHwYDVR0jBBgwFoAUedSLikSpvRZsNNwg7IxXE/MJLssw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUyOTlBL0EwQUMwOTkyRERG NzExRUY4MEQyMTU2RkM0RjlBRTAyL2VkU0xpa1NwdlJac05Od2c3SXhYRV9NSkxz cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZWRTTGlrU3B2UlpzTk53ZzdJeFhFX01KTHNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUy OTlBL0EwQUMwOTkyRERGNzExRUY4MEQyMTU2RkM0RjlBRTAyL2VkU0xpa1NwdlJa c05Od2c3SXhYRV9NSkxzcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADTXn4qZ5Lqr4WSJ/LQKEd1ZjO0udp/SIdRI6gksl5sshvi1bSw53N+Y +4q7PH7JhS6HdL4Fix0KOLV5u3yQfKaKXVmbiGTyt92GV3l/XP4Dt4F2tS4J7kDR O9QA2B+D7aeT7acoiho0lFxoNUyFs5XgoK382qjA9ZuTgJEJqij8xNq0xl1dGWbR 7pyUDuui2izCuHNCMbsF0gxW6/huwNyJBM4xDFeVM4hahfCy0PcdiYL/jvj6qf9W k1IJ5iQunzieQiz4EjnjpyHqVQ3qgZ/iZzenC0B0mlMAo88IWPDFR1nrMX9JAO0f 4EkNCHy7gQ0KOGK4CZAK76lqCtZXQ7o= -----END CERTIFICATE-----Generated at Sat Apr 26 12:23:42 2025 by rpki-client