$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft File: e1ZuSGesy4G3S6nWZiJObARfDCc.mft (raw, json) Hash identifier: cMG/uBl/gFmJOQw7nQLLnB/lj/iB/Pub6N+sZcZ4c0o= Subject key identifier: 21:A8:5B:0F:53:30:9C:52:A2:06:61:D1:73:DE:73:26:89:7A:71:47 Authority key identifier: 7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27 Certificate issuer: /CN=A91F2DFB/serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27 Certificate serial: 0381 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft Manifest number: 037D Signing time: Fri 25 Apr 2025 00:39:58 +0000 Manifest this update: Fri 25 Apr 2025 00:39:57 +0000 Manifest next update: Fri 02 May 2025 00:39:57 +0000 Files and hashes: 1: e1ZuSGesy4G3S6nWZiJObARfDCc.crl (hash: ysJ5aZpDdvYsLrMVa/qFcpWrhzOpGzUcvJF7cytf8O0=) 2: 478248BEA05511ECABAEA234C4F9AE02.roa (hash: NkEOP97SzecD0KGRDamIN3H3KINufJxbEUvLVltNpgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 897 (0x381) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2DFB, serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27 Validity Not Before: Apr 25 00:39:57 2025 GMT Not After : May 2 00:39:57 2025 GMT Subject: CN=680ad9dd-2ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:50:6a:ea:74:09:0b:31:7c:15:24:20:2c:31: be:b9:9c:ec:15:3f:64:e7:53:e0:0b:bf:c4:be:81: bc:a6:38:86:38:d3:fa:72:11:d2:62:0e:de:c1:85: b2:62:e7:9d:a4:4e:20:c7:c1:1f:e8:8b:b6:00:2b: de:98:d1:90:61:5e:04:1f:ac:c5:2d:e1:b8:e1:b0: 76:e1:b6:53:8b:2d:c5:eb:99:c8:1b:5f:10:7d:8f: 05:9c:49:e1:c9:03:58:f4:33:e4:59:4a:74:08:17: c8:a0:f6:a3:ca:43:8d:b5:9b:76:68:0f:3a:72:00: a8:a1:93:27:69:90:60:b3:2d:e8:10:f2:f4:21:fd: 8a:74:41:c6:78:99:65:9a:60:42:af:14:3e:f1:fe: 06:4b:06:4f:1c:ee:44:ca:e6:3e:5f:b0:46:03:ad: 5c:65:18:12:ad:68:fc:28:ce:ec:9a:79:61:63:42: 02:ce:ac:aa:5a:5f:92:6c:2a:ca:ee:d9:d9:47:9a: 49:0f:60:a3:87:13:c4:6a:ba:99:17:a3:8b:d5:8a: 35:c3:54:45:b1:44:32:5a:f1:be:1f:9e:48:13:6e: a5:c7:ef:83:50:c4:a5:37:b3:44:b9:0f:b0:e9:c7: 03:16:5a:51:42:fd:9b:68:f8:a8:2a:e1:b1:17:ff: 08:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A8:5B:0F:53:30:9C:52:A2:06:61:D1:73:DE:73:26:89:7A:71:47 X509v3 Authority Key Identifier: keyid:7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ea:94:34:58:bc:43:18:e3:5e:23:2f:83:9b:16:b9:db:13: 4c:d2:fd:40:4a:78:95:df:06:53:5b:d1:20:7b:4e:9b:5f:af: f8:6c:6b:c0:61:b5:f5:ba:86:54:57:3a:4f:d7:00:ec:60:ed: 1a:bb:f6:5f:16:50:dd:3a:41:31:8f:cd:72:c4:4a:4f:54:28: 46:1b:26:c7:50:a0:02:1c:6c:32:b0:74:0d:56:8e:ce:0c:cd: 28:c4:2a:c5:47:57:14:88:f4:a2:14:83:85:2c:6d:2f:8e:d7: 51:91:1e:1f:50:f8:25:70:4b:16:30:2c:04:42:02:11:50:f7: d3:38:14:56:40:6b:0d:7a:fd:77:5d:59:1e:cb:be:90:80:37: 7d:c0:e2:f8:7f:3d:dc:42:0e:3f:fe:ff:78:9a:fc:2a:7c:b5: 98:42:df:2e:04:36:72:ee:b8:92:c0:f6:1b:7a:20:9e:ea:54: cc:bd:62:2f:b7:7b:f1:f5:a4:8e:56:2b:ef:9f:07:27:72:6c: 8e:78:b3:d3:48:8c:0c:86:da:67:b6:45:45:9e:d4:1d:66:3e: e5:42:de:11:40:5a:cf:ab:e0:a3:27:a7:01:b8:cc:cc:d1:ab: 00:30:a1:44:b1:4e:41:5a:06:37:c3:d1:be:99:44:a5:1d:e9: be:5c:63:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJERkIxMTAvBgNVBAUTKDdCNTY2RTQ4NjdBQ0NCODFCNzRCQTlENjY2MjI0RTZD MDQ1RjBDMjcwHhcNMjUwNDI1MDAzOTU3WhcNMjUwNTAyMDAzOTU3WjAYMRYwFAYD VQQDEw02ODBhZDlkZC0yZWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlBq6nQJCzF8FSQgLDG+uZzsFT9k51PgC7/EvoG8pjiGONP6chHSYg7ewYWy YuedpE4gx8Ef6Iu2ACvemNGQYV4EH6zFLeG44bB24bZTiy3F65nIG18QfY8FnEnh yQNY9DPkWUp0CBfIoPajykONtZt2aA86cgCooZMnaZBgsy3oEPL0If2KdEHGeJll mmBCrxQ+8f4GSwZPHO5EyuY+X7BGA61cZRgSrWj8KM7smnlhY0ICzqyqWl+SbCrK 7tnZR5pJD2CjhxPEarqZF6OL1Yo1w1RFsUQyWvG+H55IE26lx++DUMSlN7NEuQ+w 6ccDFlpRQv2baPioKuGxF/8IgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGoWw9T MJxSogZh0XPecyaJenFHMB8GA1UdIwQYMBaAFHtWbkhnrMuBt0up1mYiTmwEXwwn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkRGQi85RkNBQURGRUEw NTAxMUVDOTdCRjhENzJDNEY5QUUwMi9lMVp1U0dlc3k0RzNTNm5XWmlKT2JBUmZE Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UxWnVTR2VzeTRHM1M2bldaaUpPYkFSZkRDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkRGQi85RkNBQURGRUEwNTAxMUVDOTdCRjhENzJDNEY5QUUwMi9lMVp1U0dlc3k0 RzNTNm5XWmlKT2JBUmZEQ2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv6pQ0WLxDGONeIy+Dmxa52xNM0v1ASniV3wZTW9Ege06bX6/4bGvA YbX1uoZUVzpP1wDsYO0au/ZfFlDdOkExj81yxEpPVChGGybHUKACHGwysHQNVo7O DM0oxCrFR1cUiPSiFIOFLG0vjtdRkR4fUPglcEsWMCwEQgIRUPfTOBRWQGsNev13 XVkey76QgDd9wOL4fz3cQg4//v94mvwqfLWYQt8uBDZy7riSwPYbeiCe6lTMvWIv t3vx9aSOVivvnwcncmyOeLPTSIwMhtpntkVFntQdZj7lQt4RQFrPq+CjJ6cBuMzM 0asAMKFEsU5BWgY3w9G+mUSlHem+XGON -----END CERTIFICATE-----Generated at Sat Apr 26 12:58:25 2025 by rpki-client