$ rpki-client -vvf rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft File: 8Esk0kgu8B-It9DWKlOSJzm3iA0.mft (raw, json) Hash identifier: eo6rVGVK+gxxf6PmLmtQNJEpjMxftPD8hhiRCGoR0QA= Subject key identifier: EE:E6:AE:71:4E:91:64:FB:3A:22:18:06:43:C2:47:43:0E:F9:6C:7B Authority key identifier: F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D Certificate issuer: /CN=A91D112B/serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D Certificate serial: 0727 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft Manifest number: 071E Signing time: Wed 02 Apr 2025 21:50:27 +0000 Manifest this update: Wed 02 Apr 2025 21:50:26 +0000 Manifest next update: Wed 09 Apr 2025 21:50:26 +0000 Files and hashes: 1: 8Esk0kgu8B-It9DWKlOSJzm3iA0.crl (hash: qRWVgxIszU+aAdSzA1lA8oPjow7L2iMzWyuD1BI7r78=) 2: D00FC228F46111ECA631AC55C4F9AE02.roa (hash: SdQIXAZgLAYC0wC8aVzYt0Gf/I3END/T1//qc7xaDnw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1831 (0x727) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D112B Validity Not Before: Apr 2 21:50:26 2025 GMT Not After : Apr 9 21:50:26 2025 GMT Subject: CN=67edb122-99de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b0:57:34:a9:ee:24:2c:33:9d:a1:32:d8:29: b6:d4:8d:7d:ad:49:95:9a:05:31:f6:dd:f8:61:a2: 65:fb:77:e4:56:7f:07:36:b6:bc:53:41:0b:b7:39: 7e:d0:d9:54:74:c1:f1:b3:e2:4b:5f:17:59:1b:00: ff:ac:4c:03:4a:71:db:80:63:a6:a6:0a:ad:b6:ad: 61:87:49:12:5f:f8:8e:b8:cb:3f:49:20:c9:09:11: ac:02:1d:8b:1a:c1:bb:38:75:c1:7d:e8:b7:87:18: ca:8f:ba:2e:78:4a:49:35:01:a5:d4:6b:fb:bd:3c: c4:72:f6:82:1d:50:28:52:42:88:01:5c:2c:f4:1c: 22:bb:ef:62:88:39:7b:2b:b5:e2:b9:45:e8:9a:69: 64:87:26:70:f5:69:ee:a1:03:d1:f7:37:0e:cc:a2: ac:ce:89:65:bd:94:02:9c:6c:d9:81:0f:81:2b:7d: e8:c7:a8:fa:ae:32:c8:22:f4:87:f5:b9:2a:aa:5f: 0d:a8:bd:88:fd:ac:8b:75:9c:25:17:44:5a:57:a0: 77:34:32:a0:44:44:d4:0b:33:89:7c:4f:69:25:56: 4f:cc:79:be:fe:ed:bb:20:20:4d:f7:bb:59:f5:fa: 38:83:b4:d9:d8:32:f1:77:33:aa:1e:55:4a:cf:cd: 11:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E6:AE:71:4E:91:64:FB:3A:22:18:06:43:C2:47:43:0E:F9:6C:7B X509v3 Authority Key Identifier: keyid:F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:40:15:c8:c3:8c:be:aa:e4:64:d3:a9:ec:c2:83:b0:f8:7b: 07:67:39:f4:0e:38:8e:77:8f:b2:aa:9c:61:19:22:de:3e:f0: eb:4e:63:55:ae:71:9f:c8:95:8f:30:7b:96:14:01:bb:b1:fb: c9:1f:1e:ec:1c:71:c0:b4:3d:1a:7c:22:fe:0a:ed:3a:09:66: 0b:2c:fd:52:cc:f2:ed:d2:93:93:ac:f4:3c:58:f3:a6:e1:19: 42:60:6b:62:99:96:e0:b9:f9:68:a8:89:9a:99:b7:e4:8c:7e: 88:17:22:83:55:13:49:d6:dc:17:7d:21:0a:bc:02:18:41:d9: 64:ea:da:56:71:7c:69:9f:f8:5a:7d:40:58:0a:fb:97:11:53: c2:e0:97:da:58:a9:a5:b1:23:68:9f:a1:92:ac:38:a5:d7:09: 98:4f:8e:2a:f9:af:fd:1f:0b:17:3c:93:19:44:af:b7:93:94: 5d:59:57:1b:bd:ac:eb:e9:7a:af:95:22:fe:46:cc:b8:df:b8: 4c:4d:c7:d1:e0:98:ef:fa:95:e4:ae:aa:ab:35:4c:07:e6:54: e6:d4:a4:0b:5c:d3:35:da:d0:76:81:72:0c:09:1f:4b:99:98: 61:a4:fd:0a:10:7f:13:3c:0d:a4:2c:92:29:fc:83:08:af:30: 46:0d:37:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMkIxMTAvBgNVBAUTKEYwNEIyNEQyNDgyRUYwMUY4OEI3RDBENjJBNTM5MjI3 MzlCNzg4MEQwHhcNMjUwNDAyMjE1MDI2WhcNMjUwNDA5MjE1MDI2WjAYMRYwFAYD VQQDEw02N2VkYjEyMi05OWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3rBXNKnuJCwznaEy2Cm21I19rUmVmgUx9t34YaJl+3fkVn8HNra8U0ELtzl+ 0NlUdMHxs+JLXxdZGwD/rEwDSnHbgGOmpgqttq1hh0kSX/iOuMs/SSDJCRGsAh2L GsG7OHXBfei3hxjKj7oueEpJNQGl1Gv7vTzEcvaCHVAoUkKIAVws9Bwiu+9iiDl7 K7XiuUXommlkhyZw9WnuoQPR9zcOzKKszollvZQCnGzZgQ+BK33ox6j6rjLIIvSH 9bkqql8NqL2I/ayLdZwlF0RaV6B3NDKgRETUCzOJfE9pJVZPzHm+/u27ICBN97tZ 9fo4g7TZ2DLxdzOqHlVKz80R9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7mrnFO kWT7OiIYBkPCR0MO+Wx7MB8GA1UdIwQYMBaAFPBLJNJILvAfiLfQ1ipTkic5t4gN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEyQi8xQ0QwRTA1MDJG MzQxMUVCOTdGRTE3ODZDNEY5QUUwMi84RXNrMGtndThCLUl0OURXS2xPU0p6bTNp QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFc2swa2d1OEItSXQ5RFdLbE9TSnptM2lBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTEyQi8xQ0QwRTA1MDJGMzQxMUVCOTdGRTE3ODZDNEY5QUUwMi84RXNrMGtndThC LUl0OURXS2xPU0p6bTNpQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9QBXIw4y+quRk06nswoOw+HsHZzn0DjiOd4+yqpxhGSLePvDrTmNV rnGfyJWPMHuWFAG7sfvJHx7sHHHAtD0afCL+Cu06CWYLLP1SzPLt0pOTrPQ8WPOm 4RlCYGtimZbgufloqImambfkjH6IFyKDVRNJ1twXfSEKvAIYQdlk6tpWcXxpn/ha fUBYCvuXEVPC4JfaWKmlsSNon6GSrDil1wmYT44q+a/9HwsXPJMZRK+3k5RdWVcb vazr6XqvlSL+Rsy437hMTcfR4Jjv+pXkrqqrNUwH5lTm1KQLXNM12tB2gXIMCR9L mZhhpP0KEH8TPA2kLJIp/IMIrzBGDTet -----END CERTIFICATE-----Generated at Fri Apr 4 21:51:53 2025 by rpki-client