$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft File: epirabcrqsZmDlTdHG2KBi4s0v4.mft (raw, json) Hash identifier: dCJpGvMHNKb2D6IGDGG3riQSPRuZjIEOwJWqcYUMUrs= Subject key identifier: C8:B0:DC:90:6C:E2:F8:2A:3B:43:F5:31:5F:96:1B:6B:71:FE:2C:24 Authority key identifier: 7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE Certificate issuer: /CN=A91E6038/serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE Certificate serial: 0350 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft Manifest number: 034B Signing time: Thu 03 Apr 2025 01:02:27 +0000 Manifest this update: Thu 03 Apr 2025 01:02:27 +0000 Manifest next update: Thu 10 Apr 2025 01:02:27 +0000 Files and hashes: 1: epirabcrqsZmDlTdHG2KBi4s0v4.crl (hash: AtMbhgSllqHF4lnhjHS9B5ZQpS76jFG6E3l6ID0q2kQ=) 2: 7ABCBB70AFFE11ECA52DBA5DC4F9AE02.roa (hash: lDraqThqAp2VTAeBcGzfKiHZ4mgdJ9Pve9y5JAjucic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 848 (0x350) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6038 Validity Not Before: Apr 3 01:02:27 2025 GMT Not After : Apr 10 01:02:27 2025 GMT Subject: CN=67edde23-9613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8f:b2:11:7c:16:68:64:fc:da:c3:7b:32:52: 94:c6:55:20:28:95:32:8f:de:33:73:09:58:ca:14: 2b:b5:20:09:f8:41:52:80:3a:99:60:fc:96:19:62: d7:e0:54:55:52:07:21:8b:b9:6f:4f:60:3a:dd:37: 65:43:72:60:e3:37:46:3c:a8:55:50:61:f2:a5:18: 4e:fb:8c:7d:9e:16:cf:bf:09:0c:0a:3d:44:21:4b: 26:c4:02:82:05:90:b0:5b:55:d0:26:ec:a1:74:29: 2c:fe:06:1a:da:0d:0b:11:df:92:ef:53:fb:75:62: ab:b4:e7:f3:ec:70:50:b9:fd:60:39:82:85:1d:55: 79:6b:d2:b4:64:1f:d4:0c:fa:89:66:b8:90:bd:63: 75:bf:b3:31:24:3c:78:38:d6:95:5e:37:e2:2c:29: 1d:ce:85:4c:47:23:41:4c:0a:1a:a3:9e:1a:6f:14: f5:54:90:b2:8e:44:47:f9:e5:b1:b3:0f:b1:9e:44: f2:df:a3:ce:eb:95:33:a6:34:57:4d:f9:d0:32:77: a1:28:5d:9c:1c:4d:92:f0:c5:0e:36:21:6d:84:a6: 8e:eb:d8:d4:c4:7d:4a:9e:0f:62:bf:ef:26:77:3f: ae:75:21:52:7b:e0:98:67:37:d4:01:1a:c2:be:bf: ba:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B0:DC:90:6C:E2:F8:2A:3B:43:F5:31:5F:96:1B:6B:71:FE:2C:24 X509v3 Authority Key Identifier: keyid:7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:eb:f7:59:46:28:f1:a8:ed:fc:85:47:b9:5d:54:4f:6f:c5: 61:cd:d7:72:f6:f2:8f:49:c8:73:53:d0:71:2b:02:35:af:99: 02:c7:d6:ff:4a:0e:dd:4f:95:3d:be:f1:ea:24:2e:f0:bf:28: c0:ad:04:e3:af:c2:bd:84:ab:2f:be:70:67:c5:8f:84:51:6f: c3:f8:c1:70:32:17:67:65:09:01:2b:03:5a:03:2d:94:e3:c6: 96:0e:d3:d0:d6:ae:b7:9d:f4:f3:ee:f4:6c:73:df:ea:87:16: 4d:c1:41:18:b0:ab:73:66:bc:57:0e:78:48:8c:9a:a8:14:28: dd:42:7b:1d:fa:e4:f6:73:d8:0b:8b:66:f5:ff:9f:70:8d:a1: 0b:b6:0a:59:3b:5c:3d:b3:83:d0:73:91:9d:a9:4b:ac:a4:33: 6b:37:db:40:7f:df:84:41:7c:49:f1:0e:c4:ac:67:2b:e0:86: 3d:81:29:b7:c1:d4:ac:8f:fa:ed:63:f8:29:6a:1a:ec:d0:58: 53:73:54:cd:c5:1e:f2:36:d9:8a:78:3f:73:e0:12:b6:de:54: 53:6b:53:1a:c8:b1:ce:27:ef:b2:e4:3d:29:1f:92:b0:f7:4f: a4:f8:ae:e5:85:ee:c8:05:d6:f5:db:25:f6:bf:ba:06:e0:34: ea:6c:bb:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYwMzgxMTAvBgNVBAUTKDdBOThBQjY5QjcyQkFBQzY2NjBFNTRERDFDNkQ4QTA2 MkUyQ0QyRkUwHhcNMjUwNDAzMDEwMjI3WhcNMjUwNDEwMDEwMjI3WjAYMRYwFAYD VQQDEw02N2VkZGUyMy05NjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwY+yEXwWaGT82sN7MlKUxlUgKJUyj94zcwlYyhQrtSAJ+EFSgDqZYPyWGWLX 4FRVUgchi7lvT2A63TdlQ3Jg4zdGPKhVUGHypRhO+4x9nhbPvwkMCj1EIUsmxAKC BZCwW1XQJuyhdCks/gYa2g0LEd+S71P7dWKrtOfz7HBQuf1gOYKFHVV5a9K0ZB/U DPqJZriQvWN1v7MxJDx4ONaVXjfiLCkdzoVMRyNBTAoao54abxT1VJCyjkRH+eWx sw+xnkTy36PO65UzpjRXTfnQMnehKF2cHE2S8MUONiFthKaO69jUxH1Kng9iv+8m dz+udSFSe+CYZzfUARrCvr+6vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMiw3JBs 4vgqO0P1MV+WG2tx/iwkMB8GA1UdIwQYMBaAFHqYq2m3K6rGZg5U3RxtigYuLNL+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjAzOC85MUUwQzg1MkFG RkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFzWm1EbFRkSEcyS0JpNHMw djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwaXJhYmNycXNabURsVGRIRzJLQmk0czB2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjAzOC85MUUwQzg1MkFGRkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFz Wm1EbFRkSEcyS0JpNHMwdjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM6/dZRijxqO38hUe5XVRPb8Vhzddy9vKPSchzU9BxKwI1r5kCx9b/ Sg7dT5U9vvHqJC7wvyjArQTjr8K9hKsvvnBnxY+EUW/D+MFwMhdnZQkBKwNaAy2U 48aWDtPQ1q63nfTz7vRsc9/qhxZNwUEYsKtzZrxXDnhIjJqoFCjdQnsd+uT2c9gL i2b1/59wjaELtgpZO1w9s4PQc5GdqUuspDNrN9tAf9+EQXxJ8Q7ErGcr4IY9gSm3 wdSsj/rtY/gpahrs0FhTc1TNxR7yNtmKeD9z4BK23lRTa1MayLHOJ++y5D0pH5Kw 90+k+K7lhe7IBdb12yX2v7oG4DTqbLvP -----END CERTIFICATE-----Generated at Fri Apr 4 22:06:32 2025 by rpki-client