$ rpki-client -vvf rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft File: EESZe8Y6gT2gTBuRiXN0tosEumE.mft (raw, json) Hash identifier: qD9VP1IZz/rU3V2TR+LTANPCyQ5lOuDbR5MVdVBEKeQ= Subject key identifier: D1:FF:87:04:2C:68:35:84:8D:39:82:AA:02:47:BA:B9:1A:E0:11:2E Authority key identifier: 10:44:99:7B:C6:3A:81:3D:A0:4C:1B:91:89:73:74:B6:8B:04:BA:61 Certificate issuer: /CN=A91E87B4/serialNumber=1044997BC63A813DA04C1B91897374B68B04BA61 Certificate serial: 0E45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft Manifest number: 0E3C Signing time: Sun 20 Apr 2025 17:38:22 +0000 Manifest this update: Sun 20 Apr 2025 17:38:22 +0000 Manifest next update: Sun 27 Apr 2025 17:38:22 +0000 Files and hashes: 1: EESZe8Y6gT2gTBuRiXN0tosEumE.crl (hash: lWM968HsJ+rG655OO+XjkD8DaMxX66cM2gHigtkiM6U=) 2: 6D6DED2830BE11EC9401610CC4F9AE02.roa (hash: WHACvNrcE0YDUYNFLw70C4k+Gn2fGHs4oAn4CLKhehw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.crl rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3653 (0xe45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E87B4, serialNumber=1044997BC63A813DA04C1B91897374B68B04BA61 Validity Not Before: Apr 20 17:38:22 2025 GMT Not After : Apr 27 17:38:22 2025 GMT Subject: CN=6805310e-f8ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:54:ed:45:df:a1:7b:2d:3b:94:bc:42:4e:c2: 61:6f:67:3f:8b:c1:69:6c:55:cf:ec:d1:f9:86:9d: 01:60:94:29:40:36:93:07:94:b9:49:fc:88:e7:86: 05:e8:5d:00:67:d8:b9:3c:1e:2c:da:e6:b5:51:32: bf:73:fe:06:8d:78:e9:12:40:9f:86:c8:00:41:8a: 5a:b1:c3:ae:24:80:4f:1d:73:bf:97:03:ae:1c:5c: 40:2a:c8:d1:71:c1:a7:b0:6a:f1:69:c7:b1:9a:10: e8:79:0e:04:1f:13:06:71:87:20:16:36:5a:d1:e8: 16:86:14:c1:27:02:cf:81:46:ff:7d:fb:59:02:c3: d9:f9:20:fc:e8:04:c3:99:5b:94:c8:22:f5:16:7a: 40:05:e9:9e:bc:ec:8d:18:5d:df:2f:0b:ce:53:44: 1e:19:b3:0e:b6:8c:12:c8:55:92:4c:42:1d:f4:a6: c8:ba:df:26:e9:3c:a7:6b:2a:db:e6:93:84:d5:87: c6:62:24:52:18:72:ed:1b:25:30:ac:07:51:5d:ec: 00:7d:ca:fb:23:7e:36:d1:c1:4b:3e:f0:90:13:19: 61:f1:e8:78:8a:80:a8:ab:06:9e:09:ac:79:15:94: 71:47:c9:a7:9d:da:24:53:22:de:bf:7f:c1:fc:9a: dd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FF:87:04:2C:68:35:84:8D:39:82:AA:02:47:BA:B9:1A:E0:11:2E X509v3 Authority Key Identifier: keyid:10:44:99:7B:C6:3A:81:3D:A0:4C:1B:91:89:73:74:B6:8B:04:BA:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:6e:22:61:f2:7f:69:bf:5b:7a:f9:03:0a:e5:b2:11:94:4a: 41:b0:90:a0:ce:3d:92:21:eb:09:c1:85:c9:76:b0:5e:14:3f: 74:a6:5f:1e:c6:7e:16:86:a1:49:0a:59:8a:b1:48:cc:f8:93: 10:09:bc:2c:d4:ff:66:e0:f0:ff:41:5b:ce:63:0d:15:94:1b: 45:9f:90:e5:03:de:2e:46:7f:db:65:b7:09:42:7a:16:b1:e8: a3:de:89:b1:e8:54:17:01:98:84:6e:03:71:d1:30:b9:44:9e: c0:df:28:29:a7:a1:b3:61:da:d6:af:4e:0a:24:0e:88:04:ab: 44:c7:7f:73:95:99:cb:0c:59:20:77:c2:54:e3:69:12:17:93: ef:a5:68:5a:9e:32:cc:84:af:32:8e:84:10:96:5d:87:a5:5b: af:90:61:df:d5:24:06:6d:ed:6c:6e:39:ad:6a:a3:8f:83:c3: f8:94:5a:73:fe:93:5d:61:3b:ff:18:47:58:20:ef:64:a3:b2: 1f:33:68:be:7a:6e:c3:fe:6e:fa:8c:04:52:9b:3c:38:e2:a3: 5b:75:3e:9a:8d:10:9f:2d:78:0a:ce:44:d2:7d:4d:dd:e9:cf: fd:73:12:59:d3:da:da:37:c7:1d:35:0a:d5:32:bb:b4:23:cb: 0f:f7:a0:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg3QjQxMTAvBgNVBAUTKDEwNDQ5OTdCQzYzQTgxM0RBMDRDMUI5MTg5NzM3NEI2 OEIwNEJBNjEwHhcNMjUwNDIwMTczODIyWhcNMjUwNDI3MTczODIyWjAYMRYwFAYD VQQDEw02ODA1MzEwZS1mOGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoVTtRd+hey07lLxCTsJhb2c/i8FpbFXP7NH5hp0BYJQpQDaTB5S5SfyI54YF 6F0AZ9i5PB4s2ua1UTK/c/4GjXjpEkCfhsgAQYpascOuJIBPHXO/lwOuHFxAKsjR ccGnsGrxacexmhDoeQ4EHxMGcYcgFjZa0egWhhTBJwLPgUb/fftZAsPZ+SD86ATD mVuUyCL1FnpABemevOyNGF3fLwvOU0QeGbMOtowSyFWSTEId9KbIut8m6Tynayrb 5pOE1YfGYiRSGHLtGyUwrAdRXewAfcr7I3420cFLPvCQExlh8eh4ioCoqwaeCax5 FZRxR8mnndokUyLev3/B/JrdhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNH/hwQs aDWEjTmCqgJHurka4BEuMB8GA1UdIwQYMBaAFBBEmXvGOoE9oEwbkYlzdLaLBLph MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODdCNC8zNjA4OTIyMDlE OUExMUU5QUU5Qzg4NUFDNEY5QUUwMi9FRVNaZThZNmdUMmdUQnVSaVhOMHRvc0V1 bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VFU1plOFk2Z1QyZ1RCdVJpWE4wdG9zRXVtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODdCNC8zNjA4OTIyMDlEOUExMUU5QUU5Qzg4NUFDNEY5QUUwMi9FRVNaZThZNmdU MmdUQnVSaVhOMHRvc0V1bUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1biJh8n9pv1t6+QMK5bIRlEpBsJCgzj2SIesJwYXJdrBeFD90pl8e xn4WhqFJClmKsUjM+JMQCbws1P9m4PD/QVvOYw0VlBtFn5DlA94uRn/bZbcJQnoW seij3omx6FQXAZiEbgNx0TC5RJ7A3ygpp6GzYdrWr04KJA6IBKtEx39zlZnLDFkg d8JU42kSF5PvpWhanjLMhK8yjoQQll2HpVuvkGHf1SQGbe1sbjmtaqOPg8P4lFpz /pNdYTv/GEdYIO9ko7IfM2i+em7D/m76jARSmzw44qNbdT6ajRCfLXgKzkTSfU3d 6c/9cxJZ09raN8cdNQrVMru0I8sP96Ac -----END CERTIFICATE-----Generated at Tue Apr 22 02:15:07 2025 by rpki-client