$ rpki-client -vvf rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft File: EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft (raw, json) Hash identifier: U21DM90v0xicIasXRHgA/Sw1hsX54ox+Kv85RUAraXk= Subject key identifier: 37:B4:68:20:4D:DC:D2:3E:02:5D:3C:0C:CD:B2:95:22:62:A6:63:29 Authority key identifier: 12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13 Certificate issuer: /CN=A91250FA/serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813 Certificate serial: 0B51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft Manifest number: 0B43 Signing time: Fri 30 May 2025 19:20:20 +0000 Manifest this update: Fri 30 May 2025 19:20:20 +0000 Manifest next update: Fri 06 Jun 2025 19:20:20 +0000 Files and hashes: 1: EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl (hash: RQNsyDB5f2wxsSyIo2RItAycamGNVUM50I9UNb9DuOU=) 2: 2A08F1A4369211EAA64E320BC4F9AE02.roa (hash: I91qaFQgep6EuuEEdqbhO4Prklw7ndmFH38wo16kLVk=) 3: 5D822954368F11EAB3D4CE7FC4F9AE02.roa (hash: /cS7IVALMe9B/AtpjJXVY/jO3FykqwmgPTZQLz+GjqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:20:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2897 (0xb51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91250FA, serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813 Validity Not Before: May 30 19:20:20 2025 GMT Not After : Jun 6 19:20:20 2025 GMT Subject: CN=683a04f4-07a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:14:29:b7:6d:77:1b:ae:61:76:60:ca:4f:3e: b6:33:a0:1c:05:af:6a:29:1f:4c:8c:9e:94:fb:db: 67:8e:d9:b4:6a:13:b4:5f:18:77:5e:66:f4:e3:6d: 04:c8:e9:25:41:4f:20:7a:84:bc:ff:fc:12:10:07: 76:f8:3f:c7:04:88:e6:df:0a:81:73:c6:83:b2:e6: ee:50:ad:70:0c:9e:f9:41:f7:ee:b4:6f:7e:09:e7: 58:c4:8d:e7:3e:d1:ba:41:b7:8f:66:31:ef:2a:48: 13:73:7a:f7:2e:f9:4e:de:0f:e9:75:82:1a:ff:de: aa:d5:a8:a5:48:da:b2:25:a0:ee:ca:19:5f:33:99: 0c:1b:ae:7c:60:40:ad:96:ff:ec:89:1b:94:8e:07: 96:3b:e5:82:07:8f:7b:70:56:bd:3f:56:96:ee:f1: 10:ff:44:8a:d7:6b:fb:b5:4c:f3:d7:2c:e4:0b:19: 0e:4a:d3:02:34:61:9c:22:be:da:84:c2:e4:4c:0d: 46:2f:12:b9:e9:c7:bb:58:3b:02:1a:5b:ba:2f:98: 7a:b6:42:3a:aa:4a:80:46:2f:3f:46:70:d9:44:8c: c8:6e:3d:fb:68:87:ad:fc:68:69:ea:9f:3b:b5:c5: 68:f1:b1:40:2c:ee:90:41:5b:f1:42:f3:71:48:ae: b3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B4:68:20:4D:DC:D2:3E:02:5D:3C:0C:CD:B2:95:22:62:A6:63:29 X509v3 Authority Key Identifier: keyid:12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:51:93:c2:51:f2:fc:52:0d:61:b3:7c:9b:93:d7:6b:63:ff: 5e:d8:eb:34:4e:45:01:2f:8e:a0:b7:a4:dd:37:67:1d:f4:43: a3:2a:49:8a:25:f2:7f:91:eb:65:12:2a:a7:b8:3c:3a:70:ea: 63:3d:72:18:af:87:fe:2f:d7:8b:20:61:4f:59:3e:32:75:d5: cf:da:1c:62:b1:cb:ff:26:e2:85:7c:e1:a3:15:13:8c:d2:9c: 71:b7:5f:58:e2:a0:33:c6:6b:05:45:b3:0d:ec:e5:36:c8:3f: 4d:00:c8:83:c6:c3:45:03:a1:1a:79:cf:88:ee:43:05:7e:c6: 81:0d:20:a5:91:c3:54:bd:92:04:8a:9f:19:3c:68:53:ba:99: e3:31:0d:77:2b:42:a1:0d:72:75:13:89:e0:29:ec:cf:b5:23: 60:c9:7f:68:3e:1e:0e:a3:b7:83:33:ec:bf:6d:4c:bf:23:b8: 53:f0:9d:cc:f8:aa:12:30:6d:72:35:1c:39:11:26:42:b8:15: aa:fb:29:2e:60:5f:1f:6c:0e:fc:5c:2e:61:b5:fe:81:72:7f: 52:17:77:e9:45:48:28:e1:1e:12:0b:d0:1f:3b:c7:0e:6f:10: f7:ac:04:55:0f:41:a2:dd:bb:16:d5:fb:c1:fa:51:29:a2:68: 1d:a2:0b:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUwRkExMTAvBgNVBAUTKDEyODNBMkY0QzdCQTExNzA2QzY2RTE3QkYxQkQzRTk5 NjI3QTE4MTMwHhcNMjUwNTMwMTkyMDIwWhcNMjUwNjA2MTkyMDIwWjAYMRYwFAYD VQQDEw02ODNhMDRmNC0wN2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxQpt213G65hdmDKTz62M6AcBa9qKR9MjJ6U+9tnjtm0ahO0Xxh3Xmb0420E yOklQU8geoS8//wSEAd2+D/HBIjm3wqBc8aDsubuUK1wDJ75QffutG9+CedYxI3n PtG6QbePZjHvKkgTc3r3LvlO3g/pdYIa/96q1ailSNqyJaDuyhlfM5kMG658YECt lv/siRuUjgeWO+WCB497cFa9P1aW7vEQ/0SK12v7tUzz1yzkCxkOStMCNGGcIr7a hMLkTA1GLxK56ce7WDsCGlu6L5h6tkI6qkqARi8/RnDZRIzIbj37aIet/Ghp6p87 tcVo8bFALO6QQVvxQvNxSK6zlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDe0aCBN 3NI+Al08DM2ylSJipmMpMB8GA1UdIwQYMBaAFBKDovTHuhFwbGbhe/G9PpliehgT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTBGQS9BQUEwRUJFMDM2 OEUxMUVBQTc2OEZDN0VDNEY5QUUwMi9Fb09pOU1lNkVYQnNadUY3OGIwLW1XSjZH Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VvT2k5TWU2RVhCc1p1Rjc4YjAtbVdKNkdCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTBGQS9BQUEwRUJFMDM2OEUxMUVBQTc2OEZDN0VDNEY5QUUwMi9Fb09pOU1lNkVY QnNadUY3OGIwLW1XSjZHQk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcUZPCUfL8Ug1hs3ybk9drY/9e2Os0TkUBL46gt6TdN2cd9EOjKkmK JfJ/ketlEiqnuDw6cOpjPXIYr4f+L9eLIGFPWT4yddXP2hxiscv/JuKFfOGjFROM 0pxxt19Y4qAzxmsFRbMN7OU2yD9NAMiDxsNFA6Eaec+I7kMFfsaBDSClkcNUvZIE ip8ZPGhTupnjMQ13K0KhDXJ1E4ngKezPtSNgyX9oPh4Oo7eDM+y/bUy/I7hT8J3M +KoSMG1yNRw5ESZCuBWq+ykuYF8fbA78XC5htf6Bcn9SF3fpRUgo4R4SC9AfO8cO bxD3rARVD0Gi3bsW1fvB+lEpomgdoguZ -----END CERTIFICATE-----Generated at Sat May 31 17:42:44 2025 by rpki-client