$ rpki-client -vvf rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft File: E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft (raw, json) Hash identifier: iSDC868/AiZs32yjS1PLnc3mnBniKbiUbd9osasCi1k= Subject key identifier: 01:B7:06:01:F0:F8:03:AF:89:43:96:20:65:6C:8E:26:F3:61:97:24 Authority key identifier: 13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4 Certificate issuer: /CN=A91334F0/serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft Manifest number: AE Signing time: Tue 03 Jun 2025 05:49:11 +0000 Manifest this update: Tue 03 Jun 2025 05:49:11 +0000 Manifest next update: Tue 10 Jun 2025 05:49:11 +0000 Files and hashes: 1: E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl (hash: G9tSWQBbCutgozaJEbNeufPilXGGNH61mNEuVPBZYoQ=) 2: 836F847C340011EFA88BE541C4F9AE02.roa (hash: fcp/kSCKLyceNrAoRX8L9CBT7OWwtj1KK81m97wM7rw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 05:49:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91334F0, serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4 Validity Not Before: Jun 3 05:49:11 2025 GMT Not After : Jun 10 05:49:11 2025 GMT Subject: CN=683e8cd7-7c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e1:b0:f9:4b:94:fb:59:de:92:7a:69:9c:fa: c1:fb:99:61:0a:ff:3d:92:e4:77:76:b7:6b:25:e2: 42:57:ec:79:4d:3d:02:df:2a:93:ed:ec:67:81:3b: 62:88:8d:0c:0c:51:09:66:6d:29:5f:ad:f3:a7:93: f9:4a:ed:4e:0b:8d:50:b7:a5:c6:60:8a:0c:c9:67: ee:66:85:b7:f1:2a:d2:30:e2:7a:44:8f:f4:61:af: 62:90:34:2a:3e:7c:3e:67:c0:b6:f9:cc:07:a1:5d: 8f:9b:9b:6f:64:32:a5:38:ed:c7:3e:0d:1f:c6:e8: 97:45:e3:be:81:49:da:41:d6:65:af:8e:0f:6e:fa: 55:99:ec:2e:b5:ab:3f:ec:65:ea:a4:80:6f:6c:07: 3f:30:c0:2c:d7:d8:f5:73:8c:ad:40:2d:11:1e:24: b0:66:e7:65:7c:4e:57:a2:80:d3:a6:ff:2e:28:30: ff:46:70:ac:73:3a:78:f4:da:93:5c:b3:e3:91:8b: 40:3d:9b:32:ee:40:3d:c6:9d:c7:a4:00:11:f2:b9: 09:3a:e5:0d:44:e4:f7:ec:09:16:56:a9:1a:6a:15: 1f:c4:61:b3:0b:28:0d:00:39:91:e8:6d:7c:58:eb: 39:56:e0:7d:df:3e:7d:82:1c:d3:fa:8f:5b:05:ec: cc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B7:06:01:F0:F8:03:AF:89:43:96:20:65:6C:8E:26:F3:61:97:24 X509v3 Authority Key Identifier: keyid:13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:14:cc:9e:c4:22:e7:50:f9:c1:c0:26:56:9c:74:da:6c:81: e2:63:20:d8:44:29:01:82:fc:3d:79:fd:9c:12:e6:59:ee:0a: a8:7e:1a:a2:af:ef:80:a2:b8:45:1e:5f:5e:04:ad:ec:2e:4b: 8b:8e:37:a4:0e:f4:ff:62:5f:79:db:e3:63:e1:94:43:0d:d7: 3d:dc:76:70:62:fb:80:b5:6e:59:e3:69:d2:a5:cd:df:0d:03: 1b:6c:f4:79:15:a9:2a:ba:bf:d3:c8:c8:67:b7:71:81:ed:bc: 10:2d:80:d0:c9:9d:d5:dd:55:95:ca:91:64:2c:f0:de:1a:08: 04:2e:60:f8:a5:5d:c7:56:5a:81:8d:c5:cd:3b:4e:1b:2f:bf: a9:71:c2:b8:2d:11:f8:24:c0:07:0a:df:b1:27:83:57:77:54: f0:3b:49:6f:85:91:6a:54:84:ce:25:d5:24:da:61:d8:b2:b5: c1:ce:49:7b:9d:ab:01:93:d2:72:01:bf:6c:14:dd:0e:67:e7: 37:ba:b2:12:da:7b:b9:cf:4b:f0:e1:1a:8e:ad:ac:cb:2f:6c: bd:f5:6f:1f:df:22:b6:50:b7:8e:ca:ed:4a:ff:1d:f7:bb:de: ee:40:a7:4d:15:05:18:d2:ed:e7:6f:6d:74:8d:38:fd:9e:6a: ca:53:65:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0RjAxMTAvBgNVBAUTKDEzNDZGNjVENjI5RkZGOTM2QjBGQzRDRjEyNzUwOUI2 ODJFOEUzRTQwHhcNMjUwNjAzMDU0OTExWhcNMjUwNjEwMDU0OTExWjAYMRYwFAYD VQQDEw02ODNlOGNkNy03YzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6+Gw+UuU+1neknppnPrB+5lhCv89kuR3drdrJeJCV+x5TT0C3yqT7exngTti iI0MDFEJZm0pX63zp5P5Su1OC41Qt6XGYIoMyWfuZoW38SrSMOJ6RI/0Ya9ikDQq Pnw+Z8C2+cwHoV2Pm5tvZDKlOO3HPg0fxuiXReO+gUnaQdZlr44PbvpVmewutas/ 7GXqpIBvbAc/MMAs19j1c4ytQC0RHiSwZudlfE5XooDTpv8uKDD/RnCsczp49NqT XLPjkYtAPZsy7kA9xp3HpAAR8rkJOuUNROT37AkWVqkaahUfxGGzCygNADmR6G18 WOs5VuB93z59ghzT+o9bBezMdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAG3BgHw +AOviUOWIGVsjibzYZckMB8GA1UdIwQYMBaAFBNG9l1in/+Taw/EzxJ1CbaC6OPk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzRGMC8wRDQ2Q0JFODM0 MDAxMUVGOTQ3Nzk1NDBDNEY5QUUwMi9FMGIyWFdLZl81TnJEOFRQRW5VSnRvTG80 LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0UwYjJYV0tmXzVOckQ4VFBFblVKdG9MbzQtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzRGMC8wRDQ2Q0JFODM0MDAxMUVGOTQ3Nzk1NDBDNEY5QUUwMi9FMGIyWFdLZl81 TnJEOFRQRW5VSnRvTG80LVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByFMyexCLnUPnBwCZWnHTabIHiYyDYRCkBgvw9ef2cEuZZ7gqofhqi r++AorhFHl9eBK3sLkuLjjekDvT/Yl952+Nj4ZRDDdc93HZwYvuAtW5Z42nSpc3f DQMbbPR5Fakqur/TyMhnt3GB7bwQLYDQyZ3V3VWVypFkLPDeGggELmD4pV3HVlqB jcXNO04bL7+pccK4LRH4JMAHCt+xJ4NXd1TwO0lvhZFqVITOJdUk2mHYsrXBzkl7 nasBk9JyAb9sFN0OZ+c3urIS2nu5z0vw4RqOrazLL2y99W8f3yK2ULeOyu1K/x33 u97uQKdNFQUY0u3nb210jTj9nmrKU2XZ -----END CERTIFICATE-----Generated at Wed Jun 4 00:15:35 2025 by rpki-client