$ rpki-client -vvf rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.mft File: EyzK6sEE4qNEW2M3YQVNyNcQehM.mft (raw, json) Hash identifier: lAJut/DQGXnaNQkAH58yw7cNhtGpiS2rlrE8I/phTwY= Subject key identifier: A2:62:E2:CF:5D:41:26:56:8B:9C:60:59:33:2D:5D:C5:5A:00:73:37 Authority key identifier: 13:2C:CA:EA:C1:04:E2:A3:44:5B:63:37:61:05:4D:C8:D7:10:7A:13 Certificate issuer: /CN=A91670F6/serialNumber=132CCAEAC104E2A3445B633761054DC8D7107A13 Certificate serial: 04DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyzK6sEE4qNEW2M3YQVNyNcQehM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.mft Manifest number: 04D9 Signing time: Fri 30 May 2025 23:58:18 +0000 Manifest this update: Fri 30 May 2025 23:58:17 +0000 Manifest next update: Fri 06 Jun 2025 23:58:17 +0000 Files and hashes: 1: EyzK6sEE4qNEW2M3YQVNyNcQehM.crl (hash: ZDR2lp/ry3Qvy24hLTJjdMJHPJ2dSOucvfO1SSCj0m0=) 2: 29935FC21CF311ECA077821AC4F9AE02.roa (hash: Gw9UrgyhZyQgdaUx+vCyY31CJTl4dtl3RMTe5VBeLyw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.crl rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyzK6sEE4qNEW2M3YQVNyNcQehM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:58:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1245 (0x4dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91670F6, serialNumber=132CCAEAC104E2A3445B633761054DC8D7107A13 Validity Not Before: May 30 23:58:17 2025 GMT Not After : Jun 6 23:58:17 2025 GMT Subject: CN=683a461a-1c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9d:c0:22:bc:60:bf:83:6b:a3:51:43:c1:14: 80:be:72:14:a5:1f:6b:3c:e8:e7:b5:85:e7:1a:43: a9:9b:37:6b:15:94:b8:f2:83:6f:4f:96:b1:d6:53: 88:b1:2a:78:08:32:7e:15:69:54:ac:3f:59:a8:19: 7a:2f:02:ca:ba:72:c8:c0:00:f4:d5:50:48:3f:24: af:b1:98:d2:80:e9:32:1d:b4:9c:3f:f8:95:69:96: d3:27:f8:69:9b:75:7a:d9:f7:7f:f4:d0:e2:29:9e: 61:c7:93:80:0d:f0:81:e8:ce:73:eb:a9:d0:9b:46: 9e:40:0b:fd:75:f2:c4:28:9f:0d:3e:2f:64:b7:4d: ce:23:21:3f:1b:2b:5b:7c:95:37:82:fd:db:df:c2: 5d:22:21:92:90:88:1f:52:dd:55:98:a0:98:c1:04: 60:77:8e:a6:2f:df:d0:68:72:88:1d:ee:9e:34:ea: 65:a2:7e:c3:f4:7c:c2:3c:b2:4e:19:02:57:a2:ac: c3:83:6c:72:cf:23:cc:a5:1f:d1:4f:e7:27:12:07: eb:9d:09:52:fc:a8:f4:f0:04:9f:19:c5:31:22:ec: 54:2c:5f:75:9e:01:50:a5:5d:c2:3c:a1:1a:63:53: af:a8:9f:37:4c:05:97:d7:e4:d2:48:83:f0:8b:fa: 25:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:62:E2:CF:5D:41:26:56:8B:9C:60:59:33:2D:5D:C5:5A:00:73:37 X509v3 Authority Key Identifier: keyid:13:2C:CA:EA:C1:04:E2:A3:44:5B:63:37:61:05:4D:C8:D7:10:7A:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyzK6sEE4qNEW2M3YQVNyNcQehM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:d2:bd:ae:4c:e3:95:44:fc:c6:aa:95:78:96:f9:27:e3:1c: ea:cf:2c:9c:13:7e:f2:52:42:7c:ef:58:90:f7:ef:14:c1:39: 72:f7:3a:d1:f3:eb:27:c4:6c:c3:b3:da:91:dc:48:0e:0c:7c: 24:e2:aa:ef:c6:13:80:14:e0:fd:d1:cf:76:df:5c:ab:b7:b0: 86:41:a1:31:d0:24:fd:a5:1b:59:e8:8c:0d:cc:39:c7:34:2f: 20:5a:1f:b1:97:d1:e0:d5:54:dd:52:67:42:8d:f1:b8:4d:8a: 09:cf:51:93:63:47:25:69:47:2e:6b:2c:6c:a2:33:fc:d3:84: 68:bf:03:38:ed:39:e3:1b:b9:e8:8f:bc:b3:f1:80:11:22:69: ca:0c:1b:b0:4e:02:fc:f3:7b:93:14:9a:90:f2:1f:18:55:7c: 35:7a:99:ba:05:e0:2f:d8:28:ff:57:a8:bd:f4:19:fc:42:8c: a8:87:23:3a:a0:4c:ae:e1:e9:4b:bb:d2:c7:d5:1e:a0:aa:ff: 38:64:e4:13:d4:ed:70:29:51:22:38:2d:69:cc:1d:a0:e7:ac: af:9b:ea:96:55:6b:50:e8:37:61:c6:32:4c:9a:b3:95:8f:a9: 06:3c:59:ff:7f:0f:0e:b1:42:14:00:76:2f:7b:57:d0:cb:c3: 09:2b:05:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwRjYxMTAvBgNVBAUTKDEzMkNDQUVBQzEwNEUyQTM0NDVCNjMzNzYxMDU0REM4 RDcxMDdBMTMwHhcNMjUwNTMwMjM1ODE3WhcNMjUwNjA2MjM1ODE3WjAYMRYwFAYD VQQDEw02ODNhNDYxYS0xYzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA053AIrxgv4Nro1FDwRSAvnIUpR9rPOjntYXnGkOpmzdrFZS48oNvT5ax1lOI sSp4CDJ+FWlUrD9ZqBl6LwLKunLIwAD01VBIPySvsZjSgOkyHbScP/iVaZbTJ/hp m3V62fd/9NDiKZ5hx5OADfCB6M5z66nQm0aeQAv9dfLEKJ8NPi9kt03OIyE/Gytb fJU3gv3b38JdIiGSkIgfUt1VmKCYwQRgd46mL9/QaHKIHe6eNOplon7D9HzCPLJO GQJXoqzDg2xyzyPMpR/RT+cnEgfrnQlS/Kj08ASfGcUxIuxULF91ngFQpV3CPKEa Y1OvqJ83TAWX1+TSSIPwi/olQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJi4s9d QSZWi5xgWTMtXcVaAHM3MB8GA1UdIwQYMBaAFBMsyurBBOKjRFtjN2EFTcjXEHoT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzBGNi8xODVEQUZENjFD RUYxMUVDOUVERDgwMTFDNEY5QUUwMi9FeXpLNnNFRTRxTkVXMk0zWVFWTnlOY1Fl aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V5eks2c0VFNHFORVcyTTNZUVZOeU5jUWVoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzBGNi8xODVEQUZENjFDRUYxMUVDOUVERDgwMTFDNEY5QUUwMi9FeXpLNnNFRTRx TkVXMk0zWVFWTnlOY1FlaE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC0r2uTOOVRPzGqpV4lvkn4xzqzyycE37yUkJ871iQ9+8UwTly9zrR 8+snxGzDs9qR3EgODHwk4qrvxhOAFOD90c9231yrt7CGQaEx0CT9pRtZ6IwNzDnH NC8gWh+xl9Hg1VTdUmdCjfG4TYoJz1GTY0claUcuayxsojP804RovwM47TnjG7no j7yz8YARImnKDBuwTgL883uTFJqQ8h8YVXw1epm6BeAv2Cj/V6i99Bn8QoyohyM6 oEyu4elLu9LH1R6gqv84ZOQT1O1wKVEiOC1pzB2g56yvm+qWVWtQ6DdhxjJMmrOV j6kGPFn/fw8OsUIUAHYve1fQy8MJKwVv -----END CERTIFICATE-----Generated at Sat May 31 17:44:03 2025 by rpki-client