$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft File: 0eKZ-egsk3yysqaQYegXNB-FCPU.mft (raw, json) Hash identifier: 3XQlp5aNAmUibjpAs0TYCF2eDiBnuOGqR6K6/zseWXs= Subject key identifier: AA:3F:F7:E1:AB:95:C0:5F:48:30:61:61:88:3B:C5:CD:73:59:F5:FF Authority key identifier: D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5 Certificate issuer: /CN=A91886CC/serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5 Certificate serial: 0190 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft Manifest number: 018C Signing time: Sat 31 May 2025 03:16:23 +0000 Manifest this update: Sat 31 May 2025 03:16:23 +0000 Manifest next update: Sat 07 Jun 2025 03:16:23 +0000 Files and hashes: 1: 0eKZ-egsk3yysqaQYegXNB-FCPU.crl (hash: x3f6eKyB3zdcTBDRoN5yz3AXm1EMVDy2EWlPdWeqBH8=) 2: 71F97AC0560E11EEA8088470C4F9AE02.roa (hash: M1Z0vPN0xRUeI7aXSO+zgJ15zwwVDL1Npd3KMXS/ZDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 400 (0x190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886CC, serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5 Validity Not Before: May 31 03:16:23 2025 GMT Not After : Jun 7 03:16:23 2025 GMT Subject: CN=683a7487-177b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:28:57:b8:57:bf:ac:4b:1e:fe:ce:70:f7:f1: 81:eb:1e:23:5d:a4:18:af:fb:36:38:33:74:a2:4e: 8d:cb:b6:2d:a6:a1:bb:e3:ea:95:67:69:5b:c0:ea: 73:8b:0a:dd:38:73:45:36:ed:5f:0e:fc:38:f8:93: e4:2f:f6:fb:22:f9:b9:c2:83:c8:1e:0c:1d:a3:5c: db:3d:70:16:07:54:6d:1a:aa:8e:83:6a:64:8d:ef: 6d:fa:22:ac:b4:9b:54:21:fb:8c:06:9d:27:a9:0d: 29:c9:d7:f4:35:eb:f2:e8:e9:da:5c:62:72:60:08: 0f:c0:37:2f:36:6b:71:fd:00:76:cb:4b:b4:45:cc: b1:8c:7b:6d:89:dd:40:de:5d:63:a4:a9:c8:53:73: a3:18:8e:87:fc:24:14:b5:65:9e:22:17:2d:55:c5: 73:de:44:5f:6b:1b:03:15:2d:5a:b0:02:b3:e8:bd: a5:39:66:59:85:68:d5:1f:92:55:75:cf:fc:3b:3d: ff:1a:4c:d0:70:e8:d2:f1:25:31:10:60:5f:a3:7b: 96:a5:28:b8:de:d5:df:ba:83:07:ac:19:91:d9:db: 05:d6:1b:65:fb:1e:0a:f8:cb:90:1d:54:77:a2:82: 6a:c5:e6:cc:1e:7b:c0:9f:3f:8d:cf:b0:80:db:5d: da:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:3F:F7:E1:AB:95:C0:5F:48:30:61:61:88:3B:C5:CD:73:59:F5:FF X509v3 Authority Key Identifier: keyid:D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:bd:1d:03:10:77:1d:53:f0:e8:73:25:40:47:09:40:f9:ee: 5b:a3:3d:4b:82:c3:58:68:55:26:6b:1f:d7:1a:12:55:ae:55: 93:b2:24:45:2f:e7:61:10:fa:44:eb:26:05:2a:44:f1:1a:c4: 8f:3d:ec:02:74:56:0f:eb:23:14:f8:89:2a:a0:5b:83:27:f1: d6:38:a9:44:2b:10:10:7e:03:1f:5c:fe:26:34:16:cf:6a:f5: 9d:d6:df:74:f7:cb:9e:ec:74:bf:e6:8a:42:1d:d0:61:2b:46: d1:60:f4:0d:00:bc:94:ae:24:12:5a:ca:51:91:4c:c8:85:72: c9:65:7b:ee:51:01:f6:99:66:5a:8d:d0:16:13:9c:05:a6:7d: a3:5a:3d:4e:86:63:29:29:d8:e5:e9:39:58:61:11:ea:87:31: b4:1c:2d:71:fe:61:1f:ed:b3:0e:0b:7a:ba:51:16:de:97:eb: 87:be:57:34:c2:3f:96:82:90:8b:56:e9:a9:ba:7f:4d:32:82: 8e:06:2c:87:c8:13:b1:f9:4e:3b:e5:2d:7e:5b:28:97:c8:7a: cd:ff:88:6c:52:d1:c5:5d:96:be:50:73:82:f7:19:f7:cb:28: 57:fd:ac:37:bf:dd:f0:a3:bb:af:d9:40:60:79:b2:0f:61:92: 70:26:d1:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2Q0MxMTAvBgNVBAUTKEQxRTI5OUY5RTgyQzkzN0NCMkIyQTY5MDYxRTgxNzM0 MUY4NTA4RjUwHhcNMjUwNTMxMDMxNjIzWhcNMjUwNjA3MDMxNjIzWjAYMRYwFAYD VQQDEw02ODNhNzQ4Ny0xNzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApChXuFe/rEse/s5w9/GB6x4jXaQYr/s2ODN0ok6Ny7YtpqG74+qVZ2lbwOpz iwrdOHNFNu1fDvw4+JPkL/b7Ivm5woPIHgwdo1zbPXAWB1RtGqqOg2pkje9t+iKs tJtUIfuMBp0nqQ0pydf0Nevy6OnaXGJyYAgPwDcvNmtx/QB2y0u0RcyxjHttid1A 3l1jpKnIU3OjGI6H/CQUtWWeIhctVcVz3kRfaxsDFS1asAKz6L2lOWZZhWjVH5JV dc/8Oz3/GkzQcOjS8SUxEGBfo3uWpSi43tXfuoMHrBmR2dsF1htl+x4K+MuQHVR3 ooJqxebMHnvAnz+Nz7CA213axwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKo/9+Gr lcBfSDBhYYg7xc1zWfX/MB8GA1UdIwQYMBaAFNHimfnoLJN8srKmkGHoFzQfhQj1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZDQy80RUE2QzYxOEU4 QkQxMUVEOEI4OTI1MjJDNEY5QUUwMi8wZUtaLWVnc2szeXlzcWFRWWVnWE5CLUZD UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBlS1otZWdzazN5eXNxYVFZZWdYTkItRkNQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZDQy80RUE2QzYxOEU4QkQxMUVEOEI4OTI1MjJDNEY5QUUwMi8wZUtaLWVnc2sz eXlzcWFRWWVnWE5CLUZDUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5vR0DEHcdU/DocyVARwlA+e5boz1LgsNYaFUmax/XGhJVrlWTsiRF L+dhEPpE6yYFKkTxGsSPPewCdFYP6yMU+IkqoFuDJ/HWOKlEKxAQfgMfXP4mNBbP avWd1t9098ue7HS/5opCHdBhK0bRYPQNALyUriQSWspRkUzIhXLJZXvuUQH2mWZa jdAWE5wFpn2jWj1OhmMpKdjl6TlYYRHqhzG0HC1x/mEf7bMOC3q6URbel+uHvlc0 wj+WgpCLVumpun9NMoKOBiyHyBOx+U475S1+WyiXyHrN/4hsUtHFXZa+UHOC9xn3 yyhX/aw3v93wo7uv2UBgebIPYZJwJtE/ -----END CERTIFICATE-----Generated at Sat May 31 17:40:58 2025 by rpki-client