$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft File: ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft (raw, json) Hash identifier: qf06BWit1pRldiUX1vSceUztdb1GxpdZtRX/q/pMPhA= Subject key identifier: 90:B9:3C:24:1E:9D:34:09:C3:BC:BD:0F:A9:8A:0C:06:94:CA:12:A4 Authority key identifier: 7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60 Certificate issuer: /CN=A91A5DC1/serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160 Certificate serial: 0706 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft Manifest number: 0706 Signing time: Sat 31 May 2025 20:46:35 +0000 Manifest this update: Sat 31 May 2025 20:46:35 +0000 Manifest next update: Sat 07 Jun 2025 20:46:35 +0000 Files and hashes: 1: ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl (hash: acpL++11B/HifZv+STAsAG2rksCkgN/y3YHOzk84og4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1798 (0x706) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5DC1, serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160 Validity Not Before: May 31 20:46:35 2025 GMT Not After : Jun 7 20:46:35 2025 GMT Subject: CN=683b6aab-b055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6f:b1:0c:48:68:f5:f5:e6:5a:1e:93:cb:dc: 8f:38:19:67:16:10:b0:92:a4:80:08:ab:43:ca:10: 64:0f:1b:f9:8a:18:c4:5a:10:68:9c:b1:c0:78:8b: 36:7b:88:7c:47:b1:3d:c5:24:91:48:4b:b2:1f:ca: 2f:5a:16:59:eb:58:10:24:c0:68:d8:18:cc:2e:4a: ad:a6:22:28:18:8a:50:e8:50:ad:ce:cd:2d:8a:bc: 64:02:39:0b:54:0a:f1:3a:65:87:2b:85:36:5e:b0: 61:9b:83:da:7e:68:f2:8a:16:35:47:2d:ea:d7:b6: ca:10:80:f9:9f:e4:dd:ac:13:64:e7:f8:40:60:11: df:ba:f5:73:4e:38:ab:53:36:fe:2a:20:0c:59:10: 55:01:d3:cd:b3:d0:3e:9d:8c:59:79:e8:b6:e5:a4: f5:e8:4b:fe:07:f0:c9:f4:69:3d:f0:ac:e5:f7:c9: af:6a:ad:78:92:1d:5c:ee:ee:c7:e9:79:cb:54:16: c2:71:d5:15:3b:db:5b:e2:49:1d:68:49:56:f3:7e: 36:29:9c:2a:ad:5e:81:00:03:ed:7e:70:de:e1:7a: 36:ce:e9:dc:12:48:13:7d:61:2b:2d:72:1a:d4:54: f7:2c:89:25:91:a9:01:e1:e3:2a:74:d8:a6:b0:33: d1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B9:3C:24:1E:9D:34:09:C3:BC:BD:0F:A9:8A:0C:06:94:CA:12:A4 X509v3 Authority Key Identifier: keyid:7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:cf:20:c7:6c:81:92:ac:fd:11:84:20:31:ab:ea:00:2c:7c: 1f:ce:15:e7:ea:a3:05:f9:c0:34:9f:2a:d9:ee:ed:1f:6d:a5: 37:e3:b7:55:95:be:62:0b:6b:18:bb:f2:2b:e5:3c:e5:16:c7: 06:ee:57:ab:f4:ad:d1:b9:e3:97:13:f7:8c:c4:fc:9c:a6:98: 69:6e:72:70:83:14:7b:3c:f4:b4:48:da:59:32:1d:89:5d:24: 4c:be:66:04:23:2f:40:93:0d:41:90:1f:4c:c2:ec:88:d1:e0: c5:7b:7e:f7:be:b3:28:19:16:ec:59:f4:f1:d0:08:a7:84:bf: 8e:f7:7f:20:70:52:8f:96:14:6d:90:31:42:3f:57:44:11:04: 10:10:84:cf:5f:a5:78:6f:5e:c7:52:0e:bd:8f:ba:b6:b5:fd: 48:44:00:2a:a2:8a:b6:35:66:e7:a3:4a:6f:78:5f:0d:93:c7: df:75:df:f6:57:c8:60:04:23:f8:57:ac:fb:13:98:63:4f:44: cd:3d:6a:fb:e5:c4:de:ad:46:c6:13:53:fa:92:4f:f7:3f:d2: ea:c2:40:5d:1c:07:b2:1e:c5:a2:5a:66:16:ea:e0:93:5e:7a: 66:eb:f7:97:8f:b2:fe:42:ab:09:4a:03:11:47:6a:71:cc:13: c6:68:b7:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVEQzExMTAvBgNVBAUTKDdBOURBNDYxRUJFQkQxNTMxNjQyMDczOUM4OUVDNEND RUU5OUMxNjAwHhcNMjUwNTMxMjA0NjM1WhcNMjUwNjA3MjA0NjM1WjAYMRYwFAYD VQQDEw02ODNiNmFhYi1iMDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAum+xDEho9fXmWh6Ty9yPOBlnFhCwkqSACKtDyhBkDxv5ihjEWhBonLHAeIs2 e4h8R7E9xSSRSEuyH8ovWhZZ61gQJMBo2BjMLkqtpiIoGIpQ6FCtzs0tirxkAjkL VArxOmWHK4U2XrBhm4PafmjyihY1Ry3q17bKEID5n+TdrBNk5/hAYBHfuvVzTjir Uzb+KiAMWRBVAdPNs9A+nYxZeei25aT16Ev+B/DJ9Gk98Kzl98mvaq14kh1c7u7H 6XnLVBbCcdUVO9tb4kkdaElW8342KZwqrV6BAAPtfnDe4Xo2zuncEkgTfWErLXIa 1FT3LIklkakB4eMqdNimsDPR5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJC5PCQe nTQJw7y9D6mKDAaUyhKkMB8GA1UdIwQYMBaAFHqdpGHr69FTFkIHOciexMzumcFg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNURDMS80MTNBODkyNDQ1 ODExMUVCOEUwRTc0MkNDNEY5QUUwMi9lcDJrWWV2cjBWTVdRZ2M1eUo3RXpPNlp3 V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwMmtZZXZyMFZNV1FnYzV5SjdFek82WndXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NURDMS80MTNBODkyNDQ1ODExMUVCOEUwRTc0MkNDNEY5QUUwMi9lcDJrWWV2cjBW TVdRZ2M1eUo3RXpPNlp3V0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEzyDHbIGSrP0RhCAxq+oALHwfzhXn6qMF+cA0nyrZ7u0fbaU347dV lb5iC2sYu/Ir5TzlFscG7ler9K3RueOXE/eMxPycpphpbnJwgxR7PPS0SNpZMh2J XSRMvmYEIy9Akw1BkB9MwuyI0eDFe373vrMoGRbsWfTx0AinhL+O938gcFKPlhRt kDFCP1dEEQQQEITPX6V4b17HUg69j7q2tf1IRAAqooq2NWbno0pveF8Nk8ffdd/2 V8hgBCP4V6z7E5hjT0TNPWr75cTerUbGE1P6kk/3P9LqwkBdHAeyHsWiWmYW6uCT Xnpm6/eXj7L+QqsJSgMRR2pxzBPGaLeg -----END CERTIFICATE-----Generated at Mon Jun 2 07:17:39 2025 by rpki-client