$ rpki-client -vvf rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft File: EVpBYMhVVH2eMQxg09CIy7yamSo.mft (raw, json) Hash identifier: mAQL1Lffxtr+fjCUvZTCltPrwDVsFAC0r+PE0gnmOM8= Subject key identifier: 22:35:E6:57:7F:36:0E:D9:C1:AC:8A:B7:0E:1E:0F:18:D0:1B:19:23 Authority key identifier: 11:5A:41:60:C8:55:54:7D:9E:31:0C:60:D3:D0:88:CB:BC:9A:99:2A Certificate issuer: /CN=A91A76AD/serialNumber=115A4160C855547D9E310C60D3D088CBBC9A992A Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft Manifest number: FE Signing time: Sun 01 Jun 2025 04:51:14 +0000 Manifest this update: Sun 01 Jun 2025 04:51:13 +0000 Manifest next update: Sun 08 Jun 2025 04:51:13 +0000 Files and hashes: 1: EVpBYMhVVH2eMQxg09CIy7yamSo.crl (hash: mJ5SipSWnB09QOCWWqvrXpXHk6zls1/fcwGDWcw8oIk=) 2: 26E31278CA3811EEB0C6A436C4F9AE02.roa (hash: YLouRJayszJ+YXIZjA0nYlRHirFmGMZNUS3tAUGchSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.crl rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 04:51:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A76AD, serialNumber=115A4160C855547D9E310C60D3D088CBBC9A992A Validity Not Before: Jun 1 04:51:13 2025 GMT Not After : Jun 8 04:51:13 2025 GMT Subject: CN=683bdc41-c3f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:da:ab:f8:f5:93:af:e4:0c:7d:0a:c2:f0:ec: ed:ce:fe:f4:36:0d:11:db:7a:30:66:2a:14:bb:60: 8d:61:19:19:8d:ea:64:fb:d7:0a:94:d8:f1:fc:8b: 53:76:75:b9:51:12:70:cf:c7:8e:1a:10:a4:a0:63: 0e:15:e6:87:a4:40:02:27:2c:9e:14:c5:66:41:6d: b5:37:08:2d:5a:8e:68:ec:68:4f:35:6b:29:00:c3: 71:3d:18:09:cc:c8:48:a9:92:5a:35:5a:5b:b0:a9: cb:a6:66:40:ec:86:a5:b7:16:4a:cd:66:09:bb:1f: 43:3c:4f:b9:81:55:c0:f6:17:c0:73:e0:ba:e9:da: ea:f0:1f:85:d2:40:91:72:8e:24:f4:31:cb:b5:55: 71:9d:17:dc:92:1e:aa:eb:ec:ae:84:75:86:87:01: 79:48:f4:a2:18:64:49:51:5a:26:9c:25:ef:77:3f: 8b:14:de:10:cd:1c:d9:89:16:09:bf:86:3f:9b:c8: 13:66:db:34:fe:b7:13:90:53:7b:6d:c6:ef:8e:3c: bb:ac:e9:7a:b4:37:d6:30:82:f6:7e:37:6a:76:9f: d5:04:98:0f:0a:b0:b5:9f:d7:74:8a:f6:ac:14:db: fc:55:d3:a8:4e:42:63:e9:fe:8d:73:1d:71:d4:b8: 88:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:35:E6:57:7F:36:0E:D9:C1:AC:8A:B7:0E:1E:0F:18:D0:1B:19:23 X509v3 Authority Key Identifier: keyid:11:5A:41:60:C8:55:54:7D:9E:31:0C:60:D3:D0:88:CB:BC:9A:99:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:47:90:e7:16:3a:8c:b3:6d:21:f3:99:9e:24:a2:ca:53:3e: 53:3a:51:c9:a8:40:c3:31:96:57:01:cd:8d:69:67:c3:97:5a: 8a:de:6c:39:d5:66:07:b7:cd:b4:69:99:8f:84:7f:ad:5e:9b: 7a:2f:d1:10:23:50:13:53:f6:8b:70:1e:c0:25:64:6e:a7:b4: 51:c9:65:0f:5c:87:8d:0d:a7:76:ef:e4:a3:fb:98:05:f3:b0: c6:4e:fd:2a:a1:bf:b1:db:86:32:4f:88:e5:36:fa:69:50:09: ae:4f:fb:50:f3:40:08:73:f4:12:8c:6f:99:fd:32:4b:e4:bd: 26:1c:db:52:da:73:38:68:98:77:64:33:62:b0:43:4c:58:ff: 5b:a2:9b:ab:c4:a9:f9:fd:5b:6b:11:e6:83:1a:dd:f6:8a:e8: a7:b6:c1:31:15:ba:fd:99:8a:57:75:b1:b7:26:46:9e:26:0d: 88:4d:0c:8d:40:6e:9d:4d:c4:c2:6f:df:ae:55:da:0b:24:e3: 8b:df:5a:87:11:e7:65:e1:68:07:db:d0:c6:05:98:d7:1c:df: 3f:6f:8a:c9:93:dd:72:b9:ad:4b:26:dc:1f:cd:07:dd:cb:d0: 5d:55:a6:66:42:56:df:c8:09:b3:31:91:61:3f:e2:08:7c:b6: 02:87:aa:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc2QUQxMTAvBgNVBAUTKDExNUE0MTYwQzg1NTU0N0Q5RTMxMEM2MEQzRDA4OENC QkM5QTk5MkEwHhcNMjUwNjAxMDQ1MTEzWhcNMjUwNjA4MDQ1MTEzWjAYMRYwFAYD VQQDEw02ODNiZGM0MS1jM2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9qr+PWTr+QMfQrC8Oztzv70Ng0R23owZioUu2CNYRkZjepk+9cKlNjx/ItT dnW5URJwz8eOGhCkoGMOFeaHpEACJyyeFMVmQW21NwgtWo5o7GhPNWspAMNxPRgJ zMhIqZJaNVpbsKnLpmZA7IaltxZKzWYJux9DPE+5gVXA9hfAc+C66drq8B+F0kCR co4k9DHLtVVxnRfckh6q6+yuhHWGhwF5SPSiGGRJUVomnCXvdz+LFN4QzRzZiRYJ v4Y/m8gTZts0/rcTkFN7bcbvjjy7rOl6tDfWMIL2fjdqdp/VBJgPCrC1n9d0ivas FNv8VdOoTkJj6f6Ncx1x1LiI7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCI15ld/ Ng7ZwayKtw4eDxjQGxkjMB8GA1UdIwQYMBaAFBFaQWDIVVR9njEMYNPQiMu8mpkq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzZBRC9GRUNBNzUwNkJF N0YxMUVFOTY3ODRENjJDNEY5QUUwMi9FVnBCWU1oVlZIMmVNUXhnMDlDSXk3eWFt U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VWcEJZTWhWVkgyZU1ReGcwOUNJeTd5YW1Tby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzZBRC9GRUNBNzUwNkJFN0YxMUVFOTY3ODRENjJDNEY5QUUwMi9FVnBCWU1oVlZI MmVNUXhnMDlDSXk3eWFtU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWR5DnFjqMs20h85meJKLKUz5TOlHJqEDDMZZXAc2NaWfDl1qK3mw5 1WYHt820aZmPhH+tXpt6L9EQI1ATU/aLcB7AJWRup7RRyWUPXIeNDad27+Sj+5gF 87DGTv0qob+x24YyT4jlNvppUAmuT/tQ80AIc/QSjG+Z/TJL5L0mHNtS2nM4aJh3 ZDNisENMWP9bopurxKn5/VtrEeaDGt32iuintsExFbr9mYpXdbG3JkaeJg2ITQyN QG6dTcTCb9+uVdoLJOOL31qHEedl4WgH29DGBZjXHN8/b4rJk91yua1LJtwfzQfd y9BdVaZmQlbfyAmzMZFhP+IIfLYCh6o4 -----END CERTIFICATE-----Generated at Mon Jun 2 19:33:23 2025 by rpki-client