$ rpki-client -vvf rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft File: 8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft (raw, json) Hash identifier: aGMEpAVU+4RBW/ZyeDbSCnAt8PqAEXabiqPbBOdx6Lc= Subject key identifier: EA:C7:45:32:B7:9B:D8:B6:3A:08:F3:F3:48:0C:72:EC:D3:B5:2F:60 Authority key identifier: F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1 Certificate issuer: /CN=A91B165F/serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1 Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft Manifest number: 64 Signing time: Sat 31 May 2025 06:35:19 +0000 Manifest this update: Sat 31 May 2025 06:35:19 +0000 Manifest next update: Sat 07 Jun 2025 06:35:19 +0000 Files and hashes: 1: 8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl (hash: eG3G2xC4TEPtuurYVPwTZG7LhvhBz6p6g1TXt8qG+0o=) 2: 1DF22790A4B611EF9CDA1A2CC4F9AE02.roa (hash: w3wkEl72R5yHh8FDEdSTJXXK4Ra1LhkLOkjK6q8uAIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:35:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B165F, serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1 Validity Not Before: May 31 06:35:19 2025 GMT Not After : Jun 7 06:35:19 2025 GMT Subject: CN=683aa327-52ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e4:8f:57:f6:d5:97:31:7f:1d:b6:8e:12:73: 28:5b:2b:b9:9b:67:bd:47:24:f4:f7:c8:46:ac:fc: 9b:52:a4:a4:84:94:c8:a2:18:5a:d1:a8:62:8a:6f: c8:b1:25:c8:6d:66:0b:09:c9:57:f8:c5:12:a5:cf: 0c:04:8c:3e:b7:53:5d:6c:8e:c6:68:ee:de:dd:71: 94:22:ed:84:09:14:42:7b:43:99:30:5b:df:26:da: ad:08:29:11:52:3f:03:1f:98:84:c6:e1:65:01:3a: 4c:73:45:e7:f9:50:88:93:b6:6a:c3:1f:cc:39:04: 9b:ce:a5:ef:0f:db:6b:8f:7d:31:bd:30:c5:d9:e3: 96:bd:94:77:20:4f:8d:2c:30:5d:90:6c:ab:11:72: e4:80:a6:c3:42:bc:77:34:12:c4:53:e6:a2:44:72: d6:67:27:0e:08:cf:f5:9f:00:f4:ed:7d:b2:88:74: dd:54:9d:c1:1c:a4:93:9d:ac:ae:52:c1:7c:1b:d7: d9:80:91:a9:60:43:f2:51:2d:d5:05:b0:14:60:39: a1:3e:6f:74:3e:07:59:0e:43:14:74:bc:f5:78:4c: de:f9:7f:28:85:30:80:a1:72:9f:9c:b0:2b:a1:69: 8b:67:7b:96:19:d0:9e:95:e1:f7:c6:76:cd:3b:0c: 92:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C7:45:32:B7:9B:D8:B6:3A:08:F3:F3:48:0C:72:EC:D3:B5:2F:60 X509v3 Authority Key Identifier: keyid:F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:57:14:40:00:7c:54:9d:fc:82:40:4e:89:3a:90:ae:28:5b: 64:b7:87:94:dc:40:a0:36:e9:36:c3:2a:78:07:88:55:7e:cb: 07:fd:08:56:cf:42:97:bd:1a:35:2e:86:27:30:40:b6:f3:49: 93:8c:e1:cf:47:74:ad:43:28:9a:95:db:b7:73:d6:28:d1:7b: 5c:23:cd:62:cd:77:b4:19:48:2b:a5:fc:1b:15:a4:51:1d:0a: a9:f8:be:13:ad:fd:17:08:d5:dd:e1:cc:79:9e:aa:f7:a0:0b: b1:b6:81:6e:31:5d:b1:ce:ec:7b:f7:9b:4f:13:f5:b6:4a:28: 73:47:bd:e7:9a:0d:27:76:88:80:82:57:10:dc:b5:31:4e:27: 89:9f:3c:b4:78:4c:56:bf:1b:b2:2b:2c:8e:3c:1e:9b:1f:3b: b3:b7:cc:c7:e8:c1:20:6a:e9:26:73:e6:98:bb:22:c0:ab:ea: 46:bd:0f:9b:1a:4b:83:9b:c1:ae:ea:f2:92:3b:3c:74:3a:0f: 55:79:47:92:6b:8c:3e:56:c8:6b:ba:9a:33:d1:5b:b8:a4:68: 2b:47:d8:dc:98:d0:0a:83:c9:77:0c:2f:a6:62:5b:d7:0b:b2: 76:24:ac:bc:a0:c0:e8:7a:33:65:58:b6:e5:fc:03:45:da:e8: 82:e5:df:49 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTY1RjExMC8GA1UEBRMoRjA0OTI5RUY3NDNDNTRDMDhCNDVFMTlDRkM1MUJGMkFB NTU5REFBMTAeFw0yNTA1MzEwNjM1MTlaFw0yNTA2MDcwNjM1MTlaMBgxFjAUBgNV BAMTDTY4M2FhMzI3LTUyY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDX5I9X9tWXMX8dto4ScyhbK7mbZ71HJPT3yEas/JtSpKSElMiiGFrRqGKKb8ix JchtZgsJyVf4xRKlzwwEjD63U11sjsZo7t7dcZQi7YQJFEJ7Q5kwW98m2q0IKRFS PwMfmITG4WUBOkxzRef5UIiTtmrDH8w5BJvOpe8P22uPfTG9MMXZ45a9lHcgT40s MF2QbKsRcuSApsNCvHc0EsRT5qJEctZnJw4Iz/WfAPTtfbKIdN1UncEcpJOdrK5S wXwb19mAkalgQ/JRLdUFsBRgOaE+b3Q+B1kOQxR0vPV4TN75fyiFMIChcp+csCuh aYtne5YZ0J6V4ffGds07DJJDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6sdFMreb 2LY6CPPzSAxy7NO1L2AwHwYDVR0jBBgwFoAU8Ekp73Q8VMCLReGc/FG/KqVZ2qEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxNjVGLzhDMjE0OTc0QTRC MzExRUY4ODlDNzY4N0M0RjlBRTAyLzhFa3A3M1E4Vk1DTFJlR2NfRkdfS3FWWjJx RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOEVrcDczUThWTUNMUmVHY19GR19LcVZaMnFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx NjVGLzhDMjE0OTc0QTRCMzExRUY4ODlDNzY4N0M0RjlBRTAyLzhFa3A3M1E4Vk1D TFJlR2NfRkdfS3FWWjJxRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALBXFEAAfFSd/IJATok6kK4oW2S3h5TcQKA26TbDKngHiFV+ywf9CFbP Qpe9GjUuhicwQLbzSZOM4c9HdK1DKJqV27dz1ijRe1wjzWLNd7QZSCul/BsVpFEd Cqn4vhOt/RcI1d3hzHmeqvegC7G2gW4xXbHO7Hv3m08T9bZKKHNHveeaDSd2iICC VxDctTFOJ4mfPLR4TFa/G7IrLI48HpsfO7O3zMfowSBq6SZz5pi7IsCr6ka9D5sa S4Obwa7q8pI7PHQ6D1V5R5JrjD5WyGu6mjPRW7ikaCtH2NyY0AqDyXcML6ZiW9cL snYkrLygwOh6M2VYtuX8A0Xa6ILl30k= -----END CERTIFICATE-----Generated at Sat May 31 17:10:21 2025 by rpki-client