$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.mft File: EvkubHLmyiXAdQVbSP43tlq24FI.mft (raw, json) Hash identifier: ISQc58wacBY3mXOZClX74/e9VG7wBgRDT6TMVZ5kRk8= Subject key identifier: C2:9E:13:69:DB:19:D4:6A:B1:9F:6E:A9:E9:71:3C:A6:27:AF:F0:5A Authority key identifier: 12:F9:2E:6C:72:E6:CA:25:C0:75:05:5B:48:FE:37:B6:5A:B6:E0:52 Certificate issuer: /CN=A91B6006/serialNumber=12F92E6C72E6CA25C075055B48FE37B65AB6E052 Certificate serial: 12D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvkubHLmyiXAdQVbSP43tlq24FI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.mft Manifest number: 12B1 Signing time: Fri 30 May 2025 17:15:44 +0000 Manifest this update: Fri 30 May 2025 17:15:43 +0000 Manifest next update: Fri 06 Jun 2025 17:15:43 +0000 Files and hashes: 1: EvkubHLmyiXAdQVbSP43tlq24FI.crl (hash: i/m2/imLzjWLVkhCsAoK2wqkGNOVpbl1NKZaQN/e1lk=) 2: D67D6C12D09611ECAE4FA90AC4F9AE02.roa (hash: ohfZG59sEvFb3B98TJzWsPWyWdsfQxGqekH2JoxH6gQ=) 3: D5BE6FF6D09611ECAE4FA90AC4F9AE02.roa (hash: QtJIcs1O/DIjF/Awmfs8kNbcOWbla/g4nCBWN3yn5TE=) 4: 2AD29284D22A11E8B6E99987C4F9AE02.roa (hash: 3q5R1J4djCmGk92jrHGge8u1JnUcb5OYOxif13zqZng=) 5: D82E5F1ADBC211E99D686940C4F9AE02.roa (hash: At2TYBc2mB9m2KMar1RnpPwLIC3piw2pCnJKYNvU7DI=) 6: 8ECD16D0CE7211ED84D09A78C4F9AE02.roa (hash: T7RO7bDELeuxgYKkuydZy/+SJnNf8qDQvOpkzhWcvjU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.crl rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvkubHLmyiXAdQVbSP43tlq24FI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4825 (0x12d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6006, serialNumber=12F92E6C72E6CA25C075055B48FE37B65AB6E052 Validity Not Before: May 30 17:15:43 2025 GMT Not After : Jun 6 17:15:43 2025 GMT Subject: CN=6839e7c0-777d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e5:87:f8:f0:6a:20:df:13:3e:10:90:79:76: ee:bc:c1:bd:ab:86:ff:a2:4e:4b:f2:cd:49:4f:92: 42:a8:2a:db:36:4d:3b:e5:1b:b9:a6:3d:36:ee:58: 6f:33:cb:db:c6:0a:bb:e2:77:43:fe:6d:f4:30:a1: a4:d1:8b:17:90:c4:dc:8c:c2:38:e5:29:3b:cf:75: a9:a6:dc:c9:30:72:07:64:01:04:0c:7d:5c:f3:29: dd:e0:bb:3e:b2:ba:f9:c1:1c:65:d2:c2:18:ea:c9: fc:c4:93:70:52:d8:06:c9:c1:51:53:df:ee:ea:3a: b3:70:13:8c:7c:28:e8:e9:06:20:1e:68:1d:1e:c8: 8f:db:49:83:d3:05:8b:b7:13:89:1d:b1:30:a5:57: 53:98:2d:6c:4e:58:23:0f:5e:10:fa:28:34:62:39: 76:69:71:eb:f6:29:6b:35:cd:bf:b6:98:83:cb:11: d4:ba:93:8d:60:c7:24:15:b0:fa:80:e0:a6:61:3f: 93:cc:5b:e5:93:45:79:dd:c8:49:01:77:39:d7:a7: 70:3f:5e:0d:a4:c1:3f:f4:b1:41:56:da:5f:90:da: 18:41:a5:a5:1a:ef:35:23:92:22:76:ec:2e:46:bd: 14:e7:7e:a3:fa:c4:88:6a:57:7e:20:24:02:20:83: 2b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:9E:13:69:DB:19:D4:6A:B1:9F:6E:A9:E9:71:3C:A6:27:AF:F0:5A X509v3 Authority Key Identifier: keyid:12:F9:2E:6C:72:E6:CA:25:C0:75:05:5B:48:FE:37:B6:5A:B6:E0:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvkubHLmyiXAdQVbSP43tlq24FI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:60:af:0a:dc:3a:79:fb:1f:56:91:15:96:8f:1c:21:1b:09: ab:d4:a9:fd:e6:04:ec:d0:93:d5:f8:c5:b3:d7:33:7f:87:59: 2e:ce:f0:13:7a:96:5b:fe:9f:3d:8a:25:8c:c3:35:dd:ca:ba: 90:49:0f:e3:08:5d:83:97:a9:40:cf:1b:06:3f:ec:33:67:f3: 34:aa:ce:a8:dd:62:b4:13:16:be:bc:ff:00:e8:a2:ba:e3:2d: 69:7a:71:92:3f:bc:13:35:d4:1a:33:fc:c7:fc:ae:cb:32:f6: 48:a4:c0:fa:b4:87:de:fb:9d:8f:a8:52:63:9f:9a:5d:e2:c4: c5:d1:e0:f2:51:b6:8e:d4:34:ee:46:9d:33:77:5c:56:f1:74: 57:01:dd:c9:75:57:6a:33:5a:c6:38:ba:4a:6b:bf:9e:e3:8c: 5c:bb:32:15:fc:53:ec:2c:98:f2:43:55:ea:b6:48:71:a1:7e: 05:8d:91:79:b0:24:0c:49:e2:de:7f:57:83:06:84:52:20:e7: ec:6e:33:fb:e0:f8:9a:e3:ec:12:57:ae:35:9f:20:d1:04:68: eb:be:d2:ef:15:3a:e7:eb:34:8e:d9:81:2b:3c:8e:c2:1b:c2: 07:0a:6d:f7:0b:60:35:47:9d:19:61:5c:26:f2:66:6d:78:c5: c4:e9:fc:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYwMDYxMTAvBgNVBAUTKDEyRjkyRTZDNzJFNkNBMjVDMDc1MDU1QjQ4RkUzN0I2 NUFCNkUwNTIwHhcNMjUwNTMwMTcxNTQzWhcNMjUwNjA2MTcxNTQzWjAYMRYwFAYD VQQDEw02ODM5ZTdjMC03NzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweWH+PBqIN8TPhCQeXbuvMG9q4b/ok5L8s1JT5JCqCrbNk075Ru5pj027lhv M8vbxgq74ndD/m30MKGk0YsXkMTcjMI45Sk7z3WpptzJMHIHZAEEDH1c8ynd4Ls+ srr5wRxl0sIY6sn8xJNwUtgGycFRU9/u6jqzcBOMfCjo6QYgHmgdHsiP20mD0wWL txOJHbEwpVdTmC1sTlgjD14Q+ig0Yjl2aXHr9ilrNc2/tpiDyxHUupONYMckFbD6 gOCmYT+TzFvlk0V53chJAXc516dwP14NpME/9LFBVtpfkNoYQaWlGu81I5Iiduwu Rr0U536j+sSIald+ICQCIIMrIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKeE2nb GdRqsZ9uqelxPKYnr/BaMB8GA1UdIwQYMBaAFBL5Lmxy5solwHUFW0j+N7ZatuBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjAwNi9FNEZERTQ2QUMz RTgxMUU4QUM3NkVCMTZDNEY5QUUwMi9Fdmt1YkhMbXlpWEFkUVZiU1A0M3RscTI0 RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V2a3ViSExteWlYQWRRVmJTUDQzdGxxMjRGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjAwNi9FNEZERTQ2QUMzRTgxMUU4QUM3NkVCMTZDNEY5QUUwMi9Fdmt1YkhMbXlp WEFkUVZiU1A0M3RscTI0RkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuYK8K3Dp5+x9WkRWWjxwhGwmr1Kn95gTs0JPV+MWz1zN/h1kuzvAT epZb/p89iiWMwzXdyrqQSQ/jCF2Dl6lAzxsGP+wzZ/M0qs6o3WK0Exa+vP8A6KK6 4y1penGSP7wTNdQaM/zH/K7LMvZIpMD6tIfe+52PqFJjn5pd4sTF0eDyUbaO1DTu Rp0zd1xW8XRXAd3JdVdqM1rGOLpKa7+e44xcuzIV/FPsLJjyQ1XqtkhxoX4FjZF5 sCQMSeLef1eDBoRSIOfsbjP74Pia4+wSV641nyDRBGjrvtLvFTrn6zSO2YErPI7C G8IHCm33C2A1R50ZYVwm8mZteMXE6fx5 -----END CERTIFICATE-----Generated at Sat May 31 16:50:40 2025 by rpki-client