$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft File: EqEC8I7RT2I_puMdurSaJNG5oVE.mft (raw, json) Hash identifier: DKY97T6YElL9FDApN4+kVMOFCXSLdOufw1JPGCshJvs= Subject key identifier: 1B:93:93:CC:36:3B:51:E6:0F:C3:78:25:2F:26:1B:6E:81:76:EF:56 Authority key identifier: 12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 Certificate issuer: /CN=A91BC238/serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft Manifest number: 4F Signing time: Sat 31 May 2025 06:59:39 +0000 Manifest this update: Sat 31 May 2025 06:59:38 +0000 Manifest next update: Sat 07 Jun 2025 06:59:38 +0000 Files and hashes: 1: EqEC8I7RT2I_puMdurSaJNG5oVE.crl (hash: PK2csAnKuQgHXZCynT5FN1/U6IjWMlSx0e2yafvpJFE=) 2: 3135AFCECBF411EFBCA06B6BC4F9AE02.roa (hash: D8sGSIRpeb4KU8twC3M5LxWoSrBlM5fxXQEFrUY0ChI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:59:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC238, serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Validity Not Before: May 31 06:59:38 2025 GMT Not After : Jun 7 06:59:38 2025 GMT Subject: CN=683aa8db-4c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:88:17:d6:0a:8a:10:df:20:64:00:bf:b8:2c: 59:3d:55:f5:32:89:e3:fd:ed:dd:48:2f:df:2e:72: 32:8f:0a:ea:55:24:d3:d8:f9:2a:bf:d7:1f:af:4e: f7:95:63:85:77:35:75:bb:ca:a4:10:03:12:14:c8: 90:01:f5:b3:80:02:6a:a3:f7:c4:1e:e7:0a:6d:a6: 9f:16:10:6a:c5:6b:69:6b:ce:85:4c:b4:94:54:6e: ef:29:0e:ac:70:17:6a:d1:f6:f5:6c:88:1d:c0:17: 13:2f:f0:13:6e:df:96:88:21:fa:c2:18:06:7f:20: 96:8b:41:42:3e:61:13:35:2a:82:ab:b1:97:54:00: 4c:bb:d0:93:67:3c:37:96:17:f8:d1:a6:80:ef:66: 93:c7:0a:7e:ba:99:a6:07:3b:cb:6c:df:50:b8:e6: b3:b2:81:48:fd:bb:54:86:d1:84:48:cd:1f:24:53: f0:6d:98:d2:c3:dd:11:bb:6f:ac:a0:47:37:74:d9: f5:e7:33:04:f3:4d:ec:3b:11:e5:1c:06:ba:0b:50: 68:35:80:f0:66:1e:68:98:13:0e:81:20:f2:b9:85: 0f:10:fc:82:75:77:83:ca:7c:c7:77:7c:4c:28:69: 78:6a:b0:78:e1:ee:76:94:14:c5:38:7f:81:d6:16: 4f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:93:93:CC:36:3B:51:E6:0F:C3:78:25:2F:26:1B:6E:81:76:EF:56 X509v3 Authority Key Identifier: keyid:12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:d8:d3:a9:8b:46:8e:5a:21:f0:91:91:1e:be:21:d6:d4:33: 07:76:27:49:09:f7:61:b0:a6:10:8c:6e:ac:f2:49:a3:94:99: 6e:0c:4f:5f:b6:55:3d:84:aa:2c:47:7c:84:87:8a:f4:5a:c2: 41:9d:68:0f:fb:f8:17:b7:df:7d:cc:56:bf:a4:18:32:bc:23: cc:7a:49:af:a9:6b:ee:94:eb:a6:d8:c0:94:12:2f:91:ac:c6: ac:c3:1f:08:fd:4d:e9:f1:2b:58:d2:c5:56:fd:c4:48:c6:90: 96:ca:cf:42:d2:ad:5b:c5:a3:7b:df:62:83:c2:9f:7d:c1:10: ef:84:d1:28:9c:86:2e:ee:7b:0c:f1:41:8e:6d:33:c1:88:f4: bd:22:0a:01:69:65:cc:d6:a7:bf:c0:03:8b:f6:7c:db:f1:81: 4f:57:6c:b4:00:80:6d:75:14:a4:f7:ee:15:0a:fd:ba:70:93: 91:c4:c5:2e:ac:b3:7a:e6:f9:6a:14:a1:e4:9f:10:93:cf:48: 10:24:3c:95:51:d9:12:55:4d:b1:19:60:ed:c3:f5:6d:43:4d: df:3d:d1:04:6c:92:00:c6:42:cd:82:01:2e:5c:79:e8:e8:2b: 5e:b6:fa:dc:4a:6e:19:0f:cb:8e:b8:36:58:06:9a:be:07:c2: 35:a3:5d:1d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QzIzODExMC8GA1UEBRMoMTJBMTAyRjA4RUQxNEY2MjNGQTZFMzFEQkFCNDlBMjRE MUI5QTE1MTAeFw0yNTA1MzEwNjU5MzhaFw0yNTA2MDcwNjU5MzhaMBgxFjAUBgNV BAMTDTY4M2FhOGRiLTRjMWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBiBfWCooQ3yBkAL+4LFk9VfUyieP97d1IL98ucjKPCupVJNPY+Sq/1x+vTveV Y4V3NXW7yqQQAxIUyJAB9bOAAmqj98Qe5wptpp8WEGrFa2lrzoVMtJRUbu8pDqxw F2rR9vVsiB3AFxMv8BNu35aIIfrCGAZ/IJaLQUI+YRM1KoKrsZdUAEy70JNnPDeW F/jRpoDvZpPHCn66maYHO8ts31C45rOygUj9u1SG0YRIzR8kU/BtmNLD3RG7b6yg Rzd02fXnMwTzTew7EeUcBroLUGg1gPBmHmiYEw6BIPK5hQ8Q/IJ1d4PKfMd3fEwo aXhqsHjh7naUFMU4f4HWFk9pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUG5OTzDY7 UeYPw3glLyYbboF271YwHwYDVR0jBBgwFoAUEqEC8I7RT2I/puMdurSaJNG5oVEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDMjM4L0NENzE3RDlDQ0JG MzExRUZCRTVCMzMzMEM0RjlBRTAyL0VxRUM4STdSVDJJX3B1TWR1clNhSk5HNW9W RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRXFFQzhJN1JUMklfcHVNZHVyU2FKTkc1b1ZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD MjM4L0NENzE3RDlDQ0JGMzExRUZCRTVCMzMzMEM0RjlBRTAyL0VxRUM4STdSVDJJ X3B1TWR1clNhSk5HNW9WRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAPY06mLRo5aIfCRkR6+IdbUMwd2J0kJ92GwphCMbqzySaOUmW4MT1+2 VT2EqixHfISHivRawkGdaA/7+Be3333MVr+kGDK8I8x6Sa+pa+6U66bYwJQSL5Gs xqzDHwj9TenxK1jSxVb9xEjGkJbKz0LSrVvFo3vfYoPCn33BEO+E0Sichi7uewzx QY5tM8GI9L0iCgFpZczWp7/AA4v2fNvxgU9XbLQAgG11FKT37hUK/bpwk5HExS6s s3rm+WoUoeSfEJPPSBAkPJVR2RJVTbEZYO3D9W1DTd890QRskgDGQs2CAS5ceejo K162+txKbhkPy464NlgGmr4HwjWjXR0= -----END CERTIFICATE-----Generated at Sat May 31 16:49:10 2025 by rpki-client