$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft File: E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft (raw, json) Hash identifier: 5pEdJ26WubSrXBEKmIDgA7ueQF1nGdXwiOPE6vHI7as= Subject key identifier: 3C:93:A5:4B:79:49:23:60:0D:34:65:C0:47:B5:6C:E3:A6:ED:C3:DB Authority key identifier: 13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74 Certificate issuer: /CN=A91CE9D6/serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74 Certificate serial: 0A02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft Manifest number: 09EF Signing time: Fri 30 May 2025 20:05:15 +0000 Manifest this update: Fri 30 May 2025 20:05:14 +0000 Manifest next update: Fri 06 Jun 2025 20:05:14 +0000 Files and hashes: 1: E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl (hash: 2vAwdY14ekDMZq+dgQyOgbo4baHpHxXmuO9a2I51IoA=) 2: 722D43AC7A5A11EABD77E486C4F9AE02.roa (hash: gpPg/16kKxPZtosxwk3uS2OGAiNWAdV4RvEaBetwtjY=) 3: E4EFE6905ECB11ECA9B55A3BC4F9AE02.roa (hash: 2/vrRanjIvJ85A1uVxImmh8dfMsQj3ydRiChMXIyicw=) 4: A1C764027A5B11EA98745A0EC4F9AE02.roa (hash: Nzvt2pSeGZD3qdrCxDPbO/iQuuVNl0d8y3dg1zJR1Nk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2562 (0xa02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE9D6, serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74 Validity Not Before: May 30 20:05:14 2025 GMT Not After : Jun 6 20:05:14 2025 GMT Subject: CN=683a0f7b-ce3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:27:e9:2c:24:99:ae:2a:c4:6a:da:bd:04:14: bb:31:f5:0a:a8:96:3e:fe:47:9e:8b:f5:71:94:df: 6b:df:6e:9d:a0:b0:ea:2c:74:8a:a9:2f:6f:d8:c3: e4:84:bb:b5:93:fe:f3:06:18:35:98:7d:d8:69:d2: 39:00:9d:97:8a:a6:96:29:61:f7:a0:07:f5:e8:1d: 0b:9c:8c:ca:12:a2:bf:6d:0d:51:34:ad:54:87:3e: 7d:3a:f3:1a:eb:14:49:f8:46:15:de:61:a9:31:0d: 35:71:ae:2c:b3:8b:a8:e9:85:55:d6:bd:98:27:4b: 22:b4:78:63:c8:b6:22:95:5c:0b:13:26:d0:ab:59: 78:c7:3e:69:60:f8:5f:ae:01:67:3e:b1:a0:ad:cc: 35:5c:25:7c:e6:d5:19:a5:b8:44:58:12:3f:2f:0d: 1e:53:fd:b3:e8:33:59:d9:a1:b6:05:b6:77:1e:e4: de:ef:6c:72:2d:d0:29:46:fa:d7:af:87:bd:c6:07: 12:70:e8:8b:f5:7a:12:1c:3f:5a:2a:0d:0c:e2:ab: 64:ab:35:80:c0:a2:ab:9b:99:e9:6f:a1:31:58:a1: ab:46:07:78:ba:c8:79:66:61:98:5c:ed:72:0c:82: 56:cf:ef:07:ba:31:76:d3:2e:b1:8f:e7:b9:18:30: 3b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:93:A5:4B:79:49:23:60:0D:34:65:C0:47:B5:6C:E3:A6:ED:C3:DB X509v3 Authority Key Identifier: keyid:13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:5f:93:00:56:4c:a2:ff:ae:20:25:90:5b:8c:0e:f7:58:fb: 6d:24:00:37:a2:55:39:0e:58:d2:52:0f:bd:e3:3b:e5:41:a4: 59:e0:5f:07:8a:55:77:2b:6b:c0:0c:e9:27:c2:ad:35:88:b0: d5:a7:63:d9:62:ee:49:4d:88:d9:6b:9f:4e:56:82:72:74:47: 5e:11:bb:0d:23:f3:31:91:f0:18:e3:9a:dd:6d:e6:c3:cf:2f: e7:90:24:30:9c:6c:fc:a8:a2:e3:c0:34:a8:26:39:a6:7f:1a: 83:4e:c3:63:39:a4:ba:33:bd:7b:ae:e3:0a:95:8a:1c:ba:4b: be:be:c9:96:59:ff:32:be:2c:6f:91:c1:e0:a5:d1:3d:a7:94: c2:0c:ca:b7:cc:cd:bf:7d:49:24:3a:fa:2c:36:57:51:21:7f: a3:0b:be:4a:60:22:e7:b0:08:bf:68:7e:55:5c:5f:51:14:82: 39:ca:cb:ac:3d:c8:61:3a:8f:c0:5a:72:4f:9a:e3:a8:a1:c5: 08:98:b8:5f:76:09:bd:fd:19:c9:20:ad:3e:dd:02:22:e2:b4: e0:c8:72:49:fc:b1:a5:8f:20:c3:fe:8b:9f:a2:81:9b:f9:30: 39:fe:5b:fd:a3:32:8d:08:c2:76:4a:ca:b5:c1:15:79:0d:06: 45:d4:50:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U5RDYxMTAvBgNVBAUTKDEzNjc0MUJEOUU4NzBGMDZFQ0U1Q0IzNTVCOEM3NTcx Q0M5NkJBNzQwHhcNMjUwNTMwMjAwNTE0WhcNMjUwNjA2MjAwNTE0WjAYMRYwFAYD VQQDEw02ODNhMGY3Yi1jZTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2CfpLCSZrirEatq9BBS7MfUKqJY+/keei/VxlN9r326doLDqLHSKqS9v2MPk hLu1k/7zBhg1mH3YadI5AJ2XiqaWKWH3oAf16B0LnIzKEqK/bQ1RNK1Uhz59OvMa 6xRJ+EYV3mGpMQ01ca4ss4uo6YVV1r2YJ0sitHhjyLYilVwLEybQq1l4xz5pYPhf rgFnPrGgrcw1XCV85tUZpbhEWBI/Lw0eU/2z6DNZ2aG2BbZ3HuTe72xyLdApRvrX r4e9xgcScOiL9XoSHD9aKg0M4qtkqzWAwKKrm5npb6ExWKGrRgd4ush5ZmGYXO1y DIJWz+8HujF20y6xj+e5GDA7/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDyTpUt5 SSNgDTRlwEe1bOOm7cPbMB8GA1UdIwQYMBaAFBNnQb2ehw8G7OXLNVuMdXHMlrp0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTlENi85RTY2RjUxMjdB NTUxMUVBQkZCRTk0N0FDNEY5QUUwMi9FMmRCdlo2SER3YnM1Y3MxVzR4MWNjeVd1 blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UyZEJ2WjZIRHdiczVjczFXNHgxY2N5V3VuUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTlENi85RTY2RjUxMjdBNTUxMUVBQkZCRTk0N0FDNEY5QUUwMi9FMmRCdlo2SER3 YnM1Y3MxVzR4MWNjeVd1blEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUX5MAVkyi/64gJZBbjA73WPttJAA3olU5DljSUg+94zvlQaRZ4F8H ilV3K2vADOknwq01iLDVp2PZYu5JTYjZa59OVoJydEdeEbsNI/MxkfAY45rdbebD zy/nkCQwnGz8qKLjwDSoJjmmfxqDTsNjOaS6M717ruMKlYocuku+vsmWWf8yvixv kcHgpdE9p5TCDMq3zM2/fUkkOvosNldRIX+jC75KYCLnsAi/aH5VXF9RFII5ysus PchhOo/AWnJPmuOoocUImLhfdgm9/RnJIK0+3QIi4rTgyHJJ/LGljyDD/oufooGb +TA5/lv9ozKNCMJ2Ssq1wRV5DQZF1FDA -----END CERTIFICATE-----Generated at Sat May 31 16:30:37 2025 by rpki-client