$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.mft File: eVMBxo-H8Eofn0mb3y0p84RX-9M.mft (raw, json) Hash identifier: nJYZaBJR6y6eQ2/MRgvGjhqLhlXhZ/zLbcu0Z65Dcjc= Subject key identifier: 43:37:56:47:AD:5E:AD:70:80:E5:90:C2:57:B1:5D:3B:D6:B2:40:C8 Authority key identifier: 79:53:01:C6:8F:87:F0:4A:1F:9F:49:9B:DF:2D:29:F3:84:57:FB:D3 Certificate issuer: /CN=A91D5749/serialNumber=795301C68F87F04A1F9F499BDF2D29F38457FBD3 Certificate serial: 01E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVMBxo-H8Eofn0mb3y0p84RX-9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.mft Manifest number: 01E0 Signing time: Tue 01 Jul 2025 03:03:43 +0000 Manifest this update: Tue 01 Jul 2025 03:03:42 +0000 Manifest next update: Tue 08 Jul 2025 03:03:42 +0000 Files and hashes: 1: eVMBxo-H8Eofn0mb3y0p84RX-9M.crl (hash: j9teFkSvSwapOlggHF8LR93l6RbrZl+0UFm5dY1rFak=) 2: FA57A19A72CE11ED9E7FF20FC4F9AE02.roa (hash: yJ4lShlDGyRUFuRYtdd4tf+gPrXiWJKg0kEkwM3sQJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.crl rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVMBxo-H8Eofn0mb3y0p84RX-9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 483 (0x1e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5749, serialNumber=795301C68F87F04A1F9F499BDF2D29F38457FBD3 Validity Not Before: Jul 1 03:03:42 2025 GMT Not After : Jul 8 03:03:42 2025 GMT Subject: CN=6863500f-8529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7a:d1:0b:50:03:bb:de:a4:c2:3f:84:fa:36: 2e:44:c0:2d:85:f5:be:01:90:2e:55:f6:31:a5:4e: 45:25:ae:f5:79:7a:89:09:b9:56:c2:be:9f:8a:f1: 07:86:dd:75:48:9d:f2:eb:72:b3:3d:2f:92:5c:cf: 04:ac:56:19:33:7d:31:79:01:20:a2:b7:fb:84:54: 10:08:9d:c6:31:67:11:fd:7c:ce:11:bc:0c:cf:94: 1d:89:21:97:a6:0b:a1:dc:06:e1:af:ed:d0:ec:54: da:22:b9:33:d8:00:f0:20:e0:37:e0:e9:3a:85:4c: 73:6d:70:f7:4f:6c:3d:ab:1e:be:e6:7f:be:44:f2: ff:84:aa:23:15:82:e5:92:07:39:41:b5:39:bf:9c: de:f4:06:0a:e8:7f:2b:32:d1:92:ac:f1:f2:ed:7c: 30:67:14:00:d3:64:0d:8f:86:46:9f:fa:ce:b8:47: 4d:05:fa:4e:79:98:1c:5c:10:b7:a6:ff:f5:01:4c: d6:7f:fc:cf:6a:8c:12:3b:c7:8f:8f:97:e2:98:c9: 7e:a3:69:2e:a6:01:70:ab:8a:75:d9:30:ff:43:8e: 8a:57:a5:80:5d:af:20:81:f5:bc:8e:bf:a4:7d:0e: c5:17:27:e3:8e:77:a1:24:1f:47:1c:6a:9b:15:8b: 00:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:37:56:47:AD:5E:AD:70:80:E5:90:C2:57:B1:5D:3B:D6:B2:40:C8 X509v3 Authority Key Identifier: keyid:79:53:01:C6:8F:87:F0:4A:1F:9F:49:9B:DF:2D:29:F3:84:57:FB:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVMBxo-H8Eofn0mb3y0p84RX-9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:f7:ba:a2:66:65:d4:a0:1a:d3:a8:a4:18:4c:ab:f3:27:c9: 7c:eb:08:ec:07:79:a9:34:65:d5:33:08:e3:10:15:e5:6d:92: 6e:cc:79:11:16:16:1c:ad:a4:74:2b:6e:8e:7f:6a:17:bd:7c: 89:5f:e4:90:c8:ba:e3:1c:16:76:bc:c0:5e:b8:4a:09:ed:86: 7d:0e:b1:b8:e7:ba:00:42:4f:30:00:71:c5:09:15:54:bb:bc: f1:5c:55:a7:71:72:ae:61:89:3a:7f:ad:56:71:be:3e:71:4e: 87:b2:4c:1c:4d:4c:40:62:20:74:54:43:da:d0:6e:74:7b:c4: 54:49:c0:e4:92:81:23:1d:62:a0:db:9c:eb:b4:06:a4:05:e0: ba:c8:d2:28:dd:e4:69:c1:f4:cf:ec:03:da:01:c2:97:01:f1: fa:b2:61:8a:1b:da:7b:1f:ae:53:1b:30:85:b5:6c:ef:25:20: 93:3a:17:03:32:58:01:73:50:4d:37:dc:f2:c7:d2:b1:70:94: 29:3c:18:e3:5a:1b:57:ff:82:74:1c:2d:39:94:57:73:98:46: 6b:b9:21:af:27:dc:3c:2d:58:f8:c3:b4:3f:b6:68:aa:6a:b2: 51:46:01:66:cb:6a:3c:13:f7:cc:fc:c3:17:51:20:4b:07:47: 06:68:9f:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU3NDkxMTAvBgNVBAUTKDc5NTMwMUM2OEY4N0YwNEExRjlGNDk5QkRGMkQyOUYz ODQ1N0ZCRDMwHhcNMjUwNzAxMDMwMzQyWhcNMjUwNzA4MDMwMzQyWjAYMRYwFAYD VQQDEw02ODYzNTAwZi04NTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5nrRC1ADu96kwj+E+jYuRMAthfW+AZAuVfYxpU5FJa71eXqJCblWwr6fivEH ht11SJ3y63KzPS+SXM8ErFYZM30xeQEgorf7hFQQCJ3GMWcR/XzOEbwMz5QdiSGX pguh3Abhr+3Q7FTaIrkz2ADwIOA34Ok6hUxzbXD3T2w9qx6+5n++RPL/hKojFYLl kgc5QbU5v5ze9AYK6H8rMtGSrPHy7XwwZxQA02QNj4ZGn/rOuEdNBfpOeZgcXBC3 pv/1AUzWf/zPaowSO8ePj5fimMl+o2kupgFwq4p12TD/Q46KV6WAXa8ggfW8jr+k fQ7FFyfjjnehJB9HHGqbFYsAlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEM3Vket Xq1wgOWQwlexXTvWskDIMB8GA1UdIwQYMBaAFHlTAcaPh/BKH59Jm98tKfOEV/vT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTc0OS9DNzBFQzNCQTcy Q0MxMUVEOTA4RjZGMEZDNEY5QUUwMi9lVk1CeG8tSDhFb2ZuMG1iM3kwcDg0Ulgt OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VWTUJ4by1IOEVvZm4wbWIzeTBwODRSWC05TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTc0OS9DNzBFQzNCQTcyQ0MxMUVEOTA4RjZGMEZDNEY5QUUwMi9lVk1CeG8tSDhF b2ZuMG1iM3kwcDg0UlgtOU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk97qiZmXUoBrTqKQYTKvzJ8l86wjsB3mpNGXVMwjjEBXlbZJuzHkR FhYcraR0K26Of2oXvXyJX+SQyLrjHBZ2vMBeuEoJ7YZ9DrG457oAQk8wAHHFCRVU u7zxXFWncXKuYYk6f61Wcb4+cU6HskwcTUxAYiB0VEPa0G50e8RUScDkkoEjHWKg 25zrtAakBeC6yNIo3eRpwfTP7APaAcKXAfH6smGKG9p7H65TGzCFtWzvJSCTOhcD MlgBc1BNN9zyx9KxcJQpPBjjWhtX/4J0HC05lFdzmEZruSGvJ9w8LVj4w7Q/tmiq arJRRgFmy2o8E/fM/MMXUSBLB0cGaJ+J -----END CERTIFICATE-----Generated at Wed Jul 2 05:13:19 2025 by rpki-client