$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft File: epirabcrqsZmDlTdHG2KBi4s0v4.mft (raw, json) Hash identifier: LdqHEtG+p0K4b76csXzJ2NWDROAnJA699optGu/AFA8= Subject key identifier: 1E:FE:10:1E:F4:26:4C:5C:E1:43:99:7B:33:60:EB:09:42:AF:F9:94 Authority key identifier: 7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE Certificate issuer: /CN=A91E6038/serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE Certificate serial: 036C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft Manifest number: 0367 Signing time: Sat 31 May 2025 01:08:15 +0000 Manifest this update: Sat 31 May 2025 01:08:14 +0000 Manifest next update: Sat 07 Jun 2025 01:08:14 +0000 Files and hashes: 1: epirabcrqsZmDlTdHG2KBi4s0v4.crl (hash: Ynx3Bhsj7YV/+4uycPReaWuUTc83s4ixeSkV9YbUp+I=) 2: 7ABCBB70AFFE11ECA52DBA5DC4F9AE02.roa (hash: lDraqThqAp2VTAeBcGzfKiHZ4mgdJ9Pve9y5JAjucic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:08:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 876 (0x36c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6038, serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE Validity Not Before: May 31 01:08:14 2025 GMT Not After : Jun 7 01:08:14 2025 GMT Subject: CN=683a567e-c314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:60:fb:e3:61:79:dc:24:53:b9:6b:7b:2a:bd: 1a:e5:c2:9d:5d:a0:2d:87:d3:b5:76:da:ae:e2:e2: 8d:4d:9d:40:65:93:25:4a:c2:4b:af:d5:ec:63:4d: ee:e0:49:90:39:68:f8:7e:ac:34:39:a2:39:c5:d7: 0b:33:9e:de:69:b1:4b:9b:ba:3a:17:ca:39:8c:79: 31:a4:18:32:03:f7:aa:00:60:fe:64:f5:67:9d:5f: db:62:e9:e4:d3:bc:a7:f5:41:3e:02:d4:29:8c:76: 6e:52:26:e6:1d:ab:4e:58:b1:5d:4d:5b:fe:b9:c6: 4e:14:ef:a3:2f:a9:06:2c:94:a1:3a:a1:c5:cf:ad: 90:7f:df:28:1b:5c:e7:ef:58:1e:d3:7a:75:03:97: 18:d8:1a:a0:fc:d3:dc:29:4c:a9:bd:69:b6:53:1f: d6:3b:18:6a:a9:40:3f:a8:2d:bc:d0:72:4a:3f:10: 6b:e4:4a:81:41:01:d7:59:9f:70:b8:d9:c8:cd:a1: 92:27:b9:9a:8f:37:74:64:90:36:aa:84:ad:6d:38: bb:12:79:e6:2c:0f:3b:fd:7a:5b:eb:6b:f0:1a:3f: 28:48:ef:c5:54:39:5c:25:63:d5:4a:fd:6d:f8:c7: bd:c8:f4:4d:1d:37:22:7c:74:7a:b5:59:6a:12:96: 70:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:FE:10:1E:F4:26:4C:5C:E1:43:99:7B:33:60:EB:09:42:AF:F9:94 X509v3 Authority Key Identifier: keyid:7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:89:d7:e8:84:e9:82:16:7e:ad:fa:1c:a2:f4:a8:66:3d:43: e3:32:0d:1b:e6:8d:76:1d:60:74:a2:b6:27:b8:11:2c:bb:b0: 3b:65:1d:48:9c:8e:15:62:72:0e:df:de:86:c7:12:22:5a:1f: 91:a4:95:b4:04:16:14:2d:f4:08:95:e3:0b:bf:54:b3:ab:b8: a1:7c:50:ec:39:a1:fd:a0:77:9d:72:00:cd:92:7b:84:32:9f: 97:10:8e:69:7e:cc:2b:ef:5e:15:04:33:6c:41:90:2d:65:5e: 72:be:72:36:66:57:ed:bc:6d:ad:b7:b9:a3:73:e0:45:38:8a: fe:b2:53:71:49:c5:b1:4b:7e:b4:e8:2f:64:3d:c8:cd:24:af: 40:9c:bc:3e:08:8d:56:4e:07:f2:6a:f0:72:21:c3:70:89:b0: d6:04:6e:5d:33:9b:d2:0e:43:49:77:8d:c7:8d:d6:59:44:3c: 8f:5d:9c:09:c4:ec:41:60:2c:4d:75:03:19:2c:89:44:1c:c5: 33:88:08:1c:98:5e:b7:31:f6:fc:ce:07:e8:63:f1:ae:ab:1d: 11:19:6c:92:1a:37:58:c7:7e:68:db:14:c8:47:3f:f2:06:aa: 74:3c:ac:db:75:32:e7:73:f7:ad:a8:3d:0d:46:9c:91:03:51: 88:60:03:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYwMzgxMTAvBgNVBAUTKDdBOThBQjY5QjcyQkFBQzY2NjBFNTRERDFDNkQ4QTA2 MkUyQ0QyRkUwHhcNMjUwNTMxMDEwODE0WhcNMjUwNjA3MDEwODE0WjAYMRYwFAYD VQQDEw02ODNhNTY3ZS1jMzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4mD742F53CRTuWt7Kr0a5cKdXaAth9O1dtqu4uKNTZ1AZZMlSsJLr9XsY03u 4EmQOWj4fqw0OaI5xdcLM57eabFLm7o6F8o5jHkxpBgyA/eqAGD+ZPVnnV/bYunk 07yn9UE+AtQpjHZuUibmHatOWLFdTVv+ucZOFO+jL6kGLJShOqHFz62Qf98oG1zn 71ge03p1A5cY2Bqg/NPcKUypvWm2Ux/WOxhqqUA/qC280HJKPxBr5EqBQQHXWZ9w uNnIzaGSJ7majzd0ZJA2qoStbTi7EnnmLA87/Xpb62vwGj8oSO/FVDlcJWPVSv1t +Me9yPRNHTcifHR6tVlqEpZwrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7+EB70 Jkxc4UOZezNg6wlCr/mUMB8GA1UdIwQYMBaAFHqYq2m3K6rGZg5U3RxtigYuLNL+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjAzOC85MUUwQzg1MkFG RkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFzWm1EbFRkSEcyS0JpNHMw djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwaXJhYmNycXNabURsVGRIRzJLQmk0czB2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjAzOC85MUUwQzg1MkFGRkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFz Wm1EbFRkSEcyS0JpNHMwdjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzidfohOmCFn6t+hyi9KhmPUPjMg0b5o12HWB0orYnuBEsu7A7ZR1I nI4VYnIO396GxxIiWh+RpJW0BBYULfQIleMLv1Szq7ihfFDsOaH9oHedcgDNknuE Mp+XEI5pfswr714VBDNsQZAtZV5yvnI2ZlftvG2tt7mjc+BFOIr+slNxScWxS360 6C9kPcjNJK9AnLw+CI1WTgfyavByIcNwibDWBG5dM5vSDkNJd43HjdZZRDyPXZwJ xOxBYCxNdQMZLIlEHMUziAgcmF63Mfb8zgfoY/Guqx0RGWySGjdYx35o2xTIRz/y Bqp0PKzbdTLnc/etqD0NRpyRA1GIYANV -----END CERTIFICATE-----Generated at Sat May 31 17:10:15 2025 by rpki-client