$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB9FC/2D1AB836595C11EFBB07C44FC4F9AE02/eT80tql6t1A1WBv90ICDiTOrPwM.mft File: eT80tql6t1A1WBv90ICDiTOrPwM.mft (raw, json) Hash identifier: SRJ0nr/60/zoipM0h6KJ1GLnDZLuGHMw+ZkjEL1l81Y= Subject key identifier: F8:92:12:82:9C:FC:E1:D5:BA:5D:CA:95:C8:9F:93:2A:8D:21:F2:17 Authority key identifier: 79:3F:34:B6:A9:7A:B7:50:35:58:1B:FD:D0:80:83:89:33:AB:3F:03 Certificate issuer: /CN=A91EB9FC/serialNumber=793F34B6A97AB75035581BFDD080838933AB3F03 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eT80tql6t1A1WBv90ICDiTOrPwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB9FC/2D1AB836595C11EFBB07C44FC4F9AE02/eT80tql6t1A1WBv90ICDiTOrPwM.mft Manifest number: 9C Signing time: Sat 31 May 2025 05:53:09 +0000 Manifest this update: Sat 31 May 2025 05:53:08 +0000 Manifest next update: Sat 07 Jun 2025 05:53:08 +0000 Files and hashes: 1: eT80tql6t1A1WBv90ICDiTOrPwM.crl (hash: tXOzkB0FwJv7ojDfwQAQ/ehpzVuk/01YFhnIwHPqVUg=) 2: 20E7CCE2595D11EF90E23670C4F9AE02.roa (hash: u2oQCfujekc2CkfkL8oYEg3qrwIogCmjgXuusuY8hmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB9FC/2D1AB836595C11EFBB07C44FC4F9AE02/eT80tql6t1A1WBv90ICDiTOrPwM.crl rsync://rpki.apnic.net/member_repository/A91EB9FC/2D1AB836595C11EFBB07C44FC4F9AE02/eT80tql6t1A1WBv90ICDiTOrPwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eT80tql6t1A1WBv90ICDiTOrPwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB9FC, serialNumber=793F34B6A97AB75035581BFDD080838933AB3F03 Validity Not Before: May 31 05:53:08 2025 GMT Not After : Jun 7 05:53:08 2025 GMT Subject: CN=683a9945-5643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fd:59:95:7c:2d:ce:d5:b8:c7:a3:d7:55:ba: ab:6e:6f:4c:96:2e:e6:27:92:9a:33:3b:f7:07:95: 80:cb:40:c8:3d:0c:0c:9d:36:6e:42:c7:e8:ce:15: 52:cb:b3:96:48:3f:ca:d9:00:53:0c:82:b4:b7:11: 01:2b:3a:6a:c0:4b:fd:bb:ec:df:34:87:0c:08:d6: d4:e1:d8:ce:d8:c4:52:c8:0b:1d:4f:ec:f3:eb:1b: 87:78:42:ba:22:1b:a2:3a:46:94:14:d0:f3:fa:10: 68:9f:46:87:24:46:4e:ae:48:a1:29:3e:b2:2a:ed: 59:f1:3f:30:0e:2f:8c:a0:59:05:f6:cf:79:56:8d: c3:f4:89:44:ae:c4:84:a9:42:20:3f:dc:d1:b9:69: 76:41:51:1f:95:65:2b:1c:6c:d0:03:fb:b1:49:84: 07:4a:f3:50:a1:83:92:5d:dd:e2:d0:40:90:25:ec: fa:bf:6c:82:f8:4c:b7:1c:07:ee:e8:cb:1c:92:92: 12:f3:ba:dc:17:62:05:27:56:39:09:94:72:56:f4: 67:e7:a4:78:f1:a8:9f:90:39:18:bc:56:44:96:a0: 50:8e:2f:47:06:a5:0d:68:21:dd:28:42:81:22:cd: cd:8c:c5:cb:50:d9:d0:b6:70:f7:67:6e:64:da:1f: ac:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:92:12:82:9C:FC:E1:D5:BA:5D:CA:95:C8:9F:93:2A:8D:21:F2:17 X509v3 Authority Key Identifier: keyid:79:3F:34:B6:A9:7A:B7:50:35:58:1B:FD:D0:80:83:89:33:AB:3F:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB9FC/2D1AB836595C11EFBB07C44FC4F9AE02/eT80tql6t1A1WBv90ICDiTOrPwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eT80tql6t1A1WBv90ICDiTOrPwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB9FC/2D1AB836595C11EFBB07C44FC4F9AE02/eT80tql6t1A1WBv90ICDiTOrPwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:e1:2e:24:58:57:78:d6:b7:fa:09:24:db:71:59:59:72:d5: 22:15:ff:bc:ca:0c:2f:66:9d:f6:3f:ca:59:3a:a4:27:44:09: e0:82:15:a3:0c:2e:7c:39:20:b5:cc:77:31:53:fe:4f:e5:6c: 57:3c:41:9f:62:1d:2f:e3:8b:00:27:c9:00:ef:01:1d:ec:f0: e9:18:17:1b:79:64:1f:f8:88:ac:f5:53:43:a2:e6:48:24:23: 74:ee:e6:32:9f:c1:4b:42:52:47:94:55:8f:9f:b6:43:16:e5: 9a:f0:32:29:4f:fe:09:55:fa:8d:6f:6d:9a:2b:4f:a5:fd:6d: 10:6e:52:72:8c:19:38:13:6e:aa:e1:01:a7:29:3d:35:b7:49: bf:6a:5e:cb:f2:d8:81:e4:b0:03:ff:28:4d:17:44:0a:a2:6f: d4:83:05:34:63:8e:89:be:26:dc:93:e3:61:d5:8a:1e:c9:a1: 71:a4:3a:8c:e0:98:f4:e9:5e:a4:22:c4:cd:16:cc:bb:07:4d: 8e:e0:4b:d8:58:57:83:d2:de:8d:60:c6:d1:bd:b1:21:d0:9d: ae:bf:ef:c1:20:02:13:e8:21:17:9c:3a:2b:3e:98:34:b7:01: 65:2d:f7:b3:ce:1e:9b:67:b6:38:22:6a:3a:60:ac:ac:3c:96: 12:57:3d:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI5RkMxMTAvBgNVBAUTKDc5M0YzNEI2QTk3QUI3NTAzNTU4MUJGREQwODA4Mzg5 MzNBQjNGMDMwHhcNMjUwNTMxMDU1MzA4WhcNMjUwNjA3MDU1MzA4WjAYMRYwFAYD VQQDEw02ODNhOTk0NS01NjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwf1ZlXwtztW4x6PXVbqrbm9Mli7mJ5KaMzv3B5WAy0DIPQwMnTZuQsfozhVS y7OWSD/K2QBTDIK0txEBKzpqwEv9u+zfNIcMCNbU4djO2MRSyAsdT+zz6xuHeEK6 IhuiOkaUFNDz+hBon0aHJEZOrkihKT6yKu1Z8T8wDi+MoFkF9s95Vo3D9IlErsSE qUIgP9zRuWl2QVEflWUrHGzQA/uxSYQHSvNQoYOSXd3i0ECQJez6v2yC+Ey3HAfu 6MsckpIS87rcF2IFJ1Y5CZRyVvRn56R48aifkDkYvFZElqBQji9HBqUNaCHdKEKB Is3NjMXLUNnQtnD3Z25k2h+sqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPiSEoKc /OHVul3KlcifkyqNIfIXMB8GA1UdIwQYMBaAFHk/NLaperdQNVgb/dCAg4kzqz8D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjlGQy8yRDFBQjgzNjU5 NUMxMUVGQkIwN0M0NEZDNEY5QUUwMi9lVDgwdHFsNnQxQTFXQnY5MElDRGlUT3JQ d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VUODB0cWw2dDFBMVdCdjkwSUNEaVRPclB3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjlGQy8yRDFBQjgzNjU5NUMxMUVGQkIwN0M0NEZDNEY5QUUwMi9lVDgwdHFsNnQx QTFXQnY5MElDRGlUT3JQd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCc4S4kWFd41rf6CSTbcVlZctUiFf+8ygwvZp32P8pZOqQnRAngghWj DC58OSC1zHcxU/5P5WxXPEGfYh0v44sAJ8kA7wEd7PDpGBcbeWQf+Iis9VNDouZI JCN07uYyn8FLQlJHlFWPn7ZDFuWa8DIpT/4JVfqNb22aK0+l/W0QblJyjBk4E26q 4QGnKT01t0m/al7L8tiB5LAD/yhNF0QKom/UgwU0Y46Jvibck+Nh1YoeyaFxpDqM 4Jj06V6kIsTNFsy7B02O4EvYWFeD0t6NYMbRvbEh0J2uv+/BIAIT6CEXnDorPpg0 twFlLfezzh6bZ7Y4Imo6YKysPJYSVz2W -----END CERTIFICATE-----Generated at Sat May 31 16:38:47 2025 by rpki-client