$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft File: ep7epfyIL4Z-ujeIm807O7SsYjE.mft (raw, json) Hash identifier: HQY45793FacT/PLJAt+BR3SYxcvMt6Fzcg4TlA/JF7g= Subject key identifier: 3C:7C:A0:41:6C:C5:C8:37:22:E9:1C:8F:E0:3F:70:2D:4B:E6:C0:B0 Authority key identifier: 7A:9E:DE:A5:FC:88:2F:86:7E:BA:37:88:9B:CD:3B:3B:B4:AC:62:31 Certificate issuer: /CN=A91EBBAF/serialNumber=7A9EDEA5FC882F867EBA37889BCD3B3BB4AC6231 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep7epfyIL4Z-ujeIm807O7SsYjE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft Manifest number: 05 Signing time: Sat 31 May 2025 07:44:45 +0000 Manifest this update: Sat 31 May 2025 07:44:44 +0000 Manifest next update: Sat 07 Jun 2025 07:44:44 +0000 Files and hashes: 1: ep7epfyIL4Z-ujeIm807O7SsYjE.crl (hash: 0r7tav7YMrNQIgfP1EaBNEsWNb+af+gf8yMWCtafYdU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.crl rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep7epfyIL4Z-ujeIm807O7SsYjE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:44:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBBAF, serialNumber=7A9EDEA5FC882F867EBA37889BCD3B3BB4AC6231 Validity Not Before: May 31 07:44:44 2025 GMT Not After : Jun 7 07:44:44 2025 GMT Subject: CN=683ab36c-5811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:dd:f1:a6:72:fd:f7:3f:45:05:06:47:53:50: 64:5a:89:5f:11:24:57:ec:dd:9e:db:78:f9:5a:3e: 8f:8e:dc:24:02:64:fe:dd:0e:c2:cf:0e:9f:3d:bc: 8e:20:b9:c7:4f:e7:31:e8:88:f2:a5:91:2e:ea:87: f0:a4:d4:1f:62:16:c6:37:8c:fd:87:5d:e4:7a:19: 4f:07:1c:dc:dc:a3:ad:2f:95:39:42:f9:7b:d3:c2: 8f:1f:32:b2:f5:7d:7e:b9:85:ce:b2:42:c1:b1:73: a5:d0:2e:67:93:52:8d:a6:06:b8:77:50:84:3a:87: c7:ad:a5:2e:8e:0a:f2:eb:db:1e:cd:94:7d:f5:7a: d7:5f:de:2d:6e:be:b3:68:52:36:17:8a:f9:55:8c: 0f:af:03:15:be:0a:de:13:38:f7:37:23:a4:f8:87: 93:ad:4d:47:55:32:e9:25:b0:98:fb:1a:48:5c:01: 2b:94:30:cf:db:d9:5b:aa:c9:cf:dc:a2:4c:c4:f2: 06:43:5d:16:1b:eb:a1:d5:de:b7:07:4a:5c:be:c7: c8:48:c9:f3:64:98:dd:35:14:b1:9f:03:22:96:78: 1e:b0:f5:5b:5f:60:e4:89:7a:64:10:6f:17:60:39: 33:88:8f:e2:8b:b8:59:f7:f6:fc:61:6b:0c:64:7b: ac:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:7C:A0:41:6C:C5:C8:37:22:E9:1C:8F:E0:3F:70:2D:4B:E6:C0:B0 X509v3 Authority Key Identifier: keyid:7A:9E:DE:A5:FC:88:2F:86:7E:BA:37:88:9B:CD:3B:3B:B4:AC:62:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep7epfyIL4Z-ujeIm807O7SsYjE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:6c:8f:a8:0d:88:5f:f8:04:78:3c:5a:d0:9a:85:ad:a5:4e: d6:8b:43:fd:6b:8b:e4:63:92:b4:d4:d7:03:be:51:7b:86:09: c6:35:3f:9f:f7:d4:6a:87:90:0b:f7:b7:bb:06:68:95:dc:3d: d9:32:09:23:6f:dc:b1:80:79:7a:95:94:9f:1f:64:b2:06:15: c5:2e:fa:4a:6e:72:3f:c7:20:ef:5b:82:04:c5:f4:bd:ce:01: aa:2f:3b:aa:81:08:f1:03:dc:b0:3e:d7:e6:fa:d6:8b:2f:59: 5f:d3:67:65:fa:c8:4d:0f:bb:8a:5d:31:7b:b1:ba:b7:ad:7a: e0:04:44:e5:70:00:dc:6f:19:ae:7f:4d:98:49:e3:d0:45:49: 7b:4f:40:6d:ac:28:95:b8:3c:84:b2:b1:4c:38:c4:3d:cd:a1: 7c:b1:19:50:12:f4:ac:61:18:c9:82:b1:ad:2e:f0:8f:ab:a3: 46:2b:91:60:31:f6:bd:b5:1d:59:54:88:05:d6:86:04:29:63: 19:3e:ef:7f:25:cf:0c:84:f3:76:a4:4c:32:86:d6:ec:8f:a0: b5:ad:6f:cd:62:e0:21:42:05:c2:11:90:37:fd:6c:54:62:2a: 5c:d6:97:3f:86:50:5d:13:f7:a4:59:fc:97:1d:6a:ef:0b:9e: 98:2c:56:33 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkJBRjExMC8GA1UEBRMoN0E5RURFQTVGQzg4MkY4NjdFQkEzNzg4OUJDRDNCM0JC NEFDNjIzMTAeFw0yNTA1MzEwNzQ0NDRaFw0yNTA2MDcwNzQ0NDRaMBgxFjAUBgNV BAMTDTY4M2FiMzZjLTU4MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDR3fGmcv33P0UFBkdTUGRaiV8RJFfs3Z7bePlaPo+O3CQCZP7dDsLPDp89vI4g ucdP5zHoiPKlkS7qh/Ck1B9iFsY3jP2HXeR6GU8HHNzco60vlTlC+XvTwo8fMrL1 fX65hc6yQsGxc6XQLmeTUo2mBrh3UIQ6h8etpS6OCvLr2x7NlH31etdf3i1uvrNo UjYXivlVjA+vAxW+Ct4TOPc3I6T4h5OtTUdVMuklsJj7GkhcASuUMM/b2Vuqyc/c okzE8gZDXRYb66HV3rcHSly+x8hIyfNkmN01FLGfAyKWeB6w9VtfYOSJemQQbxdg OTOIj+KLuFn39vxhawxke6z5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPHygQWzF yDci6RyP4D9wLUvmwLAwHwYDVR0jBBgwFoAUep7epfyIL4Z+ujeIm807O7SsYjEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCQkFGLzE5MUE2Mzg2MzZE RDExRjA5Njg2MjE2NkM0RjlBRTAyL2VwN2VwZnlJTDRaLXVqZUltODA3TzdTc1lq RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZXA3ZXBmeUlMNFotdWplSW04MDdPN1NzWWpFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC QkFGLzE5MUE2Mzg2MzZERDExRjA5Njg2MjE2NkM0RjlBRTAyL2VwN2VwZnlJTDRa LXVqZUltODA3TzdTc1lqRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIZsj6gNiF/4BHg8WtCaha2lTtaLQ/1ri+RjkrTU1wO+UXuGCcY1P5/3 1GqHkAv3t7sGaJXcPdkyCSNv3LGAeXqVlJ8fZLIGFcUu+kpucj/HIO9bggTF9L3O AaovO6qBCPED3LA+1+b61osvWV/TZ2X6yE0Pu4pdMXuxureteuAEROVwANxvGa5/ TZhJ49BFSXtPQG2sKJW4PISysUw4xD3NoXyxGVAS9KxhGMmCsa0u8I+ro0YrkWAx 9r21HVlUiAXWhgQpYxk+738lzwyE83akTDKG1uyPoLWtb81i4CFCBcIRkDf9bFRi KlzWlz+GUF0T96RZ/Jcdau8LnpgsVjM= -----END CERTIFICATE-----Generated at Sat May 31 16:44:51 2025 by rpki-client