$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft File: etee6zuSg1TZUNxuT4vsyyXC_Es.mft (raw, json) Hash identifier: E1ZV7KH2d9ooOcPxVVGb6SaJnM+jLXSKjWNLlyYqRrQ= Subject key identifier: B2:D8:30:F2:5B:58:DC:66:43:FD:EA:85:F4:65:FA:A0:CF:C3:E2:C9 Authority key identifier: 7A:D7:9E:EB:3B:92:83:54:D9:50:DC:6E:4F:8B:EC:CB:25:C2:FC:4B Certificate issuer: /CN=A91F3CB1/serialNumber=7AD79EEB3B928354D950DC6E4F8BECCB25C2FC4B Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft Manifest number: 1C Signing time: Sat 31 May 2025 07:30:38 +0000 Manifest this update: Sat 31 May 2025 07:30:37 +0000 Manifest next update: Sat 07 Jun 2025 07:30:37 +0000 Files and hashes: 1: etee6zuSg1TZUNxuT4vsyyXC_Es.crl (hash: aXzhViRc5XCD348fpaCpi6OuTxBCdZdGi2ZWqHJb3QE=) 2: 9217B6681AA811F0B10C6412C4F9AE02.roa (hash: k9SmP/i/EacapJo/9m72S70HfODKRHtE2FbOisDtRLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.crl rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3CB1, serialNumber=7AD79EEB3B928354D950DC6E4F8BECCB25C2FC4B Validity Not Before: May 31 07:30:37 2025 GMT Not After : Jun 7 07:30:37 2025 GMT Subject: CN=683ab01d-daf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e0:9b:35:5d:70:40:eb:2c:76:42:f2:9d:cf: c1:0a:90:48:64:5a:20:ca:99:14:61:77:98:c6:1d: cf:cb:1d:c8:8a:76:10:df:41:28:df:2d:f4:33:14: b7:45:3a:9e:80:31:56:98:19:bc:00:5c:a1:84:41: be:58:d1:cd:e4:f9:6a:fd:03:0a:9f:89:95:63:31: 4c:16:68:b0:c8:7c:90:7e:2c:1c:f1:aa:b0:b4:9c: 90:d9:25:51:90:fb:a2:95:7b:b0:70:6b:91:29:76: ec:d5:a3:94:42:ed:38:7e:5a:eb:40:d1:48:b0:cd: 19:12:1b:d8:4e:34:2f:c1:e9:ed:83:01:52:80:79: f2:de:1f:d2:97:f9:c3:04:84:4a:53:1c:d2:42:db: 12:39:cc:de:19:e9:5f:b8:de:e6:0f:9b:99:c6:1e: 3d:ae:29:91:49:02:73:75:95:f5:42:a5:a1:43:b3: 6c:cd:cc:b0:a8:87:85:5b:ea:01:0d:97:e5:61:02: 74:d6:a6:65:d7:76:92:72:8e:ff:e9:27:4f:e7:6e: ec:1f:e0:6d:ea:33:3c:d9:e9:1d:a0:89:16:ff:44: 2a:71:56:3a:4e:1a:25:fa:c8:f4:75:b7:dc:4e:83: d9:e8:55:8b:de:41:62:32:ea:46:52:78:57:cb:18: 35:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D8:30:F2:5B:58:DC:66:43:FD:EA:85:F4:65:FA:A0:CF:C3:E2:C9 X509v3 Authority Key Identifier: keyid:7A:D7:9E:EB:3B:92:83:54:D9:50:DC:6E:4F:8B:EC:CB:25:C2:FC:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:6c:e5:07:bf:1a:82:36:c1:36:8f:85:10:1a:6f:3f:79:46: 4f:74:c8:e1:67:ba:f2:f7:a1:ee:ea:da:76:c1:3f:9a:58:a4: 89:c1:14:26:a5:19:a2:d8:04:80:8a:df:28:8a:c3:17:6e:51: 17:42:0a:cd:5f:14:85:76:bb:7a:d7:70:da:98:52:d9:f6:cf: d4:7d:39:2e:4e:82:64:e4:ca:9c:b8:49:8b:db:84:91:2d:07: ed:05:5a:79:49:05:49:91:ce:e8:f8:ec:9c:c5:9f:ed:6c:77: 36:1c:86:99:d3:f9:60:c9:38:c1:eb:0d:dc:45:1b:4e:dd:ef: 08:20:a9:ba:93:b4:a2:cc:2c:45:82:0a:0d:68:59:cd:0f:ad: b5:58:64:34:a4:b4:50:65:e9:21:da:0f:ae:10:7d:56:b8:d7: 00:94:5e:c4:95:e0:fc:dd:ad:f6:53:67:a9:0a:75:bb:33:6b: 7c:4f:e7:96:40:65:53:56:9b:3c:dd:da:bd:4b:15:3b:d1:97: 6f:49:d9:39:04:ad:10:3d:c1:d6:06:33:a8:ae:a9:68:e9:8f: c9:19:01:f0:52:0d:e4:e4:1f:3a:32:4c:ad:dc:00:4a:51:52: f0:8d:1a:5e:47:29:61:0f:a1:cd:5e:dc:3f:e1:f1:31:e6:f7: 1e:e6:36:72 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG M0NCMTExMC8GA1UEBRMoN0FENzlFRUIzQjkyODM1NEQ5NTBEQzZFNEY4QkVDQ0Iy NUMyRkM0QjAeFw0yNTA1MzEwNzMwMzdaFw0yNTA2MDcwNzMwMzdaMBgxFjAUBgNV BAMTDTY4M2FiMDFkLWRhZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC94Js1XXBA6yx2QvKdz8EKkEhkWiDKmRRhd5jGHc/LHciKdhDfQSjfLfQzFLdF Op6AMVaYGbwAXKGEQb5Y0c3k+Wr9AwqfiZVjMUwWaLDIfJB+LBzxqrC0nJDZJVGQ +6KVe7Bwa5EpduzVo5RC7Th+WutA0UiwzRkSG9hONC/B6e2DAVKAefLeH9KX+cME hEpTHNJC2xI5zN4Z6V+43uYPm5nGHj2uKZFJAnN1lfVCpaFDs2zNzLCoh4Vb6gEN l+VhAnTWpmXXdpJyjv/pJ0/nbuwf4G3qMzzZ6R2giRb/RCpxVjpOGiX6yPR1t9xO g9noVYveQWIy6kZSeFfLGDXpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUstgw8ltY 3GZD/eqF9GX6oM/D4skwHwYDVR0jBBgwFoAUetee6zuSg1TZUNxuT4vsyyXC/Esw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzQ0IxLzJEODQzNjk4MTY4 NjExRjA4OTE2OTg1QkM0RjlBRTAyL2V0ZWU2enVTZzFUWlVOeHVUNHZzeXlYQ19F cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZXRlZTZ6dVNnMVRaVU54dVQ0dnN5eVhDX0VzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz Q0IxLzJEODQzNjk4MTY4NjExRjA4OTE2OTg1QkM0RjlBRTAyL2V0ZWU2enVTZzFU WlVOeHVUNHZzeXlYQ19Fcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIhs5Qe/GoI2wTaPhRAabz95Rk90yOFnuvL3oe7q2nbBP5pYpInBFCal GaLYBICK3yiKwxduURdCCs1fFIV2u3rXcNqYUtn2z9R9OS5OgmTkypy4SYvbhJEt B+0FWnlJBUmRzuj47JzFn+1sdzYchpnT+WDJOMHrDdxFG07d7wggqbqTtKLMLEWC Cg1oWc0PrbVYZDSktFBl6SHaD64QfVa41wCUXsSV4PzdrfZTZ6kKdbsza3xP55ZA ZVNWmzzd2r1LFTvRl29J2TkErRA9wdYGM6iuqWjpj8kZAfBSDeTkHzoyTK3cAEpR UvCNGl5HKWEPoc1e3D/h8THm9x7mNnI= -----END CERTIFICATE-----Generated at Sat May 31 17:07:40 2025 by rpki-client