$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft File: eE7A8P-dbYDcn33OORSfxg-WFJk.mft (raw, json) Hash identifier: F2rOeqixEPHNLntlKoN9+NFtWuXonI5qrt04CBqmjrA= Subject key identifier: 80:58:F2:68:0A:79:49:12:DE:3A:2C:3F:AB:1F:A9:55:DA:9B:78:6D Authority key identifier: 78:4E:C0:F0:FF:9D:6D:80:DC:9F:7D:CE:39:14:9F:C6:0F:96:14:99 Certificate issuer: /CN=A91FA69F/serialNumber=784EC0F0FF9D6D80DC9F7DCE39149FC60F961499 Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft Manifest number: AD Signing time: Sat 31 May 2025 05:37:42 +0000 Manifest this update: Sat 31 May 2025 05:37:42 +0000 Manifest next update: Sat 07 Jun 2025 05:37:42 +0000 Files and hashes: 1: eE7A8P-dbYDcn33OORSfxg-WFJk.crl (hash: /s+LE9rTSaV/AoBSF9sxwiuIxiHaUC4+sxh0p9/ytOc=) 2: 4FAF60B433A411EFB7A29C24C4F9AE02.roa (hash: LD7B5+XzyaE0f/ths6DbB5WXZXs6tAf0rdqOWz9N/kI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.crl rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA69F, serialNumber=784EC0F0FF9D6D80DC9F7DCE39149FC60F961499 Validity Not Before: May 31 05:37:42 2025 GMT Not After : Jun 7 05:37:42 2025 GMT Subject: CN=683a95a6-38ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f4:76:03:f7:e8:99:13:83:62:96:9b:93:c3: 29:ec:0c:47:9a:38:2b:e4:a0:91:c3:2c:bb:15:4a: a1:ed:39:16:d4:a7:e9:f4:3f:69:03:7e:30:3d:60: 65:dc:e3:ae:7d:03:bf:cd:39:0c:10:97:4d:d7:af: 28:3b:43:3a:3b:0b:61:e6:c9:7e:2d:06:a1:e7:3a: e0:17:cb:18:3a:f5:e1:6f:38:f9:43:d1:ae:91:da: 31:43:f8:ab:1b:0c:ba:4f:db:7f:48:6a:86:52:35: bd:35:6e:c1:47:92:15:33:6a:d1:22:37:43:6d:46: fc:e0:24:73:88:4b:8b:a5:74:92:3e:b7:47:22:c3: c0:e8:db:04:d3:bf:58:f8:32:06:a5:e6:b0:a1:34: 15:bb:20:53:f0:03:65:b9:36:63:35:85:a3:5d:ef: 9a:c3:0c:62:c0:e5:c7:02:eb:37:f8:53:b4:99:23: 1f:00:ee:11:7e:a6:9e:e0:a1:3c:08:17:2c:1b:9f: ed:f6:2d:c0:df:da:2e:64:f0:7b:6d:b0:8f:3b:e6: 62:55:d8:d9:32:1c:55:b9:d8:a3:aa:59:ec:ba:4c: c8:5b:c3:73:4b:5a:44:24:e8:0d:28:33:c2:d0:46: d9:79:78:a0:f9:82:6e:45:d6:40:fd:e4:32:6d:db: e0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:58:F2:68:0A:79:49:12:DE:3A:2C:3F:AB:1F:A9:55:DA:9B:78:6D X509v3 Authority Key Identifier: keyid:78:4E:C0:F0:FF:9D:6D:80:DC:9F:7D:CE:39:14:9F:C6:0F:96:14:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:e7:a4:86:cb:04:e6:0b:dc:62:23:76:a4:06:c9:5f:e6:30: 8d:59:d5:f2:9d:7f:2e:06:b5:bc:91:a5:10:01:8e:34:b5:07: 17:05:f5:f3:9f:78:97:3b:60:de:87:3b:dc:76:30:aa:b8:2f: 0a:82:d8:83:09:e9:4e:2c:41:83:29:41:9a:c2:a2:5e:82:38: 43:a3:b8:5a:ce:c2:60:54:cd:b4:98:f5:24:8b:20:60:13:b5: 1f:7a:1e:09:32:29:fa:24:18:a0:42:94:d7:71:11:5e:c5:07: 2a:b8:3e:fa:7a:34:ea:13:55:54:e3:7a:1f:0a:e8:1d:46:23: 5d:22:42:de:ab:3a:c9:c7:0e:3d:96:cc:3f:31:a8:f2:41:4d: fe:4c:28:8b:64:a7:9d:7b:40:77:9c:2b:e6:d6:70:23:6c:c7: 46:da:76:c6:14:da:4c:02:64:3b:39:10:37:74:40:d1:d4:57: 77:67:73:f1:85:8b:ed:81:ed:18:5b:68:a6:df:75:c2:e4:c7: 79:0c:4e:31:03:1f:83:f4:81:1c:7f:0e:87:92:c1:9f:9b:f4: 5b:b0:28:0e:1d:fc:84:8e:16:87:03:c6:51:a8:ee:c5:58:72: bc:fb:c5:5f:f5:12:71:85:b8:6e:00:d7:f0:f9:a7:f5:3a:18: cf:40:3c:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2OUYxMTAvBgNVBAUTKDc4NEVDMEYwRkY5RDZEODBEQzlGN0RDRTM5MTQ5RkM2 MEY5NjE0OTkwHhcNMjUwNTMxMDUzNzQyWhcNMjUwNjA3MDUzNzQyWjAYMRYwFAYD VQQDEw02ODNhOTVhNi0zOGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfR2A/fomRODYpabk8Mp7AxHmjgr5KCRwyy7FUqh7TkW1Kfp9D9pA34wPWBl 3OOufQO/zTkMEJdN168oO0M6Owth5sl+LQah5zrgF8sYOvXhbzj5Q9GukdoxQ/ir Gwy6T9t/SGqGUjW9NW7BR5IVM2rRIjdDbUb84CRziEuLpXSSPrdHIsPA6NsE079Y +DIGpeawoTQVuyBT8ANluTZjNYWjXe+awwxiwOXHAus3+FO0mSMfAO4Rfqae4KE8 CBcsG5/t9i3A39ouZPB7bbCPO+ZiVdjZMhxVudijqlnsukzIW8NzS1pEJOgNKDPC 0EbZeXig+YJuRdZA/eQybdvgawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIBY8mgK eUkS3josP6sfqVXam3htMB8GA1UdIwQYMBaAFHhOwPD/nW2A3J99zjkUn8YPlhSZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY5Ri9DNjY1REYyMjMz QTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9lRTdBOFAtZGJZRGNuMzNPT1JTZnhnLVdG SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VFN0E4UC1kYllEY24zM09PUlNmeGctV0ZKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTY5Ri9DNjY1REYyMjMzQTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9lRTdBOFAtZGJZ RGNuMzNPT1JTZnhnLVdGSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDD56SGywTmC9xiI3akBslf5jCNWdXynX8uBrW8kaUQAY40tQcXBfXz n3iXO2DehzvcdjCquC8KgtiDCelOLEGDKUGawqJegjhDo7hazsJgVM20mPUkiyBg E7Ufeh4JMin6JBigQpTXcRFexQcquD76ejTqE1VU43ofCugdRiNdIkLeqzrJxw49 lsw/MajyQU3+TCiLZKede0B3nCvm1nAjbMdG2nbGFNpMAmQ7ORA3dEDR1Fd3Z3Px hYvtge0YW2im33XC5Md5DE4xAx+D9IEcfw6HksGfm/RbsCgOHfyEjhaHA8ZRqO7F WHK8+8Vf9RJxhbhuANfw+af1OhjPQDzm -----END CERTIFICATE-----Generated at Sat May 31 16:26:50 2025 by rpki-client