$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft File: EJhSul3Eo2jPdhIFFeysYu_aPkA.mft (raw, json) Hash identifier: E9jvxjuHjQ7BXKvvhS74QQy5TPj7Usnwcj+MtlQLvQ4= Subject key identifier: 6C:4A:25:B8:2F:DC:F3:F8:51:FB:6A:43:40:BC:E1:4A:F5:32:10:0F Authority key identifier: 10:98:52:BA:5D:C4:A3:68:CF:76:12:05:15:EC:AC:62:EF:DA:3E:40 Certificate issuer: /CN=A91FE637/serialNumber=109852BA5DC4A368CF76120515ECAC62EFDA3E40 Certificate serial: 0E6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft Manifest number: 0E69 Signing time: Fri 30 May 2025 17:53:28 +0000 Manifest this update: Fri 30 May 2025 17:53:27 +0000 Manifest next update: Fri 06 Jun 2025 17:53:27 +0000 Files and hashes: 1: EJhSul3Eo2jPdhIFFeysYu_aPkA.crl (hash: C55H1vWFYd2OT7DtsyiqTwOCf5AHCJx7RCifMrUEmfI=) 2: 3D88426C974511E982D6FD1BC4F9AE02.roa (hash: H8knPIbuLtwUcaByLoJZ9f2Kl4YvVFA0lwHyLpg+7j8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.crl rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3694 (0xe6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE637, serialNumber=109852BA5DC4A368CF76120515ECAC62EFDA3E40 Validity Not Before: May 30 17:53:27 2025 GMT Not After : Jun 6 17:53:27 2025 GMT Subject: CN=6839f098-9d12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:47:7f:30:58:c8:e0:7f:4a:30:f4:a4:fb:e1: 8f:ee:b1:09:9a:e4:61:f8:65:65:41:7c:06:41:33: 79:7a:fd:ff:3c:26:b5:93:6f:4e:55:16:f6:02:a0: 58:0b:c3:2b:03:6e:76:21:5c:a5:cf:ae:50:45:ac: 45:a5:ed:e5:d7:95:df:79:f5:6b:93:af:2a:5e:fd: c3:c0:3a:b4:b7:bb:a7:db:b3:e4:22:50:3f:f8:2d: 24:a2:b7:ff:93:e1:e6:d4:d7:60:00:ec:fb:f9:5e: 9b:dd:db:ad:80:dc:c8:5c:d4:b0:d5:00:0a:85:12: a7:88:71:c3:e8:29:95:ee:95:33:ba:7e:cd:56:73: 1d:9f:71:a8:14:6a:5c:98:47:ab:d1:8a:b9:d7:15: c6:46:f2:cd:f5:08:12:94:87:db:5d:65:5f:a9:3a: ff:42:07:48:49:b5:13:09:a3:71:17:45:9d:74:f7: 99:2c:ed:b7:07:97:07:80:76:be:5b:50:4d:ff:cb: e7:e5:b6:6a:63:11:f8:1c:97:38:3a:5b:bd:10:7a: 05:f7:83:3e:cd:d0:1d:7d:48:94:b4:bc:a5:ea:44: 67:0e:b2:b0:63:f3:24:74:4d:3b:77:a7:76:37:a1: 1b:b2:75:ab:3c:ef:5f:ff:1d:96:39:7e:6c:c5:c9: 59:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4A:25:B8:2F:DC:F3:F8:51:FB:6A:43:40:BC:E1:4A:F5:32:10:0F X509v3 Authority Key Identifier: keyid:10:98:52:BA:5D:C4:A3:68:CF:76:12:05:15:EC:AC:62:EF:DA:3E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:95:a5:8a:87:81:16:9c:d2:14:c3:35:ff:4d:0c:73:38:51: cd:25:8a:91:df:ff:61:26:d3:b4:72:ea:a5:7c:e7:f0:ba:3a: c6:63:96:40:27:fb:2e:58:62:d0:78:80:dc:22:29:cd:3b:0d: ce:c4:fb:2d:56:29:9a:b7:ff:5e:e9:62:1e:29:38:ee:23:ac: a7:75:f9:e1:cb:49:d6:81:4c:18:de:cc:39:c9:30:20:94:21: c5:7c:18:2e:6f:a4:3d:a0:a4:8b:e1:06:1a:13:be:3f:e1:57: ce:fd:21:7c:80:f0:02:b8:aa:b2:5a:ce:72:ce:b2:af:24:57: b7:9c:5d:7d:af:8e:0c:37:c7:1e:9f:a4:21:7f:10:06:0b:31: ea:e9:c2:d0:64:ab:18:f1:f4:8e:ce:1b:76:ce:97:44:fc:3c: b2:b4:27:5a:01:eb:be:95:f6:76:74:1e:89:6a:ad:cc:bf:b7: 3c:a3:f6:55:40:8f:06:ec:c3:17:0e:57:c6:9b:a7:7f:94:58: 71:c4:a3:bf:e0:9c:88:36:df:7f:be:f4:84:e4:8a:0f:e8:d6: fa:bc:35:80:6b:e1:55:1c:f7:2a:89:2d:36:ae:c4:0a:22:ee: 43:f2:62:c8:e0:a9:08:65:4c:e9:78:25:16:5c:13:02:85:6f: 0a:77:7e:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU2MzcxMTAvBgNVBAUTKDEwOTg1MkJBNURDNEEzNjhDRjc2MTIwNTE1RUNBQzYy RUZEQTNFNDAwHhcNMjUwNTMwMTc1MzI3WhcNMjUwNjA2MTc1MzI3WjAYMRYwFAYD VQQDEw02ODM5ZjA5OC05ZDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUd/MFjI4H9KMPSk++GP7rEJmuRh+GVlQXwGQTN5ev3/PCa1k29OVRb2AqBY C8MrA252IVylz65QRaxFpe3l15XfefVrk68qXv3DwDq0t7un27PkIlA/+C0korf/ k+Hm1NdgAOz7+V6b3dutgNzIXNSw1QAKhRKniHHD6CmV7pUzun7NVnMdn3GoFGpc mEer0Yq51xXGRvLN9QgSlIfbXWVfqTr/QgdISbUTCaNxF0WddPeZLO23B5cHgHa+ W1BN/8vn5bZqYxH4HJc4Olu9EHoF94M+zdAdfUiUtLyl6kRnDrKwY/MkdE07d6d2 N6EbsnWrPO9f/x2WOX5sxclZbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxKJbgv 3PP4UftqQ0C84Ur1MhAPMB8GA1UdIwQYMBaAFBCYUrpdxKNoz3YSBRXsrGLv2j5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTYzNy85QkFFQTEzQTk3 NDMxMUU5QkZEOEU1MTlDNEY5QUUwMi9FSmhTdWwzRW8yalBkaElGRmV5c1l1X2FQ a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VKaFN1bDNFbzJqUGRoSUZGZXlzWXVfYVBrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTYzNy85QkFFQTEzQTk3NDMxMUU5QkZEOEU1MTlDNEY5QUUwMi9FSmhTdWwzRW8y alBkaElGRmV5c1l1X2FQa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRlaWKh4EWnNIUwzX/TQxzOFHNJYqR3/9hJtO0cuqlfOfwujrGY5ZA J/suWGLQeIDcIinNOw3OxPstVimat/9e6WIeKTjuI6yndfnhy0nWgUwY3sw5yTAg lCHFfBgub6Q9oKSL4QYaE74/4VfO/SF8gPACuKqyWs5yzrKvJFe3nF19r44MN8ce n6QhfxAGCzHq6cLQZKsY8fSOzht2zpdE/DyytCdaAeu+lfZ2dB6Jaq3Mv7c8o/ZV QI8G7MMXDlfGm6d/lFhxxKO/4JyINt9/vvSE5IoP6Nb6vDWAa+FVHPcqiS02rsQK Iu5D8mLI4KkIZUzpeCUWXBMChW8Kd36A -----END CERTIFICATE-----Generated at Sat May 31 15:21:30 2025 by rpki-client