$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft File: eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft (raw, json) Hash identifier: 7YOVV04tsiyL1WW3sbvyY9O8LYTev0i2B+3sOQKJtu8= Subject key identifier: 4B:8A:27:E1:99:A7:CD:ED:9A:8B:C2:C9:FF:51:92:AB:80:1E:19:1E Authority key identifier: 79:E5:63:2A:F2:9B:AE:64:E5:F9:F1:9C:57:5B:C5:A9:95:E2:05:50 Certificate issuer: /CN=A91FEB27/serialNumber=79E5632AF29BAE64E5F9F19C575BC5A995E20550 Certificate serial: 2D22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft Manifest number: 2D06 Signing time: Fri 30 May 2025 15:40:28 +0000 Manifest this update: Fri 30 May 2025 15:40:28 +0000 Manifest next update: Fri 06 Jun 2025 15:40:28 +0000 Files and hashes: 1: eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl (hash: Xh3cNcR8oqjT0iRp425KSvtCZyb1RW/0DCQmRCraCbg=) 2: 6CB78E8E967811EA92E45A27C4F9AE02.roa (hash: Vd/aN0N0PZj/2E1lobGPke/BU2o5Mlhxl5a5kuQS0uQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:40:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11554 (0x2d22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEB27, serialNumber=79E5632AF29BAE64E5F9F19C575BC5A995E20550 Validity Not Before: May 30 15:40:28 2025 GMT Not After : Jun 6 15:40:28 2025 GMT Subject: CN=6839d16c-ea14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2b:77:6e:35:28:96:29:16:88:1e:aa:92:b7: 7d:62:cf:00:e9:4d:b8:f4:03:01:62:b2:e3:60:e1: 51:ba:d0:ea:f9:76:17:1d:c6:33:1c:5e:da:76:26: 64:28:ea:6d:ba:30:a3:14:0d:59:46:e0:40:09:33: 52:28:05:0f:54:9f:39:92:b6:5d:55:7c:22:dc:1f: f2:46:b0:29:0c:f6:28:54:2e:8e:22:04:e7:dc:70: 04:3e:4b:b3:58:be:8b:b0:01:06:cd:80:50:95:40: 32:3c:75:e5:49:4d:7a:b2:f2:78:3d:52:38:66:64: db:d9:55:7e:f5:1c:91:54:a6:2b:4b:24:d9:ac:5f: 92:27:f0:bd:14:ba:6f:4b:54:b1:b5:2d:6a:7f:a7: 00:3d:94:62:16:59:2e:8e:08:79:39:56:83:f4:29: 43:12:a2:21:6c:13:32:11:47:d3:5a:1d:62:f3:f5: e4:a7:98:2f:a7:57:3b:ce:a5:84:e9:7f:02:16:c8: 04:bb:c4:cc:46:2d:9d:00:d2:55:5b:2d:f7:4a:7e: d5:af:4c:7e:25:2b:5a:e8:aa:ee:3c:64:c5:04:eb: fd:5b:ea:d5:35:e7:2a:62:78:f3:31:59:91:95:1a: 12:6a:01:74:d8:ac:2b:f5:84:7e:1d:f4:f1:48:98: 64:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8A:27:E1:99:A7:CD:ED:9A:8B:C2:C9:FF:51:92:AB:80:1E:19:1E X509v3 Authority Key Identifier: keyid:79:E5:63:2A:F2:9B:AE:64:E5:F9:F1:9C:57:5B:C5:A9:95:E2:05:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b7:47:53:c9:c7:ea:62:47:f2:42:e5:38:d4:f1:2b:80:82: 69:c7:95:96:31:4f:a0:ff:79:14:9b:15:06:1b:e6:b1:98:21: 0a:e5:70:aa:7a:c3:b7:90:5e:65:28:56:65:0e:85:09:b2:ec: 9e:05:f6:a9:c8:1c:da:e3:bf:34:24:73:1e:28:79:12:e2:af: 2b:a9:0a:e2:e5:4f:8d:fd:d5:1f:b3:d5:34:2b:b6:d3:eb:e5: 04:f9:17:f5:5f:4f:30:9c:2e:ee:5c:b2:15:d0:d0:48:3f:e9: a3:e7:c2:f0:6c:78:41:a1:64:31:7b:43:6e:05:88:e2:7f:99: 2d:31:6b:24:4b:20:0f:1d:11:58:c2:97:9c:99:52:55:aa:1a: 4b:f0:9e:60:eb:58:c2:ba:df:4a:98:52:0d:36:47:26:06:4b: 2e:17:c4:e3:f3:96:95:f0:b8:84:6d:7b:8e:6b:2d:8a:25:13: 6b:4e:41:3c:05:eb:01:6e:21:50:de:32:2c:a7:81:17:79:84: 93:9b:39:fa:6e:0f:49:2c:c8:7e:d6:f2:9c:8e:6d:9c:3d:15: 2c:bf:d9:f4:8f:c7:73:fb:ad:da:26:fa:24:73:fd:72:6b:cc: 4f:f6:0f:2a:f5:37:da:47:79:0d:46:ae:aa:b0:87:fb:69:3d: 0e:26:da:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVCMjcxMTAvBgNVBAUTKDc5RTU2MzJBRjI5QkFFNjRFNUY5RjE5QzU3NUJDNUE5 OTVFMjA1NTAwHhcNMjUwNTMwMTU0MDI4WhcNMjUwNjA2MTU0MDI4WjAYMRYwFAYD VQQDEw02ODM5ZDE2Yy1lYTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Ct3bjUolikWiB6qkrd9Ys8A6U249AMBYrLjYOFRutDq+XYXHcYzHF7adiZk KOptujCjFA1ZRuBACTNSKAUPVJ85krZdVXwi3B/yRrApDPYoVC6OIgTn3HAEPkuz WL6LsAEGzYBQlUAyPHXlSU16svJ4PVI4ZmTb2VV+9RyRVKYrSyTZrF+SJ/C9FLpv S1SxtS1qf6cAPZRiFlkujgh5OVaD9ClDEqIhbBMyEUfTWh1i8/Xkp5gvp1c7zqWE 6X8CFsgEu8TMRi2dANJVWy33Sn7Vr0x+JSta6KruPGTFBOv9W+rVNecqYnjzMVmR lRoSagF02Kwr9YR+HfTxSJhkfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEuKJ+GZ p83tmovCyf9RkquAHhkeMB8GA1UdIwQYMBaAFHnlYyrym65k5fnxnFdbxamV4gVQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUIyNy8xNjdBOTdFQzlB RTMxMUUzQTVBMjU3QTc1OTExRUEzMi9lZVZqS3ZLYnJtVGwtZkdjVjF2RnFaWGlC VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VlVmpLdkticm1UbC1mR2NWMXZGcVpYaUJWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUIyNy8xNjdBOTdFQzlBRTMxMUUzQTVBMjU3QTc1OTExRUEzMi9lZVZqS3ZLYnJt VGwtZkdjVjF2RnFaWGlCVkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNt0dTycfqYkfyQuU41PErgIJpx5WWMU+g/3kUmxUGG+axmCEK5XCq esO3kF5lKFZlDoUJsuyeBfapyBza4780JHMeKHkS4q8rqQri5U+N/dUfs9U0K7bT 6+UE+Rf1X08wnC7uXLIV0NBIP+mj58LwbHhBoWQxe0NuBYjif5ktMWskSyAPHRFY wpecmVJVqhpL8J5g61jCut9KmFINNkcmBksuF8Tj85aV8LiEbXuOay2KJRNrTkE8 BesBbiFQ3jIsp4EXeYSTmzn6bg9JLMh+1vKcjm2cPRUsv9n0j8dz+63aJvokc/1y a8xP9g8q9TfaR3kNRq6qsIf7aT0OJtrv -----END CERTIFICATE-----Generated at Sat May 31 15:36:54 2025 by rpki-client