$ rpki-client -vvf rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.mft File: EyzK6sEE4qNEW2M3YQVNyNcQehM.mft (raw, json) Hash identifier: ABAk+N0dddbMwAzG0HbVwda11rpo5CsEKXTIyDJprIg= Subject key identifier: D5:A5:CA:D9:ED:D4:FB:13:F1:17:70:57:8F:04:34:8F:30:A6:24:3F Authority key identifier: 13:2C:CA:EA:C1:04:E2:A3:44:5B:63:37:61:05:4D:C8:D7:10:7A:13 Certificate issuer: /CN=A91670F6/serialNumber=132CCAEAC104E2A3445B633761054DC8D7107A13 Certificate serial: 04CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyzK6sEE4qNEW2M3YQVNyNcQehM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.mft Manifest number: 04C8 Signing time: Thu 24 Apr 2025 23:36:08 +0000 Manifest this update: Thu 24 Apr 2025 23:36:07 +0000 Manifest next update: Thu 01 May 2025 23:36:07 +0000 Files and hashes: 1: EyzK6sEE4qNEW2M3YQVNyNcQehM.crl (hash: znIETAMziZGiO++0swSVpiE2aZ2D7oYbCPgOMAIDuwc=) 2: 29935FC21CF311ECA077821AC4F9AE02.roa (hash: Gw9UrgyhZyQgdaUx+vCyY31CJTl4dtl3RMTe5VBeLyw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.crl rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyzK6sEE4qNEW2M3YQVNyNcQehM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1228 (0x4cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91670F6, serialNumber=132CCAEAC104E2A3445B633761054DC8D7107A13 Validity Not Before: Apr 24 23:36:07 2025 GMT Not After : May 1 23:36:07 2025 GMT Subject: CN=680acae7-31a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:11:16:5e:af:73:38:be:62:b9:33:5e:3d:33: 8c:a6:3d:b7:8b:9d:42:25:d2:88:6d:c1:0b:ba:bb: bb:ba:0f:e8:c4:5e:e0:ce:c4:9a:a6:cc:ad:4d:05: 52:67:03:5c:98:25:67:d3:a3:0c:5e:a2:67:20:c7: 8c:ee:79:91:6a:13:6e:e8:a8:f1:32:3e:48:5c:fa: b0:c4:e0:f5:d6:ef:aa:78:a2:ec:05:b7:1f:f8:e1: 3e:3c:ec:62:ce:f6:4c:cf:47:38:58:d9:a9:b4:e6: 6e:e0:61:c0:d5:20:42:5f:ab:34:91:8b:e5:36:48: 88:13:04:78:9c:b3:b3:c3:67:e4:d7:82:b8:88:f3: b7:13:2b:fa:6e:7f:dd:71:f2:70:aa:c3:1a:16:43: d9:65:3d:f3:95:16:71:d6:7b:f4:ff:b5:f9:9c:73: cf:83:54:33:b6:c0:2c:9e:59:19:37:2a:1a:21:0d: 77:31:f2:e1:d7:5b:46:e3:4e:48:e1:9a:03:a8:75: f3:4b:e5:90:98:de:a7:16:cb:f6:a3:14:21:be:8d: 16:da:27:1c:81:35:c8:15:fe:3c:2b:68:d9:a5:95: 71:46:fd:bf:e3:21:65:0d:b0:db:c2:25:ef:fd:a0: 7d:c9:09:13:f2:42:2a:27:9e:0e:42:0a:6c:ca:37: 3b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A5:CA:D9:ED:D4:FB:13:F1:17:70:57:8F:04:34:8F:30:A6:24:3F X509v3 Authority Key Identifier: keyid:13:2C:CA:EA:C1:04:E2:A3:44:5B:63:37:61:05:4D:C8:D7:10:7A:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyzK6sEE4qNEW2M3YQVNyNcQehM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:38:fe:fb:e7:92:94:80:d5:27:52:b1:ed:d7:35:47:5b:94: 03:b8:65:19:42:bd:78:9c:19:e0:6f:b2:e3:b7:85:db:d4:7d: 8c:dd:af:47:01:f8:7f:4f:dc:57:ef:f5:b3:55:8f:0f:ed:4b: 88:8e:db:69:e5:dc:6c:e7:30:60:3d:c0:d7:6d:43:67:7f:c2: fd:91:36:8f:4d:bc:b5:93:55:61:c3:8b:1f:8a:12:a0:11:ab: 9b:93:8e:29:d0:67:1a:7c:17:10:cf:0d:4f:5f:0a:a8:d5:cb: d6:18:d9:05:c6:4d:b4:40:09:68:1a:7c:80:f3:e8:4e:a7:1f: 92:15:d1:2a:22:1f:e7:a5:de:ea:84:bf:c8:f5:68:1c:ae:c0: 97:2b:f5:71:e1:31:be:71:34:ea:de:08:1d:da:cd:c0:13:15: d2:d3:1a:ef:50:fe:1f:18:b6:c1:72:d3:3a:7f:61:52:07:8b: 08:14:79:37:ae:63:41:bb:6f:e7:5f:da:b1:db:30:00:89:06: c3:e4:ba:59:64:48:5c:ed:3e:03:d6:76:30:67:15:88:ab:59: b7:df:c0:40:c5:20:36:6c:1d:4f:c2:44:af:87:b9:d3:b0:ad: 4f:62:96:24:16:eb:95:00:0f:af:a0:58:8e:b1:8a:d4:29:af: 86:69:b5:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwRjYxMTAvBgNVBAUTKDEzMkNDQUVBQzEwNEUyQTM0NDVCNjMzNzYxMDU0REM4 RDcxMDdBMTMwHhcNMjUwNDI0MjMzNjA3WhcNMjUwNTAxMjMzNjA3WjAYMRYwFAYD VQQDEw02ODBhY2FlNy0zMWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApREWXq9zOL5iuTNePTOMpj23i51CJdKIbcELuru7ug/oxF7gzsSapsytTQVS ZwNcmCVn06MMXqJnIMeM7nmRahNu6KjxMj5IXPqwxOD11u+qeKLsBbcf+OE+POxi zvZMz0c4WNmptOZu4GHA1SBCX6s0kYvlNkiIEwR4nLOzw2fk14K4iPO3Eyv6bn/d cfJwqsMaFkPZZT3zlRZx1nv0/7X5nHPPg1QztsAsnlkZNyoaIQ13MfLh11tG405I 4ZoDqHXzS+WQmN6nFsv2oxQhvo0W2iccgTXIFf48K2jZpZVxRv2/4yFlDbDbwiXv /aB9yQkT8kIqJ54OQgpsyjc7vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWlytnt 1PsT8RdwV48ENI8wpiQ/MB8GA1UdIwQYMBaAFBMsyurBBOKjRFtjN2EFTcjXEHoT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzBGNi8xODVEQUZENjFD RUYxMUVDOUVERDgwMTFDNEY5QUUwMi9FeXpLNnNFRTRxTkVXMk0zWVFWTnlOY1Fl aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V5eks2c0VFNHFORVcyTTNZUVZOeU5jUWVoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzBGNi8xODVEQUZENjFDRUYxMUVDOUVERDgwMTFDNEY5QUUwMi9FeXpLNnNFRTRx TkVXMk0zWVFWTnlOY1FlaE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3OP7755KUgNUnUrHt1zVHW5QDuGUZQr14nBngb7Ljt4Xb1H2M3a9H Afh/T9xX7/WzVY8P7UuIjttp5dxs5zBgPcDXbUNnf8L9kTaPTby1k1Vhw4sfihKg Eaubk44p0GcafBcQzw1PXwqo1cvWGNkFxk20QAloGnyA8+hOpx+SFdEqIh/npd7q hL/I9WgcrsCXK/Vx4TG+cTTq3ggd2s3AExXS0xrvUP4fGLbBctM6f2FSB4sIFHk3 rmNBu2/nX9qx2zAAiQbD5LpZZEhc7T4D1nYwZxWIq1m338BAxSA2bB1PwkSvh7nT sK1PYpYkFuuVAA+voFiOsYrUKa+GabUa -----END CERTIFICATE-----Generated at Sat Apr 26 17:08:51 2025 by rpki-client