$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft File: 0eKZ-egsk3yysqaQYegXNB-FCPU.mft (raw, json) Hash identifier: LsGZaMOR4rJC3mtGjoy+tV8kAVVa+kYixkCeO0ZFQ68= Subject key identifier: 94:F6:B9:FD:1E:52:2A:2D:F8:C7:0D:8F:E7:D0:25:1A:1F:14:B2:9F Authority key identifier: D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5 Certificate issuer: /CN=A91886CC/serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5 Certificate serial: 017F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft Manifest number: 017B Signing time: Fri 25 Apr 2025 02:59:54 +0000 Manifest this update: Fri 25 Apr 2025 02:59:53 +0000 Manifest next update: Fri 02 May 2025 02:59:53 +0000 Files and hashes: 1: 0eKZ-egsk3yysqaQYegXNB-FCPU.crl (hash: o6GXOJrh2btdIsW3YguQtXtXrHsTQ1x3W8Mi75r1XJI=) 2: 71F97AC0560E11EEA8088470C4F9AE02.roa (hash: M1Z0vPN0xRUeI7aXSO+zgJ15zwwVDL1Npd3KMXS/ZDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886CC, serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5 Validity Not Before: Apr 25 02:59:53 2025 GMT Not After : May 2 02:59:53 2025 GMT Subject: CN=680afaaa-2402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:27:43:bd:5e:f6:db:59:ef:1b:48:a0:c1:ff: e4:c2:a9:1b:54:d9:5d:df:bf:96:df:ff:ff:6f:13: 49:76:47:19:3e:5a:58:62:a4:a8:5d:15:4f:f7:73: 8b:b5:0a:ab:e8:c0:19:ad:00:37:5c:62:44:08:86: 74:df:f3:67:ad:76:d5:b7:68:5d:41:c9:0a:0d:8e: 05:31:0e:18:df:75:cb:85:90:c4:d7:1f:aa:64:2c: 35:c2:7d:83:49:34:0a:30:1d:df:61:0c:f7:75:28: 6e:c2:cd:18:91:9d:63:69:2b:1f:b6:54:e8:26:8a: e1:6f:d9:d0:65:a2:93:8b:ab:26:da:ef:87:ec:7f: cb:af:36:d8:f5:77:ba:cc:f7:81:eb:4d:a0:ed:f3: 12:3d:a9:28:31:da:42:5e:92:98:d4:c5:ef:83:e7: fd:da:f1:6d:1d:4f:9d:3d:e3:34:8a:6e:5c:9a:c0: 2b:36:85:1b:e9:07:3d:a0:c4:b2:b5:f8:8e:36:2a: c0:08:d3:71:0d:e5:f5:69:6e:81:9a:1e:d0:2a:e3: 9a:0c:92:29:ac:b9:8e:c1:11:5f:3f:bd:f7:4a:5e: c8:c0:53:b7:97:33:89:e9:1e:07:8c:8b:50:48:d7: aa:ec:12:6b:03:14:0b:df:af:4e:d2:27:80:13:fd: 08:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F6:B9:FD:1E:52:2A:2D:F8:C7:0D:8F:E7:D0:25:1A:1F:14:B2:9F X509v3 Authority Key Identifier: keyid:D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:0c:e5:f3:fe:1f:9f:d3:38:2e:c3:ed:da:62:35:93:48:ae: 96:9b:74:8c:f7:4d:85:20:bd:e4:cc:ca:c3:75:20:ac:a7:a6: 46:69:2b:e0:13:85:d9:1b:92:10:43:20:e2:7d:5e:9a:c2:69: d3:2b:bb:68:c2:69:19:36:43:b4:1e:a3:93:0d:4e:d6:00:2d: 29:25:c2:02:ab:21:58:8c:94:17:6d:12:0e:f4:96:f2:04:23: ef:7d:9c:83:da:4d:b1:ce:70:e1:d4:ac:ec:18:8c:5c:82:54: 5f:f8:6c:36:b4:11:87:72:b5:6b:ad:08:77:b6:56:31:b9:f5: de:ca:ec:14:f5:18:ce:bb:ff:df:2e:01:f9:7c:8f:f2:0a:24: 39:9b:22:07:15:2f:2b:b8:74:ca:d1:81:a4:01:e0:91:e3:1b: e5:c2:2a:14:2a:46:3e:0e:2b:fc:68:8b:2e:fc:bb:d2:5a:85: 5e:7f:aa:7b:d8:f4:53:0d:ce:b2:ee:fd:ce:7c:9c:fd:ee:d8: 38:8d:0b:10:a2:05:2f:c7:b6:55:1c:04:42:2f:13:59:53:98: 9b:7d:d0:db:dd:1f:96:79:71:0f:7a:40:dc:ba:6a:7c:db:a6: 0a:39:3e:22:6f:35:fe:42:77:da:99:6d:74:d3:4d:c9:65:d5: ee:c6:b0:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2Q0MxMTAvBgNVBAUTKEQxRTI5OUY5RTgyQzkzN0NCMkIyQTY5MDYxRTgxNzM0 MUY4NTA4RjUwHhcNMjUwNDI1MDI1OTUzWhcNMjUwNTAyMDI1OTUzWjAYMRYwFAYD VQQDEw02ODBhZmFhYS0yNDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6SdDvV7221nvG0igwf/kwqkbVNld37+W3///bxNJdkcZPlpYYqSoXRVP93OL tQqr6MAZrQA3XGJECIZ03/NnrXbVt2hdQckKDY4FMQ4Y33XLhZDE1x+qZCw1wn2D STQKMB3fYQz3dShuws0YkZ1jaSsftlToJorhb9nQZaKTi6sm2u+H7H/LrzbY9Xe6 zPeB602g7fMSPakoMdpCXpKY1MXvg+f92vFtHU+dPeM0im5cmsArNoUb6Qc9oMSy tfiONirACNNxDeX1aW6Bmh7QKuOaDJIprLmOwRFfP733Sl7IwFO3lzOJ6R4HjItQ SNeq7BJrAxQL369O0ieAE/0ILQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJT2uf0e Uiot+McNj+fQJRofFLKfMB8GA1UdIwQYMBaAFNHimfnoLJN8srKmkGHoFzQfhQj1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZDQy80RUE2QzYxOEU4 QkQxMUVEOEI4OTI1MjJDNEY5QUUwMi8wZUtaLWVnc2szeXlzcWFRWWVnWE5CLUZD UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBlS1otZWdzazN5eXNxYVFZZWdYTkItRkNQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZDQy80RUE2QzYxOEU4QkQxMUVEOEI4OTI1MjJDNEY5QUUwMi8wZUtaLWVnc2sz eXlzcWFRWWVnWE5CLUZDUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCODOXz/h+f0zguw+3aYjWTSK6Wm3SM902FIL3kzMrDdSCsp6ZGaSvg E4XZG5IQQyDifV6awmnTK7towmkZNkO0HqOTDU7WAC0pJcICqyFYjJQXbRIO9Jby BCPvfZyD2k2xznDh1KzsGIxcglRf+Gw2tBGHcrVrrQh3tlYxufXeyuwU9RjOu//f LgH5fI/yCiQ5myIHFS8ruHTK0YGkAeCR4xvlwioUKkY+Div8aIsu/LvSWoVef6p7 2PRTDc6y7v3OfJz97tg4jQsQogUvx7ZVHARCLxNZU5ibfdDb3R+WeXEPekDcump8 26YKOT4ibzX+QnfamW10003JZdXuxrDo -----END CERTIFICATE-----Generated at Sat Apr 26 13:07:51 2025 by rpki-client