$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft File: evNKJg5qKenXvIqxrCZW4Ue4iiI.mft (raw, json) Hash identifier: s2q+dUlJLWAwp9wv2KTecEfW4vX0m62w8Av2MQEDpKU= Subject key identifier: 6A:87:F3:34:61:AD:E1:E5:29:36:75:CB:EF:9E:BC:DE:2A:A7:3F:8E Authority key identifier: 7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22 Certificate issuer: /CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22 Certificate serial: 0206 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft Manifest number: 01E7 Signing time: Fri 25 Apr 2025 02:06:07 +0000 Manifest this update: Fri 25 Apr 2025 02:06:07 +0000 Manifest next update: Fri 02 May 2025 02:06:07 +0000 Files and hashes: 1: evNKJg5qKenXvIqxrCZW4Ue4iiI.crl (hash: FW9n7o2KIDzNWvpf73iRjkpyjv7TyxdzwQn6n9llDNI=) 2: A1740AE6F44A11EFBDAE4F7BC4F9AE02.roa (hash: zcojx0ZkQFta/eHlUHGOuBKvCSA32o0JspTRYlkMoDI=) 3: 881750D0E04511EF8BD5FA0EC4F9AE02.roa (hash: PAN71XRdBizmCnmbth6bc3U7C1SlwCeBKZgyo5Yoesk=) 4: 870547C4E04511EF8BD5FA0EC4F9AE02.roa (hash: ercDyfbZZj81eG2rt4VTnpYu27D4sWw7nv/fhjhfp3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:06:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 518 (0x206) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4D1F, serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22 Validity Not Before: Apr 25 02:06:07 2025 GMT Not After : May 2 02:06:07 2025 GMT Subject: CN=680aee0f-273b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7b:8e:c3:0a:11:a4:d3:18:65:c1:6a:78:5d: 8b:83:04:e0:d6:80:ca:96:e8:9e:c3:ca:aa:a8:7b: 11:30:52:7a:8e:8e:46:f6:5d:fa:85:5e:30:da:12: 3b:a1:e4:96:69:94:91:f0:92:b2:60:73:cb:0e:88: ea:85:12:2b:20:eb:c2:47:6a:4d:d2:aa:f5:20:e7: 1b:2b:84:5d:37:33:6a:51:f4:78:2d:78:40:25:15: bb:ee:34:08:e5:b9:4e:69:1f:8a:00:0c:96:14:f2: d2:66:42:f6:e4:0b:46:ad:b6:88:e7:e9:dc:ae:cf: b1:04:e7:74:e8:81:8f:14:7a:71:5f:8c:1b:e7:5a: eb:6d:ca:31:c6:e5:cf:c1:34:4c:e1:87:b5:67:ef: 5f:6f:26:d1:ed:eb:8c:fe:9f:6d:6d:d4:60:7b:cf: 82:a4:5a:43:e8:be:10:61:72:27:41:ce:e9:84:9e: c4:49:5a:b9:f9:8f:35:52:85:7e:d3:a7:dd:a9:8c: dc:ec:c9:70:97:db:a7:1a:de:1c:42:3f:f9:63:26: 23:fa:43:55:19:d1:1d:d9:ab:74:ef:b5:dd:22:bf: 82:ff:94:f2:46:0a:6d:1d:f6:e3:d9:4f:fe:35:a6: f7:1c:fa:69:06:ad:99:ea:24:af:df:44:ff:e1:94: d8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:87:F3:34:61:AD:E1:E5:29:36:75:CB:EF:9E:BC:DE:2A:A7:3F:8E X509v3 Authority Key Identifier: keyid:7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:04:51:7e:5d:5a:5d:bf:46:dd:14:ed:f8:5e:12:e9:4e:43: f3:f7:b3:31:3b:24:78:a2:6d:b3:a8:54:75:68:d7:0d:5a:3a: 76:7a:e9:ad:ce:ec:c9:f1:db:38:68:42:b8:a4:6a:68:f2:34: 37:59:62:e7:af:29:46:3f:2a:9f:cf:02:e6:a8:0d:ad:94:42: 7b:6b:e6:65:29:f0:57:79:1b:74:6a:3a:e1:a3:57:79:05:ce: 61:a0:f2:c7:12:b5:3e:a7:f5:ef:d7:a7:d4:53:2b:b8:63:e6: 95:06:79:14:ce:c6:2f:94:b1:7c:72:ec:1a:a6:25:56:69:96: 77:40:35:32:a5:3f:f0:c8:bd:3c:5d:71:b3:46:92:34:80:81: 1c:d3:13:c1:7c:ee:30:38:6a:a5:27:f8:4d:94:e3:3e:26:76: 5c:04:d8:96:33:a9:c5:b5:16:fc:e8:39:46:f0:1b:8e:a0:e4: ca:af:d4:a6:8e:62:c5:84:6c:ee:ff:e6:83:74:54:97:b8:5a: cb:53:e6:a5:17:f1:9b:2a:17:f6:e1:da:9d:cc:cb:d8:bf:73: 1f:55:6c:af:67:3a:10:48:cc:37:0f:f1:14:f2:2e:f4:96:1a: c8:e9:87:30:06:27:fa:2c:2c:27:51:eb:90:d0:ae:1b:2c:66: 71:8a:c9:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTREMUYxMTAvBgNVBAUTKDdBRjM0QTI2MEU2QTI5RTlEN0JDOEFCMUFDMjY1NkUx NDdCODhBMjIwHhcNMjUwNDI1MDIwNjA3WhcNMjUwNTAyMDIwNjA3WjAYMRYwFAYD VQQDEw02ODBhZWUwZi0yNzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlHuOwwoRpNMYZcFqeF2LgwTg1oDKluiew8qqqHsRMFJ6jo5G9l36hV4w2hI7 oeSWaZSR8JKyYHPLDojqhRIrIOvCR2pN0qr1IOcbK4RdNzNqUfR4LXhAJRW77jQI 5blOaR+KAAyWFPLSZkL25AtGrbaI5+ncrs+xBOd06IGPFHpxX4wb51rrbcoxxuXP wTRM4Ye1Z+9fbybR7euM/p9tbdRge8+CpFpD6L4QYXInQc7phJ7ESVq5+Y81UoV+ 06fdqYzc7Mlwl9unGt4cQj/5YyYj+kNVGdEd2at077XdIr+C/5TyRgptHfbj2U/+ Nab3HPppBq2Z6iSv30T/4ZTYdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGqH8zRh reHlKTZ1y++evN4qpz+OMB8GA1UdIwQYMBaAFHrzSiYOainp17yKsawmVuFHuIoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEQxRi80OTE1MkE0NDY4 MDQxMUVEQTJEMkJEM0NDNEY5QUUwMi9ldk5LSmc1cUtlblh2SXF4ckNaVzRVZTRp aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V2TktKZzVxS2VuWHZJcXhyQ1pXNFVlNGlpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEQxRi80OTE1MkE0NDY4MDQxMUVEQTJEMkJEM0NDNEY5QUUwMi9ldk5LSmc1cUtl blh2SXF4ckNaVzRVZTRpaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCABFF+XVpdv0bdFO34XhLpTkPz97MxOyR4om2zqFR1aNcNWjp2eumt zuzJ8ds4aEK4pGpo8jQ3WWLnrylGPyqfzwLmqA2tlEJ7a+ZlKfBXeRt0ajrho1d5 Bc5hoPLHErU+p/Xv16fUUyu4Y+aVBnkUzsYvlLF8cuwapiVWaZZ3QDUypT/wyL08 XXGzRpI0gIEc0xPBfO4wOGqlJ/hNlOM+JnZcBNiWM6nFtRb86DlG8BuOoOTKr9Sm jmLFhGzu/+aDdFSXuFrLU+alF/GbKhf24dqdzMvYv3MfVWyvZzoQSMw3D/EU8i70 lhrI6YcwBif6LCwnUeuQ0K4bLGZxislx -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:03 2025 by rpki-client