$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.mft File: eAtbxs5eRpg3res2hXTtSDBIAcs.mft (raw, json) Hash identifier: 9zcg2L8Faygd7ibb458AflY1kf4GAGPkp1+cWZ/g6U4= Subject key identifier: 8C:7A:DA:CC:55:7A:D7:C3:A1:5C:36:64:67:C8:CA:2B:57:9F:66:E5 Authority key identifier: 78:0B:5B:C6:CE:5E:46:98:37:AD:EB:36:85:74:ED:48:30:48:01:CB Certificate issuer: /CN=A91A5A93/serialNumber=780B5BC6CE5E469837ADEB368574ED48304801CB Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eAtbxs5eRpg3res2hXTtSDBIAcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.mft Manifest number: D0 Signing time: Thu 19 Jun 2025 05:03:01 +0000 Manifest this update: Thu 19 Jun 2025 05:03:01 +0000 Manifest next update: Thu 26 Jun 2025 05:03:01 +0000 Files and hashes: 1: eAtbxs5eRpg3res2hXTtSDBIAcs.crl (hash: e++ucluWWdjDT174PtBsAMqy08nQnHaYcKGS9hj8T+E=) 2: 521500EE15C611EF88C07237C4F9AE02.roa (hash: BCuicmcvw7ww1h97rYp14idO+zun7W58fW3pvWobsAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.crl rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eAtbxs5eRpg3res2hXTtSDBIAcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5A93, serialNumber=780B5BC6CE5E469837ADEB368574ED48304801CB Validity Not Before: Jun 19 05:03:01 2025 GMT Not After : Jun 26 05:03:01 2025 GMT Subject: CN=68539a05-15c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5d:0d:e3:b1:f0:94:d1:6f:68:08:f7:f6:78: 03:6b:be:d6:c7:da:f7:6c:41:3a:95:95:58:a4:1d: 1e:b9:a2:06:16:6a:ad:d9:03:0d:4f:dd:0f:fa:1f: 72:ac:d8:4d:d5:25:53:9b:f1:80:ee:b8:a6:d3:6a: bc:17:9e:9c:3d:6d:05:82:18:e7:e3:08:87:f1:fa: 19:48:c5:59:32:bf:07:5c:83:df:27:0e:94:65:79: 04:20:b4:f0:34:67:00:d4:ea:5d:02:16:ce:53:54: e1:7b:5a:52:3c:86:fd:15:99:c9:76:4d:8c:b8:66: 94:19:89:85:d2:b2:9c:6e:1c:e2:57:07:77:82:f3: 79:e7:a0:6d:28:f0:52:1e:b1:fa:a9:ea:f9:e2:2c: c2:9c:b9:44:b2:fc:10:c0:2b:dc:c3:f3:26:66:3c: 6f:8f:46:cb:10:aa:9c:8b:5f:7b:7b:7a:a3:8a:87: 82:e4:81:ff:6f:31:4f:49:be:69:e7:c3:58:ef:e7: ff:d2:0c:3a:5f:b7:08:39:1d:6c:1c:4a:c5:02:c4: a2:34:15:10:28:d3:f2:4c:d8:78:03:a1:92:0d:bd: 76:b5:3f:13:3e:07:c5:1a:38:ff:12:9b:89:6f:07: 29:f9:8d:51:c3:32:36:4f:26:56:b4:7e:6a:65:1c: 4f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7A:DA:CC:55:7A:D7:C3:A1:5C:36:64:67:C8:CA:2B:57:9F:66:E5 X509v3 Authority Key Identifier: keyid:78:0B:5B:C6:CE:5E:46:98:37:AD:EB:36:85:74:ED:48:30:48:01:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eAtbxs5eRpg3res2hXTtSDBIAcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:3f:bc:0d:a1:af:c7:20:4e:13:80:1e:59:c0:e3:a0:40:27: d2:af:2f:75:0c:54:9f:3a:2e:8e:9f:3d:af:76:45:b6:78:bc: a5:72:63:57:e6:da:fa:3b:c6:0c:09:b7:d9:70:d4:e5:c2:47: 87:b9:c5:15:75:86:fd:c5:24:d4:ce:67:b5:c6:20:9d:51:cb: 2b:e4:f4:54:6e:f0:80:57:b8:1d:ac:1d:c7:63:93:71:86:29: c0:44:58:d0:3e:0e:00:31:e6:86:49:e5:c6:ef:43:69:d1:33: 82:f6:13:59:50:6e:0b:be:e1:e1:28:1c:28:71:8c:03:f4:bf: 14:86:f3:47:96:52:6a:59:07:c3:05:8a:07:ba:f4:45:a7:9f: 6d:89:14:6f:a5:7e:19:4b:f0:2f:41:9e:a3:12:8b:a6:68:37: d4:6c:73:cb:64:73:fb:a7:fc:ba:b8:b4:d2:78:be:a5:40:c2: 11:f4:36:f2:2a:4a:6a:c6:a6:c8:20:77:9e:b8:6a:fb:9a:3a: 12:70:52:e9:a9:0f:2f:dd:3b:5a:40:88:ef:cf:d6:bf:1e:37: b9:7b:fe:ab:aa:af:a8:75:bd:88:a8:72:77:2f:d0:3a:64:1c: 67:88:68:6a:89:c6:1e:23:51:4e:04:02:c0:ef:1a:91:aa:c6: 71:3c:1b:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVBOTMxMTAvBgNVBAUTKDc4MEI1QkM2Q0U1RTQ2OTgzN0FERUIzNjg1NzRFRDQ4 MzA0ODAxQ0IwHhcNMjUwNjE5MDUwMzAxWhcNMjUwNjI2MDUwMzAxWjAYMRYwFAYD VQQDEw02ODUzOWEwNS0xNWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz10N47HwlNFvaAj39ngDa77Wx9r3bEE6lZVYpB0euaIGFmqt2QMNT90P+h9y rNhN1SVTm/GA7rim02q8F56cPW0Fghjn4wiH8foZSMVZMr8HXIPfJw6UZXkEILTw NGcA1OpdAhbOU1The1pSPIb9FZnJdk2MuGaUGYmF0rKcbhziVwd3gvN556BtKPBS HrH6qer54izCnLlEsvwQwCvcw/MmZjxvj0bLEKqci197e3qjioeC5IH/bzFPSb5p 58NY7+f/0gw6X7cIOR1sHErFAsSiNBUQKNPyTNh4A6GSDb12tT8TPgfFGjj/EpuJ bwcp+Y1RwzI2TyZWtH5qZRxP8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIx62sxV etfDoVw2ZGfIyitXn2blMB8GA1UdIwQYMBaAFHgLW8bOXkaYN63rNoV07UgwSAHL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUE5My9DMDFBRjVGNDE1 QzUxMUVGQUEzMzgyMzZDNEY5QUUwMi9lQXRieHM1ZVJwZzNyZXMyaFhUdFNEQklB Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VBdGJ4czVlUnBnM3JlczJoWFR0U0RCSUFjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUE5My9DMDFBRjVGNDE1QzUxMUVGQUEzMzgyMzZDNEY5QUUwMi9lQXRieHM1ZVJw ZzNyZXMyaFhUdFNEQklBY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6P7wNoa/HIE4TgB5ZwOOgQCfSry91DFSfOi6Onz2vdkW2eLylcmNX 5tr6O8YMCbfZcNTlwkeHucUVdYb9xSTUzme1xiCdUcsr5PRUbvCAV7gdrB3HY5Nx hinARFjQPg4AMeaGSeXG70Np0TOC9hNZUG4LvuHhKBwocYwD9L8UhvNHllJqWQfD BYoHuvRFp59tiRRvpX4ZS/AvQZ6jEoumaDfUbHPLZHP7p/y6uLTSeL6lQMIR9Dby KkpqxqbIIHeeuGr7mjoScFLpqQ8v3TtaQIjvz9a/Hje5e/6rqq+odb2IqHJ3L9A6 ZBxniGhqicYeI1FOBALA7xqRqsZxPBs+ -----END CERTIFICATE-----Generated at Thu Jun 19 16:09:17 2025 by rpki-client