$ rpki-client -vvf rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft File: eVaKOOzbYX5njAimzEPE1lAs7GI.mft (raw, json) Hash identifier: rnluDEsHtXFIMLpOqo8FMI+f1qcnpo0NH3jrCWOyXqY= Subject key identifier: 4A:2B:7A:82:69:7E:65:D7:24:79:6A:29:91:2C:D5:6E:E1:64:F8:AB Authority key identifier: 79:56:8A:38:EC:DB:61:7E:67:8C:08:A6:CC:43:C4:D6:50:2C:EC:62 Certificate issuer: /CN=A91B38F5/serialNumber=79568A38ECDB617E678C08A6CC43C4D6502CEC62 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft Manifest number: 17 Signing time: Fri 25 Apr 2025 06:58:31 +0000 Manifest this update: Fri 25 Apr 2025 06:58:31 +0000 Manifest next update: Fri 02 May 2025 06:58:31 +0000 Files and hashes: 1: eVaKOOzbYX5njAimzEPE1lAs7GI.crl (hash: VBYBFu095qlFb7CTY0WVpo534FKkOblU/ZJiOLthE3w=) 2: B5E94296025C11F0BDF41912C4F9AE02.roa (hash: vF2hPrjWnGE1wVLs/Ml1OeBVYR8W6IECJw4qVwfrJO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.crl rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B38F5, serialNumber=79568A38ECDB617E678C08A6CC43C4D6502CEC62 Validity Not Before: Apr 25 06:58:31 2025 GMT Not After : May 2 06:58:31 2025 GMT Subject: CN=680b3297-f5ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:22:dc:38:5c:87:34:0a:28:90:ad:f0:1c:80: aa:0e:cc:0c:f3:db:4b:ab:2b:67:34:4b:26:88:f9: 05:1f:30:8c:52:db:f2:3f:d4:22:16:f9:ae:fa:3d: cf:8a:2a:5a:cd:b0:6e:bd:47:7c:b7:de:cd:ff:a7: 5d:25:ef:6c:ad:a3:8f:a0:27:d8:48:a2:f0:d8:e7: 7d:96:15:dc:74:8a:56:db:40:3c:cb:88:b0:51:c2: a9:d2:e3:d3:5e:e3:00:45:82:b4:c1:15:aa:e7:54: 7d:44:8f:06:00:1e:58:00:8e:6e:7a:dc:f2:b7:c3: cc:6c:58:a4:e6:10:ea:5d:03:a8:c2:2a:22:91:08: 64:f1:ed:e5:27:ab:37:04:c5:58:48:84:6b:95:b8: d3:e4:f6:43:5b:7e:16:bc:31:fb:1e:79:52:0a:15: 71:70:18:de:07:50:82:a4:82:2f:01:ec:bf:ef:cb: f6:9c:e4:b0:20:1b:c0:5e:dc:70:c3:82:f3:7a:cb: fd:c0:88:60:76:af:2e:c6:98:d7:ea:be:26:78:0b: 50:38:9e:21:ed:bf:ce:1a:b7:39:57:ba:d1:57:92: 87:85:51:1b:d2:aa:dc:74:d1:f7:0a:1f:43:a5:d2: 62:cc:f3:e3:9c:7f:31:ea:a7:52:b5:19:4c:8f:74: c6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2B:7A:82:69:7E:65:D7:24:79:6A:29:91:2C:D5:6E:E1:64:F8:AB X509v3 Authority Key Identifier: keyid:79:56:8A:38:EC:DB:61:7E:67:8C:08:A6:CC:43:C4:D6:50:2C:EC:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d9:bd:90:02:51:ba:24:46:b9:15:77:c6:67:ab:6d:88:40: 09:7e:1a:d0:24:ee:8a:98:a1:39:2c:a0:2a:c2:8f:ce:a6:02: 19:ce:92:6b:ed:5d:3c:2f:52:b3:c0:8b:41:3a:b5:9e:dc:82: e7:5f:ca:8f:af:c0:ae:6e:82:6a:a8:8d:2d:de:26:6b:f2:9b: 51:00:72:9f:e5:d1:35:d8:8f:90:ed:ec:6c:32:fb:34:27:42: d5:26:2d:ee:e1:f0:ea:35:77:28:45:05:19:a0:0e:27:8c:fc: 3f:39:47:cc:9b:0b:14:42:47:43:ec:97:cc:cc:26:48:78:43: d4:c3:01:71:ad:a6:53:7c:c5:8a:78:c1:3e:01:f7:9e:ad:a1: 6f:99:b9:06:a8:b2:50:9c:39:5d:dd:09:e5:5c:bb:6e:b8:54: 9e:84:0d:8b:bb:9d:57:3a:88:f0:e3:20:e9:00:e0:fc:c5:43: 19:90:d3:ce:f4:d8:ac:e3:f6:41:b9:00:22:cc:20:e1:29:21: 3f:1f:2d:eb:43:ed:38:f9:d9:89:25:87:f0:d5:c5:bb:8b:d7: 82:2f:51:f1:1d:68:c1:a9:95:d0:b3:92:e0:2c:cd:70:b2:97: 8e:3e:44:b5:47:be:6e:01:36:59:0d:b8:24:bb:5d:e7:1d:cb: 06:93:4c:31 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzhGNTExMC8GA1UEBRMoNzk1NjhBMzhFQ0RCNjE3RTY3OEMwOEE2Q0M0M0M0RDY1 MDJDRUM2MjAeFw0yNTA0MjUwNjU4MzFaFw0yNTA1MDIwNjU4MzFaMBgxFjAUBgNV BAMTDTY4MGIzMjk3LWY1ZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRItw4XIc0CiiQrfAcgKoOzAzz20urK2c0SyaI+QUfMIxS2/I/1CIW+a76Pc+K KlrNsG69R3y33s3/p10l72yto4+gJ9hIovDY532WFdx0ilbbQDzLiLBRwqnS49Ne 4wBFgrTBFarnVH1EjwYAHlgAjm563PK3w8xsWKTmEOpdA6jCKiKRCGTx7eUnqzcE xVhIhGuVuNPk9kNbfha8MfseeVIKFXFwGN4HUIKkgi8B7L/vy/ac5LAgG8Be3HDD gvN6y/3AiGB2ry7GmNfqviZ4C1A4niHtv84atzlXutFXkoeFURvSqtx00fcKH0Ol 0mLM8+OcfzHqp1K1GUyPdMafAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSit6gml+ ZdckeWopkSzVbuFk+KswHwYDVR0jBBgwFoAUeVaKOOzbYX5njAimzEPE1lAs7GIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzOEY1L0U4MDI4MTlFMDI1 QjExRjA5QUNGRDkxMEM0RjlBRTAyL2VWYUtPT3piWVg1bmpBaW16RVBFMWxBczdH SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZVZhS09PemJZWDVuakFpbXpFUEUxbEFzN0dJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz OEY1L0U4MDI4MTlFMDI1QjExRjA5QUNGRDkxMEM0RjlBRTAyL2VWYUtPT3piWVg1 bmpBaW16RVBFMWxBczdHSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHvZvZACUbokRrkVd8Znq22IQAl+GtAk7oqYoTksoCrCj86mAhnOkmvt XTwvUrPAi0E6tZ7cgudfyo+vwK5ugmqojS3eJmvym1EAcp/l0TXYj5Dt7Gwy+zQn QtUmLe7h8Oo1dyhFBRmgDieM/D85R8ybCxRCR0Psl8zMJkh4Q9TDAXGtplN8xYp4 wT4B956toW+ZuQaoslCcOV3dCeVcu264VJ6EDYu7nVc6iPDjIOkA4PzFQxmQ0870 2Kzj9kG5ACLMIOEpIT8fLetD7Tj52Yklh/DVxbuL14IvUfEdaMGpldCzkuAszXCy l44+RLVHvm4BNlkNuCS7XecdywaTTDE= -----END CERTIFICATE-----Generated at Sat Apr 26 12:35:56 2025 by rpki-client