$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft File: eKfTXvnEd150y6PRZrYbdZAkFSM.mft (raw, json) Hash identifier: mUxnQ0r1z6bbH7uLbnhnwDlGxCLBsLYy8Lg24NGufYw= Subject key identifier: 0F:9C:9F:D0:07:55:07:4A:F1:F8:51:B7:3C:2D:33:71:A7:47:13:92 Authority key identifier: 78:A7:D3:5E:F9:C4:77:5E:74:CB:A3:D1:66:B6:1B:75:90:24:15:23 Certificate issuer: /CN=A91D2C38/serialNumber=78A7D35EF9C4775E74CBA3D166B61B7590241523 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKfTXvnEd150y6PRZrYbdZAkFSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft Manifest number: 50 Signing time: Fri 25 Apr 2025 06:15:52 +0000 Manifest this update: Fri 25 Apr 2025 06:15:52 +0000 Manifest next update: Fri 02 May 2025 06:15:52 +0000 Files and hashes: 1: eKfTXvnEd150y6PRZrYbdZAkFSM.crl (hash: gA1CZnosVGXr/xnJYSYgB8Fp19BfUl8E5fSsSJmKyqU=) 2: 8DDD0D56A98C11EFAAC0F364C4F9AE02.roa (hash: yg1U4JyDYBAoLLqLQFnhNTd+uuZ0oKhea1PeFahobmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.crl rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKfTXvnEd150y6PRZrYbdZAkFSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2C38, serialNumber=78A7D35EF9C4775E74CBA3D166B61B7590241523 Validity Not Before: Apr 25 06:15:52 2025 GMT Not After : May 2 06:15:52 2025 GMT Subject: CN=680b2898-618f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4c:c0:d3:1d:3d:c6:c6:2a:00:fc:22:cd:af: 7c:00:44:d3:cc:47:2e:90:01:da:b5:b0:a4:27:76: 93:01:51:72:35:55:9b:92:77:3f:ee:72:c4:30:ee: 6a:7f:24:e3:c6:59:41:55:d9:ba:f3:2f:3b:69:97: b6:1c:ea:2a:92:d4:90:f3:a2:cb:a6:3d:cb:f7:7c: 60:a2:e7:2e:de:58:02:a7:65:63:d2:27:cf:b8:70: 0a:38:84:55:e5:41:eb:1d:a4:fa:8c:ff:69:96:00: 4a:fa:cf:31:b9:bf:15:b8:1e:54:c1:79:16:96:82: 92:73:05:7b:c1:18:f2:da:93:52:e2:6e:27:44:33: 43:e6:8d:1b:71:d6:0f:2e:aa:64:42:2a:6a:7d:29: ca:9a:d7:2d:79:71:54:ee:17:51:5b:41:47:6f:bd: df:59:f2:8a:fb:5e:cf:b6:9a:cd:4c:63:8b:e9:dd: 4c:b4:ca:12:64:80:53:ae:3f:ec:20:3b:5b:7f:74: c1:89:fe:b7:7d:5e:cb:05:10:d6:46:98:27:c0:fd: f8:28:3f:a5:cc:33:02:4f:99:e1:c7:c3:ed:2c:19: 58:39:37:fa:06:dc:c9:47:80:17:f8:d1:1d:b3:6c: e5:ba:1a:76:89:29:92:43:ac:47:70:1e:85:ed:80: 2c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:9C:9F:D0:07:55:07:4A:F1:F8:51:B7:3C:2D:33:71:A7:47:13:92 X509v3 Authority Key Identifier: keyid:78:A7:D3:5E:F9:C4:77:5E:74:CB:A3:D1:66:B6:1B:75:90:24:15:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKfTXvnEd150y6PRZrYbdZAkFSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:81:9d:06:78:95:a3:ef:8c:0a:df:fd:f2:73:7f:e9:e7:9b: cb:59:e5:ac:4c:d2:71:19:15:07:77:03:2d:a4:50:95:d8:25: 2d:b3:df:aa:7c:37:d8:39:60:0c:88:cb:88:8e:24:30:e5:b9: 91:98:e4:8c:60:c3:3a:e6:6a:96:71:f9:66:63:87:56:50:c1: ca:89:56:2b:d5:cf:6f:c4:24:2d:e3:5b:ea:9b:0b:9e:d7:f6: ce:77:e6:40:76:9a:0f:b0:fd:76:52:07:53:88:56:63:c4:8a: 3e:d9:e8:a1:ca:49:37:e0:75:a2:9e:7d:dc:24:5f:4e:f8:8b: 7e:98:82:09:44:42:f7:3e:70:3c:8e:28:3b:02:b6:5c:71:3b: bc:ae:eb:3a:e6:d3:51:2a:9a:82:33:8a:db:47:d0:e1:0a:9c: 8c:ac:0e:1e:31:bb:01:48:c9:a3:80:e2:22:46:4d:d7:b0:56: 32:71:14:39:9a:5a:b1:e1:52:32:94:5c:8d:16:94:69:b9:ce: c0:6a:a9:32:1f:92:f4:62:73:3d:f7:55:48:77:89:ec:4a:c7: a2:49:ed:c9:3b:84:dc:f4:4f:8e:c7:84:8c:d1:d8:d9:a4:1a: c7:74:2c:dc:43:ce:31:8e:4c:9f:f3:9f:c3:10:f4:4c:a3:b7: ed:c2:82:df -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkMzODExMC8GA1UEBRMoNzhBN0QzNUVGOUM0Nzc1RTc0Q0JBM0QxNjZCNjFCNzU5 MDI0MTUyMzAeFw0yNTA0MjUwNjE1NTJaFw0yNTA1MDIwNjE1NTJaMBgxFjAUBgNV BAMTDTY4MGIyODk4LTYxOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3TMDTHT3GxioA/CLNr3wARNPMRy6QAdq1sKQndpMBUXI1VZuSdz/ucsQw7mp/ JOPGWUFV2brzLztpl7Yc6iqS1JDzosumPcv3fGCi5y7eWAKnZWPSJ8+4cAo4hFXl QesdpPqM/2mWAEr6zzG5vxW4HlTBeRaWgpJzBXvBGPLak1LibidEM0PmjRtx1g8u qmRCKmp9Kcqa1y15cVTuF1FbQUdvvd9Z8or7Xs+2ms1MY4vp3Uy0yhJkgFOuP+wg O1t/dMGJ/rd9XssFENZGmCfA/fgoP6XMMwJPmeHHw+0sGVg5N/oG3MlHgBf40R2z bOW6GnaJKZJDrEdwHoXtgCxbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUD5yf0AdV B0rx+FG3PC0zcadHE5IwHwYDVR0jBBgwFoAUeKfTXvnEd150y6PRZrYbdZAkFSMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQzM4LzBERTg5MzQwQTk4 QzExRUY5MzUwRkI2M0M0RjlBRTAyL2VLZlRYdm5FZDE1MHk2UFJaclliZFpBa0ZT TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZUtmVFh2bkVkMTUweTZQUlpyWWJkWkFrRlNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy QzM4LzBERTg5MzQwQTk4QzExRUY5MzUwRkI2M0M0RjlBRTAyL2VLZlRYdm5FZDE1 MHk2UFJaclliZFpBa0ZTTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEuBnQZ4laPvjArf/fJzf+nnm8tZ5axM0nEZFQd3Ay2kUJXYJS2z36p8 N9g5YAyIy4iOJDDluZGY5IxgwzrmapZx+WZjh1ZQwcqJVivVz2/EJC3jW+qbC57X 9s535kB2mg+w/XZSB1OIVmPEij7Z6KHKSTfgdaKefdwkX074i36YgglEQvc+cDyO KDsCtlxxO7yu6zrm01EqmoIzittH0OEKnIysDh4xuwFIyaOA4iJGTdewVjJxFDma WrHhUjKUXI0WlGm5zsBqqTIfkvRicz33VUh3iexKx6JJ7ck7hNz0T47HhIzR2Nmk Gsd0LNxDzjGOTJ/zn8MQ9Eyjt+3Cgt8= -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:51 2025 by rpki-client