$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft File: 0Eyx4nFXho90821weRXZ1_CXyQg.mft (raw, json) Hash identifier: /PoU9QvzU5K1t2bwJu6DOjLo9i0IHxxK0N9m+X4mtAk= Subject key identifier: 8D:5F:BC:3D:7D:45:E5:EA:D2:7B:DB:1A:8D:71:90:0A:62:BF:D0:90 Authority key identifier: D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08 Certificate issuer: /CN=A91D5AA8/serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908 Certificate serial: 01B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft Manifest number: 01B2 Signing time: Fri 25 Apr 2025 02:24:24 +0000 Manifest this update: Fri 25 Apr 2025 02:24:23 +0000 Manifest next update: Fri 02 May 2025 02:24:23 +0000 Files and hashes: 1: 0Eyx4nFXho90821weRXZ1_CXyQg.crl (hash: MHvPmMfmgnakpOnmpPaOYeecvAOaZ+Wg+ciHXy13qaw=) 2: 994AC0903E1E11EFB5BBDD3BC4F9AE02.roa (hash: xyd0ZZrH0VHNsmRtbjg/g57C4k5UyZ1DuB1/mljU4Qg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 441 (0x1b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5AA8, serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908 Validity Not Before: Apr 25 02:24:23 2025 GMT Not After : May 2 02:24:23 2025 GMT Subject: CN=680af258-6659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b2:9a:b4:09:59:43:5c:b2:d2:89:d9:c9:41: 84:5a:1d:98:38:0a:57:33:c8:87:36:d1:6f:6f:94: 69:f2:19:be:85:31:8f:52:9e:56:95:b3:68:8b:cc: da:47:fd:3d:b8:9a:62:01:e3:ab:f9:51:78:5c:6a: 22:6c:d4:c3:f0:14:e6:f9:6e:46:8f:78:34:80:e2: 2e:02:73:0b:ef:65:6a:69:5a:30:02:b5:c0:d2:88: 54:d8:b9:75:f1:90:d5:b2:92:96:8b:c1:67:d5:7f: cd:76:b4:8e:da:9e:6f:77:0c:73:4b:70:e1:d0:9c: 06:d5:02:dd:12:3d:cd:8a:86:31:a7:fa:46:d6:30: 17:54:e8:06:6b:5d:39:e0:7e:73:be:ca:ec:dd:c5: a3:49:92:a6:71:19:5e:9d:ed:00:5c:4e:30:31:c9: 35:85:7e:b1:96:8b:58:74:f0:c5:ef:83:50:34:db: 8d:47:c7:5d:48:35:41:e6:fb:d9:ef:94:23:e3:fb: 7c:24:3d:1d:f9:99:ce:74:eb:7d:a9:25:f4:9f:14: 5a:78:a0:e4:5e:d9:31:e5:da:48:cf:eb:c1:ad:16: ca:5f:ed:99:54:0d:20:26:ec:b2:08:5c:ab:fd:e8: 0a:32:94:80:b0:55:02:db:0d:1f:d0:a6:fd:49:36: bb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5F:BC:3D:7D:45:E5:EA:D2:7B:DB:1A:8D:71:90:0A:62:BF:D0:90 X509v3 Authority Key Identifier: keyid:D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:e2:6e:ae:14:e2:63:93:b2:2c:fa:23:1d:2c:01:27:e1:03: b7:b6:c3:85:ad:12:16:ed:82:f2:43:4e:8a:71:7c:86:71:f6: 4b:aa:68:2c:81:50:36:3f:fc:df:a3:ea:02:29:e5:68:7d:fd: 9c:54:60:9b:8d:a5:ea:f7:0d:e3:4c:59:da:81:5c:47:c7:52: 2d:7d:62:3a:05:fa:9e:2b:77:f4:ca:28:97:64:b5:58:f4:f4: 7c:72:0b:2e:d5:b1:7e:06:c2:00:83:c3:65:3f:4a:76:03:fd: 65:bd:57:f0:20:55:72:a6:67:2b:8e:a1:c5:1e:ee:71:b6:ff: f3:7e:15:fb:f1:32:16:bb:f9:d4:5d:2a:8e:e0:d2:a6:69:55: 0a:2f:7b:df:62:cb:6c:e5:0e:46:6b:c7:0c:58:94:b9:af:1b: 03:27:1c:0b:06:da:fa:83:d6:82:9b:23:e9:c6:7a:e5:80:77: 92:ab:15:60:a6:29:e9:6e:65:b2:80:49:dd:06:b1:36:2b:a5: b6:b4:b6:c7:41:4b:3f:48:f3:91:f4:1a:9c:ea:a6:3d:d8:4c: 1b:54:04:10:17:8d:6b:7b:94:a6:69:93:38:5d:06:13:ae:b8: f4:fa:97:46:b6:bc:25:8a:11:e7:24:c0:d1:87:3f:41:73:61: 4c:8c:a4:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVBQTgxMTAvBgNVBAUTKEQwNENCMUUyNzE1Nzg2OEY3NEYzNkQ3MDc5MTVEOUQ3 RjA5N0M5MDgwHhcNMjUwNDI1MDIyNDIzWhcNMjUwNTAyMDIyNDIzWjAYMRYwFAYD VQQDEw02ODBhZjI1OC02NjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLKatAlZQ1yy0onZyUGEWh2YOApXM8iHNtFvb5Rp8hm+hTGPUp5WlbNoi8za R/09uJpiAeOr+VF4XGoibNTD8BTm+W5Gj3g0gOIuAnML72VqaVowArXA0ohU2Ll1 8ZDVspKWi8Fn1X/NdrSO2p5vdwxzS3Dh0JwG1QLdEj3NioYxp/pG1jAXVOgGa105 4H5zvsrs3cWjSZKmcRlene0AXE4wMck1hX6xlotYdPDF74NQNNuNR8ddSDVB5vvZ 75Qj4/t8JD0d+ZnOdOt9qSX0nxRaeKDkXtkx5dpIz+vBrRbKX+2ZVA0gJuyyCFyr /egKMpSAsFUC2w0f0Kb9STa7YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1fvD19 ReXq0nvbGo1xkApiv9CQMB8GA1UdIwQYMBaAFNBMseJxV4aPdPNtcHkV2dfwl8kI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUFBOC8yNzg1OTkxMjkx RUYxMUVEQjA2QkFEMUZDNEY5QUUwMi8wRXl4NG5GWGhvOTA4MjF3ZVJYWjFfQ1h5 UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBFeXg0bkZYaG85MDgyMXdlUlhaMV9DWHlRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUFBOC8yNzg1OTkxMjkxRUYxMUVEQjA2QkFEMUZDNEY5QUUwMi8wRXl4NG5GWGhv OTA4MjF3ZVJYWjFfQ1h5UWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz4m6uFOJjk7Is+iMdLAEn4QO3tsOFrRIW7YLyQ06KcXyGcfZLqmgs gVA2P/zfo+oCKeVoff2cVGCbjaXq9w3jTFnagVxHx1ItfWI6BfqeK3f0yiiXZLVY 9PR8cgsu1bF+BsIAg8NlP0p2A/1lvVfwIFVypmcrjqHFHu5xtv/zfhX78TIWu/nU XSqO4NKmaVUKL3vfYsts5Q5Ga8cMWJS5rxsDJxwLBtr6g9aCmyPpxnrlgHeSqxVg pinpbmWygEndBrE2K6W2tLbHQUs/SPOR9Bqc6qY92EwbVAQQF41re5SmaZM4XQYT rrj0+pdGtrwlihHnJMDRhz9Bc2FMjKTl -----END CERTIFICATE-----Generated at Sat Apr 26 05:15:54 2025 by rpki-client