$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft File: epirabcrqsZmDlTdHG2KBi4s0v4.mft (raw, json) Hash identifier: ZqZQsZHDHhFuWnqE9htZalmCXD0MbOA9/WqK5qE4fgU= Subject key identifier: 49:70:C1:F8:76:C0:2E:10:09:53:6C:55:EB:C7:0E:A3:2F:EA:5B:3E Authority key identifier: 7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE Certificate issuer: /CN=A91E6038/serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE Certificate serial: 035B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft Manifest number: 0356 Signing time: Fri 25 Apr 2025 00:45:46 +0000 Manifest this update: Fri 25 Apr 2025 00:45:45 +0000 Manifest next update: Fri 02 May 2025 00:45:45 +0000 Files and hashes: 1: epirabcrqsZmDlTdHG2KBi4s0v4.crl (hash: LA863vjeYo0cp4E7yLRxTYYpSMxLG3IbylB4HjJzC9E=) 2: 7ABCBB70AFFE11ECA52DBA5DC4F9AE02.roa (hash: lDraqThqAp2VTAeBcGzfKiHZ4mgdJ9Pve9y5JAjucic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:45:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 859 (0x35b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6038, serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE Validity Not Before: Apr 25 00:45:45 2025 GMT Not After : May 2 00:45:45 2025 GMT Subject: CN=680adb3a-3d5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:97:92:98:ff:85:c5:24:34:78:b1:bc:7f:44: 1d:31:b1:f3:db:2d:3e:e7:fb:86:66:12:12:1d:9b: b5:d5:89:b4:1e:93:d5:99:9d:b5:60:4e:03:c7:1b: 8a:70:fe:19:f5:5b:1c:81:93:40:31:bc:94:4b:89: 9c:e2:81:06:63:b2:fe:88:98:78:f4:46:71:00:70: d7:72:a9:12:ae:03:ff:5d:db:c1:04:ff:65:48:30: 49:8a:21:01:d1:05:24:1f:e7:90:5c:0d:8c:2b:92: 9e:d0:87:51:67:0a:f5:77:9a:ae:6a:db:3d:fc:f3: 2f:d2:a6:15:89:9a:c0:d5:ce:50:f4:ca:c5:a6:15: 35:df:6b:f4:69:54:bb:3d:45:38:6b:61:92:67:37: 1a:5d:05:fd:f3:a0:7a:71:5a:44:6b:34:67:a8:57: 01:db:e6:94:0c:50:cc:01:ba:38:8c:57:33:32:dc: 41:f4:d8:f7:d3:c2:42:0e:e1:62:c5:87:f5:2b:69: b7:d2:76:57:0f:79:2c:1b:6d:a7:71:99:88:9e:14: 97:15:07:d2:e7:3d:85:24:bc:c3:6e:72:9c:18:b5: 76:ab:73:d3:87:4d:53:96:34:78:05:66:70:8e:e2: df:57:1d:35:5c:1d:0c:c3:66:9e:ba:a0:42:03:b3: 93:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:70:C1:F8:76:C0:2E:10:09:53:6C:55:EB:C7:0E:A3:2F:EA:5B:3E X509v3 Authority Key Identifier: keyid:7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e6:05:8a:9d:ae:39:6e:c9:18:de:4b:64:6c:d5:d9:ef:2f: a4:c0:83:f8:a6:28:10:eb:35:f9:0b:09:93:cd:ac:37:27:52: 35:61:0b:87:69:52:e9:cd:2e:1d:33:1e:0d:8d:16:c7:94:c5: 9a:53:f6:ad:2c:3a:cc:06:ab:4a:7c:54:42:14:9c:dd:51:5e: e1:21:8c:c2:84:fc:58:5f:84:49:5c:bd:2c:6a:49:3c:12:35: 11:50:28:e6:32:dd:33:08:0d:98:02:e7:95:8d:32:e3:f4:83: 29:a3:72:2e:db:35:43:ca:0f:1d:7a:fe:2e:df:2c:1f:5c:9c: 2c:9a:f6:12:db:1e:9f:fe:88:bf:e8:cb:80:9a:4c:87:0c:27: a2:7f:9f:27:91:06:bc:a7:98:00:9a:24:f3:05:34:22:fd:95: 5a:1e:6d:dd:0d:8e:47:20:62:46:cb:b7:29:84:50:fb:16:8f: be:f7:fa:44:87:a0:7e:62:af:16:8b:b8:61:62:ac:ce:7d:7e: e8:03:12:39:fd:f0:58:77:a0:93:b2:fa:d5:d5:22:47:27:ff: 02:1e:e9:39:b1:f7:4a:48:80:1d:5a:1a:34:a0:bf:63:f8:07: 58:9a:4f:6d:db:3d:1d:d6:60:43:b7:98:1c:61:88:80:fd:5f: c3:7e:cc:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYwMzgxMTAvBgNVBAUTKDdBOThBQjY5QjcyQkFBQzY2NjBFNTRERDFDNkQ4QTA2 MkUyQ0QyRkUwHhcNMjUwNDI1MDA0NTQ1WhcNMjUwNTAyMDA0NTQ1WjAYMRYwFAYD VQQDEw02ODBhZGIzYS0zZDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZeSmP+FxSQ0eLG8f0QdMbHz2y0+5/uGZhISHZu11Ym0HpPVmZ21YE4DxxuK cP4Z9VscgZNAMbyUS4mc4oEGY7L+iJh49EZxAHDXcqkSrgP/XdvBBP9lSDBJiiEB 0QUkH+eQXA2MK5Ke0IdRZwr1d5quats9/PMv0qYViZrA1c5Q9MrFphU132v0aVS7 PUU4a2GSZzcaXQX986B6cVpEazRnqFcB2+aUDFDMAbo4jFczMtxB9Nj308JCDuFi xYf1K2m30nZXD3ksG22ncZmInhSXFQfS5z2FJLzDbnKcGLV2q3PTh01TljR4BWZw juLfVx01XB0Mw2aeuqBCA7OTBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFElwwfh2 wC4QCVNsVevHDqMv6ls+MB8GA1UdIwQYMBaAFHqYq2m3K6rGZg5U3RxtigYuLNL+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjAzOC85MUUwQzg1MkFG RkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFzWm1EbFRkSEcyS0JpNHMw djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwaXJhYmNycXNabURsVGRIRzJLQmk0czB2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjAzOC85MUUwQzg1MkFGRkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFz Wm1EbFRkSEcyS0JpNHMwdjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA65gWKna45bskY3ktkbNXZ7y+kwIP4pigQ6zX5CwmTzaw3J1I1YQuH aVLpzS4dMx4NjRbHlMWaU/atLDrMBqtKfFRCFJzdUV7hIYzChPxYX4RJXL0sakk8 EjURUCjmMt0zCA2YAueVjTLj9IMpo3Iu2zVDyg8dev4u3ywfXJwsmvYS2x6f/oi/ 6MuAmkyHDCeif58nkQa8p5gAmiTzBTQi/ZVaHm3dDY5HIGJGy7cphFD7Fo++9/pE h6B+Yq8Wi7hhYqzOfX7oAxI5/fBYd6CTsvrV1SJHJ/8CHuk5sfdKSIAdWho0oL9j +AdYmk9t2z0d1mBDt5gcYYiA/V/Dfsw4 -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:51 2025 by rpki-client