$ rpki-client -vvf rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft File: EESZe8Y6gT2gTBuRiXN0tosEumE.mft (raw, json) Hash identifier: ZJn8PjCy/UbWBQ6Ixsu2xDdcNVBslHupcapgu5fsCpc= Subject key identifier: 26:FD:4C:7D:0D:D1:6D:5E:7A:C2:BA:47:8E:38:07:FE:2E:B6:6A:BC Authority key identifier: 10:44:99:7B:C6:3A:81:3D:A0:4C:1B:91:89:73:74:B6:8B:04:BA:61 Certificate issuer: /CN=A91E87B4/serialNumber=1044997BC63A813DA04C1B91897374B68B04BA61 Certificate serial: 0E4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft Manifest number: 0E42 Signing time: Fri 02 May 2025 17:56:49 +0000 Manifest this update: Fri 02 May 2025 17:56:49 +0000 Manifest next update: Fri 09 May 2025 17:56:49 +0000 Files and hashes: 1: EESZe8Y6gT2gTBuRiXN0tosEumE.crl (hash: Z85zf3KLibdKOIuoW+OjxfI1uUOI9HUoiuvlZfr9BSg=) 2: 6D6DED2830BE11EC9401610CC4F9AE02.roa (hash: WHACvNrcE0YDUYNFLw70C4k+Gn2fGHs4oAn4CLKhehw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.crl rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 17:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3659 (0xe4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E87B4, serialNumber=1044997BC63A813DA04C1B91897374B68B04BA61 Validity Not Before: May 2 17:56:49 2025 GMT Not After : May 9 17:56:49 2025 GMT Subject: CN=68150761-8e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ad:7a:e5:3a:b5:dc:bd:f4:06:9e:a3:64:08: c8:e1:5e:19:9c:d6:66:2f:38:c2:8f:d3:0b:2e:fd: 29:0d:49:7f:47:c0:fa:24:64:45:df:0e:c5:fc:91: 08:d9:b8:e6:d1:2a:a1:1e:7d:93:be:b3:86:1c:76: db:0e:15:9d:5c:44:36:83:29:7a:85:f2:08:b4:fc: c5:6d:ff:22:59:b7:14:54:fb:a8:41:8c:3b:3e:c9: d0:39:2b:a8:cf:07:7e:e0:8d:8a:aa:cc:68:3d:0f: 57:46:40:e6:b5:2b:4b:ec:95:fd:0f:af:9b:b5:6f: db:23:9e:3e:f6:3d:e0:74:e4:d0:85:62:7c:18:ab: b1:ca:74:10:7a:3b:75:e2:b5:b1:c6:39:d1:87:8c: be:cc:ff:14:b8:32:c5:14:8e:0b:5d:a9:ab:f0:d5: e4:08:75:62:5e:c3:f5:34:6f:25:66:30:da:68:05: eb:3e:b1:46:14:8b:42:82:78:02:57:87:29:b6:8b: 5f:7e:92:ba:b5:ef:be:e5:80:c7:6a:1d:a4:7c:59: 07:3e:5d:68:17:bc:10:f4:39:28:ff:44:90:9e:6c: fe:3a:57:96:e0:48:2e:c6:3f:c3:fa:bf:57:e9:ba: 19:70:74:9b:cf:b7:63:f4:c7:87:0b:71:b8:8d:a6: 49:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:FD:4C:7D:0D:D1:6D:5E:7A:C2:BA:47:8E:38:07:FE:2E:B6:6A:BC X509v3 Authority Key Identifier: keyid:10:44:99:7B:C6:3A:81:3D:A0:4C:1B:91:89:73:74:B6:8B:04:BA:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:89:3d:ff:8e:40:66:0e:0a:ab:0b:24:68:1a:47:43:dc:d5: 99:d1:c7:a1:7c:41:b1:0d:20:f8:2d:cf:17:60:27:47:19:93: 52:b2:a6:b5:36:9f:6c:52:d9:87:54:36:6a:6c:01:22:4a:7e: 73:e3:8d:20:c2:13:2a:2f:73:61:36:19:7c:80:3d:56:da:21: fd:57:2d:25:f1:9b:99:3d:6c:d2:97:18:33:7c:7a:46:ef:80: 75:ec:bf:f5:ec:b3:3f:55:ac:75:63:84:5d:27:e6:8e:00:58: e7:e2:77:d0:58:17:4b:fb:75:ac:96:ff:d6:cc:d4:2c:22:66: da:f4:b0:9c:07:63:5b:02:be:14:aa:74:6c:65:68:a7:91:7f: 4d:3d:bd:53:09:c1:25:3d:c6:e1:fb:44:8b:25:e5:c9:61:e2: b4:b0:1c:af:59:f8:9a:cb:fe:b8:df:70:ef:1b:dc:2b:47:f5: 56:13:50:06:87:19:9b:01:4a:4b:f2:54:e2:52:e4:72:4c:17: 39:ef:b6:6d:83:8e:48:53:01:c6:fa:e8:75:d0:03:5c:4a:e7: 5a:6b:69:d8:42:f5:44:c3:37:a4:2a:40:4a:f3:b3:b3:79:5a: ba:54:5e:2e:5f:cc:89:6d:da:b9:f6:31:f1:fe:4c:c0:28:58: a5:dc:97:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg3QjQxMTAvBgNVBAUTKDEwNDQ5OTdCQzYzQTgxM0RBMDRDMUI5MTg5NzM3NEI2 OEIwNEJBNjEwHhcNMjUwNTAyMTc1NjQ5WhcNMjUwNTA5MTc1NjQ5WjAYMRYwFAYD VQQDEw02ODE1MDc2MS04ZTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2q165Tq13L30Bp6jZAjI4V4ZnNZmLzjCj9MLLv0pDUl/R8D6JGRF3w7F/JEI 2bjm0SqhHn2TvrOGHHbbDhWdXEQ2gyl6hfIItPzFbf8iWbcUVPuoQYw7PsnQOSuo zwd+4I2KqsxoPQ9XRkDmtStL7JX9D6+btW/bI54+9j3gdOTQhWJ8GKuxynQQejt1 4rWxxjnRh4y+zP8UuDLFFI4LXamr8NXkCHViXsP1NG8lZjDaaAXrPrFGFItCgngC V4cptotffpK6te++5YDHah2kfFkHPl1oF7wQ9Dko/0SQnmz+OleW4Eguxj/D+r9X 6boZcHSbz7dj9MeHC3G4jaZJZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCb9TH0N 0W1eesK6R444B/4utmq8MB8GA1UdIwQYMBaAFBBEmXvGOoE9oEwbkYlzdLaLBLph MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODdCNC8zNjA4OTIyMDlE OUExMUU5QUU5Qzg4NUFDNEY5QUUwMi9FRVNaZThZNmdUMmdUQnVSaVhOMHRvc0V1 bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VFU1plOFk2Z1QyZ1RCdVJpWE4wdG9zRXVtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODdCNC8zNjA4OTIyMDlEOUExMUU5QUU5Qzg4NUFDNEY5QUUwMi9FRVNaZThZNmdU MmdUQnVSaVhOMHRvc0V1bUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHiT3/jkBmDgqrCyRoGkdD3NWZ0cehfEGxDSD4Lc8XYCdHGZNSsqa1 Np9sUtmHVDZqbAEiSn5z440gwhMqL3NhNhl8gD1W2iH9Vy0l8ZuZPWzSlxgzfHpG 74B17L/17LM/Vax1Y4RdJ+aOAFjn4nfQWBdL+3Wslv/WzNQsImba9LCcB2NbAr4U qnRsZWinkX9NPb1TCcElPcbh+0SLJeXJYeK0sByvWfiay/6433DvG9wrR/VWE1AG hxmbAUpL8lTiUuRyTBc577Ztg45IUwHG+uh10ANcSudaa2nYQvVEwzekKkBK87Oz eVq6VF4uX8yJbdq59jHx/kzAKFil3JcM -----END CERTIFICATE-----Generated at Sat May 3 08:50:09 2025 by rpki-client