$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft File: EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft (raw, json) Hash identifier: SnHhwc1l1zAezLLNXxodpyKppcc5WMOxtl1CvQBMq3M= Subject key identifier: 45:98:DA:A2:91:4A:0F:BC:09:61:B2:27:65:2D:5E:C7:37:97:4F:2C Authority key identifier: 11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1 Certificate issuer: /CN=A91EA7B2/serialNumber=1156205EC7380A00F10F3410114D040357F00FF1 Certificate serial: 0E01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft Manifest number: 0DF1 Signing time: Thu 24 Apr 2025 17:49:47 +0000 Manifest this update: Thu 24 Apr 2025 17:49:46 +0000 Manifest next update: Thu 01 May 2025 17:49:46 +0000 Files and hashes: 1: EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl (hash: aFeKZnuWm72da1X1zpXDoVPLis/D+35EUocDolP532s=) 2: 14ED07C27B8D11EDB395B621C4F9AE02.roa (hash: QWOTAeLgnWJFAAIChZL1m0e0kICN2c6Ng+tc3RXx8Yg=) 3: E7DFF7B8CA1D11EE8037E217C4F9AE02.roa (hash: tRUYfW/mxJFIRHVM9QsIKc4UoKBg/TdEbDm54bKQfQg=) 4: C145485EAE9A11E9B17AC77EC4F9AE02.roa (hash: agk9fTE0Dhy5dYc90EBQeapRa6cEZ8A1rQ5/CvNJ7LU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3585 (0xe01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA7B2, serialNumber=1156205EC7380A00F10F3410114D040357F00FF1 Validity Not Before: Apr 24 17:49:46 2025 GMT Not After : May 1 17:49:46 2025 GMT Subject: CN=680a79bb-c355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:84:c8:a8:d9:62:bf:a5:d6:31:d4:eb:d3:5f: 2e:49:48:0f:52:99:c1:91:d5:1b:09:ab:08:41:11: f1:ca:98:97:15:00:73:b6:1c:fc:08:9e:b5:13:07: 75:3f:c5:92:66:47:48:93:9c:1c:42:55:13:fa:af: 22:8b:67:12:11:48:f7:85:3a:64:04:83:7f:41:5b: df:14:d8:87:a0:ac:3b:25:a2:b0:b8:52:a1:f9:38: ce:93:60:32:90:9d:b0:2d:4d:13:99:88:ec:dd:dc: f0:a8:90:7e:44:6d:4c:ed:4d:a7:df:ec:69:b6:68: 3f:fa:11:b8:ef:a4:dd:84:d2:fe:3c:e9:b0:af:64: 1f:8f:a2:35:32:a9:39:2d:b7:44:5a:f6:43:c6:6f: f4:cb:0e:f6:8a:9f:bd:2c:a0:f0:d8:cb:b0:06:e4: 4c:0d:b3:1b:8b:c1:46:28:da:c8:d7:3c:f2:c4:e0: 61:b5:49:9b:47:d3:8b:e4:75:5c:7f:f9:5d:04:32: e1:1a:09:48:7e:41:d7:db:2d:d8:fb:8c:8a:e2:b9: 17:79:8f:10:17:f1:cd:6e:b5:48:dd:76:0b:5f:13: 81:c8:89:0c:aa:ba:28:78:28:76:63:69:e2:00:23: c3:db:05:28:28:e4:e6:db:a0:8f:1c:f9:86:2a:7b: 90:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:98:DA:A2:91:4A:0F:BC:09:61:B2:27:65:2D:5E:C7:37:97:4F:2C X509v3 Authority Key Identifier: keyid:11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:ea:3f:1e:97:46:8f:95:b5:c1:b4:79:00:10:90:3e:02:7a: 8a:b4:75:be:fd:5e:ad:fa:0a:85:a5:df:89:aa:79:34:47:79: 78:f7:58:2e:e2:e1:bc:1f:5b:0f:30:60:1e:7a:db:8c:7f:d4: 9c:bb:63:cf:91:6d:e3:be:76:32:c0:1d:c6:b5:e8:52:af:e3: 6a:77:34:36:ff:12:c5:a6:7a:9c:17:9c:ac:5f:2b:cd:bf:07: 58:3f:39:ee:43:a2:dd:cc:e7:f2:c4:60:77:6f:ac:3f:af:e7: e0:2d:83:f1:4c:b2:8d:9a:ae:78:53:85:79:4f:22:41:f5:b6: 60:da:36:24:56:49:29:b8:a2:8e:07:86:b0:a4:c9:48:a1:da: 83:6d:b3:27:a2:38:24:a9:d0:4f:cf:6f:09:38:7b:f6:20:65: 5f:5a:0e:6e:31:96:d6:83:31:52:54:6e:8a:a0:2f:80:50:18: cd:b4:33:43:5e:0e:b7:a9:2d:a2:65:26:e1:7e:8d:8a:97:0f: 0a:21:da:13:de:79:5b:3f:13:ec:b3:cb:fa:7d:d1:56:ed:ae: a0:26:fc:f3:dc:fe:ec:d1:0d:20:ef:e7:8e:5d:50:7a:c6:09: 46:ce:0b:a5:89:a2:0e:90:79:99:ec:0f:eb:63:bd:24:8b:ff: cc:63:b0:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3QjIxMTAvBgNVBAUTKDExNTYyMDVFQzczODBBMDBGMTBGMzQxMDExNEQwNDAz NTdGMDBGRjEwHhcNMjUwNDI0MTc0OTQ2WhcNMjUwNTAxMTc0OTQ2WjAYMRYwFAYD VQQDEw02ODBhNzliYi1jMzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA54TIqNliv6XWMdTr018uSUgPUpnBkdUbCasIQRHxypiXFQBzthz8CJ61Ewd1 P8WSZkdIk5wcQlUT+q8ii2cSEUj3hTpkBIN/QVvfFNiHoKw7JaKwuFKh+TjOk2Ay kJ2wLU0TmYjs3dzwqJB+RG1M7U2n3+xptmg/+hG476TdhNL+POmwr2Qfj6I1Mqk5 LbdEWvZDxm/0yw72ip+9LKDw2MuwBuRMDbMbi8FGKNrI1zzyxOBhtUmbR9OL5HVc f/ldBDLhGglIfkHX2y3Y+4yK4rkXeY8QF/HNbrVI3XYLXxOByIkMqrooeCh2Y2ni ACPD2wUoKOTm26CPHPmGKnuQKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWY2qKR Sg+8CWGyJ2UtXsc3l08sMB8GA1UdIwQYMBaAFBFWIF7HOAoA8Q80EBFNBANX8A/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTdCMi8zRUUzMjM1QUFF OTkxMUU5QUM1MEUxN0JDNEY5QUUwMi9FVllnWHNjNENnRHhEelFRRVUwRUExZndE X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VWWWdYc2M0Q2dEeER6UVFFVTBFQTFmd0RfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTdCMi8zRUUzMjM1QUFFOTkxMUU5QUM1MEUxN0JDNEY5QUUwMi9FVllnWHNjNENn RHhEelFRRVUwRUExZndEX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCE6j8el0aPlbXBtHkAEJA+AnqKtHW+/V6t+gqFpd+Jqnk0R3l491gu 4uG8H1sPMGAeetuMf9Scu2PPkW3jvnYywB3GtehSr+NqdzQ2/xLFpnqcF5ysXyvN vwdYPznuQ6LdzOfyxGB3b6w/r+fgLYPxTLKNmq54U4V5TyJB9bZg2jYkVkkpuKKO B4awpMlIodqDbbMnojgkqdBPz28JOHv2IGVfWg5uMZbWgzFSVG6KoC+AUBjNtDND Xg63qS2iZSbhfo2Klw8KIdoT3nlbPxPss8v6fdFW7a6gJvzz3P7s0Q0g7+eOXVB6 xglGzguliaIOkHmZ7A/rY70ki//MY7D8 -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:02 2025 by rpki-client