$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB9FC/2D1AB836595C11EFBB07C44FC4F9AE02/eT80tql6t1A1WBv90ICDiTOrPwM.mft File: eT80tql6t1A1WBv90ICDiTOrPwM.mft (raw, json) Hash identifier: +ud7HPt4bmyd1+j74xqzJGVhWYGmXT6XukT+hvRaq5E= Subject key identifier: 18:28:59:F7:50:49:BB:69:8D:BC:44:21:0C:67:5E:94:7D:79:40:91 Authority key identifier: 79:3F:34:B6:A9:7A:B7:50:35:58:1B:FD:D0:80:83:89:33:AB:3F:03 Certificate issuer: /CN=A91EB9FC/serialNumber=793F34B6A97AB75035581BFDD080838933AB3F03 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eT80tql6t1A1WBv90ICDiTOrPwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB9FC/2D1AB836595C11EFBB07C44FC4F9AE02/eT80tql6t1A1WBv90ICDiTOrPwM.mft Manifest number: A3 Signing time: Fri 13 Jun 2025 05:09:21 +0000 Manifest this update: Fri 13 Jun 2025 05:09:21 +0000 Manifest next update: Fri 20 Jun 2025 05:09:21 +0000 Files and hashes: 1: eT80tql6t1A1WBv90ICDiTOrPwM.crl (hash: awIgneNvtN5e0UVzJoTfLt3rO6I08csdufsvC8/L+XM=) 2: 20E7CCE2595D11EF90E23670C4F9AE02.roa (hash: u2oQCfujekc2CkfkL8oYEg3qrwIogCmjgXuusuY8hmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB9FC/2D1AB836595C11EFBB07C44FC4F9AE02/eT80tql6t1A1WBv90ICDiTOrPwM.crl rsync://rpki.apnic.net/member_repository/A91EB9FC/2D1AB836595C11EFBB07C44FC4F9AE02/eT80tql6t1A1WBv90ICDiTOrPwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eT80tql6t1A1WBv90ICDiTOrPwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:09:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB9FC, serialNumber=793F34B6A97AB75035581BFDD080838933AB3F03 Validity Not Before: Jun 13 05:09:21 2025 GMT Not After : Jun 20 05:09:21 2025 GMT Subject: CN=684bb281-9ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:41:cc:c5:38:a9:74:b9:d0:2c:fb:70:f5:bc: b8:91:6a:ba:57:57:1e:10:ed:31:e6:8d:f7:7a:44: ab:50:a1:a6:f2:70:c1:4e:b3:9a:a8:00:bd:6a:9a: 03:a0:1c:61:b9:18:1e:14:12:10:da:30:f4:0e:cb: bc:53:50:50:84:13:d7:e8:cc:6d:d7:88:bf:8e:e6: 10:6a:d5:a6:b2:c1:92:e5:44:93:c9:c6:7e:1c:05: f5:07:8c:bb:f7:83:5d:7f:ad:f9:5e:d8:66:38:cd: 01:ed:3c:e5:10:88:99:ee:0c:f4:b6:84:5a:fa:04: 3e:96:ba:60:13:0e:6c:66:32:07:21:22:51:99:09: 43:09:2b:c7:35:f0:e6:62:b4:5e:ce:62:3f:73:0a: 2c:0c:bd:21:da:1a:cf:76:70:05:e1:98:f3:ac:8f: 5c:00:0d:95:d9:73:c0:1f:52:5f:8f:fc:3d:a3:c1: ec:56:a8:f7:a9:5c:74:77:75:a9:8e:13:81:f9:6e: e6:87:f9:d5:82:38:7f:52:14:07:39:39:31:f0:1a: 8e:c4:36:f0:e2:ce:b1:fc:30:24:e1:37:c8:f2:ba: fa:8f:c7:7b:b2:41:9a:28:c8:22:66:2e:d7:af:0c: 6a:ad:89:fa:e8:f1:3e:2f:b9:d4:b1:62:3f:83:62: 6e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:28:59:F7:50:49:BB:69:8D:BC:44:21:0C:67:5E:94:7D:79:40:91 X509v3 Authority Key Identifier: keyid:79:3F:34:B6:A9:7A:B7:50:35:58:1B:FD:D0:80:83:89:33:AB:3F:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB9FC/2D1AB836595C11EFBB07C44FC4F9AE02/eT80tql6t1A1WBv90ICDiTOrPwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eT80tql6t1A1WBv90ICDiTOrPwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB9FC/2D1AB836595C11EFBB07C44FC4F9AE02/eT80tql6t1A1WBv90ICDiTOrPwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:26:8e:d8:8b:4f:9e:08:a1:26:c5:6c:df:36:9f:21:17:2a: 0d:5f:f5:98:2c:35:05:87:e1:e8:8f:89:35:df:c6:f0:bb:e7: 12:3d:58:c6:4f:c6:51:57:b4:be:e1:03:60:10:57:04:db:5c: 84:0b:f4:ee:44:53:4d:97:c1:43:ca:a3:55:45:32:9e:87:71: e3:b0:9f:b9:ad:ef:23:09:4a:e4:d9:ce:a5:54:44:6e:0b:e9: 98:59:58:05:bb:21:b9:52:23:e4:62:1a:c8:e2:70:e5:dc:2e: dc:01:93:84:b9:da:9f:fd:09:d6:95:0d:8a:83:af:58:2c:ce: d1:b0:3a:a8:be:1b:8f:fb:40:9a:76:5d:75:d0:e2:63:d8:cc: 7c:03:95:91:5e:5c:66:ec:69:ab:fc:f1:6a:dd:f2:48:ce:7d: 06:40:e0:aa:46:2c:29:49:b2:58:e6:fd:c1:55:3c:d0:9e:a6: 1e:9d:f9:9f:54:10:5f:28:82:39:ae:36:a8:ed:20:87:2a:f1: 36:64:4d:10:eb:9a:b8:00:d5:5e:8b:6f:39:27:3b:a1:13:cf: 26:d2:20:da:c5:3a:0e:40:c0:37:db:b6:c1:f6:eb:6a:89:16: 79:30:4f:4f:7f:a6:10:4d:4f:aa:a1:53:23:b6:a0:e9:5d:4c: 06:36:4d:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI5RkMxMTAvBgNVBAUTKDc5M0YzNEI2QTk3QUI3NTAzNTU4MUJGREQwODA4Mzg5 MzNBQjNGMDMwHhcNMjUwNjEzMDUwOTIxWhcNMjUwNjIwMDUwOTIxWjAYMRYwFAYD VQQDEw02ODRiYjI4MS05Y2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7EHMxTipdLnQLPtw9by4kWq6V1ceEO0x5o33ekSrUKGm8nDBTrOaqAC9apoD oBxhuRgeFBIQ2jD0Dsu8U1BQhBPX6Mxt14i/juYQatWmssGS5USTycZ+HAX1B4y7 94Ndf635XthmOM0B7TzlEIiZ7gz0toRa+gQ+lrpgEw5sZjIHISJRmQlDCSvHNfDm YrRezmI/cwosDL0h2hrPdnAF4ZjzrI9cAA2V2XPAH1Jfj/w9o8HsVqj3qVx0d3Wp jhOB+W7mh/nVgjh/UhQHOTkx8BqOxDbw4s6x/DAk4TfI8rr6j8d7skGaKMgiZi7X rwxqrYn66PE+L7nUsWI/g2JuawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgoWfdQ SbtpjbxEIQxnXpR9eUCRMB8GA1UdIwQYMBaAFHk/NLaperdQNVgb/dCAg4kzqz8D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjlGQy8yRDFBQjgzNjU5 NUMxMUVGQkIwN0M0NEZDNEY5QUUwMi9lVDgwdHFsNnQxQTFXQnY5MElDRGlUT3JQ d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VUODB0cWw2dDFBMVdCdjkwSUNEaVRPclB3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjlGQy8yRDFBQjgzNjU5NUMxMUVGQkIwN0M0NEZDNEY5QUUwMi9lVDgwdHFsNnQx QTFXQnY5MElDRGlUT3JQd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0Jo7Yi0+eCKEmxWzfNp8hFyoNX/WYLDUFh+Hoj4k138bwu+cSPVjG T8ZRV7S+4QNgEFcE21yEC/TuRFNNl8FDyqNVRTKeh3HjsJ+5re8jCUrk2c6lVERu C+mYWVgFuyG5UiPkYhrI4nDl3C7cAZOEudqf/QnWlQ2Kg69YLM7RsDqovhuP+0Ca dl110OJj2Mx8A5WRXlxm7Gmr/PFq3fJIzn0GQOCqRiwpSbJY5v3BVTzQnqYenfmf VBBfKII5rjao7SCHKvE2ZE0Q65q4ANVei285JzuhE88m0iDaxToOQMA327bB9utq iRZ5ME9Pf6YQTU+qoVMjtqDpXUwGNk0g -----END CERTIFICATE-----Generated at Sat Jun 14 18:54:35 2025 by rpki-client