$ rpki-client -vvf rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft File: EEz4cGO16r803k4l_s6ata9zbBQ.mft (raw, json) Hash identifier: +FhrZjupK0si8Bead4hwRGHSNKB+UtLRLw1uP0aOEqQ= Subject key identifier: 90:00:83:88:C6:FC:43:8F:4D:ED:B1:10:0A:38:31:F9:66:AE:9A:49 Authority key identifier: 10:4C:F8:70:63:B5:EA:BF:34:DE:4E:25:FE:CE:9A:B5:AF:73:6C:14 Certificate issuer: /CN=A9111FFD/serialNumber=104CF87063B5EABF34DE4E25FECE9AB5AF736C14 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft Manifest number: 3D Signing time: Tue 13 May 2025 06:46:55 +0000 Manifest this update: Tue 13 May 2025 06:46:54 +0000 Manifest next update: Tue 20 May 2025 06:46:54 +0000 Files and hashes: 1: EEz4cGO16r803k4l_s6ata9zbBQ.crl (hash: H7ZL6Cr9AxyQ1XLB/li2wsXGs4JYBNH8ApoDCQOuF1M=) 2: 7BF6BA42E91A11EF804C4B57C4F9AE02.roa (hash: HNlYiglg+bBDY8hf2XbMc61T9NCbbnRV5gfydPimiu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.crl rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:46:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111FFD, serialNumber=104CF87063B5EABF34DE4E25FECE9AB5AF736C14 Validity Not Before: May 13 06:46:54 2025 GMT Not After : May 20 06:46:54 2025 GMT Subject: CN=6822eadf-e173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:88:19:07:25:6f:d6:92:a8:de:44:36:7b:77: 18:b1:78:c6:36:73:a8:90:7a:8a:6e:7d:d3:3b:89: 34:30:1c:01:bc:78:6c:4f:da:3a:4b:86:67:62:1f: e1:f4:86:39:1a:61:61:df:f7:24:57:f0:16:c4:44: ff:22:b7:c1:b1:b4:26:1d:f8:87:c3:ae:60:df:9b: c5:18:ea:77:a7:ff:78:6e:b0:52:d3:18:ea:67:0d: 52:33:f7:05:a3:7e:60:f1:1e:6b:ba:a3:c7:f6:b3: 80:0b:c5:c0:92:5b:0b:cc:ae:91:86:63:c2:ad:8c: 54:b4:18:76:aa:c2:e3:db:7e:2e:ef:1c:35:96:9d: 92:22:ee:22:7e:05:72:97:02:93:41:e6:b7:bd:69: a1:e6:4e:be:65:01:5b:d4:ae:02:3f:1a:8d:90:9c: 6a:a1:6d:e0:1d:20:91:c2:37:28:3f:b9:62:c4:13: 08:75:60:28:16:fe:ae:4d:4e:6d:0d:be:23:a2:00: 0e:e1:42:fb:29:81:a6:23:df:78:a2:d5:88:2f:91: 20:f2:94:d9:c2:e7:f8:95:f0:55:77:5e:ac:49:dd: df:27:21:12:e7:42:2a:cb:9e:e8:79:d4:63:5d:8a: a1:44:34:99:c8:11:5e:ca:20:11:f3:aa:77:ba:bb: b7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:00:83:88:C6:FC:43:8F:4D:ED:B1:10:0A:38:31:F9:66:AE:9A:49 X509v3 Authority Key Identifier: keyid:10:4C:F8:70:63:B5:EA:BF:34:DE:4E:25:FE:CE:9A:B5:AF:73:6C:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:d1:18:ff:03:a7:2f:eb:3c:3f:89:5b:f7:b4:e5:8e:6d:14: 3b:a0:40:a2:1a:98:31:df:4c:97:8b:58:3d:a5:90:bf:fa:b1: 10:e0:d2:aa:cc:19:74:d3:c7:e7:f2:c1:58:1f:cb:39:79:44: 63:79:37:00:64:98:30:d9:2b:8a:f9:c0:f9:1a:2a:b8:9b:57: 3f:ac:5f:f8:77:67:29:4e:e0:76:56:1a:c6:dd:b7:09:ec:79: a1:f3:e5:0b:10:96:ff:ba:b0:ae:e8:f5:a8:ca:d6:92:6b:06: b7:6b:63:fd:54:32:15:3f:eb:a4:0f:ce:64:20:da:75:8d:1d: d7:4e:47:63:8d:7b:59:46:e9:85:0b:16:b4:b8:4f:9b:e3:7c: a2:b5:cc:46:0c:ac:1b:71:d4:d5:c6:28:0f:6c:ac:55:27:33: 7d:98:f0:63:00:a2:6b:df:e0:9a:99:d2:44:5a:d6:ec:48:00: f8:8b:60:b6:5a:4a:20:ef:ea:bc:f7:fe:db:18:a0:95:1a:4f: 14:7a:50:ec:c6:13:b2:a9:b8:e2:53:9c:b3:9f:29:30:16:e1: cd:aa:18:8f:e3:e3:22:7f:8b:3c:47:89:19:24:4c:b7:37:14: a9:84:8b:80:6c:34:ff:01:67:82:0d:75:cb:f9:dc:91:6f:32: 58:54:e1:df -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MUZGRDExMC8GA1UEBRMoMTA0Q0Y4NzA2M0I1RUFCRjM0REU0RTI1RkVDRTlBQjVB RjczNkMxNDAeFw0yNTA1MTMwNjQ2NTRaFw0yNTA1MjAwNjQ2NTRaMBgxFjAUBgNV BAMTDTY4MjJlYWRmLWUxNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLiBkHJW/WkqjeRDZ7dxixeMY2c6iQeopufdM7iTQwHAG8eGxP2jpLhmdiH+H0 hjkaYWHf9yRX8BbERP8it8GxtCYd+IfDrmDfm8UY6nen/3husFLTGOpnDVIz9wWj fmDxHmu6o8f2s4ALxcCSWwvMrpGGY8KtjFS0GHaqwuPbfi7vHDWWnZIi7iJ+BXKX ApNB5re9aaHmTr5lAVvUrgI/Go2QnGqhbeAdIJHCNyg/uWLEEwh1YCgW/q5NTm0N viOiAA7hQvspgaYj33ii1YgvkSDylNnC5/iV8FV3XqxJ3d8nIRLnQirLnuh51GNd iqFENJnIEV7KIBHzqne6u7eBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkACDiMb8 Q49N7bEQCjgx+WaumkkwHwYDVR0jBBgwFoAUEEz4cGO16r803k4l/s6ata9zbBQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExRkZELzQyRUIwNTM0REQz ODExRUY5QzM0Njc0NUM0RjlBRTAyL0VFejRjR08xNnI4MDNrNGxfczZhdGE5emJC US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRUV6NGNHTzE2cjgwM2s0bF9zNmF0YTl6YkJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx RkZELzQyRUIwNTM0REQzODExRUY5QzM0Njc0NUM0RjlBRTAyL0VFejRjR08xNnI4 MDNrNGxfczZhdGE5emJCUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGLRGP8Dpy/rPD+JW/e05Y5tFDugQKIamDHfTJeLWD2lkL/6sRDg0qrM GXTTx+fywVgfyzl5RGN5NwBkmDDZK4r5wPkaKribVz+sX/h3ZylO4HZWGsbdtwns eaHz5QsQlv+6sK7o9ajK1pJrBrdrY/1UMhU/66QPzmQg2nWNHddOR2ONe1lG6YUL FrS4T5vjfKK1zEYMrBtx1NXGKA9srFUnM32Y8GMAomvf4JqZ0kRa1uxIAPiLYLZa SiDv6rz3/tsYoJUaTxR6UOzGE7KpuOJTnLOfKTAW4c2qGI/j4yJ/izxHiRkkTLc3 FKmEi4BsNP8BZ4INdcv53JFvMlhU4d8= -----END CERTIFICATE-----Generated at Tue May 13 16:07:00 2025 by rpki-client