$ rpki-client -vvf rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft File: EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft (raw, json) Hash identifier: cGLE8DwEsJGW0PzAxnDRalNyp8ZVk/2d+65XGHPL3fQ= Subject key identifier: 0E:CF:4A:F3:11:47:C3:A9:01:66:48:6C:9C:58:96:05:BC:E9:C1:9E Authority key identifier: 11:8F:92:98:59:0C:79:87:9A:A1:D8:FC:6D:17:F6:65:45:4B:CB:B9 Certificate issuer: /CN=A911A1FC/serialNumber=118F9298590C79879AA1D8FC6D17F665454BCBB9 Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft Manifest number: 0113 Signing time: Sun 11 May 2025 03:43:01 +0000 Manifest this update: Sun 11 May 2025 03:43:00 +0000 Manifest next update: Sun 18 May 2025 03:43:00 +0000 Files and hashes: 1: EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl (hash: afpLcqsZl0Oc9hH9/JIOqIfkOQTvSQwMt8BJbYHdddI=) 2: 1D5E8EB6887B11EE8981CE28C4F9AE02.roa (hash: r83+P5wwwiIwwYZo3ZZK7LMVTjywGsoMBTEhdRdJ9rc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A1FC, serialNumber=118F9298590C79879AA1D8FC6D17F665454BCBB9 Validity Not Before: May 11 03:43:00 2025 GMT Not After : May 18 03:43:00 2025 GMT Subject: CN=68201cc4-6d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f9:66:9d:22:d0:27:69:79:d8:b7:de:ea:46: 9b:6f:92:c9:dc:b2:22:dd:d6:56:4d:43:c4:3a:60: 4a:16:54:bb:ef:f0:76:38:17:b5:38:af:1f:da:1c: e9:43:ff:fe:fb:19:02:be:10:7f:69:35:f9:ec:90: 7f:11:5d:f6:91:d5:2a:29:cd:cb:35:9b:f9:68:9c: a1:b3:49:9a:8e:61:6b:fc:92:ed:6c:10:d4:2b:01: 46:81:71:81:b6:8b:1f:57:f5:e5:d1:0c:3a:dc:07: 5c:2c:a7:28:84:2e:a9:08:02:26:e1:1f:10:2a:9c: 96:4e:4e:4c:bd:f5:2d:b2:76:e2:2b:85:05:ec:c1: 8b:29:dc:23:d3:d1:6b:e1:4e:46:54:99:c9:7a:7c: e1:64:30:ad:74:38:bc:2c:2d:59:7c:74:6c:83:ba: ec:ae:23:d2:bb:3c:c1:5a:d0:13:fb:de:1b:54:e1: f4:09:4f:69:45:12:81:90:5c:86:17:bb:b2:61:01: 6b:23:2f:51:b0:a8:df:cd:7e:63:87:1a:4e:fa:96: e4:0f:56:ab:63:97:13:4f:8c:3c:ff:3f:08:ca:1a: 86:e8:32:ea:d9:4d:f1:6e:e5:70:db:45:e8:c1:6f: 43:78:e1:58:96:42:36:cc:a1:a7:2c:b6:4b:6a:f2: 60:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CF:4A:F3:11:47:C3:A9:01:66:48:6C:9C:58:96:05:BC:E9:C1:9E X509v3 Authority Key Identifier: keyid:11:8F:92:98:59:0C:79:87:9A:A1:D8:FC:6D:17:F6:65:45:4B:CB:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:9a:cd:4b:fd:7f:6b:1a:46:d0:dc:bf:3a:01:55:4d:be:1b: f0:a6:b0:7d:10:a6:49:4c:ad:c3:3e:87:b8:db:6f:74:e1:b8: 82:5e:ed:f6:c4:3f:05:c1:07:2c:2f:d9:34:ce:9e:5a:ee:4a: 64:c4:2f:26:bd:e5:57:a7:7d:e7:68:26:bc:a6:13:45:4a:e1: 35:d2:ec:37:57:d3:a6:69:fe:bd:f2:2a:5d:51:9f:39:1a:0b: 79:ea:4e:25:62:42:b8:c8:5d:6b:1b:c6:bc:87:63:4a:c5:e7: a9:ef:0f:90:7e:92:d2:4c:4c:76:d6:ed:eb:07:3c:4f:c4:bb: 74:b0:52:c5:de:11:60:f5:28:ab:f3:5c:e3:59:e4:8a:8e:1c: 2f:7c:29:c4:98:c8:0f:65:73:ef:ca:e2:7a:a0:14:8e:b0:21: 9c:4d:13:29:31:07:e2:42:51:7f:b9:3f:02:b5:6c:3d:a6:50: 0e:de:54:33:52:0b:45:14:a7:8f:0b:d7:52:c9:3d:6f:e1:9f: 7f:8e:90:7d:8e:33:f9:b0:89:12:40:e4:95:b6:55:85:aa:cf: 0a:73:70:d5:d3:36:c8:0c:b0:29:36:d6:d6:c0:4c:70:34:ad: 15:51:bf:ee:e1:7c:6d:9f:a3:23:6b:f7:f2:c5:d6:6f:a6:c9: 71:d6:16:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUExRkMxMTAvBgNVBAUTKDExOEY5Mjk4NTkwQzc5ODc5QUExRDhGQzZEMTdGNjY1 NDU0QkNCQjkwHhcNMjUwNTExMDM0MzAwWhcNMjUwNTE4MDM0MzAwWjAYMRYwFAYD VQQDEw02ODIwMWNjNC02ZDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6PlmnSLQJ2l52Lfe6kabb5LJ3LIi3dZWTUPEOmBKFlS77/B2OBe1OK8f2hzp Q//++xkCvhB/aTX57JB/EV32kdUqKc3LNZv5aJyhs0majmFr/JLtbBDUKwFGgXGB tosfV/Xl0Qw63AdcLKcohC6pCAIm4R8QKpyWTk5MvfUtsnbiK4UF7MGLKdwj09Fr 4U5GVJnJenzhZDCtdDi8LC1ZfHRsg7rsriPSuzzBWtAT+94bVOH0CU9pRRKBkFyG F7uyYQFrIy9RsKjfzX5jhxpO+pbkD1arY5cTT4w8/z8IyhqG6DLq2U3xbuVw20Xo wW9DeOFYlkI2zKGnLLZLavJgDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7PSvMR R8OpAWZIbJxYlgW86cGeMB8GA1UdIwQYMBaAFBGPkphZDHmHmqHY/G0X9mVFS8u5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTFGQy84MTkxRkI2Qzg4 N0ExMUVFOURCNDVCMTRDNEY5QUUwMi9FWS1TbUZrTWVZZWFvZGo4YlJmMlpVVkx5 N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VZLVNtRmtNZVllYW9kajhiUmYyWlVWTHk3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTFGQy84MTkxRkI2Qzg4N0ExMUVFOURCNDVCMTRDNEY5QUUwMi9FWS1TbUZrTWVZ ZWFvZGo4YlJmMlpVVkx5N2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXms1L/X9rGkbQ3L86AVVNvhvwprB9EKZJTK3DPoe422904biCXu32 xD8FwQcsL9k0zp5a7kpkxC8mveVXp33naCa8phNFSuE10uw3V9Omaf698ipdUZ85 Ggt56k4lYkK4yF1rG8a8h2NKxeep7w+QfpLSTEx21u3rBzxPxLt0sFLF3hFg9Sir 81zjWeSKjhwvfCnEmMgPZXPvyuJ6oBSOsCGcTRMpMQfiQlF/uT8CtWw9plAO3lQz UgtFFKePC9dSyT1v4Z9/jpB9jjP5sIkSQOSVtlWFqs8Kc3DV0zbIDLApNtbWwExw NK0VUb/u4Xxtn6Mja/fyxdZvpslx1hbj -----END CERTIFICATE-----Generated at Sun May 11 22:17:14 2025 by rpki-client