$ rpki-client -vvf rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft File: EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft (raw, json) Hash identifier: D0XxE9fTf7sU+o5L4rPd/HCz6Q7kxLka3Wb7OxemBbs= Subject key identifier: 3D:72:15:C1:52:2E:B8:44:2F:A8:66:B4:32:3B:AD:3C:24:4D:E2:00 Authority key identifier: 12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13 Certificate issuer: /CN=A91250FA/serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813 Certificate serial: 0B4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft Manifest number: 0B3C Signing time: Wed 14 May 2025 19:17:05 +0000 Manifest this update: Wed 14 May 2025 19:17:04 +0000 Manifest next update: Wed 21 May 2025 19:17:04 +0000 Files and hashes: 1: EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl (hash: qm+NnT1WZiKf6QH70he3PriOIJbvYjl6wSxoqYReMYc=) 2: 2A08F1A4369211EAA64E320BC4F9AE02.roa (hash: I91qaFQgep6EuuEEdqbhO4Prklw7ndmFH38wo16kLVk=) 3: 5D822954368F11EAB3D4CE7FC4F9AE02.roa (hash: /cS7IVALMe9B/AtpjJXVY/jO3FykqwmgPTZQLz+GjqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2890 (0xb4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91250FA, serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813 Validity Not Before: May 14 19:17:04 2025 GMT Not After : May 21 19:17:04 2025 GMT Subject: CN=6824ec31-395d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:77:9b:90:71:54:a1:1c:cc:cf:b8:cd:96:5c: 3e:d6:99:c8:15:03:ed:71:2f:f9:e1:ce:80:19:aa: a7:2d:ad:00:2a:fc:fc:39:64:e5:13:da:88:07:a1: 69:7b:01:a8:35:e2:34:0d:b1:52:ec:b7:ac:a5:67: 60:29:83:ca:1f:44:00:6d:0f:d9:38:78:e8:d4:e3: 21:82:65:bb:75:40:cb:05:df:80:5f:b1:ef:e8:89: 10:6e:53:af:60:c0:45:d8:a1:43:2c:f3:5c:73:6d: a0:5b:e7:6d:31:0b:41:11:3c:99:b9:ac:2e:ba:a0: ff:cd:87:1f:ac:b4:3e:a7:e2:55:ff:3d:a5:47:05: 21:e3:b6:4b:9f:ec:1e:fd:b2:6c:63:99:17:00:f3: 28:55:a6:ca:69:e2:8c:81:ed:eb:ea:4a:58:7b:42: 7b:3f:d6:98:b9:27:48:ed:26:e9:3a:e9:47:35:86: 71:3d:06:db:f3:55:4b:b8:51:ef:20:0c:42:75:38: 7f:bc:34:22:70:dc:5d:a8:75:ee:ff:0a:77:e3:83: 5e:b8:fe:57:3b:28:41:10:7a:11:1e:16:81:4c:95: e9:97:fd:8f:94:e8:11:58:3c:65:79:2a:3b:11:e5: dc:a7:ee:cf:64:45:cc:2b:2b:78:36:78:18:b3:a4: ac:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:72:15:C1:52:2E:B8:44:2F:A8:66:B4:32:3B:AD:3C:24:4D:E2:00 X509v3 Authority Key Identifier: keyid:12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:49:8a:28:f2:1b:a7:c7:0b:5a:f2:6f:7e:ed:e7:a2:7d:f1: f4:84:84:8d:16:96:71:65:2c:50:4d:42:a0:67:53:39:94:0f: 31:37:61:f2:46:a5:ad:ea:e4:f5:93:0e:b8:e5:c4:ea:b7:e1: bb:75:6d:57:f2:65:20:70:f2:cc:f3:05:d5:29:c4:95:39:bd: 42:9d:2a:76:06:23:ba:32:be:ef:5f:31:64:ef:6e:c2:d3:90: b2:63:c7:54:ce:0d:3b:47:64:b6:d7:ba:77:29:db:ed:18:11: 8f:d4:5f:c4:52:83:eb:a2:74:28:5a:63:ca:6f:01:07:e1:29: d8:4b:67:a7:d8:81:23:30:44:19:09:b7:15:5b:d4:c7:80:c3: 08:73:90:10:eb:eb:d6:69:77:0a:07:a4:e7:a4:32:07:e4:bf: 9b:b1:63:ba:4e:ab:c3:37:19:2b:30:9f:c4:b6:31:c2:ab:0d: 82:17:b1:f1:02:9f:ec:7a:01:21:48:6b:a0:59:bd:5f:e3:bb: 39:29:67:ee:69:ed:eb:d4:e2:fd:cf:96:bc:b2:af:92:5c:b1: e3:e7:3c:b9:57:7f:58:52:d5:ca:b7:1e:b0:1f:ec:db:54:33: c1:f9:ab:cd:46:af:e1:56:12:bc:c0:c9:b0:59:c8:36:06:a9: cb:cc:b7:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUwRkExMTAvBgNVBAUTKDEyODNBMkY0QzdCQTExNzA2QzY2RTE3QkYxQkQzRTk5 NjI3QTE4MTMwHhcNMjUwNTE0MTkxNzA0WhcNMjUwNTIxMTkxNzA0WjAYMRYwFAYD VQQDEw02ODI0ZWMzMS0zOTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2nebkHFUoRzMz7jNllw+1pnIFQPtcS/54c6AGaqnLa0AKvz8OWTlE9qIB6Fp ewGoNeI0DbFS7LespWdgKYPKH0QAbQ/ZOHjo1OMhgmW7dUDLBd+AX7Hv6IkQblOv YMBF2KFDLPNcc22gW+dtMQtBETyZuawuuqD/zYcfrLQ+p+JV/z2lRwUh47ZLn+we /bJsY5kXAPMoVabKaeKMge3r6kpYe0J7P9aYuSdI7SbpOulHNYZxPQbb81VLuFHv IAxCdTh/vDQicNxdqHXu/wp344NeuP5XOyhBEHoRHhaBTJXpl/2PlOgRWDxleSo7 EeXcp+7PZEXMKyt4NngYs6SswQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1yFcFS LrhEL6hmtDI7rTwkTeIAMB8GA1UdIwQYMBaAFBKDovTHuhFwbGbhe/G9PpliehgT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTBGQS9BQUEwRUJFMDM2 OEUxMUVBQTc2OEZDN0VDNEY5QUUwMi9Fb09pOU1lNkVYQnNadUY3OGIwLW1XSjZH Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VvT2k5TWU2RVhCc1p1Rjc4YjAtbVdKNkdCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTBGQS9BQUEwRUJFMDM2OEUxMUVBQTc2OEZDN0VDNEY5QUUwMi9Fb09pOU1lNkVY QnNadUY3OGIwLW1XSjZHQk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzSYoo8hunxwta8m9+7eeiffH0hISNFpZxZSxQTUKgZ1M5lA8xN2Hy RqWt6uT1kw645cTqt+G7dW1X8mUgcPLM8wXVKcSVOb1CnSp2BiO6Mr7vXzFk727C 05CyY8dUzg07R2S217p3KdvtGBGP1F/EUoPronQoWmPKbwEH4SnYS2en2IEjMEQZ CbcVW9THgMMIc5AQ6+vWaXcKB6TnpDIH5L+bsWO6TqvDNxkrMJ/EtjHCqw2CF7Hx Ap/segEhSGugWb1f47s5KWfuae3r1OL9z5a8sq+SXLHj5zy5V39YUtXKtx6wH+zb VDPB+avNRq/hVhK8wMmwWcg2BqnLzLeP -----END CERTIFICATE-----Generated at Fri May 16 13:10:56 2025 by rpki-client