$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft File: eekj1QaVf9MN0m1ieTubQPj-iVY.mft (raw, json) Hash identifier: Z8cVKtnY4EsNeT3Ld18+YA/RCDunas2Fs8xnZi6EuSE= Subject key identifier: C5:76:31:61:73:88:E3:0F:9E:E2:23:20:EF:A1:7B:AA:60:79:A3:79 Authority key identifier: 79:E9:23:D5:06:95:7F:D3:0D:D2:6D:62:79:3B:9B:40:F8:FE:89:56 Certificate issuer: /CN=A916C4A5/serialNumber=79E923D506957FD30DD26D62793B9B40F8FE8956 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft Manifest number: 5F Signing time: Tue 13 May 2025 06:17:28 +0000 Manifest this update: Tue 13 May 2025 06:17:27 +0000 Manifest next update: Tue 20 May 2025 06:17:27 +0000 Files and hashes: 1: eekj1QaVf9MN0m1ieTubQPj-iVY.crl (hash: prtTy3tP2uH+W1vanO8+crUFXYglbqr5xy9I9eYOMQQ=) 2: FB82BBA0A24B11EFA8802F31C4F9AE02.roa (hash: FNLMkJsV83Bt0X7SmIILDAhrnYAAJNH2tKMHd6lYZGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.crl rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:17:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4A5, serialNumber=79E923D506957FD30DD26D62793B9B40F8FE8956 Validity Not Before: May 13 06:17:27 2025 GMT Not After : May 20 06:17:27 2025 GMT Subject: CN=6822e3f7-c968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0f:e0:43:cb:9a:07:56:ef:de:b5:37:2f:e1: 9e:34:19:14:c8:7b:45:47:e6:97:5d:9e:e9:99:c6: ad:7e:7e:66:db:27:b5:5d:fb:2c:ed:1a:80:67:10: 82:d0:5e:f2:d8:1c:6f:42:4c:e6:1f:b0:ae:7d:9e: 6d:76:74:af:75:3e:6e:53:2d:b5:f0:3d:18:3b:59: 3a:9d:f6:5c:b4:25:7e:f5:28:db:40:bc:ee:c8:39: d5:bb:7a:81:97:4b:f0:51:8c:25:97:f1:6c:f9:f0: df:25:6b:6c:c9:a0:5d:82:98:05:a1:73:37:59:03: 9e:0c:d4:58:1f:bf:0e:3c:42:83:ce:40:5f:f0:bf: 47:38:74:1b:da:0e:d0:d9:da:2e:05:9c:79:53:e9: 23:1b:1c:fb:50:e5:64:d2:b5:8d:9e:ea:9b:01:25: 87:28:12:60:72:25:89:7b:6c:8e:47:42:9b:7f:1d: 27:a1:1a:fc:83:5c:24:d2:40:32:a5:7f:50:4a:0d: 13:12:2d:58:71:e6:5d:f2:e9:06:12:1d:c1:ed:6f: a2:84:62:5e:9e:64:62:59:9c:e2:41:e5:f9:d6:35: 4e:9a:c1:49:19:42:af:ac:5b:38:d3:67:ec:cf:e0: 25:6d:3b:4a:61:bb:b1:10:5a:81:de:8a:6d:b1:e4: 4b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:76:31:61:73:88:E3:0F:9E:E2:23:20:EF:A1:7B:AA:60:79:A3:79 X509v3 Authority Key Identifier: keyid:79:E9:23:D5:06:95:7F:D3:0D:D2:6D:62:79:3B:9B:40:F8:FE:89:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:d2:16:13:d4:ff:6f:f5:d9:00:c3:a6:73:d3:ab:c5:46:f3: 87:bc:6f:e5:c1:af:91:8c:06:66:0d:a4:ac:b3:d0:bf:da:43: b3:5f:d3:d8:ff:18:de:5b:02:b1:f4:88:f3:c7:60:11:76:b9: 4b:7d:56:3c:c9:6e:f8:92:d9:73:00:0a:26:24:52:cc:13:46: 58:9c:40:c8:95:d1:55:b9:87:f7:96:29:3c:cb:2c:bb:02:4c: 3f:34:2b:c5:01:de:79:89:be:7e:e4:eb:96:44:99:a6:89:62: 43:0b:db:1a:27:36:56:36:59:b7:26:8c:8b:08:8e:4b:d2:25: ee:35:3f:a8:71:75:1a:82:65:27:d9:99:92:df:e4:54:4d:9d: 70:9f:0d:e6:64:66:a7:3b:f7:d9:cd:a6:29:70:35:58:17:47: 13:c2:b2:b1:9d:3a:2a:08:1e:59:0a:b4:dd:4a:c2:7c:1d:ac: 96:d5:2d:56:7b:bd:6e:75:e6:50:58:30:7e:cc:8f:27:c6:a6: 80:d7:c3:0a:03:b9:b5:2f:b3:92:7a:55:b2:84:53:b2:ec:10: a1:7a:95:77:e2:00:7f:1f:e2:fc:61:1f:c2:13:17:03:b5:52: 45:a8:f8:89:0b:ba:e0:2a:65:71:43:50:90:6a:28:57:e5:7e: 97:5e:38:a6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QzRBNTExMC8GA1UEBRMoNzlFOTIzRDUwNjk1N0ZEMzBERDI2RDYyNzkzQjlCNDBG OEZFODk1NjAeFw0yNTA1MTMwNjE3MjdaFw0yNTA1MjAwNjE3MjdaMBgxFjAUBgNV BAMTDTY4MjJlM2Y3LWM5NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbD+BDy5oHVu/etTcv4Z40GRTIe0VH5pddnumZxq1+fmbbJ7Vd+yztGoBnEILQ XvLYHG9CTOYfsK59nm12dK91Pm5TLbXwPRg7WTqd9ly0JX71KNtAvO7IOdW7eoGX S/BRjCWX8Wz58N8la2zJoF2CmAWhczdZA54M1Fgfvw48QoPOQF/wv0c4dBvaDtDZ 2i4FnHlT6SMbHPtQ5WTStY2e6psBJYcoEmByJYl7bI5HQpt/HSehGvyDXCTSQDKl f1BKDRMSLVhx5l3y6QYSHcHtb6KEYl6eZGJZnOJB5fnWNU6awUkZQq+sWzjTZ+zP 4CVtO0phu7EQWoHeim2x5EsvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxXYxYXOI 4w+e4iMg76F7qmB5o3kwHwYDVR0jBBgwFoAUeekj1QaVf9MN0m1ieTubQPj+iVYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDNEE1L0M3M0EzODk0QTIz NDExRUY5NzhDOEQ2REM0RjlBRTAyL2Vla2oxUWFWZjlNTjBtMWllVHViUVBqLWlW WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZWVrajFRYVZmOU1OMG0xaWVUdWJRUGotaVZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD NEE1L0M3M0EzODk0QTIzNDExRUY5NzhDOEQ2REM0RjlBRTAyL2Vla2oxUWFWZjlN TjBtMWllVHViUVBqLWlWWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIbSFhPU/2/12QDDpnPTq8VG84e8b+XBr5GMBmYNpKyz0L/aQ7Nf09j/ GN5bArH0iPPHYBF2uUt9VjzJbviS2XMACiYkUswTRlicQMiV0VW5h/eWKTzLLLsC TD80K8UB3nmJvn7k65ZEmaaJYkML2xonNlY2WbcmjIsIjkvSJe41P6hxdRqCZSfZ mZLf5FRNnXCfDeZkZqc799nNpilwNVgXRxPCsrGdOioIHlkKtN1KwnwdrJbVLVZ7 vW515lBYMH7MjyfGpoDXwwoDubUvs5J6VbKEU7LsEKF6lXfiAH8f4vxhH8ITFwO1 UkWo+IkLuuAqZXFDUJBqKFflfpdeOKY= -----END CERTIFICATE-----Generated at Tue May 13 23:10:05 2025 by rpki-client