$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft File: 0eKZ-egsk3yysqaQYegXNB-FCPU.mft (raw, json) Hash identifier: WldxzJZ/GWTC5wbJAaE4Utn8Z2pya/fr6V0TE0zD3jM= Subject key identifier: B8:5F:BA:DF:13:18:FF:6A:ED:33:A2:D5:89:B7:F8:29:46:80:EB:02 Authority key identifier: D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5 Certificate issuer: /CN=A91886CC/serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5 Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft Manifest number: 0185 Signing time: Thu 15 May 2025 03:05:22 +0000 Manifest this update: Thu 15 May 2025 03:05:21 +0000 Manifest next update: Thu 22 May 2025 03:05:21 +0000 Files and hashes: 1: 0eKZ-egsk3yysqaQYegXNB-FCPU.crl (hash: HHsn67YYCxpGGEl+AbUM6LsznKbnt09W19dsuL+8n4k=) 2: 71F97AC0560E11EEA8088470C4F9AE02.roa (hash: M1Z0vPN0xRUeI7aXSO+zgJ15zwwVDL1Npd3KMXS/ZDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:05:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886CC, serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5 Validity Not Before: May 15 03:05:21 2025 GMT Not After : May 22 03:05:21 2025 GMT Subject: CN=682559f1-a3b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2c:20:33:fe:f4:b6:04:cb:e9:50:95:f2:c3: a0:e4:2e:c8:b1:9b:7c:fd:84:98:67:3a:9d:80:15: e8:12:0c:e8:ae:f6:42:95:a6:5a:a9:f3:66:06:55: 5c:b5:57:5e:c7:0a:a7:43:cf:66:52:e4:4a:2f:2d: 5b:2e:ce:dc:9b:21:96:33:8f:bb:86:a8:be:1b:ab: 7f:6a:6c:eb:a8:fb:b5:b8:08:d7:b8:86:12:af:c1: fa:3c:84:e1:83:10:50:26:51:86:14:ff:6e:1d:ed: 64:1d:ca:4f:02:ff:17:df:1f:c0:5f:ea:f8:e0:21: 63:80:25:ae:9f:42:e1:73:df:c7:e2:dd:15:95:92: 73:a9:38:da:0a:77:ca:fd:32:18:53:d1:19:d0:96: e2:5e:df:e4:bf:da:87:54:77:e1:68:b2:ab:4a:ec: d4:1f:8d:2b:d0:b6:db:ef:20:d1:61:8e:6f:75:45: 5f:ba:9f:6e:69:6d:12:a8:db:03:6e:90:75:ec:1a: 78:8a:4a:5c:2a:2d:1e:52:b6:1a:9b:59:22:59:26: 75:85:e1:c6:15:56:4b:78:3c:ad:29:7c:16:cc:1c: bc:60:36:35:dd:22:fe:9f:d8:67:9d:ad:ac:9d:17: 3a:e7:c3:88:44:48:39:92:9e:46:6b:4d:31:1f:47: fd:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:5F:BA:DF:13:18:FF:6A:ED:33:A2:D5:89:B7:F8:29:46:80:EB:02 X509v3 Authority Key Identifier: keyid:D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:85:99:18:a3:e7:3e:ba:4d:28:bb:58:de:7d:61:83:b5:17: 88:00:6f:8e:4c:be:79:0f:9b:f5:a7:cb:84:1a:d3:d0:d9:7d: 4b:9a:aa:b3:e4:af:b0:d4:69:b2:31:be:5c:32:d2:2f:c5:b7: f1:3c:49:d5:27:a0:36:1c:78:0a:3e:d3:96:61:8e:31:98:5b: 29:fe:30:31:d7:fa:b9:6b:3e:82:46:02:fa:14:75:4e:1e:9a: ef:50:6f:a6:40:be:81:96:83:d1:d1:26:20:a9:46:97:a4:76: ef:26:fc:33:a8:9a:68:57:e5:52:a9:75:67:6d:5f:9b:19:b4: 59:e3:40:24:8c:1e:ca:51:03:ea:4b:16:0d:b8:e2:f3:bd:c8: 2f:b6:6f:a0:55:d5:b1:2e:2e:bc:5c:85:8f:f4:1f:d1:6d:ce: fc:4c:ab:bb:f5:2a:08:e7:28:71:05:b6:29:3d:ba:a9:95:d3: cc:10:a8:2c:00:da:df:b3:7d:c8:15:7b:67:c4:be:2a:73:73: b5:4d:d5:a5:cb:cc:2c:54:05:87:88:56:b2:30:9e:09:30:ef: 61:19:0a:76:eb:d3:5a:4d:bd:52:02:fd:3a:5b:1b:3c:21:4e: 4e:b6:f1:20:fd:a4:27:f7:b1:c6:70:e6:9b:85:eb:f9:3e:4a: b0:80:fb:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2Q0MxMTAvBgNVBAUTKEQxRTI5OUY5RTgyQzkzN0NCMkIyQTY5MDYxRTgxNzM0 MUY4NTA4RjUwHhcNMjUwNTE1MDMwNTIxWhcNMjUwNTIyMDMwNTIxWjAYMRYwFAYD VQQDEw02ODI1NTlmMS1hM2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAliwgM/70tgTL6VCV8sOg5C7IsZt8/YSYZzqdgBXoEgzorvZClaZaqfNmBlVc tVdexwqnQ89mUuRKLy1bLs7cmyGWM4+7hqi+G6t/amzrqPu1uAjXuIYSr8H6PITh gxBQJlGGFP9uHe1kHcpPAv8X3x/AX+r44CFjgCWun0Lhc9/H4t0VlZJzqTjaCnfK /TIYU9EZ0JbiXt/kv9qHVHfhaLKrSuzUH40r0Lbb7yDRYY5vdUVfup9uaW0SqNsD bpB17Bp4ikpcKi0eUrYam1kiWSZ1heHGFVZLeDytKXwWzBy8YDY13SL+n9hnna2s nRc658OIREg5kp5Ga00xH0f9eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhfut8T GP9q7TOi1Ym3+ClGgOsCMB8GA1UdIwQYMBaAFNHimfnoLJN8srKmkGHoFzQfhQj1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZDQy80RUE2QzYxOEU4 QkQxMUVEOEI4OTI1MjJDNEY5QUUwMi8wZUtaLWVnc2szeXlzcWFRWWVnWE5CLUZD UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBlS1otZWdzazN5eXNxYVFZZWdYTkItRkNQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZDQy80RUE2QzYxOEU4QkQxMUVEOEI4OTI1MjJDNEY5QUUwMi8wZUtaLWVnc2sz eXlzcWFRWWVnWE5CLUZDUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIhZkYo+c+uk0ou1jefWGDtReIAG+OTL55D5v1p8uEGtPQ2X1Lmqqz 5K+w1GmyMb5cMtIvxbfxPEnVJ6A2HHgKPtOWYY4xmFsp/jAx1/q5az6CRgL6FHVO HprvUG+mQL6BloPR0SYgqUaXpHbvJvwzqJpoV+VSqXVnbV+bGbRZ40AkjB7KUQPq SxYNuOLzvcgvtm+gVdWxLi68XIWP9B/Rbc78TKu79SoI5yhxBbYpPbqpldPMEKgs ANrfs33IFXtnxL4qc3O1TdWly8wsVAWHiFayMJ4JMO9hGQp269NaTb1SAv06Wxs8 IU5OtvEg/aQn97HGcOabhev5PkqwgPvE -----END CERTIFICATE-----Generated at Fri May 16 12:57:59 2025 by rpki-client