$ rpki-client -vvf rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft File: EDki63fZQHF8gZ4oyWZGKUgLvOU.mft (raw, json) Hash identifier: m3sNfg7pRSA/Kw7lnnEVAtmNwwCX4ynd9zJtCa5/8Ds= Subject key identifier: D4:43:31:EC:DD:3D:C1:63:48:87:BA:31:7D:42:4B:1D:CB:FF:06:3A Authority key identifier: 10:39:22:EB:77:D9:40:71:7C:81:9E:28:C9:66:46:29:48:0B:BC:E5 Certificate issuer: /CN=A91A030C/serialNumber=103922EB77D940717C819E28C9664629480BBCE5 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft Manifest number: 2A Signing time: Fri 09 May 2025 06:47:30 +0000 Manifest this update: Fri 09 May 2025 06:47:29 +0000 Manifest next update: Fri 16 May 2025 06:47:29 +0000 Files and hashes: 1: EDki63fZQHF8gZ4oyWZGKUgLvOU.crl (hash: Wh42DttGz+/sibeTj8rg7yV1BhDPFBUWo+LkSfJ6eDY=) 2: 17D98518FD6911EFA889E84DC4F9AE02.roa (hash: TAYiLVNUfBDudM++NA0KlcXDtTA+39+D4En0/M5r2I8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.crl rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 06:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A030C, serialNumber=103922EB77D940717C819E28C9664629480BBCE5 Validity Not Before: May 9 06:47:29 2025 GMT Not After : May 16 06:47:29 2025 GMT Subject: CN=681da502-95de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:5e:5f:46:83:da:5e:14:13:9c:4b:ac:4f:c4: 9a:f0:96:83:2f:2e:07:1c:8a:b3:1a:f5:00:a4:6d: 8a:68:d7:2e:40:d8:ac:5a:ac:6c:2e:ff:0f:a1:bf: 9e:61:08:62:34:19:d3:8a:88:dd:ff:91:76:c5:26: 1a:a1:22:c2:3c:4f:f3:92:2b:e8:02:60:89:78:7b: be:d4:b6:b5:d5:e0:ce:9f:7f:62:7f:61:84:71:ba: 83:b4:e5:8e:dd:f0:7d:5e:25:27:6d:e6:2e:17:2d: fc:28:d1:ac:36:9a:cc:48:59:e6:e6:79:11:d4:b7: 19:79:b8:7a:86:c6:4a:22:e2:61:21:b3:36:1b:b4: 18:70:51:a4:e6:50:af:47:30:55:7d:44:93:e6:71: 49:1d:90:27:08:c8:0a:11:46:1c:3e:83:11:a1:fe: 19:bf:a0:f9:b2:34:ea:43:ba:51:64:71:d6:11:66: 59:e3:9c:3f:aa:e8:66:ee:91:2f:58:4a:24:70:17: 80:86:42:2a:7e:58:96:c1:47:df:af:f5:87:58:a7: ce:32:36:57:90:56:c0:5b:31:a8:dd:b5:08:33:5b: 4a:6d:30:43:71:08:2b:d0:bb:56:eb:cf:2d:24:88: 2b:3d:db:6e:91:d0:92:c5:e9:c9:f7:b2:0c:b1:d4: 19:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:43:31:EC:DD:3D:C1:63:48:87:BA:31:7D:42:4B:1D:CB:FF:06:3A X509v3 Authority Key Identifier: keyid:10:39:22:EB:77:D9:40:71:7C:81:9E:28:C9:66:46:29:48:0B:BC:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:05:84:35:ab:11:4c:7c:90:43:a6:01:0d:83:36:06:4b:14: 8e:dd:25:db:00:bb:a2:80:d9:61:1f:37:e9:13:4c:06:9d:cf: f5:34:ca:e8:6f:65:5a:77:c7:17:7f:f2:23:c4:f8:c7:bb:b4: 57:67:db:dc:19:ce:c3:2d:c4:15:81:0b:bb:2b:21:64:d4:fe: 6c:8f:3f:5d:b3:7b:11:6b:06:21:8f:c9:2e:c9:c8:9d:65:7f: fc:df:31:2c:ad:f9:0f:06:40:24:1a:27:98:25:3b:7c:7f:a7: bf:21:fa:9f:e7:96:f2:a0:ea:b2:d9:b9:a1:82:f7:94:3b:9a: 2f:d6:b1:87:41:52:b8:7b:98:46:52:2b:0a:e7:a0:8b:a8:68: d1:51:b4:b5:5c:15:c1:bd:99:8b:a7:f1:88:5f:f3:46:db:6f: 2a:72:53:c9:46:0b:65:96:9a:f8:8a:62:93:41:6c:d5:b3:9f: 34:21:06:f6:91:20:dc:3f:c1:50:9e:fb:73:dd:a2:38:4d:a8: 9a:b3:cb:b3:8d:fd:d6:2f:b2:7e:33:16:17:e8:d2:3b:c2:23: eb:e6:b2:02:43:ac:24:2f:35:4b:ef:ad:68:74:42:0b:39:04: 3c:93:3c:72:cc:82:63:97:1e:6f:6c:07:a9:55:19:a9:b9:d2: e2:a9:68:3a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDMwQzExMC8GA1UEBRMoMTAzOTIyRUI3N0Q5NDA3MTdDODE5RTI4Qzk2NjQ2Mjk0 ODBCQkNFNTAeFw0yNTA1MDkwNjQ3MjlaFw0yNTA1MTYwNjQ3MjlaMBgxFjAUBgNV BAMTDTY4MWRhNTAyLTk1ZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD9Xl9Gg9peFBOcS6xPxJrwloMvLgccirMa9QCkbYpo1y5A2KxarGwu/w+hv55h CGI0GdOKiN3/kXbFJhqhIsI8T/OSK+gCYIl4e77UtrXV4M6ff2J/YYRxuoO05Y7d 8H1eJSdt5i4XLfwo0aw2msxIWebmeRHUtxl5uHqGxkoi4mEhszYbtBhwUaTmUK9H MFV9RJPmcUkdkCcIyAoRRhw+gxGh/hm/oPmyNOpDulFkcdYRZlnjnD+q6GbukS9Y SiRwF4CGQip+WJbBR9+v9YdYp84yNleQVsBbMajdtQgzW0ptMENxCCvQu1brzy0k iCs9226R0JLF6cn3sgyx1BkNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1EMx7N09 wWNIh7oxfUJLHcv/BjowHwYDVR0jBBgwFoAUEDki63fZQHF8gZ4oyWZGKUgLvOUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwMzBDL0E3MDM2NzAwRjQ3 NjExRUZCRTQ2NkQ3RkM0RjlBRTAyL0VEa2k2M2ZaUUhGOGdaNG95V1pHS1VnTHZP VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRURraTYzZlpRSEY4Z1o0b3lXWkdLVWdMdk9VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw MzBDL0E3MDM2NzAwRjQ3NjExRUZCRTQ2NkQ3RkM0RjlBRTAyL0VEa2k2M2ZaUUhG OGdaNG95V1pHS1VnTHZPVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG0FhDWrEUx8kEOmAQ2DNgZLFI7dJdsAu6KA2WEfN+kTTAadz/U0yuhv ZVp3xxd/8iPE+Me7tFdn29wZzsMtxBWBC7srIWTU/myPP12zexFrBiGPyS7JyJ1l f/zfMSyt+Q8GQCQaJ5glO3x/p78h+p/nlvKg6rLZuaGC95Q7mi/WsYdBUrh7mEZS KwrnoIuoaNFRtLVcFcG9mYun8Yhf80bbbypyU8lGC2WWmviKYpNBbNWznzQhBvaR INw/wVCe+3PdojhNqJqzy7ON/dYvsn4zFhfo0jvCI+vmsgJDrCQvNUvvrWh0Qgs5 BDyTPHLMgmOXHm9sB6lVGam50uKpaDo= -----END CERTIFICATE-----Generated at Sat May 10 08:19:15 2025 by rpki-client