$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft File: ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft (raw, json) Hash identifier: RtGoZfaQ3guAsXroPvN7TfuVJB5Jd0sT9ctd6P08VUE= Subject key identifier: C1:F5:22:4E:FB:86:D3:FF:E0:F8:21:56:9A:72:02:0E:34:D6:B3:83 Authority key identifier: 7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60 Certificate issuer: /CN=A91A5DC1/serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160 Certificate serial: 06FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft Manifest number: 06FF Signing time: Fri 16 May 2025 21:02:19 +0000 Manifest this update: Fri 16 May 2025 21:02:19 +0000 Manifest next update: Fri 23 May 2025 21:02:19 +0000 Files and hashes: 1: ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl (hash: UoZuRTKJIAef/4b05LhANGZ2jeu4P+bnWQe6kGXeWiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 21:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1791 (0x6ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5DC1, serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160 Validity Not Before: May 16 21:02:19 2025 GMT Not After : May 23 21:02:19 2025 GMT Subject: CN=6827a7db-7e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a9:33:5c:c5:6b:8d:00:2d:bf:e2:c0:39:84: d8:65:46:6f:99:94:06:05:69:fa:8f:4c:17:51:08: 0f:94:85:21:f2:a8:40:98:25:40:a4:3e:d0:62:68: 34:2a:de:e3:a8:f2:3d:c9:f1:aa:74:b6:9b:5e:72: 90:c9:6a:49:05:47:fa:de:c1:c8:5c:9c:4d:fa:3a: 0c:f6:2d:9a:e4:97:19:fa:0b:c9:83:70:0e:ba:d5: c2:cd:3a:ed:32:3c:cd:58:44:2e:24:91:d3:30:f5: 2a:1b:2f:f1:43:2f:74:c4:bf:56:21:11:eb:fe:5a: f5:1f:cd:e5:a1:82:ae:be:a7:89:fb:8d:18:59:c2: 99:52:71:a3:92:fd:2a:54:e6:9c:42:d8:5c:38:94: f8:ab:98:11:fe:97:a8:df:9a:92:57:f5:80:62:88: 6d:07:54:69:a7:0d:ab:80:b5:d5:fa:1d:b0:68:94: 6a:d6:62:4b:7a:c3:b5:e8:12:ba:5b:a9:3b:d7:e9: 4d:ba:61:66:c6:02:eb:5c:b4:69:c1:7c:ba:a2:4b: df:59:f9:ec:a8:68:db:f8:f5:9b:29:9f:57:c5:c8: e0:a3:35:97:f1:f2:8a:08:25:68:4a:80:5c:09:32: bf:71:28:d7:33:08:47:e5:ac:f5:ac:72:89:b8:e3: 42:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F5:22:4E:FB:86:D3:FF:E0:F8:21:56:9A:72:02:0E:34:D6:B3:83 X509v3 Authority Key Identifier: keyid:7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:d2:76:c8:de:79:91:5f:b9:52:59:e5:a5:03:c5:a9:c2:f8: ad:78:35:19:40:83:5b:d7:59:30:01:36:80:d6:98:5c:77:43: e4:74:23:75:78:1b:66:e0:48:4d:50:6e:97:7e:b1:2d:c2:74: dd:ea:6f:67:fc:db:c8:b2:8f:0a:cc:4b:58:fd:e1:11:ee:dd: 78:75:4e:21:83:ee:1f:27:52:f9:2f:d4:ad:2d:21:af:a8:95: eb:f1:c5:e3:28:59:88:35:90:4e:1e:19:32:a7:29:91:77:c9: cf:e2:5e:2c:f7:23:df:95:18:e8:cc:df:94:5f:a2:a7:32:84: af:26:df:a3:df:bd:e2:55:6d:bc:4f:f9:b0:33:8e:ed:5a:45: 61:1f:cf:1d:6b:1c:8c:25:4a:ea:b4:28:58:7e:d1:f5:13:ea: aa:23:e8:06:f1:7b:a1:28:8c:fa:d7:ff:50:e6:b9:92:a2:c5: b5:b9:41:0d:3f:a3:6b:1c:06:a2:be:c4:a2:e2:27:ac:04:91: c2:45:d9:0b:74:c2:dc:8f:bd:b1:59:5a:66:58:64:8a:6b:55: b4:78:96:3a:b5:a0:fd:b7:36:69:8a:cb:a5:3d:10:5a:53:3f: ce:f8:5d:45:dc:f4:f2:e2:5b:e5:07:52:f1:0a:05:71:14:80: e3:7f:71:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVEQzExMTAvBgNVBAUTKDdBOURBNDYxRUJFQkQxNTMxNjQyMDczOUM4OUVDNEND RUU5OUMxNjAwHhcNMjUwNTE2MjEwMjE5WhcNMjUwNTIzMjEwMjE5WjAYMRYwFAYD VQQDEw02ODI3YTdkYi03ZTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqkzXMVrjQAtv+LAOYTYZUZvmZQGBWn6j0wXUQgPlIUh8qhAmCVApD7QYmg0 Kt7jqPI9yfGqdLabXnKQyWpJBUf63sHIXJxN+joM9i2a5JcZ+gvJg3AOutXCzTrt MjzNWEQuJJHTMPUqGy/xQy90xL9WIRHr/lr1H83loYKuvqeJ+40YWcKZUnGjkv0q VOacQthcOJT4q5gR/peo35qSV/WAYohtB1Rppw2rgLXV+h2waJRq1mJLesO16BK6 W6k71+lNumFmxgLrXLRpwXy6okvfWfnsqGjb+PWbKZ9XxcjgozWX8fKKCCVoSoBc CTK/cSjXMwhH5az1rHKJuONCxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMH1Ik77 htP/4PghVppyAg401rODMB8GA1UdIwQYMBaAFHqdpGHr69FTFkIHOciexMzumcFg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNURDMS80MTNBODkyNDQ1 ODExMUVCOEUwRTc0MkNDNEY5QUUwMi9lcDJrWWV2cjBWTVdRZ2M1eUo3RXpPNlp3 V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwMmtZZXZyMFZNV1FnYzV5SjdFek82WndXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NURDMS80MTNBODkyNDQ1ODExMUVCOEUwRTc0MkNDNEY5QUUwMi9lcDJrWWV2cjBW TVdRZ2M1eUo3RXpPNlp3V0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD0nbI3nmRX7lSWeWlA8WpwviteDUZQINb11kwATaA1phcd0PkdCN1 eBtm4EhNUG6XfrEtwnTd6m9n/NvIso8KzEtY/eER7t14dU4hg+4fJ1L5L9StLSGv qJXr8cXjKFmINZBOHhkypymRd8nP4l4s9yPflRjozN+UX6KnMoSvJt+j373iVW28 T/mwM47tWkVhH88daxyMJUrqtChYftH1E+qqI+gG8XuhKIz61/9Q5rmSosW1uUEN P6NrHAaivsSi4iesBJHCRdkLdMLcj72xWVpmWGSKa1W0eJY6taD9tzZpisulPRBa Uz/O+F1F3PTy4lvlB1LxCgVxFIDjf3Es -----END CERTIFICATE-----Generated at Sat May 17 10:42:52 2025 by rpki-client