$ rpki-client -vvf rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft File: EVpBYMhVVH2eMQxg09CIy7yamSo.mft (raw, json) Hash identifier: vCe29RM3heGwvReOt2WAz6ogmD88+dyWVvNqPnqHoxE= Subject key identifier: DF:81:BB:7C:C8:20:ED:17:7D:C4:F1:35:35:2C:18:A8:1D:5A:C7:9A Authority key identifier: 11:5A:41:60:C8:55:54:7D:9E:31:0C:60:D3:D0:88:CB:BC:9A:99:2A Certificate issuer: /CN=A91A76AD/serialNumber=115A4160C855547D9E310C60D3D088CBBC9A992A Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft Manifest number: F3 Signing time: Fri 09 May 2025 04:21:07 +0000 Manifest this update: Fri 09 May 2025 04:21:07 +0000 Manifest next update: Fri 16 May 2025 04:21:07 +0000 Files and hashes: 1: EVpBYMhVVH2eMQxg09CIy7yamSo.crl (hash: BjdaqlDLJmkxKBZTedKup4iduJTMHHGR9lfjwb7/qzI=) 2: 26E31278CA3811EEB0C6A436C4F9AE02.roa (hash: YLouRJayszJ+YXIZjA0nYlRHirFmGMZNUS3tAUGchSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.crl rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 04:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A76AD, serialNumber=115A4160C855547D9E310C60D3D088CBBC9A992A Validity Not Before: May 9 04:21:07 2025 GMT Not After : May 16 04:21:07 2025 GMT Subject: CN=681d82b3-bc80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:55:08:e5:a7:9e:0f:37:3e:af:74:81:e4:1f: d0:50:2b:c5:1c:42:1f:bb:30:3d:10:1f:a5:84:b4: 88:2c:31:02:c0:1a:dd:32:df:8d:4f:71:bf:0e:1c: ce:9c:e3:8d:3f:41:f1:cb:ec:fe:dd:3e:9a:e8:4f: bf:32:ec:8b:09:59:b8:10:52:ef:c3:d0:77:50:36: e7:54:50:6a:94:02:9e:39:dc:c8:12:0e:b7:ff:88: c7:48:4b:7f:b3:24:f0:a1:31:d6:db:be:4f:04:2f: 6f:65:49:6b:41:9d:cf:23:5b:3f:66:0e:c5:78:27: 0d:19:3e:79:fa:81:24:28:23:be:17:8e:9a:37:0c: 8e:9b:8e:0a:ec:60:84:cd:16:14:ce:a4:99:7a:bd: 80:d5:48:1b:0e:af:73:73:4c:64:21:ca:20:94:f6: b1:30:38:7f:c1:50:66:3a:01:78:ff:db:00:29:84: 5b:13:5e:c2:d7:6d:12:5c:c5:17:eb:ee:f0:44:bf: 33:19:86:d0:11:34:22:13:97:95:57:50:fa:cd:00: 24:c7:19:2c:42:d5:2d:5c:ec:a9:0f:40:61:82:37: 88:9e:cd:63:62:c7:38:62:44:22:da:92:2d:5e:b5: 44:35:35:14:10:d4:8d:05:68:a6:13:ce:94:17:4e: 04:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:81:BB:7C:C8:20:ED:17:7D:C4:F1:35:35:2C:18:A8:1D:5A:C7:9A X509v3 Authority Key Identifier: keyid:11:5A:41:60:C8:55:54:7D:9E:31:0C:60:D3:D0:88:CB:BC:9A:99:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:f8:5b:05:c3:df:f9:21:19:7e:69:27:62:2c:d5:1e:75:7d: 4f:45:6d:7c:3e:22:0e:f3:89:3f:71:1a:55:e6:2d:95:bd:d1: 48:c1:92:7d:d7:8f:0d:d1:c2:1f:be:a6:c4:f2:99:d0:c9:bd: be:67:4a:a0:c8:50:65:32:64:bc:49:74:ba:c7:78:28:f5:ee: 5c:02:1f:cf:c2:36:27:38:9b:33:89:26:13:50:ce:58:46:20: c3:62:12:06:f7:b6:61:ab:f4:b5:74:9f:00:f3:70:64:2f:05: 9e:4b:37:66:c8:65:8e:a1:1d:c4:f9:bf:36:87:8c:cb:d7:f3: ae:da:19:cb:53:bd:0b:81:2c:97:18:5a:98:f7:7d:44:6f:41: ae:a4:b7:a6:37:9b:3c:3c:e3:b6:1a:58:06:4e:b5:7e:b7:ce: e0:25:94:8e:b7:76:4e:7c:72:86:89:7b:84:f8:98:8f:b2:75: 75:45:a7:d8:22:26:f7:99:f3:a5:8b:99:64:7b:91:2e:ee:54: e5:18:ab:fb:93:0a:33:c2:7e:90:54:f4:31:c2:54:8f:97:b9: 7e:62:b8:72:c4:0f:be:f1:29:c2:58:b9:3d:87:96:fd:07:8f: 87:31:97:db:ad:3d:4b:85:6e:df:1f:1e:64:8f:6d:31:2b:4e: 48:02:df:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc2QUQxMTAvBgNVBAUTKDExNUE0MTYwQzg1NTU0N0Q5RTMxMEM2MEQzRDA4OENC QkM5QTk5MkEwHhcNMjUwNTA5MDQyMTA3WhcNMjUwNTE2MDQyMTA3WjAYMRYwFAYD VQQDEw02ODFkODJiMy1iYzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1UI5aeeDzc+r3SB5B/QUCvFHEIfuzA9EB+lhLSILDECwBrdMt+NT3G/DhzO nOONP0Hxy+z+3T6a6E+/MuyLCVm4EFLvw9B3UDbnVFBqlAKeOdzIEg63/4jHSEt/ syTwoTHW275PBC9vZUlrQZ3PI1s/Zg7FeCcNGT55+oEkKCO+F46aNwyOm44K7GCE zRYUzqSZer2A1UgbDq9zc0xkIcoglPaxMDh/wVBmOgF4/9sAKYRbE17C120SXMUX 6+7wRL8zGYbQETQiE5eVV1D6zQAkxxksQtUtXOypD0BhgjeIns1jYsc4YkQi2pIt XrVENTUUENSNBWimE86UF04E5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+Bu3zI IO0XfcTxNTUsGKgdWseaMB8GA1UdIwQYMBaAFBFaQWDIVVR9njEMYNPQiMu8mpkq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzZBRC9GRUNBNzUwNkJF N0YxMUVFOTY3ODRENjJDNEY5QUUwMi9FVnBCWU1oVlZIMmVNUXhnMDlDSXk3eWFt U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VWcEJZTWhWVkgyZU1ReGcwOUNJeTd5YW1Tby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzZBRC9GRUNBNzUwNkJFN0YxMUVFOTY3ODRENjJDNEY5QUUwMi9FVnBCWU1oVlZI MmVNUXhnMDlDSXk3eWFtU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8+FsFw9/5IRl+aSdiLNUedX1PRW18PiIO84k/cRpV5i2VvdFIwZJ9 148N0cIfvqbE8pnQyb2+Z0qgyFBlMmS8SXS6x3go9e5cAh/PwjYnOJsziSYTUM5Y RiDDYhIG97Zhq/S1dJ8A83BkLwWeSzdmyGWOoR3E+b82h4zL1/Ou2hnLU70LgSyX GFqY931Eb0GupLemN5s8POO2GlgGTrV+t87gJZSOt3ZOfHKGiXuE+JiPsnV1RafY Iib3mfOli5lke5Eu7lTlGKv7kwozwn6QVPQxwlSPl7l+YrhyxA++8SnCWLk9h5b9 B4+HMZfbrT1LhW7fHx5kj20xK05IAt/H -----END CERTIFICATE-----Generated at Sun May 11 04:16:07 2025 by rpki-client