$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft File: EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft (raw, json) Hash identifier: CffOWtIqnir0hAXqC1gI0AnQREC6rr3/JIRzJ9hFhtM= Subject key identifier: 5A:BC:21:4E:E7:81:41:28:81:DA:19:B7:4B:A1:DE:3F:97:8D:66:FB Authority key identifier: 12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75 Certificate issuer: /CN=A91AB72F/serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375 Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft Manifest number: 9C Signing time: Fri 09 May 2025 05:21:01 +0000 Manifest this update: Fri 09 May 2025 05:21:01 +0000 Manifest next update: Fri 16 May 2025 05:21:01 +0000 Files and hashes: 1: EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl (hash: 8+X6NjktvUnTndZ5gbn9Bc/8209JedQYAzJVLQKx7go=) 2: 79F48DAAED0711EFA7332931C4F9AE02.roa (hash: GLbMFy1JbyAVM7u4jQAEv8xQTj/rbFbdkkf2ZQWfsOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 05:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB72F, serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375 Validity Not Before: May 9 05:21:01 2025 GMT Not After : May 16 05:21:01 2025 GMT Subject: CN=681d90bd-adbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5f:e0:5b:82:0e:4b:ca:ea:5e:de:e4:67:47: 55:a8:94:29:5a:1f:cc:c0:5c:df:ad:73:2c:5a:e2: 5a:6d:fd:f3:30:bb:01:6d:2b:1a:06:ec:9e:69:31: 9e:ac:ed:db:40:65:29:d9:ad:5a:9f:48:e2:e4:81: df:e9:c6:07:cf:49:40:33:13:3f:30:74:95:f1:0b: 48:0e:58:a3:4d:ce:58:8c:d6:b6:63:68:4f:a2:07: b2:4b:07:1c:94:8d:f4:4d:92:c6:b4:80:64:e0:d0: be:eb:81:ed:64:8e:dd:13:32:da:1d:89:bd:de:a7: b5:04:e9:2d:eb:27:1f:7d:1b:02:6b:4d:95:75:60: 7e:84:a3:e3:b3:06:43:14:8c:7b:78:a2:1c:8c:a5: 9f:8d:37:6c:8e:58:af:05:83:11:19:e4:2f:7e:0c: 67:7a:12:91:1c:d7:91:9e:8f:de:90:c2:30:e7:6d: 95:5f:76:fb:93:b3:5c:3d:a8:be:26:98:36:fc:c2: 3a:86:6b:f6:98:08:02:db:26:0f:cb:91:9c:a2:2b: e7:4f:86:8c:79:43:1a:31:1f:95:96:e4:9d:34:2e: d3:31:92:9a:5d:e2:cc:66:e8:7f:d9:94:b5:b2:bb: 74:17:9e:ac:5b:72:03:f7:ff:0d:8f:88:e6:ee:d2: ad:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BC:21:4E:E7:81:41:28:81:DA:19:B7:4B:A1:DE:3F:97:8D:66:FB X509v3 Authority Key Identifier: keyid:12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:f8:b7:58:58:56:50:52:3f:eb:ef:3a:8c:69:dd:ba:a8:0c: a4:35:05:cc:59:bf:0d:68:e4:83:71:2a:61:c0:74:69:57:1a: c6:7b:b4:02:c6:b5:90:ea:04:76:a3:75:cd:d2:4f:0f:76:5f: 43:89:46:48:c5:21:a3:43:24:a2:d7:dc:2d:3c:f6:26:d6:75: ee:b8:f1:12:aa:ff:c8:cb:a8:08:c4:62:30:48:63:bb:c8:c8: 8e:05:2a:d0:65:ed:d3:ce:62:21:6a:29:09:b5:10:9f:0e:93: 8e:a8:ad:d8:e5:78:92:e6:6f:5a:f7:94:63:16:a7:ff:36:2b: 30:8b:7e:7b:fa:68:0a:51:77:94:d8:3d:b7:5a:54:ff:c7:87: b2:b9:a3:ac:68:e7:85:9e:c8:a5:4c:f1:85:91:ed:ab:a5:1a: e9:c5:e7:7a:2a:7b:fd:fb:11:cc:db:43:41:8c:e7:1e:16:d3: 04:8f:17:7a:32:5d:a0:78:9f:76:33:4a:0a:43:31:d3:bd:56: e7:61:e0:04:4f:83:e7:bb:17:02:d0:e3:83:7e:64:a7:27:c3: 05:71:8a:07:c6:63:eb:aa:53:1c:d0:7e:cf:00:c5:70:bb:19: 06:9a:c8:54:da:8b:1a:e9:96:4b:35:d9:64:ad:19:49:17:80: c2:1a:64:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI3MkYxMTAvBgNVBAUTKDEyNDQ3ODVENDBDNUVDNThERkM0QTMyODU0MEYxQjM5 M0RFQTIzNzUwHhcNMjUwNTA5MDUyMTAxWhcNMjUwNTE2MDUyMTAxWjAYMRYwFAYD VQQDEw02ODFkOTBiZC1hZGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1/gW4IOS8rqXt7kZ0dVqJQpWh/MwFzfrXMsWuJabf3zMLsBbSsaBuyeaTGe rO3bQGUp2a1an0ji5IHf6cYHz0lAMxM/MHSV8QtIDlijTc5YjNa2Y2hPogeySwcc lI30TZLGtIBk4NC+64HtZI7dEzLaHYm93qe1BOkt6ycffRsCa02VdWB+hKPjswZD FIx7eKIcjKWfjTdsjlivBYMRGeQvfgxnehKRHNeRno/ekMIw522VX3b7k7NcPai+ Jpg2/MI6hmv2mAgC2yYPy5GcoivnT4aMeUMaMR+VluSdNC7TMZKaXeLMZuh/2ZS1 srt0F56sW3ID9/8Nj4jm7tKtbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFq8IU7n gUEogdoZt0uh3j+XjWb7MB8GA1UdIwQYMBaAFBJEeF1AxexY38SjKFQPGzk96iN1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjcyRi8yRkI0OUIzRTQz RDExMUVGOEJFOEQ4N0JDNEY5QUUwMi9Fa1I0WFVERjdGamZ4S01vVkE4Yk9UM3FJ M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VrUjRYVURGN0ZqZnhLTW9WQThiT1QzcUkzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjcyRi8yRkI0OUIzRTQzRDExMUVGOEJFOEQ4N0JDNEY5QUUwMi9Fa1I0WFVERjdG amZ4S01vVkE4Yk9UM3FJM1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx+LdYWFZQUj/r7zqMad26qAykNQXMWb8NaOSDcSphwHRpVxrGe7QC xrWQ6gR2o3XN0k8Pdl9DiUZIxSGjQySi19wtPPYm1nXuuPESqv/Iy6gIxGIwSGO7 yMiOBSrQZe3TzmIhaikJtRCfDpOOqK3Y5XiS5m9a95RjFqf/Niswi357+mgKUXeU 2D23WlT/x4eyuaOsaOeFnsilTPGFke2rpRrpxed6Knv9+xHM20NBjOceFtMEjxd6 Ml2geJ92M0oKQzHTvVbnYeAET4PnuxcC0OODfmSnJ8MFcYoHxmPrqlMc0H7PAMVw uxkGmshU2osa6ZZLNdlkrRlJF4DCGmQT -----END CERTIFICATE-----Generated at Sat May 10 08:41:35 2025 by rpki-client