$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft File: eLB7yieVuFKmVslAPke8uKvgelo.mft (raw, json) Hash identifier: oubNon/ndmi1Mssn+4XgaMxFxHzYRKJBggUSYPN82Xk= Subject key identifier: 3B:4D:13:B9:EF:33:EF:12:9F:0F:3A:95:CE:69:01:08:45:CF:D5:64 Authority key identifier: 78:B0:7B:CA:27:95:B8:52:A6:56:C9:40:3E:47:BC:B8:AB:E0:7A:5A Certificate issuer: /CN=A91B0380/serialNumber=78B07BCA2795B852A656C9403E47BCB8ABE07A5A Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eLB7yieVuFKmVslAPke8uKvgelo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft Manifest number: 77 Signing time: Tue 13 May 2025 05:56:20 +0000 Manifest this update: Tue 13 May 2025 05:56:20 +0000 Manifest next update: Tue 20 May 2025 05:56:20 +0000 Files and hashes: 1: eLB7yieVuFKmVslAPke8uKvgelo.crl (hash: qAb+qqKko1EZJ4HbRuO6oOEGgCQGdcdQcnqP0jKzNok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.crl rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eLB7yieVuFKmVslAPke8uKvgelo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0380, serialNumber=78B07BCA2795B852A656C9403E47BCB8ABE07A5A Validity Not Before: May 13 05:56:20 2025 GMT Not After : May 20 05:56:20 2025 GMT Subject: CN=6822df04-2aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c2:35:e2:5f:3b:8a:9b:23:94:d2:ba:89:31: 88:9a:fa:85:c4:d3:c7:3d:c1:bc:74:36:4d:92:a0: af:96:78:78:dd:1b:ef:13:05:ac:11:6e:e6:4c:c8: 5f:2e:61:d5:71:6d:d2:37:61:b8:7f:9c:1c:f8:51: eb:a3:71:9c:20:ab:26:41:29:71:95:b5:37:3c:00: da:16:9a:d9:6c:a0:00:7d:b6:95:61:d1:67:54:17: 68:ae:33:43:ad:7c:53:1f:e4:ed:26:4e:7e:73:93: 83:c9:66:3f:18:21:ca:61:ba:0e:fa:8f:e1:cb:ab: 0c:66:e8:d9:6e:37:d1:12:e6:4f:75:c0:2a:80:91: 2d:d2:58:47:60:37:8c:b1:d2:7d:57:ad:8c:2b:f3: 50:90:fb:3f:4c:bb:03:b9:b1:bc:8e:4a:ca:d5:2c: c0:b3:79:a5:59:11:d7:b5:a1:1d:4b:5a:55:d6:31: d1:47:d0:39:77:c6:8a:5f:42:b3:92:e0:ae:bd:b7: a8:d9:83:19:4f:21:2d:93:aa:9a:48:ab:87:0b:ad: 4a:6e:e1:36:f0:53:48:47:7c:09:13:26:61:25:f7: c3:f1:c6:7e:d7:d5:bb:66:c5:54:7d:93:f5:1b:a3: e2:2a:d5:4f:3f:de:8a:00:04:2e:02:dc:76:b8:d9: 49:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4D:13:B9:EF:33:EF:12:9F:0F:3A:95:CE:69:01:08:45:CF:D5:64 X509v3 Authority Key Identifier: keyid:78:B0:7B:CA:27:95:B8:52:A6:56:C9:40:3E:47:BC:B8:AB:E0:7A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eLB7yieVuFKmVslAPke8uKvgelo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:e3:18:5b:ed:e0:67:5f:1e:97:30:94:6e:2f:31:05:d1:90: 98:02:0a:94:3f:b0:5e:1a:34:fc:79:cc:73:4f:d5:a2:8f:bf: ae:6f:14:e0:f8:a5:f2:42:14:0b:93:61:1b:bb:c3:4d:d1:06: c8:7d:5a:33:90:7f:03:30:78:0b:7b:2a:b8:65:43:e7:ea:d3: bb:90:ba:18:6d:d0:97:0d:05:9b:71:7c:c6:5b:3c:90:00:0d: 9e:f4:cc:b2:c8:85:4d:5a:e3:96:0d:d7:b9:23:04:ab:f6:46: 12:95:55:6b:60:c2:a9:0c:a4:41:59:e7:6c:1a:3a:83:53:6c: e5:74:27:be:8e:0f:df:1a:cb:2d:51:f9:76:6a:5d:1b:68:72: 57:13:3e:77:90:97:12:54:09:4f:1a:e5:e0:d2:5e:6e:bc:d9: 39:61:7c:0d:50:77:d3:46:88:0a:fd:95:c2:15:3c:a0:01:16: 3c:f6:3b:b8:16:01:98:30:3b:e6:8a:96:e4:f6:e9:72:24:55: 3c:d3:ae:8c:6e:cd:a9:8f:80:c8:11:98:61:2b:8c:14:c7:e0: 4d:62:ac:3b:92:3f:77:fd:6d:a3:0d:3a:a0:8c:ac:cd:86:9e: ec:ad:d6:59:7a:b9:06:af:03:63:67:59:99:ab:32:5d:0f:10: 14:62:06:b9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MDM4MDExMC8GA1UEBRMoNzhCMDdCQ0EyNzk1Qjg1MkE2NTZDOTQwM0U0N0JDQjhB QkUwN0E1QTAeFw0yNTA1MTMwNTU2MjBaFw0yNTA1MjAwNTU2MjBaMBgxFjAUBgNV BAMTDTY4MjJkZjA0LTJhYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCwjXiXzuKmyOU0rqJMYia+oXE08c9wbx0Nk2SoK+WeHjdG+8TBawRbuZMyF8u YdVxbdI3Ybh/nBz4UeujcZwgqyZBKXGVtTc8ANoWmtlsoAB9tpVh0WdUF2iuM0Ot fFMf5O0mTn5zk4PJZj8YIcphug76j+HLqwxm6NluN9ES5k91wCqAkS3SWEdgN4yx 0n1XrYwr81CQ+z9MuwO5sbyOSsrVLMCzeaVZEde1oR1LWlXWMdFH0Dl3xopfQrOS 4K69t6jZgxlPIS2TqppIq4cLrUpu4TbwU0hHfAkTJmEl98Pxxn7X1btmxVR9k/Ub o+Iq1U8/3ooABC4C3Ha42UmDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUO00Tue8z 7xKfDzqVzmkBCEXP1WQwHwYDVR0jBBgwFoAUeLB7yieVuFKmVslAPke8uKvgelow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIwMzgwLzZFNkUzNjAwN0JD QjExRUZBMjQ4OTIxMUM0RjlBRTAyL2VMQjd5aWVWdUZLbVZzbEFQa2U4dUt2Z2Vs by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZUxCN3lpZVZ1RkttVnNsQVBrZTh1S3ZnZWxvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIw MzgwLzZFNkUzNjAwN0JDQjExRUZBMjQ4OTIxMUM0RjlBRTAyL2VMQjd5aWVWdUZL bVZzbEFQa2U4dUt2Z2Vsby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADDjGFvt4GdfHpcwlG4vMQXRkJgCCpQ/sF4aNPx5zHNP1aKPv65vFOD4 pfJCFAuTYRu7w03RBsh9WjOQfwMweAt7KrhlQ+fq07uQuhht0JcNBZtxfMZbPJAA DZ70zLLIhU1a45YN17kjBKv2RhKVVWtgwqkMpEFZ52waOoNTbOV0J76OD98ayy1R +XZqXRtoclcTPneQlxJUCU8a5eDSXm682TlhfA1Qd9NGiAr9lcIVPKABFjz2O7gW AZgwO+aKluT26XIkVTzTroxuzamPgMgRmGErjBTH4E1irDuSP3f9baMNOqCMrM2G nuyt1ll6uQavA2NnWZmrMl0PEBRiBrk= -----END CERTIFICATE-----Generated at Tue May 13 15:28:56 2025 by rpki-client