$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft File: eFqwsi3OWhJmUAwQZrT2sF91ysA.mft (raw, json) Hash identifier: Wu2yp/O5f9na6jkAnBjjnw5Mj8Zh8bcOFdf4jMpYVhY= Subject key identifier: 6E:48:61:96:D5:2E:8C:08:9B:70:3F:32:6A:13:50:E8:C5:CB:81:8A Authority key identifier: 78:5A:B0:B2:2D:CE:5A:12:66:50:0C:10:66:B4:F6:B0:5F:75:CA:C0 Certificate issuer: /CN=A91C2CE9/serialNumber=785AB0B22DCE5A1266500C1066B4F6B05F75CAC0 Certificate serial: 10B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft Manifest number: 10A6 Signing time: Thu 08 May 2025 17:24:02 +0000 Manifest this update: Thu 08 May 2025 17:24:01 +0000 Manifest next update: Thu 15 May 2025 17:24:01 +0000 Files and hashes: 1: eFqwsi3OWhJmUAwQZrT2sF91ysA.crl (hash: 7Suyyi6XCjplK3p12TgytPWYXCnVmJf2wncl6hZux4Y=) 2: B3250BC6307B11E989188B3BC4F9AE02.roa (hash: i5f3IsLQcqkFQbLcTMdHVFZRfy5na+MUmyuuokwDYXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.crl rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 17:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4273 (0x10b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2CE9, serialNumber=785AB0B22DCE5A1266500C1066B4F6B05F75CAC0 Validity Not Before: May 8 17:24:01 2025 GMT Not After : May 15 17:24:01 2025 GMT Subject: CN=681ce8b2-033f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:23:56:03:d9:67:d6:fa:b3:59:f7:5a:df:c6: e3:d1:88:bf:36:cf:e7:0d:18:b7:e4:6c:a1:e2:64: 81:28:a5:61:9b:fb:7c:e3:42:3f:12:eb:e2:45:8b: 22:4e:e4:e6:8f:75:a1:c6:a2:53:c7:3e:92:69:4f: ac:5d:c8:ad:74:b9:11:bf:20:2f:98:0e:e5:45:b3: 3e:f2:d8:f6:4d:b6:08:1e:3c:dd:3e:47:f9:3b:42: 2f:51:76:91:5b:3c:23:72:a0:df:d1:d2:7c:d4:14: 55:48:d4:f5:cc:5f:bd:26:92:04:e7:e4:1a:17:05: 56:04:b7:cb:bb:40:f0:4f:43:90:87:04:5e:74:08: fe:05:2a:88:68:3a:21:e6:dd:12:c4:23:72:6c:a7: 49:d2:56:9a:fd:e3:27:93:eb:4b:2f:15:5b:d0:38: 5c:3b:e1:86:91:ba:fe:6a:62:e9:9d:ee:3f:b1:0d: 6f:5d:00:59:98:05:b2:c1:24:b8:4b:47:ce:83:58: 3c:64:9f:c3:9e:45:d6:21:b8:35:06:ce:ac:cc:d9: 99:8a:d6:fc:a9:fa:b9:bf:f5:44:cb:36:37:68:8c: 35:1f:bf:50:ca:02:4d:b0:36:0a:b3:0f:a3:1b:ca: 7d:82:c2:61:12:36:5e:e5:9f:7b:8d:f1:19:b2:f4: f7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:48:61:96:D5:2E:8C:08:9B:70:3F:32:6A:13:50:E8:C5:CB:81:8A X509v3 Authority Key Identifier: keyid:78:5A:B0:B2:2D:CE:5A:12:66:50:0C:10:66:B4:F6:B0:5F:75:CA:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:07:2a:7b:ad:12:9d:d9:b4:d9:c9:62:ca:d7:d9:da:f0:0a: 29:69:37:e7:6d:63:90:b4:ac:32:a8:f4:70:f5:61:fc:6b:ec: 0a:47:bb:d4:a6:af:97:9b:fc:e7:60:de:62:f9:29:b8:1f:0f: f9:d1:80:db:a1:e4:e3:7e:e3:0b:e1:77:3f:14:2a:ba:f7:fb: 5e:c6:c2:98:dc:9d:7b:cc:dc:27:32:36:89:37:ee:30:4f:52: 32:b1:81:18:9f:18:6a:64:67:09:38:2d:fa:8e:f1:cd:98:d5: 73:a4:b4:7a:21:42:a5:00:36:22:98:ac:97:4b:ce:4a:7a:dc: aa:12:48:4a:27:d1:fd:9f:da:fb:d2:7e:7d:89:2d:fb:26:23: 3f:08:91:ac:2b:bc:f7:de:88:57:6f:2a:ab:ab:bf:e9:85:49: f3:63:8f:8d:00:89:73:cb:da:2f:12:8c:19:3d:fc:68:31:d5: b2:68:71:c4:7a:8c:41:67:62:e5:6d:48:21:f1:f8:4f:e4:aa: cb:95:46:04:b6:e1:65:9d:3b:82:d9:00:d0:2d:4e:3c:d3:f0: 4b:ba:ae:72:08:bf:81:08:44:e3:4d:ea:47:4c:8d:6f:e6:33: 8b:09:58:49:bb:ab:0a:4c:2f:4b:16:06:3f:97:9a:c7:3b:04: 4f:f0:6c:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICELEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDRTkxMTAvBgNVBAUTKDc4NUFCMEIyMkRDRTVBMTI2NjUwMEMxMDY2QjRGNkIw NUY3NUNBQzAwHhcNMjUwNTA4MTcyNDAxWhcNMjUwNTE1MTcyNDAxWjAYMRYwFAYD VQQDEw02ODFjZThiMi0wMzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0CNWA9ln1vqzWfda38bj0Yi/Ns/nDRi35Gyh4mSBKKVhm/t840I/EuviRYsi TuTmj3WhxqJTxz6SaU+sXcitdLkRvyAvmA7lRbM+8tj2TbYIHjzdPkf5O0IvUXaR WzwjcqDf0dJ81BRVSNT1zF+9JpIE5+QaFwVWBLfLu0DwT0OQhwRedAj+BSqIaDoh 5t0SxCNybKdJ0laa/eMnk+tLLxVb0DhcO+GGkbr+amLpne4/sQ1vXQBZmAWywSS4 S0fOg1g8ZJ/DnkXWIbg1Bs6szNmZitb8qfq5v/VEyzY3aIw1H79QygJNsDYKsw+j G8p9gsJhEjZe5Z97jfEZsvT3nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5IYZbV LowIm3A/MmoTUOjFy4GKMB8GA1UdIwQYMBaAFHhasLItzloSZlAMEGa09rBfdcrA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNFOS84NzEwNkQzRTI3 MDAxMUU5QTc3QjZFMkNDNEY5QUUwMi9lRnF3c2kzT1doSm1VQXdRWnJUMnNGOTF5 c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VGcXdzaTNPV2hKbVVBd1FaclQyc0Y5MXlzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkNFOS84NzEwNkQzRTI3MDAxMUU5QTc3QjZFMkNDNEY5QUUwMi9lRnF3c2kzT1do Sm1VQXdRWnJUMnNGOTF5c0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJByp7rRKd2bTZyWLK19na8AopaTfnbWOQtKwyqPRw9WH8a+wKR7vU pq+Xm/znYN5i+Sm4Hw/50YDboeTjfuML4Xc/FCq69/texsKY3J17zNwnMjaJN+4w T1IysYEYnxhqZGcJOC36jvHNmNVzpLR6IUKlADYimKyXS85KetyqEkhKJ9H9n9r7 0n59iS37JiM/CJGsK7z33ohXbyqrq7/phUnzY4+NAIlzy9ovEowZPfxoMdWyaHHE eoxBZ2LlbUgh8fhP5KrLlUYEtuFlnTuC2QDQLU480/BLuq5yCL+BCETjTepHTI1v 5jOLCVhJu6sKTC9LFgY/l5rHOwRP8Gx1 -----END CERTIFICATE-----Generated at Sat May 10 18:45:59 2025 by rpki-client