$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.mft File: eVqDka92AR59slWmAQo0gvEJDj8.mft (raw, json) Hash identifier: XUyhfQsBryMzKr2QDmMd+YGSjHw5BxaoCx5JmjrhvS0= Subject key identifier: E0:89:96:FB:5C:D3:71:DF:14:75:0D:D0:3B:B1:DA:D8:3A:4D:E8:65 Authority key identifier: 79:5A:83:91:AF:76:01:1E:7D:B2:55:A6:01:0A:34:82:F1:09:0E:3F Certificate issuer: /CN=A91C60A5/serialNumber=795A8391AF76011E7DB255A6010A3482F1090E3F Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVqDka92AR59slWmAQo0gvEJDj8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.mft Manifest number: 68 Signing time: Sun 11 May 2025 05:43:15 +0000 Manifest this update: Sun 11 May 2025 05:43:15 +0000 Manifest next update: Sun 18 May 2025 05:43:15 +0000 Files and hashes: 1: eVqDka92AR59slWmAQo0gvEJDj8.crl (hash: aEemGf4P80n2kbGFcJWoJCOfLiWKZjXU4/UIrY7S93M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.crl rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVqDka92AR59slWmAQo0gvEJDj8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:43:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C60A5, serialNumber=795A8391AF76011E7DB255A6010A3482F1090E3F Validity Not Before: May 11 05:43:15 2025 GMT Not After : May 18 05:43:15 2025 GMT Subject: CN=682038f3-ceb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a7:cf:48:0c:97:1d:e6:d0:be:ab:7f:33:41: 20:eb:27:76:64:98:75:50:a9:c2:ec:5a:f2:23:64: 71:28:f4:ab:7b:ce:eb:dd:5e:e0:77:93:e0:c9:1d: e4:f5:54:18:ce:64:d5:84:49:34:d4:fe:e8:36:34: f5:dc:ca:b5:96:f8:7c:df:b8:44:82:d2:d6:b6:b1: d9:d0:ec:a9:6a:85:25:90:f5:eb:a3:f8:0b:a4:22: 65:98:5a:d7:2b:c3:47:d2:2d:69:29:93:2b:f5:0c: 5f:76:26:c0:5c:34:ce:cb:3f:89:0e:0b:f3:b0:e7: 48:f9:eb:a2:4c:09:5c:10:48:98:4a:b4:94:02:ac: 0a:a8:ae:35:ac:24:2e:8a:8f:e5:bd:b5:d9:3b:9b: cc:87:84:45:29:5c:e4:a8:8f:33:23:03:d2:88:5f: bb:c3:b5:47:0f:00:e9:f4:bd:4a:78:46:c0:70:cc: 12:7f:13:82:62:d6:92:e8:3c:37:3a:9d:0e:91:04: 3e:ef:b7:f5:23:ef:8b:ba:0e:c5:17:8b:d8:f1:74: 8b:ae:ef:39:20:be:97:01:33:58:8e:85:31:d1:9f: 88:26:9d:a2:99:cc:36:23:4d:32:9e:de:5e:09:7e: 52:64:2f:99:23:f8:54:94:a4:40:b2:b5:d1:c4:4d: f8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:89:96:FB:5C:D3:71:DF:14:75:0D:D0:3B:B1:DA:D8:3A:4D:E8:65 X509v3 Authority Key Identifier: keyid:79:5A:83:91:AF:76:01:1E:7D:B2:55:A6:01:0A:34:82:F1:09:0E:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVqDka92AR59slWmAQo0gvEJDj8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:3b:fc:52:93:af:ce:5b:20:39:1d:ec:d9:3c:70:c5:00:f8: 66:2a:bb:56:48:f5:6f:97:ed:58:f6:f7:3d:a6:b1:4f:50:9f: 85:44:20:32:0c:ac:8d:73:38:58:69:57:49:34:7b:30:b0:34: 15:06:29:16:ac:a5:3a:33:06:7f:c6:c4:54:ab:5c:25:ab:e8: 5b:08:08:db:41:2e:f7:be:8f:68:ba:6e:e4:08:34:d8:fc:a8: f4:a7:10:07:7f:48:96:85:61:f9:70:05:d6:74:0f:ef:0f:a5: 0d:32:08:b0:a8:7f:92:ac:fd:b5:d7:f5:e4:37:e5:4b:41:d3: 4f:e1:3e:b0:21:c6:69:79:57:c1:cb:51:c3:77:01:1b:49:51: 40:46:9c:45:b7:48:4e:c0:30:ba:c4:9a:f1:db:35:2f:1a:ae: 18:dd:5b:52:7d:2b:fb:dc:b6:5d:8d:b9:54:7b:6b:6c:05:8b: b3:70:09:a9:2d:9a:6e:3c:af:b6:73:67:fe:cf:9e:88:61:cb: 1a:06:5c:ca:15:b2:de:e0:3a:53:8a:53:a7:7c:a1:4a:ef:d6: 50:cc:ce:a2:63:72:d6:7d:75:6e:24:e2:a1:3b:a5:24:86:bf: 86:d2:7d:bc:2d:78:ab:c9:f0:07:dc:6f:59:e8:d0:b0:0e:48: aa:f0:4c:8f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NjBBNTExMC8GA1UEBRMoNzk1QTgzOTFBRjc2MDExRTdEQjI1NUE2MDEwQTM0ODJG MTA5MEUzRjAeFw0yNTA1MTEwNTQzMTVaFw0yNTA1MTgwNTQzMTVaMBgxFjAUBgNV BAMTDTY4MjAzOGYzLWNlYjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyp89IDJcd5tC+q38zQSDrJ3ZkmHVQqcLsWvIjZHEo9Kt7zuvdXuB3k+DJHeT1 VBjOZNWESTTU/ug2NPXcyrWW+HzfuESC0ta2sdnQ7KlqhSWQ9euj+AukImWYWtcr w0fSLWkpkyv1DF92JsBcNM7LP4kOC/Ow50j566JMCVwQSJhKtJQCrAqorjWsJC6K j+W9tdk7m8yHhEUpXOSojzMjA9KIX7vDtUcPAOn0vUp4RsBwzBJ/E4Ji1pLoPDc6 nQ6RBD7vt/Uj74u6DsUXi9jxdIuu7zkgvpcBM1iOhTHRn4gmnaKZzDYjTTKe3l4J flJkL5kj+FSUpECytdHETfiVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4ImW+1zT cd8UdQ3QO7Ha2DpN6GUwHwYDVR0jBBgwFoAUeVqDka92AR59slWmAQo0gvEJDj8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2MEE1L0EyRDU5MzYyOTFG MDExRUZCNjk2NUMyNEM0RjlBRTAyL2VWcURrYTkyQVI1OXNsV21BUW8wZ3ZFSkRq OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZVZxRGthOTJBUjU5c2xXbUFRbzBndkVKRGo4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 MEE1L0EyRDU5MzYyOTFGMDExRUZCNjk2NUMyNEM0RjlBRTAyL2VWcURrYTkyQVI1 OXNsV21BUW8wZ3ZFSkRqOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAU7/FKTr85bIDkd7Nk8cMUA+GYqu1ZI9W+X7Vj29z2msU9Qn4VEIDIM rI1zOFhpV0k0ezCwNBUGKRaspTozBn/GxFSrXCWr6FsICNtBLve+j2i6buQINNj8 qPSnEAd/SJaFYflwBdZ0D+8PpQ0yCLCof5Ks/bXX9eQ35UtB00/hPrAhxml5V8HL UcN3ARtJUUBGnEW3SE7AMLrEmvHbNS8arhjdW1J9K/vctl2NuVR7a2wFi7NwCakt mm48r7ZzZ/7PnohhyxoGXMoVst7gOlOKU6d8oUrv1lDMzqJjctZ9dW4k4qE7pSSG v4bSfbwteKvJ8Afcb1no0LAOSKrwTI8= -----END CERTIFICATE-----Generated at Sun May 11 19:33:47 2025 by rpki-client