$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft File: eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft (raw, json) Hash identifier: hov/gyOCMYzEb1HERGngr+GyXidE5131D9tptpIVbQI= Subject key identifier: 77:CE:E2:79:BE:0E:19:64:A4:F1:8F:E8:FC:2A:9B:FE:A0:5A:8D:76 Authority key identifier: 7A:28:16:E9:69:79:75:CA:D9:34:9B:26:B2:0F:14:C8:1A:91:4C:98 Certificate issuer: /CN=A91D0C18/serialNumber=7A2816E9697975CAD9349B26B20F14C81A914C98 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eigW6Wl5dcrZNJsmsg8UyBqRTJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft Manifest number: 86 Signing time: Tue 13 May 2025 05:45:35 +0000 Manifest this update: Tue 13 May 2025 05:45:34 +0000 Manifest next update: Tue 20 May 2025 05:45:34 +0000 Files and hashes: 1: eigW6Wl5dcrZNJsmsg8UyBqRTJg.crl (hash: oPJKlm+wiLHFY8FbbsOPE9OjTQos6QIVFizWgvvaR1s=) 2: EF57F4D0646611EFA25D167EC4F9AE02.roa (hash: gGUuQZoCHoMxpbX892LJTwciHDZLV1IrcZ8alBZ8Tvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.crl rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eigW6Wl5dcrZNJsmsg8UyBqRTJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C18, serialNumber=7A2816E9697975CAD9349B26B20F14C81A914C98 Validity Not Before: May 13 05:45:34 2025 GMT Not After : May 20 05:45:34 2025 GMT Subject: CN=6822dc7e-7ce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4d:9c:77:78:9d:29:74:44:e2:d0:53:aa:90: cb:a3:c5:01:bc:a4:56:88:95:ef:12:53:1c:e8:ee: c5:dc:a8:df:ea:77:cf:2d:ce:15:ae:1c:ec:5d:dd: 2c:4a:b8:19:c0:b8:65:83:bb:18:6b:0c:44:47:87: 9e:88:33:27:5f:44:6f:46:6c:5e:0a:28:a8:c1:2d: ec:b9:c8:62:19:cd:62:43:46:d4:ec:66:60:86:8e: 9f:8b:fe:77:8f:53:4a:73:0f:61:11:7d:af:61:a3: 05:ac:9d:8a:52:a6:30:90:4a:5c:9d:bb:21:96:64: 35:61:4a:45:2b:51:8a:b5:d1:7c:83:93:8a:7f:73: c3:65:d1:42:bb:57:22:90:ce:48:58:41:66:93:7b: 63:0f:e1:52:84:60:37:73:80:b3:8e:e9:0a:fb:30: fb:13:05:20:81:bb:6f:70:d9:64:b4:be:bc:6b:fb: 75:cb:e2:05:89:e5:8c:bb:0d:b7:13:c7:70:59:6b: 58:d1:43:54:d1:ce:78:81:28:72:9c:f4:f9:34:94: 9c:b5:e2:6b:cb:fe:4f:82:f4:56:e3:ce:46:cd:4b: 1b:6c:d7:8a:3e:aa:6b:27:23:43:25:54:6a:fe:39: 8e:c9:64:2c:b9:20:d8:8f:96:13:b8:7e:54:da:29: 2d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:CE:E2:79:BE:0E:19:64:A4:F1:8F:E8:FC:2A:9B:FE:A0:5A:8D:76 X509v3 Authority Key Identifier: keyid:7A:28:16:E9:69:79:75:CA:D9:34:9B:26:B2:0F:14:C8:1A:91:4C:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eigW6Wl5dcrZNJsmsg8UyBqRTJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:3e:a3:49:1b:d1:71:67:79:b3:97:16:50:b5:d9:72:f7:e9: 67:be:d6:85:46:a6:d2:22:e8:14:30:93:e3:8a:91:b4:c1:1d: b0:e4:f0:e3:30:89:11:87:80:46:8b:79:79:84:01:33:a2:5a: 76:45:3c:22:18:3b:0b:fd:5b:3f:d5:c6:68:e6:39:73:46:36: ab:43:f7:4e:04:71:22:5d:1e:24:54:7d:79:2c:f3:98:ca:dd: ab:77:f9:51:6a:c6:b1:80:5a:c7:c9:23:5f:8d:23:c1:36:f3: 90:ee:20:90:bf:8d:5b:7e:8d:44:47:df:23:87:88:d1:c3:dc: 88:fe:82:fe:d2:58:9a:7c:a5:c7:32:a0:21:fb:4c:42:82:17: f0:ae:60:b1:cc:e5:80:3c:2b:46:f2:3d:06:28:0b:be:49:03: 43:c3:a4:28:1f:4e:65:ea:65:e9:1e:11:07:18:95:12:f9:67: c9:b2:87:eb:28:79:31:37:09:91:08:f9:a3:ce:86:07:4c:e0: 2f:fb:58:82:e9:fa:f3:5c:fa:56:56:a1:11:d8:62:37:df:2f: a4:d5:4c:6e:43:79:c7:90:4b:ab:52:96:bb:62:fe:af:37:38: 08:54:78:d2:cb:cc:f1:76:c5:2c:64:81:0f:10:c1:47:3a:00: f8:93:63:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBDMTgxMTAvBgNVBAUTKDdBMjgxNkU5Njk3OTc1Q0FEOTM0OUIyNkIyMEYxNEM4 MUE5MTRDOTgwHhcNMjUwNTEzMDU0NTM0WhcNMjUwNTIwMDU0NTM0WjAYMRYwFAYD VQQDEw02ODIyZGM3ZS03Y2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxU2cd3idKXRE4tBTqpDLo8UBvKRWiJXvElMc6O7F3Kjf6nfPLc4VrhzsXd0s SrgZwLhlg7sYawxER4eeiDMnX0RvRmxeCiiowS3suchiGc1iQ0bU7GZgho6fi/53 j1NKcw9hEX2vYaMFrJ2KUqYwkEpcnbshlmQ1YUpFK1GKtdF8g5OKf3PDZdFCu1ci kM5IWEFmk3tjD+FShGA3c4CzjukK+zD7EwUggbtvcNlktL68a/t1y+IFieWMuw23 E8dwWWtY0UNU0c54gShynPT5NJScteJry/5PgvRW485GzUsbbNeKPqprJyNDJVRq /jmOyWQsuSDYj5YTuH5U2ikt0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfO4nm+ DhlkpPGP6Pwqm/6gWo12MB8GA1UdIwQYMBaAFHooFulpeXXK2TSbJrIPFMgakUyY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEMxOC83MTJDRjBEODY0 NjYxMUVGOEUxOEY4N0FDNEY5QUUwMi9laWdXNldsNWRjclpOSnNtc2c4VXlCcVJU SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VpZ1c2V2w1ZGNyWk5Kc21zZzhVeUJxUlRKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEMxOC83MTJDRjBEODY0NjYxMUVGOEUxOEY4N0FDNEY5QUUwMi9laWdXNldsNWRj clpOSnNtc2c4VXlCcVJUSmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASPqNJG9FxZ3mzlxZQtdly9+lnvtaFRqbSIugUMJPjipG0wR2w5PDj MIkRh4BGi3l5hAEzolp2RTwiGDsL/Vs/1cZo5jlzRjarQ/dOBHEiXR4kVH15LPOY yt2rd/lRasaxgFrHySNfjSPBNvOQ7iCQv41bfo1ER98jh4jRw9yI/oL+0liafKXH MqAh+0xCghfwrmCxzOWAPCtG8j0GKAu+SQNDw6QoH05l6mXpHhEHGJUS+WfJsofr KHkxNwmRCPmjzoYHTOAv+1iC6frzXPpWVqER2GI33y+k1UxuQ3nHkEurUpa7Yv6v NzgIVHjSy8zxdsUsZIEPEMFHOgD4k2Oo -----END CERTIFICATE-----Generated at Wed May 14 03:06:28 2025 by rpki-client