$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft File: 0Eyx4nFXho90821weRXZ1_CXyQg.mft (raw, json) Hash identifier: 9jw3tSDpIRz9GVuHgZuR03VLAudlJfZHWE10sVZuJ68= Subject key identifier: 23:5D:BF:9E:88:FF:03:E5:3E:02:0B:00:63:28:C1:3A:DF:5A:6A:DA Authority key identifier: D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08 Certificate issuer: /CN=A91D5AA8/serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908 Certificate serial: 01C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft Manifest number: 01BA Signing time: Sun 11 May 2025 02:07:56 +0000 Manifest this update: Sun 11 May 2025 02:07:55 +0000 Manifest next update: Sun 18 May 2025 02:07:55 +0000 Files and hashes: 1: 0Eyx4nFXho90821weRXZ1_CXyQg.crl (hash: Vo9wUCItZu++tGv2Q1fRM4sXYCdVhAHFNf+ClxQ/hvc=) 2: 994AC0903E1E11EFB5BBDD3BC4F9AE02.roa (hash: xyd0ZZrH0VHNsmRtbjg/g57C4k5UyZ1DuB1/mljU4Qg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5AA8, serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908 Validity Not Before: May 11 02:07:55 2025 GMT Not After : May 18 02:07:55 2025 GMT Subject: CN=6820067b-327b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:88:f0:c7:4f:58:8c:ec:99:ce:81:e5:65:3b: e5:c9:73:3e:28:2d:f1:fb:ad:8d:7b:e0:e1:7f:64: 17:ca:af:03:0d:0b:29:a2:75:78:aa:c7:7d:cd:e9: b7:fd:1c:0b:d9:64:41:09:de:55:bf:d2:ee:31:75: 06:b5:7a:27:42:35:5e:9a:ef:b2:20:8e:9e:fb:ab: ce:df:1c:fb:f9:e0:55:5f:63:8d:40:9b:a2:48:97: 72:fe:17:eb:3b:85:53:74:7c:3a:33:36:17:3a:74: 4d:63:e9:67:a9:08:63:43:2e:d9:76:95:bf:c6:ab: bf:64:75:7f:5a:37:b6:74:55:ff:ee:e1:74:c0:07: c2:67:c1:01:29:f3:41:8d:fa:3e:2a:25:e9:04:de: ee:a9:ad:52:af:04:2f:7a:7a:9c:26:4e:ee:9a:86: 51:d8:38:b3:5d:a4:fb:b3:d9:64:ad:3c:91:13:b4: 2f:c4:ee:03:cc:c5:d7:f0:50:32:75:b1:84:62:02: ab:b2:f0:08:36:18:29:e8:4a:b6:45:8b:f4:44:6e: 0a:1e:be:6c:f7:4e:50:9f:4f:6d:2d:5c:42:65:53: b6:7b:55:2c:70:e1:38:22:97:d0:9d:98:bc:6f:68: 89:ea:e0:d4:bf:c8:44:00:ea:a4:9a:7d:9f:c2:2c: ed:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:5D:BF:9E:88:FF:03:E5:3E:02:0B:00:63:28:C1:3A:DF:5A:6A:DA X509v3 Authority Key Identifier: keyid:D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:e9:46:e6:89:e5:18:cb:c7:69:e4:54:a2:14:8b:fa:13:96: 60:6f:73:bc:9a:28:7b:4f:c4:82:14:ce:45:90:26:f1:e2:cd: 80:13:1a:6c:69:d1:38:7e:5b:27:20:93:7c:c0:aa:95:6d:13: 4f:ca:9f:7f:12:0f:99:cc:f6:83:cf:3b:94:33:74:55:57:12: be:b5:3e:ae:a2:91:53:17:02:f6:00:8b:09:c8:eb:65:cc:5b: 59:8d:c6:18:40:05:f6:34:58:bd:0e:20:03:70:5c:d6:46:c1: 47:90:4f:22:db:12:fc:03:4d:e0:7f:70:21:d7:1e:c0:29:a4: eb:3f:25:81:03:6a:c0:f9:68:26:f7:ae:24:22:57:c6:f4:65: 30:c5:29:5a:5e:a6:5f:d7:9b:d0:1e:9c:a3:fb:1e:f5:eb:bd: 97:eb:7b:ab:f8:c9:79:42:ef:14:e1:58:4e:a2:3a:0d:fd:c4: a8:74:47:a6:ee:76:d6:77:09:e0:b2:10:e9:70:68:12:72:aa: 3b:46:62:53:3a:a1:bb:7b:82:b6:a5:66:a3:37:19:23:65:77: 31:e2:45:eb:8b:19:81:1f:2a:f1:0a:56:7a:04:bd:0e:61:55: 5b:30:e6:bc:c9:61:e9:f8:38:f9:39:9e:17:b2:3f:d0:8c:ea: d1:31:f0:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVBQTgxMTAvBgNVBAUTKEQwNENCMUUyNzE1Nzg2OEY3NEYzNkQ3MDc5MTVEOUQ3 RjA5N0M5MDgwHhcNMjUwNTExMDIwNzU1WhcNMjUwNTE4MDIwNzU1WjAYMRYwFAYD VQQDEw02ODIwMDY3Yi0zMjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ojwx09YjOyZzoHlZTvlyXM+KC3x+62Ne+Dhf2QXyq8DDQsponV4qsd9zem3 /RwL2WRBCd5Vv9LuMXUGtXonQjVemu+yII6e+6vO3xz7+eBVX2ONQJuiSJdy/hfr O4VTdHw6MzYXOnRNY+lnqQhjQy7ZdpW/xqu/ZHV/Wje2dFX/7uF0wAfCZ8EBKfNB jfo+KiXpBN7uqa1SrwQvenqcJk7umoZR2DizXaT7s9lkrTyRE7QvxO4DzMXX8FAy dbGEYgKrsvAINhgp6Eq2RYv0RG4KHr5s905Qn09tLVxCZVO2e1UscOE4IpfQnZi8 b2iJ6uDUv8hEAOqkmn2fwiztAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNdv56I /wPlPgILAGMowTrfWmraMB8GA1UdIwQYMBaAFNBMseJxV4aPdPNtcHkV2dfwl8kI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUFBOC8yNzg1OTkxMjkx RUYxMUVEQjA2QkFEMUZDNEY5QUUwMi8wRXl4NG5GWGhvOTA4MjF3ZVJYWjFfQ1h5 UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBFeXg0bkZYaG85MDgyMXdlUlhaMV9DWHlRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUFBOC8yNzg1OTkxMjkxRUYxMUVEQjA2QkFEMUZDNEY5QUUwMi8wRXl4NG5GWGhv OTA4MjF3ZVJYWjFfQ1h5UWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH6UbmieUYy8dp5FSiFIv6E5Zgb3O8mih7T8SCFM5FkCbx4s2AExps adE4flsnIJN8wKqVbRNPyp9/Eg+ZzPaDzzuUM3RVVxK+tT6uopFTFwL2AIsJyOtl zFtZjcYYQAX2NFi9DiADcFzWRsFHkE8i2xL8A03gf3Ah1x7AKaTrPyWBA2rA+Wgm 964kIlfG9GUwxSlaXqZf15vQHpyj+x71672X63ur+Ml5Qu8U4VhOojoN/cSodEem 7nbWdwngshDpcGgScqo7RmJTOqG7e4K2pWajNxkjZXcx4kXrixmBHyrxClZ6BL0O YVVbMOa8yWHp+Dj5OZ4Xsj/QjOrRMfBY -----END CERTIFICATE-----Generated at Mon May 12 04:16:27 2025 by rpki-client