$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft File: epirabcrqsZmDlTdHG2KBi4s0v4.mft (raw, json) Hash identifier: hSu92SK3P+atJtkyxs6KzAI1Z8EHFayeH0cNKsGeL0A= Subject key identifier: D3:5C:8D:D4:AD:F1:A5:6C:A9:46:EF:36:95:99:F6:FB:61:F3:6F:74 Authority key identifier: 7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE Certificate issuer: /CN=A91E6038/serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE Certificate serial: 0364 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft Manifest number: 035F Signing time: Tue 13 May 2025 00:46:01 +0000 Manifest this update: Tue 13 May 2025 00:46:01 +0000 Manifest next update: Tue 20 May 2025 00:46:01 +0000 Files and hashes: 1: epirabcrqsZmDlTdHG2KBi4s0v4.crl (hash: 0oWOQ+HDEE6tzjCw9KgtEOsCWshtnvawQKVOgHd2COE=) 2: 7ABCBB70AFFE11ECA52DBA5DC4F9AE02.roa (hash: lDraqThqAp2VTAeBcGzfKiHZ4mgdJ9Pve9y5JAjucic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:46:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 868 (0x364) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6038, serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE Validity Not Before: May 13 00:46:01 2025 GMT Not After : May 20 00:46:01 2025 GMT Subject: CN=68229649-8066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:38:2e:38:9d:50:4b:6c:6d:80:b2:37:cf:dc: b3:3e:96:c8:1b:a2:97:03:7f:37:da:e6:87:c8:d1: 34:5f:6c:5a:3b:2a:8c:45:a6:18:ab:cd:9a:7e:f2: a4:0e:80:ab:2c:c9:d6:76:a8:36:09:e9:35:70:f7: d6:64:b7:fc:91:b3:2e:d4:fe:61:62:17:21:95:06: f4:14:9f:3b:09:7e:e1:5b:35:79:86:16:17:ab:27: 09:58:67:3c:da:eb:d7:f5:4c:bc:1b:5e:11:14:de: 47:1d:c4:2b:e9:25:90:03:d9:68:b7:65:47:05:7e: ab:ac:b0:ad:31:71:e3:6e:d1:1e:16:93:de:5b:5e: 9a:d8:dc:a2:f9:a0:0a:3e:8f:ff:fd:99:a7:f9:97: d1:74:63:10:54:9b:69:6d:34:2b:f3:63:53:d8:22: ae:07:55:f2:79:20:6e:dc:67:93:ad:7a:a3:05:8b: cc:f9:fd:70:fb:08:3c:ff:8b:a3:16:bc:cf:d9:6c: 80:42:79:a1:5f:27:97:95:fe:44:1c:04:43:78:8a: 23:f3:a2:b3:52:ec:d0:7e:c8:53:19:e4:af:e5:07: 15:7a:37:94:a1:d5:ed:c8:da:6a:a5:46:6d:1a:ae: 0c:0b:2f:c8:78:40:96:e3:69:e0:cb:2a:c1:fc:27: 3b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5C:8D:D4:AD:F1:A5:6C:A9:46:EF:36:95:99:F6:FB:61:F3:6F:74 X509v3 Authority Key Identifier: keyid:7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:f3:a9:88:18:02:cf:18:bc:e5:b2:1e:1a:f8:b4:5e:d2:76: ce:08:19:4c:af:79:b0:e7:af:ad:df:27:d4:f3:51:53:a7:ff: 07:d4:60:3f:f2:f1:39:a4:4c:09:6c:dd:3f:d1:95:0b:98:e8: 08:31:da:8f:a2:db:74:65:e0:ce:c9:9c:9f:a8:e7:a7:78:51: 6f:13:c7:4c:36:b6:4f:c7:a9:d6:ea:e5:e6:67:df:88:b5:72: db:78:60:7a:cc:93:88:aa:70:51:f8:3a:24:ed:e8:ca:9d:e3: 72:28:42:cb:93:ce:6a:91:a1:a0:d2:95:6f:14:04:5e:3e:5f: ba:e1:79:46:35:11:c3:8d:04:ac:17:28:e3:c1:a4:f2:71:4c: 56:40:3b:99:e3:9b:7c:5b:bf:ee:5a:d4:53:a6:99:b3:27:49: 6a:fa:2a:1d:05:b1:fa:86:63:bf:45:9e:8f:6b:f0:c1:33:fe: 96:57:c1:d1:34:f5:1c:57:3e:a2:aa:51:c8:24:1e:9b:f2:f2: 2f:2e:b2:1d:b1:e8:2a:54:e3:6e:a0:c6:0a:07:22:2d:75:e8: 2e:b0:ef:a4:05:1f:94:46:62:c3:d5:bf:04:81:12:35:9a:cf: c1:4f:33:a8:32:66:81:57:74:2f:f3:a3:ad:7d:81:c9:7a:1b: 12:af:b4:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYwMzgxMTAvBgNVBAUTKDdBOThBQjY5QjcyQkFBQzY2NjBFNTRERDFDNkQ4QTA2 MkUyQ0QyRkUwHhcNMjUwNTEzMDA0NjAxWhcNMjUwNTIwMDA0NjAxWjAYMRYwFAYD VQQDEw02ODIyOTY0OS04MDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/TguOJ1QS2xtgLI3z9yzPpbIG6KXA3832uaHyNE0X2xaOyqMRaYYq82afvKk DoCrLMnWdqg2Cek1cPfWZLf8kbMu1P5hYhchlQb0FJ87CX7hWzV5hhYXqycJWGc8 2uvX9Uy8G14RFN5HHcQr6SWQA9lot2VHBX6rrLCtMXHjbtEeFpPeW16a2Nyi+aAK Po///Zmn+ZfRdGMQVJtpbTQr82NT2CKuB1XyeSBu3GeTrXqjBYvM+f1w+wg8/4uj FrzP2WyAQnmhXyeXlf5EHARDeIoj86KzUuzQfshTGeSv5QcVejeUodXtyNpqpUZt Gq4MCy/IeECW42ngyyrB/Cc7WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNcjdSt 8aVsqUbvNpWZ9vth8290MB8GA1UdIwQYMBaAFHqYq2m3K6rGZg5U3RxtigYuLNL+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjAzOC85MUUwQzg1MkFG RkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFzWm1EbFRkSEcyS0JpNHMw djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwaXJhYmNycXNabURsVGRIRzJLQmk0czB2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjAzOC85MUUwQzg1MkFGRkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFz Wm1EbFRkSEcyS0JpNHMwdjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM86mIGALPGLzlsh4a+LRe0nbOCBlMr3mw56+t3yfU81FTp/8H1GA/ 8vE5pEwJbN0/0ZULmOgIMdqPott0ZeDOyZyfqOeneFFvE8dMNrZPx6nW6uXmZ9+I tXLbeGB6zJOIqnBR+Dok7ejKneNyKELLk85qkaGg0pVvFARePl+64XlGNRHDjQSs FyjjwaTycUxWQDuZ45t8W7/uWtRTppmzJ0lq+iodBbH6hmO/RZ6Pa/DBM/6WV8HR NPUcVz6iqlHIJB6b8vIvLrIdsegqVONuoMYKByItdegusO+kBR+URmLD1b8EgRI1 ms/BTzOoMmaBV3Qv86OtfYHJehsSr7QC -----END CERTIFICATE-----Generated at Wed May 14 03:37:42 2025 by rpki-client