$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft File: EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft (raw, json) Hash identifier: y2LYsQnkck/lGIF1XaqbSF1XIdBJ5sxDZkyGQnDpYBw= Subject key identifier: 56:28:C5:46:5F:27:8F:88:6D:F7:E3:92:0F:68:C1:9B:50:30:6C:25 Authority key identifier: 11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83 Certificate issuer: /CN=A91E9888/serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83 Certificate serial: 0C72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft Manifest number: 0C60 Signing time: Sat 10 May 2025 18:08:58 +0000 Manifest this update: Sat 10 May 2025 18:08:58 +0000 Manifest next update: Sat 17 May 2025 18:08:58 +0000 Files and hashes: 1: EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl (hash: rfLpWwAJmGJsAo3LZZoHtyv8+raR0kEkT65aNYL38Xo=) 2: E8E88010F2C811EA914D710EC4F9AE02.roa (hash: IFWas/rgHa7uSrgJAOPof+Srn7iqSkG+8jyeDB/7tHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3186 (0xc72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9888, serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83 Validity Not Before: May 10 18:08:58 2025 GMT Not After : May 17 18:08:58 2025 GMT Subject: CN=681f963a-ac1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:32:25:bf:6f:2b:f2:a9:27:78:95:03:15:8f: 31:75:68:2e:0a:6b:25:3c:18:c0:5a:ba:e9:e6:c3: dd:ef:07:85:cc:a4:b4:aa:15:d6:65:03:d9:fd:30: 5b:4d:52:ab:56:a2:73:28:f5:5c:f8:0e:66:00:50: 7e:07:ab:e1:30:8b:66:61:9d:a6:30:b1:dc:ba:a4: 41:3a:e5:95:05:b6:84:7a:57:d0:1c:f1:a8:d5:c7: 4b:f6:de:42:d2:2c:cc:36:9b:99:f4:35:f3:b2:06: 8f:aa:86:80:f6:bc:8d:f8:8c:3d:f5:85:56:24:2f: 6d:55:f6:ed:f3:94:1d:c8:32:3d:c8:39:f0:62:96: 70:60:49:d0:95:e2:08:8f:a5:47:38:06:62:ca:bc: c4:2e:08:97:d8:75:ef:c3:0b:12:39:77:9a:80:b1: d8:b8:42:cb:45:51:51:14:45:a2:1d:16:31:77:dd: 0f:3f:55:5b:c6:d9:78:c9:f9:96:cb:a3:f2:b1:6e: 47:6b:e2:89:95:03:b6:7e:ed:95:f8:61:da:14:1f: 44:d3:19:7a:54:76:ea:9f:c8:a5:3c:d0:bf:a3:56: 3f:c9:44:52:36:12:c4:3c:e6:63:ec:2b:1b:93:f7: e4:06:5e:f2:7a:d2:36:08:ee:1c:ac:ee:20:ff:bb: 43:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:28:C5:46:5F:27:8F:88:6D:F7:E3:92:0F:68:C1:9B:50:30:6C:25 X509v3 Authority Key Identifier: keyid:11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:7e:18:56:4c:18:50:db:31:f6:bf:14:01:5c:d0:74:91:fb: 6a:65:94:93:92:49:dc:7e:be:cb:10:0c:cc:2b:77:48:18:f5: c5:09:12:e8:98:e9:9b:fe:f1:73:ae:bf:8c:34:54:6c:81:9b: 3d:2b:8e:4e:61:cb:ce:43:5e:20:50:cd:bf:69:84:3e:43:a4: 54:14:fc:c4:09:ed:5a:8e:16:b8:24:e9:9d:5c:63:da:d1:42: a5:6a:62:b8:50:3f:cc:4f:cc:b9:71:38:51:6a:6b:13:00:71: 36:cc:25:d8:a6:a3:6a:88:c3:ce:e9:78:3a:d2:c3:8d:eb:1c: 46:e0:b4:ca:12:29:93:a0:29:66:78:f7:69:90:a3:20:0e:db: d9:10:aa:d7:f4:32:78:77:1a:0d:3d:09:18:7e:67:86:89:6d: ad:96:3d:93:28:59:2d:ce:58:d2:e1:35:89:94:82:57:29:4c: 99:f6:5a:e5:3a:76:c9:df:0b:86:86:4f:bc:c9:ce:b2:a4:f2: ff:e8:70:d0:48:d7:47:cf:5e:14:60:e1:40:d3:9b:14:a0:f1: 66:94:bb:b8:dc:ba:44:04:79:9f:55:54:22:43:e2:e6:29:c1: 87:6b:6b:ed:1c:71:50:b5:67:06:90:4d:51:8f:85:01:94:bb: cd:6b:28:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk4ODgxMTAvBgNVBAUTKDExRjVBNzA3M0FDMjFBRkY1Q0M0RDNCQkJENjU4REVB MzkzMkNCODMwHhcNMjUwNTEwMTgwODU4WhcNMjUwNTE3MTgwODU4WjAYMRYwFAYD VQQDEw02ODFmOTYzYS1hYzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTIlv28r8qkneJUDFY8xdWguCmslPBjAWrrp5sPd7weFzKS0qhXWZQPZ/TBb TVKrVqJzKPVc+A5mAFB+B6vhMItmYZ2mMLHcuqRBOuWVBbaEelfQHPGo1cdL9t5C 0izMNpuZ9DXzsgaPqoaA9ryN+Iw99YVWJC9tVfbt85QdyDI9yDnwYpZwYEnQleII j6VHOAZiyrzELgiX2HXvwwsSOXeagLHYuELLRVFRFEWiHRYxd90PP1Vbxtl4yfmW y6PysW5Ha+KJlQO2fu2V+GHaFB9E0xl6VHbqn8ilPNC/o1Y/yURSNhLEPOZj7Csb k/fkBl7yetI2CO4crO4g/7tD5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYoxUZf J4+Ibffjkg9owZtQMGwlMB8GA1UdIwQYMBaAFBH1pwc6whr/XMTTu71ljeo5MsuD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTg4OC82RjU0RDEwRUZG RjMxMUU5ODc5QjE0NzlDNEY5QUUwMi9FZlduQnpyQ0d2OWN4Tk83dldXTjZqa3l5 NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VmV25CenJDR3Y5Y3hOTzd2V1dONmpreXk0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTg4OC82RjU0RDEwRUZGRjMxMUU5ODc5QjE0NzlDNEY5QUUwMi9FZlduQnpyQ0d2 OWN4Tk83dldXTjZqa3l5NE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1fhhWTBhQ2zH2vxQBXNB0kftqZZSTkkncfr7LEAzMK3dIGPXFCRLo mOmb/vFzrr+MNFRsgZs9K45OYcvOQ14gUM2/aYQ+Q6RUFPzECe1ajha4JOmdXGPa 0UKlamK4UD/MT8y5cThRamsTAHE2zCXYpqNqiMPO6Xg60sON6xxG4LTKEimToClm ePdpkKMgDtvZEKrX9DJ4dxoNPQkYfmeGiW2tlj2TKFktzljS4TWJlIJXKUyZ9lrl OnbJ3wuGhk+8yc6ypPL/6HDQSNdHz14UYOFA05sUoPFmlLu43LpEBHmfVVQiQ+Lm KcGHa2vtHHFQtWcGkE1Rj4UBlLvNaygN -----END CERTIFICATE-----Generated at Mon May 12 19:32:38 2025 by rpki-client