$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft File: etee6zuSg1TZUNxuT4vsyyXC_Es.mft (raw, json) Hash identifier: YywPYixQpb8Px1orHUlY3gXu2xiE5xJPaVmEddmuR4I= Subject key identifier: 20:46:7D:78:C8:7E:BA:66:50:06:B0:45:DB:33:66:B2:49:DF:53:ED Authority key identifier: 7A:D7:9E:EB:3B:92:83:54:D9:50:DC:6E:4F:8B:EC:CB:25:C2:FC:4B Certificate issuer: /CN=A91F3CB1/serialNumber=7AD79EEB3B928354D950DC6E4F8BECCB25C2FC4B Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft Manifest number: 15 Signing time: Tue 13 May 2025 07:17:00 +0000 Manifest this update: Tue 13 May 2025 07:16:59 +0000 Manifest next update: Tue 20 May 2025 07:16:59 +0000 Files and hashes: 1: etee6zuSg1TZUNxuT4vsyyXC_Es.crl (hash: z3i1TJpvf1f634jSLF5mQ/hHIa162cX6d3/VZk1/0EQ=) 2: 9217B6681AA811F0B10C6412C4F9AE02.roa (hash: k9SmP/i/EacapJo/9m72S70HfODKRHtE2FbOisDtRLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.crl rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 07:16:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3CB1, serialNumber=7AD79EEB3B928354D950DC6E4F8BECCB25C2FC4B Validity Not Before: May 13 07:16:59 2025 GMT Not After : May 20 07:16:59 2025 GMT Subject: CN=6822f1eb-3f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9f:52:fd:67:a6:23:7f:6b:fb:e7:99:6b:00: c8:a2:36:4d:31:2d:38:00:be:29:3d:fe:45:af:d1: 1d:81:89:05:e4:1b:20:99:24:bc:15:d5:b6:27:ea: e8:d2:62:c3:c6:88:43:df:2b:1f:50:14:33:3b:b7: 0f:19:ec:8f:0f:c6:9b:11:2e:b2:0c:81:f4:6c:35: b7:eb:09:2d:c8:4b:dd:3b:8a:c2:6b:94:9d:fa:08: 9d:8e:33:a9:fb:6a:64:d5:c1:f1:a9:87:12:ad:ca: 47:a7:4e:3f:ff:08:44:12:a0:17:a8:ea:c8:72:e0: 8d:f5:6a:29:5a:33:ff:17:fe:a9:5c:52:f2:e9:d8: 82:1f:ed:ab:f4:da:2e:75:20:91:ee:53:06:6c:01: 6b:b1:86:15:4e:d3:0e:82:ee:7c:01:8f:b2:af:b0: 56:d1:b1:15:af:56:de:a7:5a:c1:e1:3a:40:4c:36: b7:06:81:84:dc:1d:96:93:7a:80:7e:18:9f:37:25: 91:47:d7:bd:e0:50:79:16:4b:5e:b0:58:58:d5:ef: 46:77:13:55:e9:2a:e2:33:1c:c7:0c:a7:fc:da:75: de:39:97:a2:a7:a5:cf:74:1d:91:e5:0f:7a:2b:f7: f2:f5:4e:1c:7d:f9:56:28:a7:a2:be:1d:71:89:38: 9e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:46:7D:78:C8:7E:BA:66:50:06:B0:45:DB:33:66:B2:49:DF:53:ED X509v3 Authority Key Identifier: keyid:7A:D7:9E:EB:3B:92:83:54:D9:50:DC:6E:4F:8B:EC:CB:25:C2:FC:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e0:2e:4c:68:47:fb:ce:4a:47:53:0e:d1:88:e4:db:3e:d2:8b: 94:01:66:67:61:c0:5e:bc:ba:80:16:c2:15:85:90:a9:6d:f7: 27:5f:52:9a:2c:bf:ce:32:5d:fd:0a:e7:06:89:bc:89:e3:2d: e6:68:da:c9:21:bb:7c:36:06:49:23:c7:d8:f1:79:c4:ac:92: 7b:e2:41:f8:6f:d7:51:4e:35:66:aa:69:c5:9a:d1:a4:2b:29: 47:06:43:86:ae:b8:76:e2:95:f3:de:e8:44:23:00:e1:8f:d4: de:4e:be:0b:7a:54:5e:ea:3f:cf:c7:61:13:7d:8d:c9:32:0a: a8:97:b4:fe:04:9c:09:15:56:80:fe:77:94:5c:3c:75:c0:d9: 6d:7b:9e:12:03:58:09:3f:f0:43:68:40:67:56:e2:13:69:ab: 4a:e1:b5:b1:13:44:ec:ef:fb:e4:0b:fc:43:fa:b0:8d:08:1f: 90:da:35:0e:4d:b6:8a:5b:ed:52:35:40:57:8f:31:61:ae:b5: 69:70:3f:4d:e3:20:32:9f:60:1b:91:25:c0:8c:67:a2:d7:72: db:4f:b2:54:c8:b3:8e:63:3a:1d:7d:42:ba:36:a3:76:b9:62: 0c:66:a1:01:3d:15:16:d6:44:14:35:7b:d5:bc:fd:10:1e:d2: ed:84:3c:f0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG M0NCMTExMC8GA1UEBRMoN0FENzlFRUIzQjkyODM1NEQ5NTBEQzZFNEY4QkVDQ0Iy NUMyRkM0QjAeFw0yNTA1MTMwNzE2NTlaFw0yNTA1MjAwNzE2NTlaMBgxFjAUBgNV BAMTDTY4MjJmMWViLTNmNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbn1L9Z6Yjf2v755lrAMiiNk0xLTgAvik9/kWv0R2BiQXkGyCZJLwV1bYn6ujS YsPGiEPfKx9QFDM7tw8Z7I8PxpsRLrIMgfRsNbfrCS3IS907isJrlJ36CJ2OM6n7 amTVwfGphxKtykenTj//CEQSoBeo6shy4I31ailaM/8X/qlcUvLp2IIf7av02i51 IJHuUwZsAWuxhhVO0w6C7nwBj7KvsFbRsRWvVt6nWsHhOkBMNrcGgYTcHZaTeoB+ GJ83JZFH173gUHkWS16wWFjV70Z3E1XpKuIzHMcMp/zadd45l6Knpc90HZHlD3or 9/L1Thx9+VYop6K+HXGJOJ7BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIEZ9eMh+ umZQBrBF2zNmsknfU+0wHwYDVR0jBBgwFoAUetee6zuSg1TZUNxuT4vsyyXC/Esw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzQ0IxLzJEODQzNjk4MTY4 NjExRjA4OTE2OTg1QkM0RjlBRTAyL2V0ZWU2enVTZzFUWlVOeHVUNHZzeXlYQ19F cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZXRlZTZ6dVNnMVRaVU54dVQ0dnN5eVhDX0VzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz Q0IxLzJEODQzNjk4MTY4NjExRjA4OTE2OTg1QkM0RjlBRTAyL2V0ZWU2enVTZzFU WlVOeHVUNHZzeXlYQ19Fcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAOAuTGhH+85KR1MO0Yjk2z7Si5QBZmdhwF68uoAWwhWFkKlt9ydfUpos v84yXf0K5waJvInjLeZo2skhu3w2Bkkjx9jxecSsknviQfhv11FONWaqacWa0aQr KUcGQ4auuHbilfPe6EQjAOGP1N5Ovgt6VF7qP8/HYRN9jckyCqiXtP4EnAkVVoD+ d5RcPHXA2W17nhIDWAk/8ENoQGdW4hNpq0rhtbETROzv++QL/EP6sI0IH5DaNQ5N topb7VI1QFePMWGutWlwP03jIDKfYBuRJcCMZ6LXcttPslTIs45jOh19Qro2o3a5 YgxmoQE9FRbWRBQ1e9W8/RAe0u2EPPA= -----END CERTIFICATE-----Generated at Tue May 13 11:48:05 2025 by rpki-client