$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft File: eE7A8P-dbYDcn33OORSfxg-WFJk.mft (raw, json) Hash identifier: y95H84epQ7ylwpVkuPpXcGV/XD7+Q2hTyPCYlH5/gPE= Subject key identifier: F0:67:AF:38:38:6D:6C:78:FF:8D:0D:E3:1D:0F:55:4F:C4:CD:97:95 Authority key identifier: 78:4E:C0:F0:FF:9D:6D:80:DC:9F:7D:CE:39:14:9F:C6:0F:96:14:99 Certificate issuer: /CN=A91FA69F/serialNumber=784EC0F0FF9D6D80DC9F7DCE39149FC60F961499 Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft Manifest number: A3 Signing time: Fri 09 May 2025 05:13:23 +0000 Manifest this update: Fri 09 May 2025 05:13:23 +0000 Manifest next update: Fri 16 May 2025 05:13:23 +0000 Files and hashes: 1: eE7A8P-dbYDcn33OORSfxg-WFJk.crl (hash: NrrWn0m82owKwmEOj8i9J6eCPwNf9ybotYcSCHhXX+Q=) 2: 4FAF60B433A411EFB7A29C24C4F9AE02.roa (hash: LD7B5+XzyaE0f/ths6DbB5WXZXs6tAf0rdqOWz9N/kI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.crl rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 05:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA69F, serialNumber=784EC0F0FF9D6D80DC9F7DCE39149FC60F961499 Validity Not Before: May 9 05:13:23 2025 GMT Not After : May 16 05:13:23 2025 GMT Subject: CN=681d8ef3-15ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cf:01:63:75:9f:9e:7b:97:ea:f2:bc:14:30: 48:0a:6d:5f:0c:60:32:01:0f:99:73:1c:1b:d5:3d: 5e:45:41:d6:27:d7:ea:1a:e5:f3:0b:7c:1c:a0:0f: da:6e:d5:73:f3:1f:29:b4:bb:52:70:d7:0f:ba:36: 0f:5a:35:d0:a0:58:b3:e2:55:31:7e:a6:db:b8:89: 83:b0:8b:f5:0f:07:d7:5e:42:5f:41:55:95:6d:86: 74:68:d2:8f:3c:4b:34:69:9d:db:47:72:f2:96:ad: 01:d3:72:e6:e2:39:a0:ce:29:0a:8d:f5:6d:44:be: ff:43:d5:6a:81:2d:80:f4:8f:c5:09:5c:76:00:0a: 2d:f2:ba:0e:0e:57:fb:ce:59:5f:e0:4c:7a:38:66: 4d:52:ce:84:0f:32:ee:a9:bc:99:78:5a:ca:1b:90: 7b:e7:eb:b1:47:c7:8b:f8:aa:0c:93:63:47:06:cf: e6:f8:89:70:86:12:21:09:7d:50:16:b8:1a:7b:b9: 60:98:6b:4c:c0:db:62:8f:77:a6:49:54:c6:75:40: 57:d5:e3:cb:bb:be:72:00:e0:63:05:ee:91:f0:98: ed:f1:bd:1a:dd:40:8c:f1:b7:16:28:b6:12:3c:8b: 2a:1e:b9:cc:71:6b:b7:99:c1:e9:49:f8:ad:34:90: 02:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:67:AF:38:38:6D:6C:78:FF:8D:0D:E3:1D:0F:55:4F:C4:CD:97:95 X509v3 Authority Key Identifier: keyid:78:4E:C0:F0:FF:9D:6D:80:DC:9F:7D:CE:39:14:9F:C6:0F:96:14:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:45:be:46:6a:1a:87:49:28:e7:6f:70:91:87:0d:2f:08:4a: b5:25:51:0e:c9:6c:c0:28:81:cd:f2:18:48:cb:b1:11:d0:74: a4:8a:99:43:b8:1b:4e:f5:cf:5d:aa:5e:d3:49:1b:c4:3d:35: 14:99:6c:52:66:dd:4c:a3:52:2e:d6:3f:7d:1e:f9:28:e5:ae: 9d:c0:42:4b:ad:13:b1:30:a1:c2:1c:4d:c3:07:bd:3d:23:eb: 29:40:2c:79:80:8a:6e:e2:cb:74:1b:14:b9:73:53:71:9b:c3: f5:46:2d:8d:78:89:d0:46:b6:a2:9f:14:5c:cc:75:d4:00:9f: f3:c9:bd:23:f9:ec:ab:b8:1f:66:f7:08:2a:81:7e:e2:dc:ab: f8:f5:17:ff:1a:99:7e:b0:17:4d:4b:d9:6b:08:2d:6e:e6:31: f8:d1:9f:d4:35:50:8e:5c:26:6f:70:15:cf:b3:1e:dc:16:c5: 19:14:04:56:6f:4b:ae:53:32:0f:d3:67:59:d2:7c:0d:ca:ff: 1d:74:02:67:15:a2:19:28:42:54:3f:59:c4:fb:77:d9:7e:4e: 3a:71:4b:87:1f:a3:96:ca:dc:70:81:05:41:42:a0:79:22:9b: 1c:63:4f:08:fe:35:7b:57:6d:1c:d0:a9:ed:1d:87:db:98:f0: 2e:9c:c6:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2OUYxMTAvBgNVBAUTKDc4NEVDMEYwRkY5RDZEODBEQzlGN0RDRTM5MTQ5RkM2 MEY5NjE0OTkwHhcNMjUwNTA5MDUxMzIzWhcNMjUwNTE2MDUxMzIzWjAYMRYwFAYD VQQDEw02ODFkOGVmMy0xNWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo88BY3WfnnuX6vK8FDBICm1fDGAyAQ+Zcxwb1T1eRUHWJ9fqGuXzC3wcoA/a btVz8x8ptLtScNcPujYPWjXQoFiz4lUxfqbbuImDsIv1DwfXXkJfQVWVbYZ0aNKP PEs0aZ3bR3Lylq0B03Lm4jmgzikKjfVtRL7/Q9VqgS2A9I/FCVx2AAot8roODlf7 zllf4Ex6OGZNUs6EDzLuqbyZeFrKG5B75+uxR8eL+KoMk2NHBs/m+IlwhhIhCX1Q Frgae7lgmGtMwNtij3emSVTGdUBX1ePLu75yAOBjBe6R8Jjt8b0a3UCM8bcWKLYS PIsqHrnMcWu3mcHpSfitNJAC2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBnrzg4 bWx4/40N4x0PVU/EzZeVMB8GA1UdIwQYMBaAFHhOwPD/nW2A3J99zjkUn8YPlhSZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY5Ri9DNjY1REYyMjMz QTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9lRTdBOFAtZGJZRGNuMzNPT1JTZnhnLVdG SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VFN0E4UC1kYllEY24zM09PUlNmeGctV0ZKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTY5Ri9DNjY1REYyMjMzQTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9lRTdBOFAtZGJZ RGNuMzNPT1JTZnhnLVdGSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9Rb5GahqHSSjnb3CRhw0vCEq1JVEOyWzAKIHN8hhIy7ER0HSkiplD uBtO9c9dql7TSRvEPTUUmWxSZt1Mo1Iu1j99Hvko5a6dwEJLrROxMKHCHE3DB709 I+spQCx5gIpu4st0GxS5c1Nxm8P1Ri2NeInQRrainxRczHXUAJ/zyb0j+eyruB9m 9wgqgX7i3Kv49Rf/Gpl+sBdNS9lrCC1u5jH40Z/UNVCOXCZvcBXPsx7cFsUZFARW b0uuUzIP02dZ0nwNyv8ddAJnFaIZKEJUP1nE+3fZfk46cUuHH6OWytxwgQVBQqB5 IpscY08I/jV7V20c0KntHYfbmPAunMaL -----END CERTIFICATE-----Generated at Sun May 11 05:29:31 2025 by rpki-client