$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft File: EJhSul3Eo2jPdhIFFeysYu_aPkA.mft (raw, json) Hash identifier: B4pY0y4kzTbfim3Ssdq0WR2/45EpQ3irvLVFy6cBfhE= Subject key identifier: 5F:65:FC:2A:94:46:CA:BE:DA:A9:B1:43:ED:75:B4:57:5C:BB:58:DC Authority key identifier: 10:98:52:BA:5D:C4:A3:68:CF:76:12:05:15:EC:AC:62:EF:DA:3E:40 Certificate issuer: /CN=A91FE637/serialNumber=109852BA5DC4A368CF76120515ECAC62EFDA3E40 Certificate serial: 0E65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft Manifest number: 0E60 Signing time: Sat 10 May 2025 17:35:19 +0000 Manifest this update: Sat 10 May 2025 17:35:18 +0000 Manifest next update: Sat 17 May 2025 17:35:18 +0000 Files and hashes: 1: EJhSul3Eo2jPdhIFFeysYu_aPkA.crl (hash: rI5FZDBQryj2K0WCj/rIRsRHNg2olTTa37DN6YpWdBc=) 2: 3D88426C974511E982D6FD1BC4F9AE02.roa (hash: H8knPIbuLtwUcaByLoJZ9f2Kl4YvVFA0lwHyLpg+7j8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.crl rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:35:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3685 (0xe65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE637, serialNumber=109852BA5DC4A368CF76120515ECAC62EFDA3E40 Validity Not Before: May 10 17:35:18 2025 GMT Not After : May 17 17:35:18 2025 GMT Subject: CN=681f8e57-7c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:78:8b:70:7d:7b:14:5e:a6:4e:a1:65:2a:e4: ed:97:fa:7b:2d:9e:30:05:c9:44:d8:7a:d5:eb:23: a7:6d:9b:fe:97:46:ec:ba:0e:57:82:bc:14:7f:13: 43:cf:a5:89:39:03:ff:3d:43:19:59:c0:67:48:bb: 88:4b:23:c0:96:63:df:78:7b:05:80:e5:d7:33:86: 6e:2b:e4:84:e8:0d:c1:ec:09:02:bd:80:c7:ad:e7: 35:3d:62:56:17:2d:8e:19:d1:36:36:d2:01:b2:a3: 47:53:53:e4:f1:48:2a:21:97:0d:9e:ba:e6:d4:b7: 7a:c5:88:1f:ee:4a:f1:79:71:46:88:65:2c:83:3e: 0a:8e:ab:ae:c7:18:f7:7a:df:7e:53:21:bb:a1:71: 85:fb:f4:16:4d:f5:7b:ba:96:a8:fc:c2:0d:9c:ba: 8a:1c:c7:2e:26:b5:46:a9:72:00:76:93:fa:30:da: d7:d8:56:b1:d2:06:c3:03:e4:da:7a:99:1f:da:42: 67:f5:2e:17:c7:c8:d6:c1:54:a0:d3:31:53:b2:fd: 6d:9b:ee:54:b4:a8:ac:ae:60:93:b9:cd:c4:fa:07: 29:a4:99:c7:c7:5b:69:d6:a4:b7:11:8c:3f:3c:24: d8:a9:78:a2:d7:e2:47:f9:df:0e:b2:e6:93:c4:3c: 72:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:65:FC:2A:94:46:CA:BE:DA:A9:B1:43:ED:75:B4:57:5C:BB:58:DC X509v3 Authority Key Identifier: keyid:10:98:52:BA:5D:C4:A3:68:CF:76:12:05:15:EC:AC:62:EF:DA:3E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:02:68:97:c2:eb:f6:9c:ac:d1:60:17:e9:6e:9e:ff:7a:9b: 7f:85:64:4b:4e:e0:24:fe:c7:68:4b:14:c3:4b:f2:bb:07:83: 81:b2:4e:5b:64:5e:a1:b0:a1:40:0c:bb:8c:6d:5f:62:21:48: 25:f5:7d:35:28:33:14:ce:ec:01:9a:5c:af:75:98:c6:b4:55: 03:05:87:f8:e5:c2:8f:42:38:ef:23:e7:97:5a:60:5b:8e:03: f4:9e:1a:88:70:f7:c9:a9:79:a1:98:b8:ae:5d:7f:35:3b:bc: a1:8a:c6:c9:6a:fb:ad:54:18:9f:a0:51:fe:a8:a1:9b:13:35: 87:00:7d:d6:c0:eb:e1:78:97:62:b1:36:b1:40:56:3d:b9:d4: 88:e9:d3:64:ec:4a:60:25:98:a0:9a:fa:27:0b:83:c2:68:7b: 10:6b:5b:32:e7:80:35:0f:50:26:7d:46:58:3e:be:19:79:d1: ba:87:90:c3:34:2a:b7:e8:eb:c7:5a:50:41:96:5c:49:66:56: fa:30:d7:b2:f9:ab:39:b2:aa:7f:7e:f3:47:da:5c:bd:ad:b4: 0c:25:be:c7:30:66:ce:3e:c9:30:54:c5:d2:4e:84:b3:0d:4c: 76:4c:b1:f7:9e:cd:b9:30:0d:11:ba:62:12:80:01:23:16:a7: c1:da:57:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU2MzcxMTAvBgNVBAUTKDEwOTg1MkJBNURDNEEzNjhDRjc2MTIwNTE1RUNBQzYy RUZEQTNFNDAwHhcNMjUwNTEwMTczNTE4WhcNMjUwNTE3MTczNTE4WjAYMRYwFAYD VQQDEw02ODFmOGU1Ny03YzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoXiLcH17FF6mTqFlKuTtl/p7LZ4wBclE2HrV6yOnbZv+l0bsug5XgrwUfxND z6WJOQP/PUMZWcBnSLuISyPAlmPfeHsFgOXXM4ZuK+SE6A3B7AkCvYDHrec1PWJW Fy2OGdE2NtIBsqNHU1Pk8UgqIZcNnrrm1Ld6xYgf7krxeXFGiGUsgz4Kjquuxxj3 et9+UyG7oXGF+/QWTfV7upao/MINnLqKHMcuJrVGqXIAdpP6MNrX2Fax0gbDA+Ta epkf2kJn9S4Xx8jWwVSg0zFTsv1tm+5UtKisrmCTuc3E+gcppJnHx1tp1qS3EYw/ PCTYqXii1+JH+d8OsuaTxDxyCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9l/CqU Rsq+2qmxQ+11tFdcu1jcMB8GA1UdIwQYMBaAFBCYUrpdxKNoz3YSBRXsrGLv2j5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTYzNy85QkFFQTEzQTk3 NDMxMUU5QkZEOEU1MTlDNEY5QUUwMi9FSmhTdWwzRW8yalBkaElGRmV5c1l1X2FQ a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VKaFN1bDNFbzJqUGRoSUZGZXlzWXVfYVBrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTYzNy85QkFFQTEzQTk3NDMxMUU5QkZEOEU1MTlDNEY5QUUwMi9FSmhTdWwzRW8y alBkaElGRmV5c1l1X2FQa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSAmiXwuv2nKzRYBfpbp7/ept/hWRLTuAk/sdoSxTDS/K7B4OBsk5b ZF6hsKFADLuMbV9iIUgl9X01KDMUzuwBmlyvdZjGtFUDBYf45cKPQjjvI+eXWmBb jgP0nhqIcPfJqXmhmLiuXX81O7yhisbJavutVBifoFH+qKGbEzWHAH3WwOvheJdi sTaxQFY9udSI6dNk7EpgJZigmvonC4PCaHsQa1sy54A1D1AmfUZYPr4ZedG6h5DD NCq36OvHWlBBllxJZlb6MNey+as5sqp/fvNH2ly9rbQMJb7HMGbOPskwVMXSToSz DUx2TLH3ns25MA0RumISgAEjFqfB2ldW -----END CERTIFICATE-----Generated at Sun May 11 14:01:50 2025 by rpki-client