$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft File: eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft (raw, json) Hash identifier: feJTl5YzyIC3i3SVvTDWSE5dbTB+QtADAr7AoBzKuTI= Subject key identifier: CB:52:29:6E:2E:20:AC:91:79:42:E6:88:5D:59:A2:92:0F:CC:1C:3C Authority key identifier: 79:E5:63:2A:F2:9B:AE:64:E5:F9:F1:9C:57:5B:C5:A9:95:E2:05:50 Certificate issuer: /CN=A91FEB27/serialNumber=79E5632AF29BAE64E5F9F19C575BC5A995E20550 Certificate serial: 2D18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft Manifest number: 2CFC Signing time: Sat 10 May 2025 15:28:29 +0000 Manifest this update: Sat 10 May 2025 15:28:29 +0000 Manifest next update: Sat 17 May 2025 15:28:29 +0000 Files and hashes: 1: eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl (hash: Pld//c55bxoSZyR0ItCwOcVz1E1E2pxxABxgI5JwaMU=) 2: 6CB78E8E967811EA92E45A27C4F9AE02.roa (hash: Vd/aN0N0PZj/2E1lobGPke/BU2o5Mlhxl5a5kuQS0uQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11544 (0x2d18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEB27, serialNumber=79E5632AF29BAE64E5F9F19C575BC5A995E20550 Validity Not Before: May 10 15:28:29 2025 GMT Not After : May 17 15:28:29 2025 GMT Subject: CN=681f709d-d1c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d7:35:5c:54:d7:6c:34:2a:4c:46:5e:f9:11: 6e:00:e3:4d:8b:3d:bc:69:d0:ea:2e:e4:00:c2:21: 56:01:1a:95:53:ee:20:64:ef:9e:31:13:e7:f2:1e: 96:65:f5:19:f5:49:63:98:55:4a:a3:56:4c:61:e9: 50:d5:51:29:11:66:c6:9a:e6:b0:97:c8:38:97:79: d0:90:40:0b:9a:30:b2:20:2d:e8:86:47:9e:ae:26: 96:17:59:90:9a:67:b7:e2:ce:59:d5:8d:90:7d:42: 33:2d:2e:53:7b:fd:44:15:f5:da:02:20:a6:f1:48: 50:9a:78:20:77:82:53:c2:62:62:d2:de:d6:13:aa: 4e:f7:53:9a:82:2b:70:42:47:36:4f:06:1b:85:c1: 4d:77:f5:55:74:ab:a5:07:1d:e7:89:f0:a8:26:b3: 26:9b:c2:f7:bb:80:f2:38:c0:48:03:cf:08:9e:87: 9d:3e:91:51:ad:10:31:f8:c2:af:df:74:ce:e0:fc: 10:10:e0:38:18:b4:3b:5b:fb:01:96:0d:8b:59:f1: 9e:5e:9f:f5:f3:9f:a5:14:dc:c9:8a:a2:90:dc:33: fd:5f:b0:cd:0d:42:c8:a5:0e:b7:c5:1f:dd:07:ce: b0:e0:98:e8:3d:bd:97:24:9c:c4:c6:31:49:4d:e3: 96:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:52:29:6E:2E:20:AC:91:79:42:E6:88:5D:59:A2:92:0F:CC:1C:3C X509v3 Authority Key Identifier: keyid:79:E5:63:2A:F2:9B:AE:64:E5:F9:F1:9C:57:5B:C5:A9:95:E2:05:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:5d:7c:4e:6f:b1:a3:ac:a3:93:52:86:88:a3:f5:7d:58:00: 30:68:1b:29:9a:0b:bf:92:b6:bf:9f:ca:38:ab:ee:0d:dc:29: c9:2f:71:d6:6c:d2:b2:d4:96:27:5f:d9:3c:48:52:32:5e:d6: cc:57:a0:3b:8a:33:7b:2b:85:03:f9:e4:d7:72:87:0e:a7:ec: d6:58:2e:11:61:a5:19:9f:e3:80:20:f7:bd:17:5e:ce:0b:ad: 9e:64:b7:72:56:63:2a:7f:5e:56:67:26:8f:23:f6:80:74:65: 27:44:50:5f:8d:1e:ed:b3:ce:af:82:ff:57:2f:ac:61:ba:7f: bc:78:27:d5:12:4c:34:89:10:31:37:a1:41:88:28:96:b6:16: f2:d9:03:31:09:70:18:38:5a:bf:2c:56:84:aa:92:78:15:c5: 18:2d:1a:dd:1e:83:72:0c:2b:11:28:a1:20:d4:84:1a:8e:f3: 8b:1c:6a:c4:c0:b6:28:51:0e:2f:ad:6e:1a:f5:28:52:c1:ea: d4:07:fc:cf:5e:58:2d:49:35:30:04:3b:16:6a:08:83:98:67: 14:7f:96:37:79:c8:d2:de:6a:62:53:77:25:b9:08:66:70:2e: e8:fd:00:9b:28:1a:74:30:8b:ae:2e:a6:51:ee:77:dc:90:6b: 9c:08:00:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVCMjcxMTAvBgNVBAUTKDc5RTU2MzJBRjI5QkFFNjRFNUY5RjE5QzU3NUJDNUE5 OTVFMjA1NTAwHhcNMjUwNTEwMTUyODI5WhcNMjUwNTE3MTUyODI5WjAYMRYwFAYD VQQDEw02ODFmNzA5ZC1kMWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNc1XFTXbDQqTEZe+RFuAONNiz28adDqLuQAwiFWARqVU+4gZO+eMRPn8h6W ZfUZ9UljmFVKo1ZMYelQ1VEpEWbGmuawl8g4l3nQkEALmjCyIC3ohkeeriaWF1mQ mme34s5Z1Y2QfUIzLS5Te/1EFfXaAiCm8UhQmnggd4JTwmJi0t7WE6pO91Oagitw Qkc2TwYbhcFNd/VVdKulBx3nifCoJrMmm8L3u4DyOMBIA88InoedPpFRrRAx+MKv 33TO4PwQEOA4GLQ7W/sBlg2LWfGeXp/185+lFNzJiqKQ3DP9X7DNDULIpQ63xR/d B86w4JjoPb2XJJzExjFJTeOW9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMtSKW4u IKyReULmiF1ZopIPzBw8MB8GA1UdIwQYMBaAFHnlYyrym65k5fnxnFdbxamV4gVQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUIyNy8xNjdBOTdFQzlB RTMxMUUzQTVBMjU3QTc1OTExRUEzMi9lZVZqS3ZLYnJtVGwtZkdjVjF2RnFaWGlC VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VlVmpLdkticm1UbC1mR2NWMXZGcVpYaUJWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUIyNy8xNjdBOTdFQzlBRTMxMUUzQTVBMjU3QTc1OTExRUEzMi9lZVZqS3ZLYnJt VGwtZkdjVjF2RnFaWGlCVkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQXXxOb7GjrKOTUoaIo/V9WAAwaBspmgu/kra/n8o4q+4N3CnJL3HW bNKy1JYnX9k8SFIyXtbMV6A7ijN7K4UD+eTXcocOp+zWWC4RYaUZn+OAIPe9F17O C62eZLdyVmMqf15WZyaPI/aAdGUnRFBfjR7ts86vgv9XL6xhun+8eCfVEkw0iRAx N6FBiCiWthby2QMxCXAYOFq/LFaEqpJ4FcUYLRrdHoNyDCsRKKEg1IQajvOLHGrE wLYoUQ4vrW4a9ShSwerUB/zPXlgtSTUwBDsWagiDmGcUf5Y3ecjS3mpiU3cluQhm cC7o/QCbKBp0MIuuLqZR7nfckGucCADm -----END CERTIFICATE-----Generated at Mon May 12 16:50:22 2025 by rpki-client