$ rpki-client -vvf rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft File: ezpr3tL3tMBYRWjAZKuANDKHI6A.mft (raw, json) Hash identifier: KZwYfl/r8Oxqjs+cwL7bxDJwKPnZWsw7zwCoAIE4ync= Subject key identifier: B4:75:95:01:D8:ED:8D:17:7F:18:78:AC:37:FB:4A:80:FC:A8:08:DB Authority key identifier: 7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0 Certificate issuer: /CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0 Certificate serial: 0173 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft Manifest number: 016A Signing time: Fri 25 Apr 2025 03:05:40 +0000 Manifest this update: Fri 25 Apr 2025 03:05:40 +0000 Manifest next update: Fri 02 May 2025 03:05:40 +0000 Files and hashes: 1: ezpr3tL3tMBYRWjAZKuANDKHI6A.crl (hash: 7puloFNGVXOQBchdb1yZnAG+h15JS24e5RTD2MPWKWY=) 2: 0CB9AF5C200E11EF91F18D75C4F9AE02.roa (hash: xBjv+vXxnqip6awmZ0nrqpewsCYSOweE2hm3wh5fJ/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:05:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116190, serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0 Validity Not Before: Apr 25 03:05:40 2025 GMT Not After : May 2 03:05:40 2025 GMT Subject: CN=680afc04-0ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:00:6f:0b:82:34:36:94:04:99:5d:e0:ec:98: c1:31:6c:c2:fe:72:7d:22:6f:5f:de:f6:24:91:4b: 79:99:d0:8e:5d:d2:9e:b4:58:17:a0:ca:eb:b5:0b: 9d:9f:a7:93:d8:35:4a:49:33:c7:04:c0:66:c2:93: bd:45:53:38:32:98:be:bf:13:ff:f3:3b:d4:8f:d5: 1c:7b:9b:e1:2a:de:f2:54:06:11:c7:33:2c:7b:ad: 1b:e7:d2:5f:df:e9:8f:73:63:91:5a:e3:87:5a:5f: 24:72:36:76:d9:f2:c5:01:2a:8c:89:5d:c5:7e:81: a1:2d:98:49:1a:0f:b6:97:5b:26:31:d1:2b:69:86: 41:ec:84:a1:a7:9e:e5:15:ad:c4:8e:6e:c8:a9:7f: a0:06:94:23:53:9a:67:d4:8e:0f:1f:6a:3b:af:fa: cc:12:80:78:ba:de:ce:b3:dc:69:51:4d:ce:4b:d0: 0e:6b:a5:8b:46:05:bb:ae:6e:f6:f7:9b:6b:69:88: 9e:2b:b0:18:47:97:be:84:93:7c:51:f6:ae:c7:dd: 16:03:c5:36:e2:89:28:f4:69:ad:ac:45:ba:f5:29: 23:68:8b:c3:9b:91:5a:8d:77:8c:6a:22:61:7c:e6: e5:06:11:9c:16:cb:42:57:1f:5b:9a:55:85:c7:5c: a5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:75:95:01:D8:ED:8D:17:7F:18:78:AC:37:FB:4A:80:FC:A8:08:DB X509v3 Authority Key Identifier: keyid:7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:68:5f:8a:b2:5f:fe:fa:d6:d2:91:c5:7d:7d:49:27:7e:78: 40:b0:4f:41:66:34:2c:32:46:07:71:5f:8c:c6:e0:a1:aa:4f: 2f:ad:a6:6e:04:87:3e:ee:15:29:29:7e:a2:4c:66:2f:c9:42: 9c:5c:7e:1a:dd:e5:8d:92:b6:e4:dc:f3:a1:20:a6:23:eb:25: a5:98:a3:c0:f3:12:3b:cb:aa:1f:b7:41:ba:71:44:f8:21:ef: 53:24:30:ab:25:46:aa:7f:5f:03:3c:1d:63:8e:89:ba:42:4a: 0a:03:a6:93:03:83:ef:63:53:3a:64:96:17:3d:49:74:fe:78: c5:7a:77:c7:17:8b:ce:d1:58:3d:03:05:8c:e5:c1:21:63:61: ac:ef:30:ab:48:a9:3d:38:10:e1:7e:56:70:20:49:a2:bb:7e: 5f:73:9c:da:86:4a:39:ac:95:54:c4:44:f9:70:42:30:67:73: 4a:df:72:71:48:d7:bd:75:03:40:d2:83:ba:9a:9d:6b:1b:3f: 1a:ec:07:6f:e9:ab:89:a7:ba:5b:b7:87:48:9e:e4:45:0c:d5: f0:9f:87:f7:34:90:19:32:f0:3a:b0:9e:6f:67:9e:90:9f:3e: d2:06:9e:56:ef:37:59:b5:53:72:17:9b:6a:59:58:14:6b:ec: 7a:83:e4:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYxOTAxMTAvBgNVBAUTKDdCM0E2QkRFRDJGN0I0QzA1ODQ1NjhDMDY0QUI4MDM0 MzI4NzIzQTAwHhcNMjUwNDI1MDMwNTQwWhcNMjUwNTAyMDMwNTQwWjAYMRYwFAYD VQQDEw02ODBhZmMwNC0wZWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ABvC4I0NpQEmV3g7JjBMWzC/nJ9Im9f3vYkkUt5mdCOXdKetFgXoMrrtQud n6eT2DVKSTPHBMBmwpO9RVM4Mpi+vxP/8zvUj9Uce5vhKt7yVAYRxzMse60b59Jf 3+mPc2ORWuOHWl8kcjZ22fLFASqMiV3FfoGhLZhJGg+2l1smMdEraYZB7IShp57l Fa3Ejm7IqX+gBpQjU5pn1I4PH2o7r/rMEoB4ut7Os9xpUU3OS9AOa6WLRgW7rm72 95traYieK7AYR5e+hJN8Ufaux90WA8U24oko9GmtrEW69SkjaIvDm5FajXeMaiJh fOblBhGcFstCVx9bmlWFx1ylfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLR1lQHY 7Y0Xfxh4rDf7SoD8qAjbMB8GA1UdIwQYMBaAFHs6a97S97TAWEVowGSrgDQyhyOg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjE5MC8wQkIzOTY1MjA0 OTYxMUVFQkQzMUVEMzBDNEY5QUUwMi9lenByM3RMM3RNQllSV2pBWkt1QU5ES0hJ NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V6cHIzdEwzdE1CWVJXakFaS3VBTkRLSEk2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjE5MC8wQkIzOTY1MjA0OTYxMUVFQkQzMUVEMzBDNEY5QUUwMi9lenByM3RMM3RN QllSV2pBWkt1QU5ES0hJNkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcaF+Ksl/++tbSkcV9fUknfnhAsE9BZjQsMkYHcV+MxuChqk8vraZu BIc+7hUpKX6iTGYvyUKcXH4a3eWNkrbk3POhIKYj6yWlmKPA8xI7y6oft0G6cUT4 Ie9TJDCrJUaqf18DPB1jjom6QkoKA6aTA4PvY1M6ZJYXPUl0/njFenfHF4vO0Vg9 AwWM5cEhY2Gs7zCrSKk9OBDhflZwIEmiu35fc5zahko5rJVUxET5cEIwZ3NK33Jx SNe9dQNA0oO6mp1rGz8a7Adv6auJp7pbt4dInuRFDNXwn4f3NJAZMvA6sJ5vZ56Q nz7SBp5W7zdZtVNyF5tqWVgUa+x6g+Rb -----END CERTIFICATE-----Generated at Sat Apr 26 13:11:49 2025 by rpki-client