$ rpki-client -vvf rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft File: _Ern2eP0GafSBKVMedHz76mn1sg.mft (raw, json) Hash identifier: +I1L8OTSefmJznuiyWX56MySUh7+xXAc09ggFjMH3YU= Subject key identifier: 94:9F:C5:99:4D:67:5A:E9:47:8F:31:61:35:A0:C7:CE:91:3C:91:BE Authority key identifier: FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8 Certificate issuer: /CN=A91262F0/serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8 Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft Manifest number: 01A1 Signing time: Fri 25 Apr 2025 02:28:53 +0000 Manifest this update: Fri 25 Apr 2025 02:28:52 +0000 Manifest next update: Fri 02 May 2025 02:28:52 +0000 Files and hashes: 1: _Ern2eP0GafSBKVMedHz76mn1sg.crl (hash: J3UPGpmw4uVQA1OkFIYBSRImCyaWA5lK7G1Mvx+rReU=) 2: 8E412748A33311EDA2CB2420C4F9AE02.roa (hash: VYee2tDfZOJDgRSyvh9847Isyru0Slu6wYlhlW9JZCM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:28:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262F0, serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8 Validity Not Before: Apr 25 02:28:52 2025 GMT Not After : May 2 02:28:52 2025 GMT Subject: CN=680af365-d039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:03:d5:bf:ff:f7:5c:b1:4f:55:ec:99:cd:8b: f8:48:2b:d7:5c:a9:19:9b:04:b4:aa:58:71:85:12: b7:02:94:37:f8:a8:6a:c4:c0:56:8f:87:52:cd:df: 0c:85:d3:f1:19:ab:ea:08:5e:6b:3a:8f:cd:3e:5a: e0:eb:23:e4:11:c5:9b:12:0f:f4:3d:5c:00:3c:ba: e4:55:e1:7e:34:51:a3:62:c2:22:5e:06:94:f3:c5: 22:ec:ef:5c:d4:88:4f:a9:26:c0:c2:2b:51:89:2d: 22:b5:5b:48:e0:8e:79:87:47:af:d3:af:4f:a7:10: 5c:cc:27:4b:1d:18:49:bc:49:c1:cc:d9:d4:c8:74: b0:2f:50:e1:8f:8f:90:a9:89:6f:f5:5b:ad:e1:86: ef:75:94:a3:c1:b0:07:a0:30:8e:0a:28:84:4b:4f: 7c:86:8f:f7:9a:72:86:90:14:67:c0:b4:1d:f7:65: b6:5f:1e:a4:40:20:30:ae:f8:b0:1b:39:5c:da:75: 2a:48:e4:1c:94:25:c3:f6:5b:5b:fb:0c:5e:b7:fb: 23:a3:b4:d5:7e:f8:6e:39:a4:38:f3:6a:d3:93:43: 23:66:c0:22:b9:47:c4:55:99:2a:84:3d:d7:16:7c: e8:01:1f:d5:88:85:f3:87:09:29:d4:66:62:72:70: 46:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:9F:C5:99:4D:67:5A:E9:47:8F:31:61:35:A0:C7:CE:91:3C:91:BE X509v3 Authority Key Identifier: keyid:FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ba:9f:5b:5d:76:f2:94:a4:b2:30:35:54:65:7e:97:3b:3d: 16:4f:a7:ca:79:98:9b:29:02:20:c4:3f:68:ef:5e:1c:e8:3a: 4f:c9:e9:cf:e6:2a:fd:c5:75:08:22:19:45:3e:39:02:83:2e: 58:0a:fa:f6:eb:d7:6b:c2:5b:29:ba:fc:e7:ce:60:f2:7d:35: 07:f8:f5:a3:e3:c5:79:38:c0:df:d4:f9:ce:fd:b8:0d:77:1a: 78:80:bf:df:df:4c:a3:90:46:dd:d6:4b:23:10:ef:79:72:94: 95:61:69:29:ea:23:b8:d1:39:b0:64:2b:fd:cc:bf:27:10:77: 97:65:8c:90:bf:3d:7a:3b:59:13:0e:ec:cf:6b:e2:9f:1d:60: 11:85:57:e4:65:ee:dd:d1:32:59:1a:f8:1a:37:42:b8:da:f2: 7d:64:6a:5b:e2:d8:84:3b:5f:9c:b7:59:e1:53:42:9f:26:da: df:c6:50:de:a1:b1:53:3d:8d:c8:3a:b6:0b:ca:3c:27:61:e1: 11:49:d8:74:8e:57:82:24:72:1f:a0:49:84:b2:5f:08:f4:f9: 02:15:ca:ac:77:eb:96:eb:8b:f0:c1:34:67:4b:fb:4d:3b:48: 80:92:08:05:e2:8b:5b:e9:9a:78:5c:c0:b0:d9:25:1c:98:1e: b6:c1:e4:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyRjAxMTAvBgNVBAUTKEZDNEFFN0Q5RTNGNDE5QTdEMjA0QTU0Qzc5RDFGM0VG QTlBN0Q2QzgwHhcNMjUwNDI1MDIyODUyWhcNMjUwNTAyMDIyODUyWjAYMRYwFAYD VQQDEw02ODBhZjM2NS1kMDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQPVv//3XLFPVeyZzYv4SCvXXKkZmwS0qlhxhRK3ApQ3+KhqxMBWj4dSzd8M hdPxGavqCF5rOo/NPlrg6yPkEcWbEg/0PVwAPLrkVeF+NFGjYsIiXgaU88Ui7O9c 1IhPqSbAwitRiS0itVtI4I55h0ev069PpxBczCdLHRhJvEnBzNnUyHSwL1Dhj4+Q qYlv9Vut4YbvdZSjwbAHoDCOCiiES098ho/3mnKGkBRnwLQd92W2Xx6kQCAwrviw Gzlc2nUqSOQclCXD9ltb+wxet/sjo7TVfvhuOaQ482rTk0MjZsAiuUfEVZkqhD3X FnzoAR/ViIXzhwkp1GZicnBGuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSfxZlN Z1rpR48xYTWgx86RPJG+MB8GA1UdIwQYMBaAFPxK59nj9Bmn0gSlTHnR8++pp9bI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJGMC8zM0FEMEE2MkEz MEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdhZlNCS1ZNZWRIejc2bW4x c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19Fcm4yZVAwR2FmU0JLVk1lZEh6NzZtbjFzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjJGMC8zM0FEMEE2MkEzMEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdh ZlNCS1ZNZWRIejc2bW4xc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvup9bXXbylKSyMDVUZX6XOz0WT6fKeZibKQIgxD9o714c6DpPyenP 5ir9xXUIIhlFPjkCgy5YCvr269drwlspuvznzmDyfTUH+PWj48V5OMDf1PnO/bgN dxp4gL/f30yjkEbd1ksjEO95cpSVYWkp6iO40TmwZCv9zL8nEHeXZYyQvz16O1kT DuzPa+KfHWARhVfkZe7d0TJZGvgaN0K42vJ9ZGpb4tiEO1+ct1nhU0KfJtrfxlDe obFTPY3IOrYLyjwnYeERSdh0jleCJHIfoEmEsl8I9PkCFcqsd+uW64vwwTRnS/tN O0iAkggF4otb6Zp4XMCw2SUcmB62weTp -----END CERTIFICATE-----Generated at Sat Apr 26 14:55:37 2025 by rpki-client