$ rpki-client -vvf rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.mft File: EgT-MVwAkLFdkSW0KYVaBvTUIR0.mft (raw, json) Hash identifier: nyKvmPaSUVafXaMM6CtSbr6QrBhKtKr2vio5yRKvmgQ= Subject key identifier: 14:98:0D:A2:A1:EF:FB:CE:4E:59:0F:04:72:84:DE:42:FE:8F:EF:72 Authority key identifier: 12:04:FE:31:5C:00:90:B1:5D:91:25:B4:29:85:5A:06:F4:D4:21:1D Certificate issuer: /CN=A914B46A/serialNumber=1204FE315C0090B15D9125B429855A06F4D4211D Certificate serial: 0562 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EgT-MVwAkLFdkSW0KYVaBvTUIR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.mft Manifest number: 0560 Signing time: Thu 24 Apr 2025 23:10:34 +0000 Manifest this update: Thu 24 Apr 2025 23:10:33 +0000 Manifest next update: Thu 01 May 2025 23:10:33 +0000 Files and hashes: 1: EgT-MVwAkLFdkSW0KYVaBvTUIR0.crl (hash: AwrXCyCQQPRp9cmcaq5ms2li4RPFvx6BZrunr9hQb88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.crl rsync://rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EgT-MVwAkLFdkSW0KYVaBvTUIR0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1378 (0x562) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B46A, serialNumber=1204FE315C0090B15D9125B429855A06F4D4211D Validity Not Before: Apr 24 23:10:33 2025 GMT Not After : May 1 23:10:33 2025 GMT Subject: CN=680ac4ea-7d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:46:82:fe:46:44:63:08:68:be:47:5c:d8:9e: 28:76:50:97:31:25:25:c0:1f:c4:64:bc:37:d4:b0: 9d:f2:5f:7a:92:fa:c6:6b:4d:58:ce:c5:95:08:a7: ed:17:fd:07:c0:c2:08:3d:32:c5:4e:a7:14:6f:98: 25:4f:3b:74:09:e1:18:50:cf:80:d5:14:4b:97:0f: 6f:90:e2:7f:32:2d:fc:34:cc:38:8e:4b:49:78:31: 63:c6:e6:f8:ac:1c:48:4a:89:77:9b:89:7b:cb:99: fc:1c:a5:78:13:86:18:d2:72:77:d7:db:54:43:02: 87:7f:5a:48:b2:9a:b4:ad:15:02:9a:c8:1f:61:c7: f4:79:9e:42:5e:e6:23:8c:2c:81:6e:24:4d:cc:38: 9e:0f:fd:d9:9f:9b:73:11:99:aa:73:41:f2:49:df: 1e:30:43:49:98:a9:b0:85:cd:b4:59:e3:10:94:d6: 5b:ad:10:2e:05:b6:c6:5c:4b:5b:28:b0:50:b4:e2: 38:9c:25:fc:97:fd:dd:5f:ee:5b:48:d2:2b:7e:0e: 92:bc:b7:bc:be:78:ce:c8:f2:e3:db:0f:ea:07:03: b6:84:1d:19:e1:1d:ca:bb:c9:78:68:76:c4:45:67: 0f:b4:91:f6:38:41:ff:e9:6f:3f:16:ab:f7:ec:c5: e9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:98:0D:A2:A1:EF:FB:CE:4E:59:0F:04:72:84:DE:42:FE:8F:EF:72 X509v3 Authority Key Identifier: keyid:12:04:FE:31:5C:00:90:B1:5D:91:25:B4:29:85:5A:06:F4:D4:21:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EgT-MVwAkLFdkSW0KYVaBvTUIR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:2c:6c:f7:1b:c9:02:6e:0f:7d:1c:07:4c:9f:65:0f:d5:ed: 10:05:83:4a:bc:1c:ff:9a:2e:93:be:48:f2:74:0f:4d:0c:1a: fb:a2:fa:1c:0a:7e:9c:d5:85:30:66:38:f8:09:d3:47:7a:8e: ab:7f:55:d9:a8:05:ce:ca:8e:e3:dd:ff:5b:c0:c3:1c:92:c7: 3b:06:dd:e7:e9:33:e9:3b:3b:99:d8:e4:2e:43:e3:d7:30:35: 53:b0:56:d1:47:2e:58:b4:22:02:a7:39:a0:b8:8e:20:49:dc: 2c:54:dc:a5:4a:a6:a2:60:87:ad:d0:5e:02:8c:6e:01:86:e7: 34:aa:4d:f7:5f:00:60:ef:f2:2e:2a:2b:12:ed:5b:3a:3a:81: 65:05:b9:f8:50:de:3b:20:bc:f0:ce:c2:a1:78:25:d5:c1:4c: f6:d6:84:25:d6:ef:67:ba:9f:bc:50:c5:20:25:67:89:82:ca: d3:c5:f0:9e:6f:a8:d2:7f:40:98:3a:56:af:56:f2:82:1e:4f: 41:f4:87:67:1e:73:4e:87:ba:36:4f:cd:83:1a:64:53:42:ed: ce:46:09:d7:b7:85:1d:ac:2c:21:b9:ab:ee:46:d5:67:22:bf: 38:19:30:5a:75:e1:68:43:32:01:f4:3d:ce:a4:5e:f1:2a:2f: d0:8a:89:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI0NkExMTAvBgNVBAUTKDEyMDRGRTMxNUMwMDkwQjE1RDkxMjVCNDI5ODU1QTA2 RjRENDIxMUQwHhcNMjUwNDI0MjMxMDMzWhcNMjUwNTAxMjMxMDMzWjAYMRYwFAYD VQQDEw02ODBhYzRlYS03ZDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukaC/kZEYwhovkdc2J4odlCXMSUlwB/EZLw31LCd8l96kvrGa01YzsWVCKft F/0HwMIIPTLFTqcUb5glTzt0CeEYUM+A1RRLlw9vkOJ/Mi38NMw4jktJeDFjxub4 rBxISol3m4l7y5n8HKV4E4YY0nJ319tUQwKHf1pIspq0rRUCmsgfYcf0eZ5CXuYj jCyBbiRNzDieD/3Zn5tzEZmqc0HySd8eMENJmKmwhc20WeMQlNZbrRAuBbbGXEtb KLBQtOI4nCX8l/3dX+5bSNIrfg6SvLe8vnjOyPLj2w/qBwO2hB0Z4R3Ku8l4aHbE RWcPtJH2OEH/6W8/Fqv37MXp4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSYDaKh 7/vOTlkPBHKE3kL+j+9yMB8GA1UdIwQYMBaAFBIE/jFcAJCxXZEltCmFWgb01CEd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjQ2QS8wMEE0RDVGMEUw OTkxMUVCOTI3NjBCNERDNEY5QUUwMi9FZ1QtTVZ3QWtMRmRrU1cwS1lWYUJ2VFVJ UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VnVC1NVndBa0xGZGtTVzBLWVZhQnZUVUlSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjQ2QS8wMEE0RDVGMEUwOTkxMUVCOTI3NjBCNERDNEY5QUUwMi9FZ1QtTVZ3QWtM RmRrU1cwS1lWYUJ2VFVJUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjLGz3G8kCbg99HAdMn2UP1e0QBYNKvBz/mi6TvkjydA9NDBr7ovoc Cn6c1YUwZjj4CdNHeo6rf1XZqAXOyo7j3f9bwMMcksc7Bt3n6TPpOzuZ2OQuQ+PX MDVTsFbRRy5YtCICpzmguI4gSdwsVNylSqaiYIet0F4CjG4Bhuc0qk33XwBg7/Iu KisS7Vs6OoFlBbn4UN47ILzwzsKheCXVwUz21oQl1u9nup+8UMUgJWeJgsrTxfCe b6jSf0CYOlavVvKCHk9B9IdnHnNOh7o2T82DGmRTQu3ORgnXt4UdrCwhuavuRtVn Ir84GTBadeFoQzIB9D3OpF7xKi/QiolD -----END CERTIFICATE-----Generated at Sat Apr 26 16:50:07 2025 by rpki-client