$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft File: enhVXghERXV_vNAN3R10w2nLoLA.mft (raw, json) Hash identifier: fF2DZE2pcsIEnC5dFa8dDzV+2psWGfOPQXHB7K/Pncc= Subject key identifier: 23:34:F5:34:09:39:77:72:EB:FC:46:FE:E3:F8:FD:75:9F:FE:80:0D Authority key identifier: 7A:78:55:5E:08:44:45:75:7F:BC:D0:0D:DD:1D:74:C3:69:CB:A0:B0 Certificate issuer: /CN=A914E6AA/serialNumber=7A78555E084445757FBCD00DDD1D74C369CBA0B0 Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft Manifest number: 0897 Signing time: Thu 24 Apr 2025 22:45:48 +0000 Manifest this update: Thu 24 Apr 2025 22:45:47 +0000 Manifest next update: Thu 01 May 2025 22:45:47 +0000 Files and hashes: 1: enhVXghERXV_vNAN3R10w2nLoLA.crl (hash: 73P6l/qtTJlxM8mRcM7enkbgjx9hGs6R4n8nfrrGLNw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:45:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA, serialNumber=7A78555E084445757FBCD00DDD1D74C369CBA0B0 Validity Not Before: Apr 24 22:45:47 2025 GMT Not After : May 1 22:45:47 2025 GMT Subject: CN=680abf1b-2864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e0:f9:c8:b0:27:98:16:fc:24:60:a3:33:34: ad:5e:60:1f:f3:31:00:de:ee:84:1d:59:1d:18:57: a4:51:10:12:7b:a2:e9:b5:51:9a:d7:d2:9e:39:3f: 8b:91:1e:72:54:02:64:f4:4a:2f:a1:12:7c:4b:3f: b2:37:a7:c6:de:da:ec:14:a4:90:0f:14:f6:af:9c: 15:8b:1b:03:8d:50:3c:9d:3a:d8:25:9a:0a:23:30: 36:ff:dc:04:6c:9a:91:e2:ef:3f:2c:93:3c:93:25: 19:5f:de:84:de:8b:cd:88:8b:ce:82:19:6a:72:2e: 18:c0:fa:eb:c9:5b:b0:e6:c5:c6:4b:06:36:a6:ef: 2f:7f:1a:e5:81:d8:af:aa:f1:6f:eb:a9:52:00:8b: c2:d2:b3:fd:bc:47:e7:f5:bb:91:0e:c6:2e:01:3d: b3:2c:5d:c1:63:13:ad:7d:a6:d1:ab:ad:9c:9c:16: 83:50:d2:c8:81:65:2d:1f:3f:c7:17:38:3a:95:ab: ff:4c:f6:d0:0f:b6:d3:55:70:a5:6d:57:90:79:b7: 9a:06:4b:ac:a1:72:9e:1e:d7:37:1b:f2:d3:43:1c: 5c:53:9e:13:7e:e5:11:e9:6f:4f:2d:94:31:ee:a3: f3:6c:7d:e5:35:40:5d:5e:ae:8f:1d:9f:ff:eb:33: 4f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:34:F5:34:09:39:77:72:EB:FC:46:FE:E3:F8:FD:75:9F:FE:80:0D X509v3 Authority Key Identifier: keyid:7A:78:55:5E:08:44:45:75:7F:BC:D0:0D:DD:1D:74:C3:69:CB:A0:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:f1:aa:7b:60:a0:4f:12:7b:73:91:02:28:ca:42:ca:4d:a7: b6:a4:f3:8d:fd:d7:2d:6f:01:e8:49:df:9a:fa:db:39:e6:7f: bf:e1:d4:16:45:37:3d:e2:39:0e:31:35:c8:cc:46:91:5d:b0: 80:48:4a:bc:02:a8:f3:a3:de:84:4e:b4:b2:a5:b9:3b:3f:41: 59:4b:9a:01:9d:25:23:3b:28:b9:fd:74:d5:00:74:9d:a7:7e: d1:3b:be:25:71:5a:5e:88:e5:ed:63:30:2f:bb:17:03:62:77: dd:f7:a0:7f:f7:bf:ff:5f:2b:1e:9c:f9:fa:4e:52:e3:de:b2: 12:da:b4:a9:14:4f:9d:48:78:6e:3c:17:d7:6a:51:cd:ac:37: 29:07:db:53:df:2b:3f:c4:11:6a:24:15:ad:5a:14:95:cf:83: 48:c1:35:1e:2d:e5:f2:06:05:d3:96:57:ec:58:4c:79:cd:7b: eb:ea:b5:1c:7f:9b:4b:d3:eb:bd:82:9d:a9:bf:ca:a0:e4:25: 00:95:1a:84:e9:0a:6d:eb:12:d5:b7:5d:9f:e5:fe:f1:15:91: e3:78:34:8a:d0:61:e0:b4:ad:8a:65:73:98:b3:59:1d:74:1c: 25:c2:15:05:5d:9b:34:fd:a8:e1:54:36:dd:ab:ef:01:b5:56: 1f:c6:52:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2QUExMTAvBgNVBAUTKDdBNzg1NTVFMDg0NDQ1NzU3RkJDRDAwREREMUQ3NEMz NjlDQkEwQjAwHhcNMjUwNDI0MjI0NTQ3WhcNMjUwNTAxMjI0NTQ3WjAYMRYwFAYD VQQDEw02ODBhYmYxYi0yODY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOD5yLAnmBb8JGCjMzStXmAf8zEA3u6EHVkdGFekURASe6LptVGa19KeOT+L kR5yVAJk9EovoRJ8Sz+yN6fG3trsFKSQDxT2r5wVixsDjVA8nTrYJZoKIzA2/9wE bJqR4u8/LJM8kyUZX96E3ovNiIvOghlqci4YwPrryVuw5sXGSwY2pu8vfxrlgdiv qvFv66lSAIvC0rP9vEfn9buRDsYuAT2zLF3BYxOtfabRq62cnBaDUNLIgWUtHz/H Fzg6lav/TPbQD7bTVXClbVeQebeaBkusoXKeHtc3G/LTQxxcU54TfuUR6W9PLZQx 7qPzbH3lNUBdXq6PHZ//6zNPjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCM09TQJ OXdy6/xG/uP4/XWf/oANMB8GA1UdIwQYMBaAFHp4VV4IREV1f7zQDd0ddMNpy6Cw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTZBQS84RURCMTA3RUFE QTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9lbmhWWGdoRVJYVl92TkFOM1IxMHcybkxv TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VuaFZYZ2hFUlhWX3ZOQU4zUjEwdzJuTG9MQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTZBQS84RURCMTA3RUFEQTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9lbmhWWGdoRVJY Vl92TkFOM1IxMHcybkxvTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA18ap7YKBPEntzkQIoykLKTae2pPON/dctbwHoSd+a+ts55n+/4dQW RTc94jkOMTXIzEaRXbCASEq8Aqjzo96ETrSypbk7P0FZS5oBnSUjOyi5/XTVAHSd p37RO74lcVpeiOXtYzAvuxcDYnfd96B/97//XysenPn6TlLj3rIS2rSpFE+dSHhu PBfXalHNrDcpB9tT3ys/xBFqJBWtWhSVz4NIwTUeLeXyBgXTllfsWEx5zXvr6rUc f5tL0+u9gp2pv8qg5CUAlRqE6Qpt6xLVt12f5f7xFZHjeDSK0GHgtK2KZXOYs1kd dBwlwhUFXZs0/ajhVDbdq+8BtVYfxlJo -----END CERTIFICATE-----Generated at Sat Apr 26 08:03:10 2025 by rpki-client