$ rpki-client -vvf rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft File: EA50kJn6U4BRdLz4MMPrIcUwMac.mft (raw, json) Hash identifier: /rZnIW/ums8aKuFfWVoZtCXo76aNpoPxDxV3TmffaYc= Subject key identifier: 83:37:C0:DE:37:A4:50:D7:3F:2C:11:EE:9A:77:0E:85:A3:F3:21:A5 Authority key identifier: 10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7 Certificate issuer: /CN=A916A027/serialNumber=100E749099FA53805174BCF830C3EB21C53031A7 Certificate serial: 043A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft Manifest number: 0436 Signing time: Fri 25 Apr 2025 00:04:35 +0000 Manifest this update: Fri 25 Apr 2025 00:04:35 +0000 Manifest next update: Fri 02 May 2025 00:04:35 +0000 Files and hashes: 1: EA50kJn6U4BRdLz4MMPrIcUwMac.crl (hash: rBO06zvR9ApSI8tNi+Q78ts6Q1iTPeU1szAjdV5phFA=) 2: 385B6DAE577411ECBF021B66C4F9AE02.roa (hash: XjunMNzYncJwuOqeAscMtpgQiJ/lvJGQsFB1GF7BxVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1082 (0x43a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A027, serialNumber=100E749099FA53805174BCF830C3EB21C53031A7 Validity Not Before: Apr 25 00:04:35 2025 GMT Not After : May 2 00:04:35 2025 GMT Subject: CN=680ad193-b875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:37:82:4a:64:ff:d8:c5:0a:85:4a:1b:05:37: 30:85:e1:ab:aa:b7:7f:30:c2:f1:b9:68:f8:8d:a4: 47:eb:67:af:50:52:f6:73:ff:ba:ff:f8:f7:db:8b: e8:46:f2:89:10:31:0a:84:22:7c:a3:9c:c8:6f:2d: 06:ca:e1:47:58:70:fd:a8:3b:2f:7f:c3:23:f0:9d: fd:da:a3:6b:cd:a3:d5:eb:61:6d:fd:a2:d6:e4:7d: 31:38:d7:92:bb:89:17:b3:54:11:7b:6b:12:3f:33: 52:9d:09:01:f0:e3:fe:db:b5:ea:84:01:ec:1a:08: 40:b1:9a:60:6d:12:64:4c:57:92:cd:22:cd:e5:c6: f1:8d:0c:f6:3d:68:c7:af:ef:f0:a0:89:a4:93:a3: e4:db:39:2f:e6:0c:f2:db:45:91:d4:78:cf:77:1b: 60:c0:4d:a1:58:19:6f:72:08:d3:f0:5a:02:b0:f0: e7:cd:9e:7a:81:52:89:1f:c0:40:cb:66:c5:4c:e4: a4:cc:37:86:92:b4:ec:7e:97:85:0b:d9:2c:c2:6f: 5e:42:d9:9e:b1:64:c8:c3:c9:f6:68:6d:1e:0a:22: 58:a1:25:8e:a2:f7:de:1c:5c:4f:a1:b3:51:d3:a8: 3b:70:d5:aa:0d:a8:9c:b5:38:83:8b:6a:d1:93:d7: 80:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:37:C0:DE:37:A4:50:D7:3F:2C:11:EE:9A:77:0E:85:A3:F3:21:A5 X509v3 Authority Key Identifier: keyid:10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:82:7c:5a:72:9c:e2:99:a7:b1:76:95:0c:76:38:58:5b:7c: cd:4a:7d:20:86:65:20:9d:ba:82:dc:d4:b9:92:34:8f:f1:bb: 9b:e8:e3:08:b9:82:a3:26:01:9f:02:14:b1:3e:9d:5e:14:c5: a9:6e:a1:ab:f0:20:4f:35:60:2c:e8:40:4c:d2:14:f1:cc:5f: a8:b1:cc:ea:85:89:0d:67:ce:b4:a7:7d:6a:20:19:67:2d:2c: c3:74:ae:23:0e:6b:c3:7a:f4:43:27:5c:88:35:6a:5f:17:d3: ff:62:55:c3:ab:91:c3:d8:c7:22:5b:6c:ad:b5:f8:7b:43:b8: 5e:89:88:8b:c9:b1:cd:f0:f8:42:9e:5a:05:9f:0b:da:e7:f1: 9d:04:be:64:59:e1:d7:ad:d9:35:63:33:b9:eb:3f:95:50:d8: 6a:42:63:3f:b1:8f:6a:10:bf:5f:97:1b:39:38:e4:f5:9f:7a: cc:08:0e:58:ec:03:19:26:e2:e1:0f:8a:41:51:0e:58:4a:a5: db:05:59:ff:26:cf:66:fe:24:11:44:7b:41:ac:32:52:9e:c5: 73:39:f4:c8:64:62:ee:98:5d:d6:a0:5a:8e:88:1a:e3:6a:ad: 60:d6:37:26:34:13:ea:11:f1:5e:cf:94:92:fd:8c:de:d5:51: db:ae:8f:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwMjcxMTAvBgNVBAUTKDEwMEU3NDkwOTlGQTUzODA1MTc0QkNGODMwQzNFQjIx QzUzMDMxQTcwHhcNMjUwNDI1MDAwNDM1WhcNMjUwNTAyMDAwNDM1WjAYMRYwFAYD VQQDEw02ODBhZDE5My1iODc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDeCSmT/2MUKhUobBTcwheGrqrd/MMLxuWj4jaRH62evUFL2c/+6//j324vo RvKJEDEKhCJ8o5zIby0GyuFHWHD9qDsvf8Mj8J392qNrzaPV62Ft/aLW5H0xONeS u4kXs1QRe2sSPzNSnQkB8OP+27XqhAHsGghAsZpgbRJkTFeSzSLN5cbxjQz2PWjH r+/woImkk6Pk2zkv5gzy20WR1HjPdxtgwE2hWBlvcgjT8FoCsPDnzZ56gVKJH8BA y2bFTOSkzDeGkrTsfpeFC9kswm9eQtmesWTIw8n2aG0eCiJYoSWOovfeHFxPobNR 06g7cNWqDaictTiDi2rRk9eAFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIM3wN43 pFDXPywR7pp3DoWj8yGlMB8GA1UdIwQYMBaAFBAOdJCZ+lOAUXS8+DDD6yHFMDGn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTAyNy8wNDIwN0RGODU3 NzAxMUVDQjk1NzdBNUJDNEY5QUUwMi9FQTUwa0puNlU0QlJkTHo0TU1QckljVXdN YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBNTBrSm42VTRCUmRMejRNTVBySWNVd01hYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTAyNy8wNDIwN0RGODU3NzAxMUVDQjk1NzdBNUJDNEY5QUUwMi9FQTUwa0puNlU0 QlJkTHo0TU1QckljVXdNYWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPgnxacpzimaexdpUMdjhYW3zNSn0ghmUgnbqC3NS5kjSP8bub6OMI uYKjJgGfAhSxPp1eFMWpbqGr8CBPNWAs6EBM0hTxzF+osczqhYkNZ860p31qIBln LSzDdK4jDmvDevRDJ1yINWpfF9P/YlXDq5HD2MciW2yttfh7Q7heiYiLybHN8PhC nloFnwva5/GdBL5kWeHXrdk1YzO56z+VUNhqQmM/sY9qEL9flxs5OOT1n3rMCA5Y 7AMZJuLhD4pBUQ5YSqXbBVn/Js9m/iQRRHtBrDJSnsVzOfTIZGLumF3WoFqOiBrj aq1g1jcmNBPqEfFez5SS/Yze1VHbro/S -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:49 2025 by rpki-client