$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft File: _eNrbpSTmOUtleidQL32CyXbabk.mft (raw, json) Hash identifier: AEA7/SPBvBvZ/A1gGFnlfY1qABwfuXSvSjZJNwY+Lss= Subject key identifier: 3E:D9:8D:FE:47:49:2B:D0:09:8D:8C:B0:15:75:77:BC:01:52:8A:0B Authority key identifier: FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9 Certificate issuer: /CN=A916B18B/serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9 Certificate serial: 1850 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft Manifest number: 17D3 Signing time: Thu 24 Apr 2025 16:38:28 +0000 Manifest this update: Thu 24 Apr 2025 16:38:28 +0000 Manifest next update: Thu 01 May 2025 16:38:28 +0000 Files and hashes: 1: _eNrbpSTmOUtleidQL32CyXbabk.crl (hash: oV0eR5W32hX0w+j1t09GkrL9QU/qSFMW1ZodM78q824=) 2: EF885538C28B11EBBF310469C4F9AE02.roa (hash: RF/S4KRa0Daxc1wRMUy6rkjMc6TZCjTUC2lD+JidsGI=) 3: C5B70210E46D11EF82B5C81EC4F9AE02.roa (hash: dIFQqFmec3JjXDYVi/rG2+bG0OcjYLfutfONK3TQQqY=) 4: BE214D76FCFF11EF8523525DC4F9AE02.roa (hash: X8lK8e/7kEUaDOz7jjk427YuafDY1kyCmu7SMczL6Hc=) 5: E807C5CC52A411EEB770555CC4F9AE02.roa (hash: 4QaTtqJ6fCb5Gkmj3dPd7fei5dnVQ+bqBH21oxNpxXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6224 (0x1850) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B18B, serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9 Validity Not Before: Apr 24 16:38:28 2025 GMT Not After : May 1 16:38:28 2025 GMT Subject: CN=680a6904-a3a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8e:14:d3:db:7b:ca:9c:b7:0f:a3:91:5a:fc: 65:84:20:7b:07:e9:46:97:ea:ef:ce:8f:33:c9:84: 6c:f4:4c:13:63:bc:92:b0:cc:12:05:39:4b:58:50: 61:28:ff:c7:b9:a2:87:25:f4:e9:69:04:61:e8:69: a6:b6:74:c4:85:89:49:99:4a:ca:00:ce:66:28:33: 5f:b5:bd:ba:55:3f:68:a9:9c:e3:ea:90:44:72:40: 6c:34:8e:45:60:3f:73:21:5d:fd:05:06:86:56:59: da:7d:6e:19:8e:be:8e:8e:35:ee:5a:19:6c:7d:75: ab:b7:47:c2:ed:bf:d2:ec:b2:01:8e:32:11:32:dd: f7:a2:1c:9b:ab:f0:8a:e9:f4:b9:40:cc:6a:b7:14: 06:5d:26:c1:5d:44:fa:d4:e5:d2:5c:92:df:48:51: 21:86:d0:ec:e5:3d:12:0e:53:a8:c6:f4:90:91:a8: e4:0a:b5:d7:f8:45:82:c4:5b:a2:a5:12:9e:bb:9c: bc:c2:a0:37:d6:38:19:97:5e:bf:b3:bd:a9:ea:2a: 24:71:66:49:25:05:3e:0a:71:89:eb:3f:1a:ad:39: 85:43:f5:62:fa:ef:09:09:9d:0b:4a:18:1f:44:52: 07:43:18:57:d4:2f:71:15:fc:32:cf:5a:c6:5e:4b: 6c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D9:8D:FE:47:49:2B:D0:09:8D:8C:B0:15:75:77:BC:01:52:8A:0B X509v3 Authority Key Identifier: keyid:FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:8c:81:c8:4a:58:28:46:a1:a2:f1:7c:79:6d:8c:ed:ef:f4: 21:97:bd:be:db:e0:a1:c1:f2:68:0c:7d:d0:f7:22:1e:07:3e: ba:89:e9:e9:93:11:e7:32:d2:76:d8:1e:7f:cf:d3:bf:37:97: 6e:0c:ee:5b:03:0f:8f:73:7a:7a:82:7b:3b:64:99:a3:ea:40: de:2f:4a:c0:35:f4:25:31:9b:72:63:a1:7a:62:5e:fa:79:2a: 8a:f0:d9:12:63:18:f7:df:2a:29:3c:08:b6:da:da:03:d2:77: fa:20:c4:e1:22:41:a9:74:5f:1a:bb:29:cd:d5:5e:99:49:9f: ae:64:ab:d2:37:38:e8:77:a0:7e:ce:e7:f3:99:92:51:2e:86: 8d:f0:22:25:50:e5:be:46:09:38:99:e8:41:fd:ba:0f:8a:d8: 77:ee:1c:1a:4f:9d:90:9d:a7:76:eb:de:4a:3f:e4:38:d1:76: e8:61:81:64:50:46:09:f0:48:7e:e5:83:b1:98:01:40:ad:9c: 40:79:f7:af:d4:96:60:dd:fe:67:02:8b:f9:ba:d9:97:1c:fe: 0b:58:57:5e:1c:07:13:b1:82:63:bf:0f:0c:ae:eb:80:6e:ee: 09:2c:ff:8d:7b:0f:bc:d4:29:d0:0b:f8:9f:3d:20:2f:0d:7c: 2f:8f:34:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIxOEIxMTAvBgNVBAUTKEZERTM2QjZFOTQ5Mzk4RTUyRDk1RTg5RDQwQkRGNjBC MjVEQjY5QjkwHhcNMjUwNDI0MTYzODI4WhcNMjUwNTAxMTYzODI4WjAYMRYwFAYD VQQDEw02ODBhNjkwNC1hM2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzI4U09t7ypy3D6ORWvxlhCB7B+lGl+rvzo8zyYRs9EwTY7ySsMwSBTlLWFBh KP/HuaKHJfTpaQRh6GmmtnTEhYlJmUrKAM5mKDNftb26VT9oqZzj6pBEckBsNI5F YD9zIV39BQaGVlnafW4Zjr6OjjXuWhlsfXWrt0fC7b/S7LIBjjIRMt33ohybq/CK 6fS5QMxqtxQGXSbBXUT61OXSXJLfSFEhhtDs5T0SDlOoxvSQkajkCrXX+EWCxFui pRKeu5y8wqA31jgZl16/s72p6iokcWZJJQU+CnGJ6z8arTmFQ/Vi+u8JCZ0LShgf RFIHQxhX1C9xFfwyz1rGXkts/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7Zjf5H SSvQCY2MsBV1d7wBUooLMB8GA1UdIwQYMBaAFP3ja26Uk5jlLZXonUC99gsl22m5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjE4Qi82MjhERTUwMkRG MjMxMUU3OTcyMjVEMkVDNEY5QUUwMi9fZU5yYnBTVG1PVXRsZWlkUUwzMkN5WGJh YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19lTnJicFNUbU9VdGxlaWRRTDMyQ3lYYmFiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjE4Qi82MjhERTUwMkRGMjMxMUU3OTcyMjVEMkVDNEY5QUUwMi9fZU5yYnBTVG1P VXRsZWlkUUwzMkN5WGJhYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3jIHISlgoRqGi8Xx5bYzt7/Qhl72+2+ChwfJoDH3Q9yIeBz66ienp kxHnMtJ22B5/z9O/N5duDO5bAw+Pc3p6gns7ZJmj6kDeL0rANfQlMZtyY6F6Yl76 eSqK8NkSYxj33yopPAi22toD0nf6IMThIkGpdF8auynN1V6ZSZ+uZKvSNzjod6B+ zufzmZJRLoaN8CIlUOW+Rgk4mehB/boPith37hwaT52Qnad2695KP+Q40XboYYFk UEYJ8Eh+5YOxmAFArZxAefev1JZg3f5nAov5utmXHP4LWFdeHAcTsYJjvw8MruuA bu4JLP+New+81CnQC/ifPSAvDXwvjzRA -----END CERTIFICATE-----Generated at Sat Apr 26 15:58:58 2025 by rpki-client