$ rpki-client -vvf rpki.apnic.net/member_repository/A916BEBC/A77826A0CF8C11ED9B7D3A7DC4F9AE02/E6tgyAD59ysvMkTwWMQlg4EJL8U.mft File: E6tgyAD59ysvMkTwWMQlg4EJL8U.mft (raw, json) Hash identifier: Gu9GNPZBIUCMas5c8cZUuVfN4iEmtZpkRyDpv4aJhGY= Subject key identifier: B8:73:87:EA:60:58:97:9F:6B:62:BC:19:02:AD:B0:81:0A:C9:47:92 Authority key identifier: 13:AB:60:C8:00:F9:F7:2B:2F:32:44:F0:58:C4:25:83:81:09:2F:C5 Certificate issuer: /CN=A916BEBC/serialNumber=13AB60C800F9F72B2F3244F058C4258381092FC5 Certificate serial: 0197 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E6tgyAD59ysvMkTwWMQlg4EJL8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BEBC/A77826A0CF8C11ED9B7D3A7DC4F9AE02/E6tgyAD59ysvMkTwWMQlg4EJL8U.mft Manifest number: 018E Signing time: Fri 25 Apr 2025 02:46:29 +0000 Manifest this update: Fri 25 Apr 2025 02:46:29 +0000 Manifest next update: Fri 02 May 2025 02:46:29 +0000 Files and hashes: 1: E6tgyAD59ysvMkTwWMQlg4EJL8U.crl (hash: yYFpryljrJ1bRePIOPFzCOTl3MfVlqR0deKHkbIhfC4=) 2: 482F30EAFBB311EE907B0277C4F9AE02.roa (hash: /mpLPtCK0Z5ebFf60sjr2cpLO+hsmg6KlnTDy0O3SA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BEBC/A77826A0CF8C11ED9B7D3A7DC4F9AE02/E6tgyAD59ysvMkTwWMQlg4EJL8U.crl rsync://rpki.apnic.net/member_repository/A916BEBC/A77826A0CF8C11ED9B7D3A7DC4F9AE02/E6tgyAD59ysvMkTwWMQlg4EJL8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E6tgyAD59ysvMkTwWMQlg4EJL8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BEBC, serialNumber=13AB60C800F9F72B2F3244F058C4258381092FC5 Validity Not Before: Apr 25 02:46:29 2025 GMT Not After : May 2 02:46:29 2025 GMT Subject: CN=680af785-e6eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6a:aa:be:a0:59:c2:3e:47:77:59:80:62:bf: 5c:e8:df:bd:ab:59:99:fb:fc:ab:00:e0:1f:df:2c: 7a:e9:1c:9c:8e:fa:04:e0:43:d5:f5:27:9b:ab:9f: 0d:e4:17:97:9e:59:6b:88:2d:a6:92:6f:98:a1:99: 8a:45:f3:8d:07:54:bb:0a:d4:63:e8:97:da:ff:db: 58:89:30:51:64:a2:37:ec:5a:53:4b:7d:06:49:72: 73:56:ec:e8:d5:32:f3:17:2d:81:f7:ad:c4:df:34: b5:e3:78:35:d0:1a:b8:1d:ff:67:3d:ef:92:05:e6: 92:d1:1a:d8:1a:b1:ee:0b:eb:87:69:35:91:99:c8: ab:98:38:ad:ed:89:01:8f:82:b4:76:02:52:39:98: f1:86:8a:01:a2:13:fc:7f:35:eb:86:76:42:91:ad: cc:b9:42:da:49:7b:d4:e7:51:75:6e:a8:a7:21:4e: 4b:a4:ff:ff:fa:f0:11:2b:bd:71:19:1e:d6:f7:a8: 71:65:bd:58:08:5e:f1:33:c2:d8:0a:a0:c4:a8:ce: a0:2c:17:a2:65:cf:6e:7a:c2:0d:d0:68:1e:b5:4c: ee:b0:bc:25:cb:43:15:c3:0f:72:17:8d:4a:7f:4c: b3:9f:fc:41:8d:52:dd:19:d8:cb:8d:c6:67:89:7c: 82:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:73:87:EA:60:58:97:9F:6B:62:BC:19:02:AD:B0:81:0A:C9:47:92 X509v3 Authority Key Identifier: keyid:13:AB:60:C8:00:F9:F7:2B:2F:32:44:F0:58:C4:25:83:81:09:2F:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BEBC/A77826A0CF8C11ED9B7D3A7DC4F9AE02/E6tgyAD59ysvMkTwWMQlg4EJL8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E6tgyAD59ysvMkTwWMQlg4EJL8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BEBC/A77826A0CF8C11ED9B7D3A7DC4F9AE02/E6tgyAD59ysvMkTwWMQlg4EJL8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:eb:5f:34:fb:46:15:2a:59:e1:96:5e:b7:8a:c6:31:86:44: e3:55:b1:d6:67:40:df:b9:30:bd:3f:93:60:9a:4e:e9:ff:57: e3:0a:92:3e:31:0d:3a:1e:d3:0b:3b:e8:6f:47:47:d4:36:75: 58:46:f1:53:0e:d6:09:57:76:53:8b:8f:fb:40:57:d6:25:ae: 7a:14:41:1a:ba:dc:96:52:f9:bd:53:66:84:fd:e4:54:89:55: fe:65:6a:80:1f:de:c3:6b:b8:51:be:73:a7:36:19:4f:86:1b: 08:e2:cb:ce:ea:35:57:0d:77:06:66:ef:b4:e3:b5:d1:3d:ed: 8f:1a:c8:5d:dc:eb:ce:73:a4:59:14:c3:09:e6:3f:c1:f0:60: 6b:fa:3e:3b:3b:ed:58:21:3e:ea:c3:76:c0:1a:16:e4:2e:d7: 87:16:18:dc:ee:8d:02:8e:6d:14:d2:ad:72:6f:da:3a:04:f6: 19:28:4b:56:1d:de:b4:7b:d3:12:bc:1b:30:a1:e6:6c:6c:1d: bf:f3:93:a6:eb:b3:4e:02:4c:63:2f:5f:05:30:59:b5:9c:f9: d2:b9:01:e3:8e:21:14:50:e1:94:db:45:cf:c3:e8:2a:9d:d2: 3c:f5:12:13:7b:37:b8:b0:14:75:f1:46:2c:6d:eb:18:b4:c5: 9f:60:72:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJFQkMxMTAvBgNVBAUTKDEzQUI2MEM4MDBGOUY3MkIyRjMyNDRGMDU4QzQyNTgz ODEwOTJGQzUwHhcNMjUwNDI1MDI0NjI5WhcNMjUwNTAyMDI0NjI5WjAYMRYwFAYD VQQDEw02ODBhZjc4NS1lNmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGqqvqBZwj5Hd1mAYr9c6N+9q1mZ+/yrAOAf3yx66RycjvoE4EPV9Sebq58N 5BeXnllriC2mkm+YoZmKRfONB1S7CtRj6Jfa/9tYiTBRZKI37FpTS30GSXJzVuzo 1TLzFy2B963E3zS143g10Bq4Hf9nPe+SBeaS0RrYGrHuC+uHaTWRmcirmDit7YkB j4K0dgJSOZjxhooBohP8fzXrhnZCka3MuULaSXvU51F1bqinIU5LpP//+vARK71x GR7W96hxZb1YCF7xM8LYCqDEqM6gLBeiZc9uesIN0GgetUzusLwly0MVww9yF41K f0yzn/xBjVLdGdjLjcZniXyCTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhzh+pg WJefa2K8GQKtsIEKyUeSMB8GA1UdIwQYMBaAFBOrYMgA+fcrLzJE8FjEJYOBCS/F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkVCQy9BNzc4MjZBMENG OEMxMUVEOUI3RDNBN0RDNEY5QUUwMi9FNnRneUFENTl5c3ZNa1R3V01RbGc0RUpM OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U2dGd5QUQ1OXlzdk1rVHdXTVFsZzRFSkw4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkVCQy9BNzc4MjZBMENGOEMxMUVEOUI3RDNBN0RDNEY5QUUwMi9FNnRneUFENTl5 c3ZNa1R3V01RbGc0RUpMOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC26180+0YVKlnhll63isYxhkTjVbHWZ0DfuTC9P5Ngmk7p/1fjCpI+ MQ06HtMLO+hvR0fUNnVYRvFTDtYJV3ZTi4/7QFfWJa56FEEautyWUvm9U2aE/eRU iVX+ZWqAH97Da7hRvnOnNhlPhhsI4svO6jVXDXcGZu+047XRPe2PGshd3OvOc6RZ FMMJ5j/B8GBr+j47O+1YIT7qw3bAGhbkLteHFhjc7o0Cjm0U0q1yb9o6BPYZKEtW Hd60e9MSvBswoeZsbB2/85Om67NOAkxjL18FMFm1nPnSuQHjjiEUUOGU20XPw+gq ndI89RITeze4sBR18UYsbesYtMWfYHJY -----END CERTIFICATE-----Generated at Sat Apr 26 14:10:26 2025 by rpki-client