$ rpki-client -vvf rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft File: Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft (raw, json) Hash identifier: q87W0a9IO2uAricrp4SWrCEs5vW9vOyaVwBEe/hELtQ= Subject key identifier: C5:8E:75:A2:4C:BB:78:BE:90:2A:08:7F:05:FB:33:33:C7:EE:7B:10 Authority key identifier: 11:E7:3F:52:BF:0F:58:6F:2B:9F:A6:9E:E2:CA:15:F2:18:5F:66:C2 Certificate issuer: /CN=A916E39F/serialNumber=11E73F52BF0F586F2B9FA69EE2CA15F2185F66C2 Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft Manifest number: BA Signing time: Fri 25 Apr 2025 04:58:25 +0000 Manifest this update: Fri 25 Apr 2025 04:58:25 +0000 Manifest next update: Fri 02 May 2025 04:58:25 +0000 Files and hashes: 1: Eec_Ur8PWG8rn6ae4soV8hhfZsI.crl (hash: 8YFRLs6YIb0p5ilhgz7aadWZcRoTa/D9xtg9vhr8duI=) 2: 66387A6C087211EF9EDFC673C4F9AE02.roa (hash: HS/fldQZ4RrI6nmzaLMIdIrXDhqFavfV6tsG7wDJ0JM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.crl rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E39F, serialNumber=11E73F52BF0F586F2B9FA69EE2CA15F2185F66C2 Validity Not Before: Apr 25 04:58:25 2025 GMT Not After : May 2 04:58:25 2025 GMT Subject: CN=680b1671-f617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:50:70:f5:6a:f0:6c:53:9b:3b:63:de:dd:8c: 8e:a5:e7:74:ce:9f:01:73:98:a6:83:ab:a6:51:e4: 9f:65:4d:60:7f:76:02:8f:36:3f:40:1e:7d:aa:3c: 7d:0a:44:72:cf:bd:93:4a:61:02:2d:1d:36:4b:76: e5:cd:af:08:ad:20:6e:5e:99:2f:cd:a9:ed:0a:7e: d7:ad:dc:13:47:6f:24:10:c3:10:e8:f8:bc:df:9c: 9c:05:77:a2:8f:fc:57:6e:5c:b0:59:8f:cb:d1:0a: 45:68:70:84:03:28:33:fa:69:c6:0f:54:e0:51:00: fc:e5:5f:c1:52:4b:75:f0:ec:b9:13:4b:0a:a8:a7: e3:14:65:d9:6d:94:83:9e:69:82:c3:0d:13:e4:cc: fb:9f:a0:82:31:d4:2d:9c:87:8d:d9:40:69:52:3c: 47:32:0d:05:27:fa:13:d9:c6:1a:2d:11:9b:77:23: 3b:f6:d4:95:a8:7f:2f:87:5a:00:a8:bc:17:fe:5a: f1:a8:1d:d5:21:88:a9:22:80:98:de:49:04:07:4b: ea:96:ca:bf:a8:c5:c0:f7:78:57:e3:f7:72:4a:cb: 80:76:a0:e3:44:b9:ca:89:91:53:0c:8a:9b:f0:b9: 5a:8e:bd:fd:50:57:d6:f7:45:3c:42:2c:6e:5d:3c: cb:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8E:75:A2:4C:BB:78:BE:90:2A:08:7F:05:FB:33:33:C7:EE:7B:10 X509v3 Authority Key Identifier: keyid:11:E7:3F:52:BF:0F:58:6F:2B:9F:A6:9E:E2:CA:15:F2:18:5F:66:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:db:d9:c0:d8:d2:81:c1:70:3c:d9:5b:7c:89:d0:60:81:7e: 8d:9c:a9:fc:82:e3:1a:1c:97:ff:7f:f2:83:4c:e1:1e:df:83: 6f:b3:52:d0:02:67:77:43:c5:e6:08:20:d1:97:b4:28:5e:47: bf:24:7a:f3:08:83:a6:12:aa:c6:a6:bb:72:97:67:92:01:fd: 4b:e0:3c:e8:5e:a3:b9:d0:6b:fd:b9:7b:3b:2d:f9:1a:af:44: 55:33:f6:d8:0a:e0:a7:09:44:44:28:1a:fe:af:41:91:ed:cc: 17:74:fb:87:fa:ad:ea:ac:45:44:c6:0f:a1:9b:77:9e:8f:0f: d5:2f:e6:d8:87:a4:1b:d3:e3:3b:16:e3:51:02:e1:6b:57:2f: e9:af:81:95:96:6d:a4:23:27:30:8d:c1:d2:b4:82:78:61:92: d8:1a:69:e9:7a:bd:87:ff:32:21:21:a4:4f:0c:cf:ed:a5:a2: 78:f5:ce:8c:bd:60:61:30:05:0a:52:99:43:5d:80:49:1a:f5: 1e:f7:e3:65:60:1f:94:c5:f5:81:da:20:ec:19:32:5d:3f:e2: 22:7f:9e:d4:6f:07:f4:be:87:34:ca:eb:c3:07:c8:fa:50:ee: dc:03:1c:e1:08:17:da:d3:9f:51:d9:40:8f:3d:f0:a8:c1:e8: b4:89:ba:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUzOUYxMTAvBgNVBAUTKDExRTczRjUyQkYwRjU4NkYyQjlGQTY5RUUyQ0ExNUYy MTg1RjY2QzIwHhcNMjUwNDI1MDQ1ODI1WhcNMjUwNTAyMDQ1ODI1WjAYMRYwFAYD VQQDEw02ODBiMTY3MS1mNjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6lBw9WrwbFObO2Pe3YyOped0zp8Bc5img6umUeSfZU1gf3YCjzY/QB59qjx9 CkRyz72TSmECLR02S3blza8IrSBuXpkvzantCn7XrdwTR28kEMMQ6Pi835ycBXei j/xXblywWY/L0QpFaHCEAygz+mnGD1TgUQD85V/BUkt18Oy5E0sKqKfjFGXZbZSD nmmCww0T5Mz7n6CCMdQtnIeN2UBpUjxHMg0FJ/oT2cYaLRGbdyM79tSVqH8vh1oA qLwX/lrxqB3VIYipIoCY3kkEB0vqlsq/qMXA93hX4/dySsuAdqDjRLnKiZFTDIqb 8Llajr39UFfW90U8QixuXTzLIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWOdaJM u3i+kCoIfwX7MzPH7nsQMB8GA1UdIwQYMBaAFBHnP1K/D1hvK5+mnuLKFfIYX2bC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTM5Ri9CNTA5NUEyMjA4 NkMxMUVGQTA4NTJFMTZDNEY5QUUwMi9FZWNfVXI4UFdHOHJuNmFlNHNvVjhoaGZa c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VlY19VcjhQV0c4cm42YWU0c29WOGhoZlpzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTM5Ri9CNTA5NUEyMjA4NkMxMUVGQTA4NTJFMTZDNEY5QUUwMi9FZWNfVXI4UFdH OHJuNmFlNHNvVjhoaGZac0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBy29nA2NKBwXA82Vt8idBggX6NnKn8guMaHJf/f/KDTOEe34Nvs1LQ Amd3Q8XmCCDRl7QoXke/JHrzCIOmEqrGprtyl2eSAf1L4DzoXqO50Gv9uXs7Lfka r0RVM/bYCuCnCUREKBr+r0GR7cwXdPuH+q3qrEVExg+hm3eejw/VL+bYh6Qb0+M7 FuNRAuFrVy/pr4GVlm2kIycwjcHStIJ4YZLYGmnper2H/zIhIaRPDM/tpaJ49c6M vWBhMAUKUplDXYBJGvUe9+NlYB+UxfWB2iDsGTJdP+Iif57Ubwf0voc0yuvDB8j6 UO7cAxzhCBfa059R2UCPPfCowei0ibrp -----END CERTIFICATE-----Generated at Sat Apr 26 15:02:55 2025 by rpki-client