$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft File: ezWJ19jaa93mDzmOflK6heWuM1c.mft (raw, json) Hash identifier: F0OHPCW8vXgtPaR8Km6XFEtBJVEEWNegBAOaejZpFpA= Subject key identifier: C1:2D:F0:E1:D9:D7:34:61:D6:38:1F:55:47:82:6C:74:5C:FD:AB:AF Authority key identifier: 7B:35:89:D7:D8:DA:6B:DD:E6:0F:39:8E:7E:52:BA:85:E5:AE:33:57 Certificate issuer: /CN=A916EF76/serialNumber=7B3589D7D8DA6BDDE60F398E7E52BA85E5AE3357 Certificate serial: 17E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft Manifest number: 17E1 Signing time: Thu 24 Apr 2025 16:34:40 +0000 Manifest this update: Thu 24 Apr 2025 16:34:39 +0000 Manifest next update: Thu 01 May 2025 16:34:39 +0000 Files and hashes: 1: ezWJ19jaa93mDzmOflK6heWuM1c.crl (hash: 7z1R5hRxn7dPjzpJSkazQgah1sgtZ/tXvv/k418/8Z8=) 2: B4F0A9F800A011E8B6C9E20AC4F9AE02.roa (hash: nE2SMAFaQ2lno0OXjrXqdk80Cil1YlPktKv0bTOPaBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.crl rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:34:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6121 (0x17e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EF76, serialNumber=7B3589D7D8DA6BDDE60F398E7E52BA85E5AE3357 Validity Not Before: Apr 24 16:34:39 2025 GMT Not After : May 1 16:34:39 2025 GMT Subject: CN=680a681f-130b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:92:01:6f:d7:be:b6:9b:18:3f:5c:9c:02:53: 32:47:a5:0a:79:bf:73:2b:76:67:04:2c:8b:12:ec: ff:2d:6b:b6:65:ba:e2:2e:18:4d:5c:5f:c3:e0:c6: 82:e5:c3:c5:7d:f6:0c:62:5a:d1:20:76:2d:c6:32: 45:f4:12:a6:d0:de:70:2d:a8:11:44:98:43:fe:55: 4c:07:25:7a:18:ba:1e:79:8e:cf:1e:63:c0:a5:f1: 91:93:a0:fe:5c:68:7f:dd:ca:16:1b:89:31:07:a4: 47:fb:85:9e:49:54:c2:e3:6f:e2:96:7e:33:ff:44: f4:9b:a6:13:e0:3e:a2:98:9a:7c:51:d3:56:35:7d: dd:e8:88:88:f6:bf:2d:15:22:24:56:b2:21:3a:ec: 3b:ea:19:51:4e:3b:bc:3d:b2:3b:5b:49:92:93:b2: 00:f5:1d:14:42:a5:8d:30:55:b9:8c:b0:61:56:5b: 01:53:f3:1f:cf:73:cd:16:6c:b6:7b:50:e5:02:8c: d4:92:d9:49:4b:b5:fb:be:5d:bb:1c:14:12:cd:96: a5:af:05:29:9b:94:06:29:ea:da:e7:d1:96:8f:98: e6:b7:9b:f4:f1:13:72:52:c7:14:67:54:69:93:16: b9:f0:9d:af:7f:61:39:a4:cb:6f:c1:2b:69:d2:40: 2f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2D:F0:E1:D9:D7:34:61:D6:38:1F:55:47:82:6C:74:5C:FD:AB:AF X509v3 Authority Key Identifier: keyid:7B:35:89:D7:D8:DA:6B:DD:E6:0F:39:8E:7E:52:BA:85:E5:AE:33:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:2b:5e:79:1d:9c:a5:63:bc:ee:f7:2e:04:14:95:ac:ca:e0: de:8f:00:d0:e7:1b:9c:2c:c6:e5:1e:a5:17:45:f6:9f:eb:20: 2d:04:09:65:5b:0b:2a:35:8f:7c:bc:79:06:72:6f:70:2c:8f: ca:65:e1:b7:a7:40:d7:14:ae:e6:cf:51:d2:ca:f6:66:28:0f: 00:c6:b8:29:a5:9b:ef:2d:b6:c3:1e:d4:80:cd:1b:fb:88:2b: 7f:7e:65:00:9c:6f:b6:51:4a:b1:08:2d:2e:58:77:b6:43:fa: 8d:9e:9b:c3:cc:69:40:26:cd:64:31:90:2e:6c:a9:20:fe:b3: f2:22:e4:70:1e:1c:10:76:08:5a:c7:47:98:d4:54:88:5c:22: 42:ff:4d:a5:db:27:29:50:eb:10:f2:37:f8:14:89:96:5f:65: ab:19:51:98:ce:1c:b8:bd:fb:01:12:20:75:e4:01:8c:45:79: ab:22:46:55:d7:b2:91:d7:9c:57:1a:9b:05:d1:90:d4:c8:07: 79:b0:34:86:5d:cf:03:63:36:7f:47:49:3b:19:73:f5:70:92: c3:2a:30:3c:a3:84:b7:83:ff:16:3b:5f:f2:c0:9f:51:ef:ae: c5:55:10:cd:f8:95:d5:d0:9e:6a:fe:36:19:c1:11:eb:41:3e: f2:f8:c2:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVGNzYxMTAvBgNVBAUTKDdCMzU4OUQ3RDhEQTZCRERFNjBGMzk4RTdFNTJCQTg1 RTVBRTMzNTcwHhcNMjUwNDI0MTYzNDM5WhcNMjUwNTAxMTYzNDM5WjAYMRYwFAYD VQQDEw02ODBhNjgxZi0xMzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl5IBb9e+tpsYP1ycAlMyR6UKeb9zK3ZnBCyLEuz/LWu2ZbriLhhNXF/D4MaC 5cPFffYMYlrRIHYtxjJF9BKm0N5wLagRRJhD/lVMByV6GLoeeY7PHmPApfGRk6D+ XGh/3coWG4kxB6RH+4WeSVTC42/iln4z/0T0m6YT4D6imJp8UdNWNX3d6IiI9r8t FSIkVrIhOuw76hlRTju8PbI7W0mSk7IA9R0UQqWNMFW5jLBhVlsBU/Mfz3PNFmy2 e1DlAozUktlJS7X7vl27HBQSzZalrwUpm5QGKera59GWj5jmt5v08RNyUscUZ1Rp kxa58J2vf2E5pMtvwStp0kAvLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMEt8OHZ 1zRh1jgfVUeCbHRc/auvMB8GA1UdIwQYMBaAFHs1idfY2mvd5g85jn5SuoXlrjNX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY3Ni8yOUJFNThGMEI4 Q0QxMUU3OUU0MzE4NjFDNEY5QUUwMi9leldKMTlqYWE5M21Eem1PZmxLNmhlV3VN MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V6V0oxOWphYTkzbUR6bU9mbEs2aGVXdU0xYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUY3Ni8yOUJFNThGMEI4Q0QxMUU3OUU0MzE4NjFDNEY5QUUwMi9leldKMTlqYWE5 M21Eem1PZmxLNmhlV3VNMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4K155HZylY7zu9y4EFJWsyuDejwDQ5xucLMblHqUXRfaf6yAtBAll WwsqNY98vHkGcm9wLI/KZeG3p0DXFK7mz1HSyvZmKA8AxrgppZvvLbbDHtSAzRv7 iCt/fmUAnG+2UUqxCC0uWHe2Q/qNnpvDzGlAJs1kMZAubKkg/rPyIuRwHhwQdgha x0eY1FSIXCJC/02l2ycpUOsQ8jf4FImWX2WrGVGYzhy4vfsBEiB15AGMRXmrIkZV 17KR15xXGpsF0ZDUyAd5sDSGXc8DYzZ/R0k7GXP1cJLDKjA8o4S3g/8WO1/ywJ9R 767FVRDN+JXV0J5q/jYZwRHrQT7y+MKe -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:54 2025 by rpki-client