$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft File: eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft (raw, json) Hash identifier: eZudNOq5D61KIBnU96LdMgUHK9rT47idUtHkBMhJa74= Subject key identifier: 55:88:56:A5:50:0C:1D:0C:F6:0C:FA:65:F9:93:A4:96:83:55:B8:7E Authority key identifier: 78:11:27:0E:78:E5:2F:81:EC:6F:0E:96:D9:96:C7:90:93:C1:24:32 Certificate issuer: /CN=A917ACF1/serialNumber=7811270E78E52F81EC6F0E96D996C79093C12432 Certificate serial: 037A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft Manifest number: 037A Signing time: Fri 25 Apr 2025 00:39:41 +0000 Manifest this update: Fri 25 Apr 2025 00:39:41 +0000 Manifest next update: Fri 02 May 2025 00:39:41 +0000 Files and hashes: 1: eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.crl (hash: /6nRm4O9nOpTLTLcA9gb9wG6VgZnu0E5dCxhhOO9RJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.crl rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 890 (0x37a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ACF1, serialNumber=7811270E78E52F81EC6F0E96D996C79093C12432 Validity Not Before: Apr 25 00:39:41 2025 GMT Not After : May 2 00:39:41 2025 GMT Subject: CN=680ad9cd-863c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:33:c5:45:98:10:0b:a8:eb:c9:4e:c9:9e:7e: b6:15:a2:18:13:2a:a6:a5:7a:6e:d8:22:dc:2e:be: 55:49:ce:d8:cc:36:8c:ff:75:b0:b2:d1:fb:ab:c3: 51:b5:c9:18:2b:8b:59:a1:52:92:36:67:75:8b:8b: 73:e9:ba:07:fe:bc:e5:dc:62:0e:b4:5c:86:b5:3b: f6:1c:f5:81:a8:38:fd:95:03:ab:d5:9b:c1:c4:c7: 91:84:88:22:11:53:6c:19:96:69:a1:58:56:58:14: 44:69:54:7b:1d:4d:90:f0:69:15:24:8a:cc:e2:a3: 82:16:a9:00:83:a0:a3:9c:e1:6f:d8:d4:4f:b7:e2: a4:21:7b:31:1f:4e:31:82:59:6e:41:59:a3:0b:f0: a5:c0:f8:3c:d3:23:8b:1e:61:6d:aa:5e:7f:1c:e9: 3a:dd:a7:c2:3e:1b:4e:43:0d:4a:5e:5a:8c:73:36: cb:aa:72:1d:f4:f6:e6:9c:c1:9b:c5:78:75:e8:fa: 33:9a:cc:12:36:3f:b4:f1:e7:7f:4f:bc:72:74:d9: a0:6b:b9:8f:ba:c9:31:fa:f6:02:88:77:e9:cc:63: c3:b3:da:0a:99:27:61:e1:d0:c5:14:65:f1:1c:9e: 80:85:7a:a6:2d:8f:32:55:fb:0d:5a:88:76:d0:f4: ee:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:88:56:A5:50:0C:1D:0C:F6:0C:FA:65:F9:93:A4:96:83:55:B8:7E X509v3 Authority Key Identifier: keyid:78:11:27:0E:78:E5:2F:81:EC:6F:0E:96:D9:96:C7:90:93:C1:24:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:3b:4f:11:ed:2a:ae:8f:7c:4e:6b:a1:da:bb:71:5d:2d:ac: 60:e8:56:67:3d:73:7d:a8:2f:52:75:d2:74:81:ab:02:1b:ec: d0:4a:01:77:25:0c:f8:69:31:bc:78:03:c0:16:a0:2c:1c:59: ba:4f:e7:78:c7:aa:c1:61:9f:a6:9d:9a:71:a2:c5:15:64:ef: 23:2f:3c:99:4b:f1:9b:ec:b2:62:9f:67:e0:d3:c5:7c:d3:ac: 72:83:3b:f6:1d:9d:2a:6c:09:47:8a:75:68:33:a2:ff:c8:7e: 82:e4:5a:4a:b0:9b:57:8d:10:0d:4b:9c:8e:25:ab:91:25:3c: c3:fa:1d:17:de:f4:83:6a:12:8b:ad:6e:a8:ec:8c:5b:59:23: 91:96:04:15:60:04:87:88:0a:20:79:fb:bf:3d:81:3b:ad:62: f3:3b:1a:2c:50:cd:33:01:ae:30:c2:53:81:9d:8a:17:fe:91: 67:4b:ed:5f:0e:8c:59:df:2c:eb:7f:58:11:d2:6f:07:81:bc: 15:de:04:54:14:ea:a3:b5:59:00:c1:c2:23:7b:f2:60:6f:a1: 2d:83:db:94:ed:7f:5b:30:52:0c:fd:31:f6:76:a0:2a:7f:2b: 2a:43:b1:d9:b7:2d:97:2b:59:2b:39:49:3c:87:84:d9:47:ea: b7:df:f6:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDRjExMTAvBgNVBAUTKDc4MTEyNzBFNzhFNTJGODFFQzZGMEU5NkQ5OTZDNzkw OTNDMTI0MzIwHhcNMjUwNDI1MDAzOTQxWhcNMjUwNTAyMDAzOTQxWjAYMRYwFAYD VQQDEw02ODBhZDljZC04NjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzPFRZgQC6jryU7Jnn62FaIYEyqmpXpu2CLcLr5VSc7YzDaM/3WwstH7q8NR tckYK4tZoVKSNmd1i4tz6boH/rzl3GIOtFyGtTv2HPWBqDj9lQOr1ZvBxMeRhIgi EVNsGZZpoVhWWBREaVR7HU2Q8GkVJIrM4qOCFqkAg6CjnOFv2NRPt+KkIXsxH04x glluQVmjC/ClwPg80yOLHmFtql5/HOk63afCPhtOQw1KXlqMczbLqnId9PbmnMGb xXh16PozmswSNj+08ed/T7xydNmga7mPuskx+vYCiHfpzGPDs9oKmSdh4dDFFGXx HJ6AhXqmLY8yVfsNWoh20PTuGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFWIVqVQ DB0M9gz6ZfmTpJaDVbh+MB8GA1UdIwQYMBaAFHgRJw545S+B7G8OltmWx5CTwSQy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUNGMS85MDlCQzAyOEEw MzkxMUVDOEExRjFDMjNDNEY5QUUwMi9lQkVuRG5qbEw0SHNidzZXMlpiSGtKUEJK REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VCRW5EbmpsTDRIc2J3NlcyWmJIa0pQQkpESS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUNGMS85MDlCQzAyOEEwMzkxMUVDOEExRjFDMjNDNEY5QUUwMi9lQkVuRG5qbEw0 SHNidzZXMlpiSGtKUEJKREkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEO08R7Squj3xOa6Hau3FdLaxg6FZnPXN9qC9SddJ0gasCG+zQSgF3 JQz4aTG8eAPAFqAsHFm6T+d4x6rBYZ+mnZpxosUVZO8jLzyZS/Gb7LJin2fg08V8 06xygzv2HZ0qbAlHinVoM6L/yH6C5FpKsJtXjRANS5yOJauRJTzD+h0X3vSDahKL rW6o7IxbWSORlgQVYASHiAogefu/PYE7rWLzOxosUM0zAa4wwlOBnYoX/pFnS+1f DoxZ3yzrf1gR0m8HgbwV3gRUFOqjtVkAwcIje/Jgb6Etg9uU7X9bMFIM/TH2dqAq fysqQ7HZty2XK1krOUk8h4TZR+q33/ZG -----END CERTIFICATE-----Generated at Sat Apr 26 05:05:55 2025 by rpki-client