$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft File: EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft (raw, json) Hash identifier: AjIRR/b/PDo/LdT/hm//b00APAufdeIkHjvpyWaQKHs= Subject key identifier: C7:6A:A5:D0:C4:29:F4:37:43:46:6F:5A:B6:95:A7:F0:28:D4:21:D3 Authority key identifier: 12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19 Certificate issuer: /CN=A917E00F/serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019 Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft Manifest number: 0631 Signing time: Thu 24 Apr 2025 23:14:23 +0000 Manifest this update: Thu 24 Apr 2025 23:14:22 +0000 Manifest next update: Thu 01 May 2025 23:14:22 +0000 Files and hashes: 1: EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl (hash: 7WVFAGuLhPw5K2bnYNbPFcfCiHF2UKKedRPsNLJNJ1s=) 2: E10C2796B42D11EEBCE04D61C4F9AE02.roa (hash: dJfXhzg8XYwoUOs2sQdFfnXRTK5+51aUZ+Zq8zrXhMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:14:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E00F, serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019 Validity Not Before: Apr 24 23:14:22 2025 GMT Not After : May 1 23:14:22 2025 GMT Subject: CN=680ac5cf-17bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:30:66:9d:71:6a:30:42:e5:25:b1:ba:2e:bf: 8f:9c:3d:39:bb:41:f0:ec:e3:36:a3:d3:0f:1b:b3: f7:d5:af:5b:3b:d3:43:df:e7:ff:57:cd:f9:43:7e: 07:96:7b:31:fa:2f:e7:15:74:7f:d3:32:64:35:7e: 30:d2:d9:f2:8d:5a:55:42:49:d1:f4:06:be:e9:5e: c0:96:73:87:42:44:ec:8a:02:9e:0a:95:25:8b:a1: 73:08:f0:9e:27:d1:52:c3:46:d1:c3:32:53:f5:15: c4:1d:36:9d:fa:35:ab:aa:0e:b6:ca:59:a0:6c:f2: 93:77:e3:45:01:d5:4f:f0:e1:11:bb:f9:23:ec:4d: a8:d8:15:ae:30:b6:8f:b9:1a:d8:04:c2:81:de:b8: 28:da:6f:c1:19:dd:99:23:06:57:08:5c:0c:06:60: 8c:dc:22:00:30:dc:9f:e2:d3:85:a4:81:ad:a2:fd: 4f:da:74:b1:d3:f9:8d:72:57:7d:2d:22:96:06:36: 90:a2:cb:99:de:ce:5e:4a:96:3a:ab:b5:11:49:74: d9:8e:ba:59:39:58:41:67:7b:9b:7c:06:22:c3:eb: 81:27:15:71:6c:25:f9:93:b2:5e:f5:e1:27:df:d2: 99:d2:d4:23:38:1e:c5:64:0f:52:fc:52:2e:c1:e4: 79:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:6A:A5:D0:C4:29:F4:37:43:46:6F:5A:B6:95:A7:F0:28:D4:21:D3 X509v3 Authority Key Identifier: keyid:12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:61:2a:c0:25:bc:e7:aa:c7:5d:ab:85:19:11:c5:25:8a:9e: 29:7f:b2:43:8c:eb:2b:19:e3:0b:79:20:05:dc:ea:d4:e8:c5: 12:a8:2d:47:04:c7:e2:d9:88:10:4b:61:d4:7d:52:58:7b:e4: 99:77:17:13:95:e4:ab:d9:c1:2f:fd:a8:6c:61:96:1e:81:d6: 1a:d5:25:27:ce:70:65:c1:5d:30:95:c6:0c:d8:46:4d:67:68: 3d:cd:5d:3a:8c:93:cc:d4:05:91:2c:90:be:0d:73:33:e9:47: ed:bd:6f:6c:af:b1:db:79:4f:a4:49:18:f2:cf:f5:38:b7:37: f3:ce:f2:79:d6:d6:ed:d6:15:31:6d:22:41:d0:2e:69:d0:ba: a6:4c:9d:af:bf:c8:37:ed:8a:ac:ba:3d:b7:e7:6c:f6:e2:32: b1:38:5d:40:c7:2f:22:c3:73:2c:7a:30:d1:4e:5b:52:85:c5: 5d:0a:e0:4d:48:9d:8a:eb:e0:9c:f5:ed:fa:f0:7f:25:97:67: 83:0e:5e:14:3a:8e:7a:51:96:f2:91:d7:b3:ab:6c:2a:be:55: 9b:c2:1c:de:1d:74:2a:66:ed:8d:fd:70:a1:62:dc:6d:dc:e7: f3:91:43:48:61:e6:bf:8b:60:72:3c:ae:56:ed:ac:50:e3:55: d0:71:4d:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwMEYxMTAvBgNVBAUTKDEyQzQ4OTcyRjI2RDA2N0E5RjIxQjRDNEZBMEM4NjYz M0UwMkMwMTkwHhcNMjUwNDI0MjMxNDIyWhcNMjUwNTAxMjMxNDIyWjAYMRYwFAYD VQQDEw02ODBhYzVjZi0xN2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0TBmnXFqMELlJbG6Lr+PnD05u0Hw7OM2o9MPG7P31a9bO9ND3+f/V835Q34H lnsx+i/nFXR/0zJkNX4w0tnyjVpVQknR9Aa+6V7AlnOHQkTsigKeCpUli6FzCPCe J9FSw0bRwzJT9RXEHTad+jWrqg62ylmgbPKTd+NFAdVP8OERu/kj7E2o2BWuMLaP uRrYBMKB3rgo2m/BGd2ZIwZXCFwMBmCM3CIAMNyf4tOFpIGtov1P2nSx0/mNcld9 LSKWBjaQosuZ3s5eSpY6q7URSXTZjrpZOVhBZ3ubfAYiw+uBJxVxbCX5k7Je9eEn 39KZ0tQjOB7FZA9S/FIuweR5QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdqpdDE KfQ3Q0ZvWraVp/Ao1CHTMB8GA1UdIwQYMBaAFBLEiXLybQZ6nyG0xPoMhmM+AsAZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTAwRi9FREU0OEI5Q0VF MjkxMUVCODA4NEI2MzhDNEY5QUUwMi9Fc1NKY3ZKdEJucWZJYlRFLWd5R1l6NEN3 QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VzU0pjdkp0Qm5xZkliVEUtZ3lHWXo0Q3dCay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTAwRi9FREU0OEI5Q0VFMjkxMUVCODA4NEI2MzhDNEY5QUUwMi9Fc1NKY3ZKdEJu cWZJYlRFLWd5R1l6NEN3QmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArYSrAJbznqsddq4UZEcUlip4pf7JDjOsrGeMLeSAF3OrU6MUSqC1H BMfi2YgQS2HUfVJYe+SZdxcTleSr2cEv/ahsYZYegdYa1SUnznBlwV0wlcYM2EZN Z2g9zV06jJPM1AWRLJC+DXMz6UftvW9sr7HbeU+kSRjyz/U4tzfzzvJ51tbt1hUx bSJB0C5p0LqmTJ2vv8g37Yqsuj2352z24jKxOF1Axy8iw3MsejDRTltShcVdCuBN SJ2K6+Cc9e368H8ll2eDDl4UOo56UZbykdezq2wqvlWbwhzeHXQqZu2N/XChYtxt 3OfzkUNIYea/i2ByPK5W7axQ41XQcU0j -----END CERTIFICATE-----Generated at Sat Apr 26 09:21:32 2025 by rpki-client