$ rpki-client -vvf rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft File: et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft (raw, json) Hash identifier: eYJ5N+G2GKhEQz7z28t8xeVjdDngxmYQg9uOShjXBTY= Subject key identifier: 8C:47:ED:B7:B2:46:89:B1:B6:23:93:D3:59:C9:23:C3:2D:40:A9:8C Authority key identifier: 7A:DE:40:93:5A:00:7E:0B:5B:E1:76:14:05:06:4E:C9:43:AF:E0:C1 Certificate issuer: /CN=A918E1CC/serialNumber=7ADE40935A007E0B5BE1761405064EC943AFE0C1 Certificate serial: 06AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft Manifest number: 06A3 Signing time: Thu 24 Apr 2025 22:00:23 +0000 Manifest this update: Thu 24 Apr 2025 22:00:22 +0000 Manifest next update: Thu 01 May 2025 22:00:22 +0000 Files and hashes: 1: et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl (hash: ksOUMNUzwm2kaw+/wh28wnes5W8fcyc7RyPZmX88US8=) 2: 210E6234639E11EB81185C31C4F9AE02.roa (hash: lpW0NjdmrOMG9GEGghvuTfgytfrpOcK9mbpw3h0K59c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1706 (0x6aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E1CC, serialNumber=7ADE40935A007E0B5BE1761405064EC943AFE0C1 Validity Not Before: Apr 24 22:00:22 2025 GMT Not After : May 1 22:00:22 2025 GMT Subject: CN=680ab477-4573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:65:ea:97:05:fe:58:f7:cb:bf:5f:35:a9:3b: bb:54:48:5b:d3:a8:65:3a:2c:21:34:82:45:fb:72: 37:07:67:cd:38:b1:ce:77:d9:8a:dd:19:67:59:a9: a1:57:8c:17:d8:84:3e:42:03:42:67:1d:b1:0e:e4: 92:ff:34:00:bf:20:c0:22:91:80:9a:02:9a:bc:76: db:4a:1e:0c:d2:b8:f7:9b:39:66:6d:3b:aa:b1:6e: 19:03:4c:0c:3e:15:15:ef:e0:52:38:37:bf:0a:76: 31:f7:55:9f:8b:4b:d6:82:19:df:38:d2:14:22:39: 15:72:a9:5b:55:80:aa:29:f5:f3:3e:ad:82:19:9f: 0d:ee:4d:94:0c:2b:75:12:6b:84:a2:be:32:d5:0d: f5:ac:d9:11:ac:dc:27:63:6d:57:f7:b1:3c:78:79: 07:db:52:ab:72:da:09:55:1f:5f:0e:1a:01:5a:5f: 16:ec:24:37:fd:b1:91:e7:d0:b5:fd:96:c3:57:0a: bc:b2:4d:03:d2:29:d8:2f:f2:86:28:c6:30:09:44: b3:6e:49:fc:a8:58:1f:6b:be:c1:81:d6:c6:23:dd: 5d:27:3f:1b:7d:80:a1:3e:0a:b6:2b:c1:f9:cb:34: 4f:ef:b9:ea:7a:f8:84:61:a4:5c:3b:48:77:83:ea: 6b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:47:ED:B7:B2:46:89:B1:B6:23:93:D3:59:C9:23:C3:2D:40:A9:8C X509v3 Authority Key Identifier: keyid:7A:DE:40:93:5A:00:7E:0B:5B:E1:76:14:05:06:4E:C9:43:AF:E0:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:79:58:ad:bb:69:8f:df:c1:5d:ea:52:d8:83:20:e9:31:0a: ea:d9:c0:e2:f3:b0:f4:5d:21:4e:e2:20:e4:4c:91:5e:57:2e: b5:05:87:d5:78:4b:9c:76:b1:3b:f8:f4:4b:f0:7b:fa:9c:d2: e1:31:53:9b:75:59:60:3a:f6:bf:4a:b6:02:42:cd:dd:b1:77: d1:c3:db:fe:ed:c4:58:17:76:21:e5:39:7c:a6:0b:e4:b5:7e: eb:03:e1:00:9c:59:e7:ae:80:46:72:b5:e1:bb:dc:d7:c9:8c: 19:43:8c:bd:f6:c3:30:d5:f2:28:80:9a:21:74:76:e1:71:96: c3:25:3a:c6:5f:7f:15:83:b4:c6:95:90:37:b6:3f:0f:27:77: 0e:a0:0f:af:25:b7:46:54:2e:39:73:a2:7f:dd:3f:4b:5f:ec: 94:62:6f:fb:2e:17:fc:83:80:9f:c1:9f:96:1f:f1:56:f0:df: 02:f9:8d:81:a3:35:95:49:61:5d:07:7c:15:f3:33:80:40:d7: ef:26:43:7e:33:5f:d5:9e:09:2a:04:b6:d0:92:5c:09:dc:84: d5:6d:15:6c:64:b1:ca:7e:3f:50:2b:f9:1a:bd:b0:3c:a8:bf: d4:d5:35:6a:41:81:ad:e4:87:2d:41:09:03:4f:9c:25:8a:e9: 68:08:1e:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUxQ0MxMTAvBgNVBAUTKDdBREU0MDkzNUEwMDdFMEI1QkUxNzYxNDA1MDY0RUM5 NDNBRkUwQzEwHhcNMjUwNDI0MjIwMDIyWhcNMjUwNTAxMjIwMDIyWjAYMRYwFAYD VQQDEw02ODBhYjQ3Ny00NTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2XqlwX+WPfLv181qTu7VEhb06hlOiwhNIJF+3I3B2fNOLHOd9mK3RlnWamh V4wX2IQ+QgNCZx2xDuSS/zQAvyDAIpGAmgKavHbbSh4M0rj3mzlmbTuqsW4ZA0wM PhUV7+BSODe/CnYx91Wfi0vWghnfONIUIjkVcqlbVYCqKfXzPq2CGZ8N7k2UDCt1 EmuEor4y1Q31rNkRrNwnY21X97E8eHkH21KrctoJVR9fDhoBWl8W7CQ3/bGR59C1 /ZbDVwq8sk0D0inYL/KGKMYwCUSzbkn8qFgfa77BgdbGI91dJz8bfYChPgq2K8H5 yzRP77nqeviEYaRcO0h3g+prTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIxH7bey RomxtiOT01nJI8MtQKmMMB8GA1UdIwQYMBaAFHreQJNaAH4LW+F2FAUGTslDr+DB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTFDQy81RkVGREE4RTYz OUMxMUVCOTBCODMwMTNDNEY5QUUwMi9ldDVBazFvQWZndGI0WFlVQlFaT3lVT3Y0 TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V0NUFrMW9BZmd0YjRYWVVCUVpPeVVPdjRNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTFDQy81RkVGREE4RTYzOUMxMUVCOTBCODMwMTNDNEY5QUUwMi9ldDVBazFvQWZn dGI0WFlVQlFaT3lVT3Y0TUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQeVitu2mP38Fd6lLYgyDpMQrq2cDi87D0XSFO4iDkTJFeVy61BYfV eEucdrE7+PRL8Hv6nNLhMVObdVlgOva/SrYCQs3dsXfRw9v+7cRYF3Yh5Tl8pgvk tX7rA+EAnFnnroBGcrXhu9zXyYwZQ4y99sMw1fIogJohdHbhcZbDJTrGX38Vg7TG lZA3tj8PJ3cOoA+vJbdGVC45c6J/3T9LX+yUYm/7Lhf8g4CfwZ+WH/FW8N8C+Y2B ozWVSWFdB3wV8zOAQNfvJkN+M1/VngkqBLbQklwJ3ITVbRVsZLHKfj9QK/kavbA8 qL/U1TVqQYGt5IctQQkDT5wliuloCB7w -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:47 2025 by rpki-client