$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft File: ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft (raw, json) Hash identifier: lvK+J8R2T+A+APambez6gwHurHAPCeB+0hKqHoPMnn8= Subject key identifier: D1:7E:1E:E7:78:18:BD:C2:E5:03:0D:A4:4B:F3:E4:14:10:3B:59:63 Authority key identifier: 7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60 Certificate issuer: /CN=A91A5DC1/serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160 Certificate serial: 06F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft Manifest number: 06F4 Signing time: Thu 24 Apr 2025 20:35:22 +0000 Manifest this update: Thu 24 Apr 2025 20:35:21 +0000 Manifest next update: Thu 01 May 2025 20:35:21 +0000 Files and hashes: 1: ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl (hash: MId00OZ/G/XxwyOjMn4ohxLMxP2YRA05hQgg/g3bguo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1780 (0x6f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5DC1, serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160 Validity Not Before: Apr 24 20:35:21 2025 GMT Not After : May 1 20:35:21 2025 GMT Subject: CN=680aa08a-e452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a5:be:dd:8d:64:9a:da:80:18:a2:55:72:7e: 9c:05:c9:87:f4:6d:b5:7c:6f:64:74:1d:44:48:3f: 02:5b:b1:b1:80:b5:9c:0b:5c:25:4a:89:f4:46:82: a3:64:4b:24:bf:21:df:5f:c1:03:cf:4c:95:72:07: ce:77:06:67:a7:5d:64:7e:79:5e:9c:22:77:52:b0: a6:f9:a9:c4:01:fc:00:c0:f2:c3:6e:7c:a1:b3:a8: dd:1f:f2:8a:f7:ae:12:99:50:24:81:88:2f:58:87: ec:07:a4:75:b3:20:88:48:c4:3e:9f:9d:37:ab:90: b6:af:08:56:dd:bc:44:8e:9d:2c:e2:0d:f1:34:c9: 22:bf:10:e6:7d:ea:18:5b:0b:b0:33:6a:b0:ec:17: a6:6f:00:0f:8a:03:21:9c:c2:00:2a:a2:0f:1c:e2: 7f:41:96:89:b6:98:8d:e9:5c:c1:9f:c4:a8:69:b2: 0f:1e:53:03:f4:67:b1:a8:62:88:01:8a:cf:bd:a9: c2:cc:b1:fe:61:2f:18:20:ec:eb:10:29:10:e1:aa: ad:06:9e:ab:0f:95:3b:d1:77:06:d0:3d:a6:ef:b6: 35:fe:94:e4:4f:d3:e5:1b:59:32:be:e3:df:bb:92: 43:0c:f4:63:a1:0d:48:a3:a1:08:c8:48:88:26:cd: 61:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:7E:1E:E7:78:18:BD:C2:E5:03:0D:A4:4B:F3:E4:14:10:3B:59:63 X509v3 Authority Key Identifier: keyid:7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:f5:69:1d:f1:4a:22:46:0d:cb:4a:6e:ec:14:e3:a2:6e:57: 5d:16:0c:a0:74:aa:1d:25:30:6d:29:5b:19:b4:0f:46:b5:db: c0:92:dc:02:3b:dc:ae:b8:46:d5:1b:51:c7:40:39:62:59:df: ae:80:ad:91:7b:d3:48:da:c9:4e:d1:22:20:46:86:72:16:78: 95:d0:2f:d8:ee:d0:5f:98:3b:3a:2d:4f:41:d3:19:45:0a:52: 4e:6c:f5:8a:4f:41:dd:3e:89:2d:a1:d3:ea:ec:b3:68:05:12: 4a:fc:c2:24:09:7e:9b:c3:58:4a:9b:42:4f:01:e8:43:0e:32: 32:a8:9d:76:9a:82:35:38:31:cc:2f:d0:0e:4d:56:78:ea:bb: c3:f1:18:c3:98:b2:51:14:ba:21:b8:a9:2e:06:0a:4c:90:b0: 3c:a2:51:1d:17:3e:e1:66:dd:34:12:40:e3:a2:5d:33:ab:33: 6a:40:67:ce:75:bc:55:d7:93:75:aa:50:0b:d6:70:22:10:63: d3:fe:17:05:77:5a:ca:67:b5:52:8c:0a:5c:78:d7:04:99:b1: 0a:ee:ab:40:2a:dd:a7:24:9c:66:16:e5:ad:ec:ce:1b:ce:74: b9:55:bd:ea:84:0c:4e:46:1b:4b:a9:61:1a:b7:5d:c2:e0:5d: 1f:40:6d:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVEQzExMTAvBgNVBAUTKDdBOURBNDYxRUJFQkQxNTMxNjQyMDczOUM4OUVDNEND RUU5OUMxNjAwHhcNMjUwNDI0MjAzNTIxWhcNMjUwNTAxMjAzNTIxWjAYMRYwFAYD VQQDEw02ODBhYTA4YS1lNDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqW+3Y1kmtqAGKJVcn6cBcmH9G21fG9kdB1ESD8CW7GxgLWcC1wlSon0RoKj ZEskvyHfX8EDz0yVcgfOdwZnp11kfnlenCJ3UrCm+anEAfwAwPLDbnyhs6jdH/KK 964SmVAkgYgvWIfsB6R1syCISMQ+n503q5C2rwhW3bxEjp0s4g3xNMkivxDmfeoY WwuwM2qw7BembwAPigMhnMIAKqIPHOJ/QZaJtpiN6VzBn8SoabIPHlMD9GexqGKI AYrPvanCzLH+YS8YIOzrECkQ4aqtBp6rD5U70XcG0D2m77Y1/pTkT9PlG1kyvuPf u5JDDPRjoQ1Io6EIyEiIJs1hIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNF+Hud4 GL3C5QMNpEvz5BQQO1ljMB8GA1UdIwQYMBaAFHqdpGHr69FTFkIHOciexMzumcFg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNURDMS80MTNBODkyNDQ1 ODExMUVCOEUwRTc0MkNDNEY5QUUwMi9lcDJrWWV2cjBWTVdRZ2M1eUo3RXpPNlp3 V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwMmtZZXZyMFZNV1FnYzV5SjdFek82WndXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NURDMS80MTNBODkyNDQ1ODExMUVCOEUwRTc0MkNDNEY5QUUwMi9lcDJrWWV2cjBW TVdRZ2M1eUo3RXpPNlp3V0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCT9Wkd8UoiRg3LSm7sFOOiblddFgygdKodJTBtKVsZtA9GtdvAktwC O9yuuEbVG1HHQDliWd+ugK2Re9NI2slO0SIgRoZyFniV0C/Y7tBfmDs6LU9B0xlF ClJObPWKT0HdPoktodPq7LNoBRJK/MIkCX6bw1hKm0JPAehDDjIyqJ12moI1ODHM L9AOTVZ46rvD8RjDmLJRFLohuKkuBgpMkLA8olEdFz7hZt00EkDjol0zqzNqQGfO dbxV15N1qlAL1nAiEGPT/hcFd1rKZ7VSjApceNcEmbEK7qtAKt2nJJxmFuWt7M4b znS5Vb3qhAxORhtLqWEat13C4F0fQG3Q -----END CERTIFICATE-----Generated at Sat Apr 26 14:31:50 2025 by rpki-client