$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft File: ech9xZWwwn0jMpvJkoSiPIv9oOc.mft (raw, json) Hash identifier: UwwqtVuZaGYzrIk82flaJ9J5WTXozRR15yRXgTipqJg= Subject key identifier: 71:7E:2E:6D:8B:9A:ED:AE:25:46:99:32:8E:6A:A6:42:0E:9E:59:5F Authority key identifier: 79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7 Certificate issuer: /CN=A91B2D4F/serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7 Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft Manifest number: 0147 Signing time: Fri 25 Apr 2025 03:22:37 +0000 Manifest this update: Fri 25 Apr 2025 03:22:37 +0000 Manifest next update: Fri 02 May 2025 03:22:37 +0000 Files and hashes: 1: ech9xZWwwn0jMpvJkoSiPIv9oOc.crl (hash: 5LqIqMoBPc8PzKmwLq833+vtZle1cGQh9YmJaSpwEf8=) 2: 416EB4022F6111EE8C156634C4F9AE02.roa (hash: UzoADIDRcmbkR0v1b40VKhU4NXIbJvMsYpFVM0H3D88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D4F, serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7 Validity Not Before: Apr 25 03:22:37 2025 GMT Not After : May 2 03:22:37 2025 GMT Subject: CN=680afffd-898a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3e:a1:e6:5a:ba:0f:20:5f:b5:a6:5c:ce:ab: cb:b7:06:96:15:86:24:7c:91:d7:66:e2:0a:78:47: 24:77:b8:33:d5:73:aa:90:06:26:3a:fc:a1:47:56: fd:2f:5f:60:fd:3d:88:5d:0f:7d:c1:29:23:45:5b: 13:6a:2c:82:79:65:fd:ca:ed:cc:36:94:9e:57:b9: 88:48:2a:8b:94:21:45:0f:36:e2:a4:f5:ff:6f:64: d7:19:9d:af:dc:ea:25:7d:1a:e2:40:51:72:a3:4c: 7f:3a:d0:bf:28:5a:4b:95:08:cb:f4:97:52:8b:4f: 36:38:2f:26:fb:52:ff:23:23:77:bc:cf:e1:66:9d: 36:f0:4e:84:e7:bb:74:4d:b7:84:28:3b:77:48:c1: a2:b3:af:83:a4:d7:e9:66:60:a5:54:02:fb:55:26: 63:86:75:99:97:f8:51:fb:90:3f:1e:4e:ce:ff:00: 3e:36:aa:a6:06:a0:1a:48:27:5f:9a:e0:e3:60:99: b0:cb:57:7e:cf:4c:c6:66:55:67:b2:36:06:09:56: 2a:20:f2:fb:3c:c5:72:15:6e:c7:d2:ba:5f:83:5a: 15:d4:89:86:e0:70:9d:1a:64:63:c3:2d:1c:6e:a7: 24:1e:9a:6d:15:eb:f2:82:12:4a:0c:81:23:53:b8: ee:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:7E:2E:6D:8B:9A:ED:AE:25:46:99:32:8E:6A:A6:42:0E:9E:59:5F X509v3 Authority Key Identifier: keyid:79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:16:01:df:3a:b2:e9:0c:fb:77:fb:9b:da:44:7d:b3:38:41: 6d:bf:cb:b7:94:a1:cb:dd:78:63:6f:43:3a:3b:ff:a2:8e:c7: 65:ae:e6:df:79:2c:3b:d5:16:d2:92:90:2e:54:1e:8c:b1:ef: bc:62:96:22:f3:b2:c4:f3:2b:17:5f:57:00:ba:bd:0a:45:d7: 04:57:29:06:5f:20:22:23:c1:25:7b:4c:d8:e4:38:8b:29:12: 72:0c:8c:51:83:2a:82:7a:a9:d4:f2:dd:89:3e:8e:39:6f:ba: 2a:17:31:ec:0a:81:f2:f7:32:5c:bb:af:f0:36:09:48:97:90: bd:3a:80:77:ed:d5:d4:9a:9f:30:5c:7e:25:81:90:91:a7:ae: 67:06:00:75:05:a6:df:5c:84:c6:a9:7e:62:4e:dc:30:27:8e: a6:02:86:b0:9a:f1:5f:c9:d2:60:78:e1:f2:e2:f6:12:17:bf: bb:d8:9e:a3:20:9f:40:ed:53:24:65:31:cb:e4:6c:9e:b1:25: 10:ac:18:4c:60:e0:2f:00:2c:c8:0d:ab:3a:71:b9:68:6d:84: 13:23:3c:fc:8b:1c:fd:a3:36:05:ab:b1:22:63:5f:18:df:50: be:30:1c:20:56:72:35:f3:d2:9f:de:f5:5b:5b:38:7b:93:2b: 90:1b:af:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJENEYxMTAvBgNVBAUTKDc5Qzg3REM1OTVCMEMyN0QyMzMyOUJDOTkyODRBMjND OEJGREEwRTcwHhcNMjUwNDI1MDMyMjM3WhcNMjUwNTAyMDMyMjM3WjAYMRYwFAYD VQQDEw02ODBhZmZmZC04OThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3D6h5lq6DyBftaZczqvLtwaWFYYkfJHXZuIKeEckd7gz1XOqkAYmOvyhR1b9 L19g/T2IXQ99wSkjRVsTaiyCeWX9yu3MNpSeV7mISCqLlCFFDzbipPX/b2TXGZ2v 3OolfRriQFFyo0x/OtC/KFpLlQjL9JdSi082OC8m+1L/IyN3vM/hZp028E6E57t0 TbeEKDt3SMGis6+DpNfpZmClVAL7VSZjhnWZl/hR+5A/Hk7O/wA+NqqmBqAaSCdf muDjYJmwy1d+z0zGZlVnsjYGCVYqIPL7PMVyFW7H0rpfg1oV1ImG4HCdGmRjwy0c bqckHpptFevyghJKDIEjU7ju5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHF+Lm2L mu2uJUaZMo5qpkIOnllfMB8GA1UdIwQYMBaAFHnIfcWVsMJ9IzKbyZKEojyL/aDn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQ0Ri9FRjg3NTUxODJG NjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3duMGpNcHZKa29TaVBJdjlv T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VjaDl4Wld3d24wak1wdkprb1NpUEl2OW9PYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQ0Ri9FRjg3NTUxODJGNjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3du MGpNcHZKa29TaVBJdjlvT2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCFgHfOrLpDPt3+5vaRH2zOEFtv8u3lKHL3Xhjb0M6O/+ijsdlrubf eSw71RbSkpAuVB6Mse+8YpYi87LE8ysXX1cAur0KRdcEVykGXyAiI8Ele0zY5DiL KRJyDIxRgyqCeqnU8t2JPo45b7oqFzHsCoHy9zJcu6/wNglIl5C9OoB37dXUmp8w XH4lgZCRp65nBgB1BabfXITGqX5iTtwwJ46mAoawmvFfydJgeOHy4vYSF7+72J6j IJ9A7VMkZTHL5GyesSUQrBhMYOAvACzIDas6cblobYQTIzz8ixz9ozYFq7EiY18Y 31C+MBwgVnI189Kf3vVbWzh7kyuQG6+y -----END CERTIFICATE-----Generated at Sat Apr 26 12:27:22 2025 by rpki-client