$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft File: EBEGw3VRsRR1-6qyOQEVt6zygC0.mft (raw, json) Hash identifier: T8m6nmzWdHDBMZpmVtyTLqkMZWoXBdRvVd1O4ldss9Y= Subject key identifier: 00:61:AA:13:70:05:83:21:79:92:30:B5:13:8B:3E:62:04:1E:D9:7F Authority key identifier: 10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D Certificate issuer: /CN=A91BF286/serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft Manifest number: 0125 Signing time: Fri 25 Apr 2025 03:46:47 +0000 Manifest this update: Fri 25 Apr 2025 03:46:47 +0000 Manifest next update: Fri 02 May 2025 03:46:47 +0000 Files and hashes: 1: EBEGw3VRsRR1-6qyOQEVt6zygC0.crl (hash: reIyDoO7t4hxJUgIA9Kfa5X9STnT0MaSxXG3QxQ62dM=) 2: 44BA2B8C671011EEB41FB227C4F9AE02.roa (hash: 8KY8F5aAbZQBF/Qe5iecqKDmzqJcSSXnzASxQlPbo4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF286, serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D Validity Not Before: Apr 25 03:46:47 2025 GMT Not After : May 2 03:46:47 2025 GMT Subject: CN=680b05a7-1ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b4:bc:a2:eb:d7:8e:81:91:f4:46:7c:c0:31: 5a:73:49:d3:15:60:3f:b3:52:72:f1:ce:c5:70:cd: f4:dd:21:4c:00:b9:2c:07:7d:aa:a8:8e:1e:12:8f: 77:d5:f1:3c:b6:1f:a2:0d:16:b8:ee:df:f9:50:e8: 5d:7b:dc:64:90:89:52:39:69:61:0a:8a:7f:fa:59: 9e:9d:d0:b6:cb:f6:25:ae:eb:ce:21:ab:10:b5:d3: e7:a2:a6:bb:62:a8:9a:e6:26:6a:46:50:f4:4e:5f: 98:65:5c:c8:80:fd:d1:36:e7:2c:7d:45:e7:92:80: ea:3a:90:fd:8d:3b:5a:dc:0b:fc:5b:0d:7f:54:a6: d9:5b:a1:de:6b:07:31:1f:73:8e:80:4c:d7:8d:69: d0:8d:1a:15:27:e1:b0:16:36:25:ea:54:27:8d:b9: 3c:2d:e0:cf:50:7e:76:f1:3d:35:c1:5e:80:66:c0: 38:5d:4e:02:67:8f:2f:6f:08:e7:b8:45:57:f4:f4: 24:0d:3f:f1:86:79:e9:26:2e:2d:54:01:ce:c8:44: 12:98:1f:95:83:fe:61:34:42:2d:b1:86:04:8e:fa: 81:39:a5:7c:7c:ed:cd:a1:9c:aa:6a:fc:87:0a:30: b7:cd:f7:da:fd:34:84:cd:e0:29:68:46:dd:71:29: 98:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:61:AA:13:70:05:83:21:79:92:30:B5:13:8B:3E:62:04:1E:D9:7F X509v3 Authority Key Identifier: keyid:10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:84:a2:32:5e:b3:af:54:a8:38:4c:02:4a:fc:f1:75:ca:f2: 93:8b:a6:be:86:d8:9d:d4:65:39:a8:12:73:5f:98:e5:c1:96: 14:51:52:a5:48:a9:7e:c9:a9:18:07:b3:04:08:46:74:54:45: 6d:4b:a5:ef:a0:c5:51:3e:ff:7c:54:a5:db:ba:b3:e0:96:7a: 9e:11:40:ec:8c:8a:c3:e4:03:92:96:d0:8b:79:3e:cf:77:e0: 56:fe:d6:27:4a:ef:52:0f:5a:ba:fd:63:83:77:65:63:e3:80: e7:d7:df:da:f5:a2:65:f9:e6:7d:03:d1:55:1f:77:df:23:be: a9:f9:5a:80:9c:d5:69:27:63:bf:d0:9d:e1:d4:82:78:01:16: 67:44:5b:7f:1c:99:bf:f5:be:a0:cb:f4:1f:7e:b9:69:35:9e: 80:e0:58:15:c8:80:d5:e0:7d:08:8a:46:30:b3:d8:ec:c5:47: 07:c1:6d:49:35:22:5c:6e:17:5b:fa:27:68:62:47:ac:f0:a6: c1:6a:83:a6:0b:fe:04:8c:54:e6:95:9d:19:cb:d7:db:6a:5a: 5b:50:30:f6:b8:df:30:dd:25:4e:30:e6:a9:28:82:ed:ba:08: c2:fa:83:1e:b3:d0:6c:06:cf:a4:8b:38:fa:d1:88:7a:33:8e: 48:60:98:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyODYxMTAvBgNVBAUTKDEwMTEwNkMzNzU1MUIxMTQ3NUZCQUFCMjM5MDExNUI3 QUNGMjgwMkQwHhcNMjUwNDI1MDM0NjQ3WhcNMjUwNTAyMDM0NjQ3WjAYMRYwFAYD VQQDEw02ODBiMDVhNy0xYWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLS8ouvXjoGR9EZ8wDFac0nTFWA/s1Jy8c7FcM303SFMALksB32qqI4eEo93 1fE8th+iDRa47t/5UOhde9xkkIlSOWlhCop/+lmendC2y/YlruvOIasQtdPnoqa7 Yqia5iZqRlD0Tl+YZVzIgP3RNucsfUXnkoDqOpD9jTta3Av8Ww1/VKbZW6Heawcx H3OOgEzXjWnQjRoVJ+GwFjYl6lQnjbk8LeDPUH528T01wV6AZsA4XU4CZ48vbwjn uEVX9PQkDT/xhnnpJi4tVAHOyEQSmB+Vg/5hNEItsYYEjvqBOaV8fO3NoZyqavyH CjC3zffa/TSEzeApaEbdcSmY4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABhqhNw BYMheZIwtROLPmIEHtl/MB8GA1UdIwQYMBaAFBARBsN1UbEUdfuqsjkBFbes8oAt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI4Ni8xQ0UyQjBDNDY2 OTQxMUVFQTA0NTI5NTFDNEY5QUUwMi9FQkVHdzNWUnNSUjEtNnF5T1FFVnQ2enln QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VCRUd3M1ZSc1JSMS02cXlPUUVWdDZ6eWdDMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjI4Ni8xQ0UyQjBDNDY2OTQxMUVFQTA0NTI5NTFDNEY5QUUwMi9FQkVHdzNWUnNS UjEtNnF5T1FFVnQ2enlnQzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3hKIyXrOvVKg4TAJK/PF1yvKTi6a+htid1GU5qBJzX5jlwZYUUVKl SKl+yakYB7MECEZ0VEVtS6XvoMVRPv98VKXburPglnqeEUDsjIrD5AOSltCLeT7P d+BW/tYnSu9SD1q6/WODd2Vj44Dn19/a9aJl+eZ9A9FVH3ffI76p+VqAnNVpJ2O/ 0J3h1IJ4ARZnRFt/HJm/9b6gy/QffrlpNZ6A4FgVyIDV4H0IikYws9jsxUcHwW1J NSJcbhdb+idoYkes8KbBaoOmC/4EjFTmlZ0Zy9fbalpbUDD2uN8w3SVOMOapKILt ugjC+oMes9BsBs+kizj60Yh6M45IYJjX -----END CERTIFICATE-----Generated at Sat Apr 26 03:42:18 2025 by rpki-client