$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft File: e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft (raw, json) Hash identifier: 42/HPAGwZW3k6iqEHsd3Bt6dBf/bT8uMOHi8Mx8CZZk= Subject key identifier: F0:2C:77:15:CA:40:FE:C6:7A:8B:E2:4C:8D:7F:6C:C4:93:97:71:23 Authority key identifier: 7B:E9:8C:7A:AA:D8:7C:9F:25:92:96:30:16:43:A3:61:0A:7B:51:88 Certificate issuer: /CN=A91CDB75/serialNumber=7BE98C7AAAD87C9F259296301643A3610A7B5188 Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft Manifest number: EB Signing time: Fri 25 Apr 2025 04:25:45 +0000 Manifest this update: Fri 25 Apr 2025 04:25:44 +0000 Manifest next update: Fri 02 May 2025 04:25:44 +0000 Files and hashes: 1: e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl (hash: 6CSFmUrb7tg8ZjOxX3h8QaFm/w51g3tn2qdE4JMJnl0=) 2: 4CC50DB2BB7811EE9416DD42C4F9AE02.roa (hash: zPBkBX8TSXO+DP7kaXxBDzxvo14LuZd67QJ/cyraKFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:25:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDB75, serialNumber=7BE98C7AAAD87C9F259296301643A3610A7B5188 Validity Not Before: Apr 25 04:25:44 2025 GMT Not After : May 2 04:25:44 2025 GMT Subject: CN=680b0ec8-2bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9b:73:3f:66:f3:c9:61:ab:fb:c9:be:1e:57: 9f:01:88:31:8f:c1:4e:03:78:3e:e1:2b:9d:be:99: 4a:aa:87:eb:b6:be:77:54:db:50:da:7d:33:47:77: d3:ed:db:db:8b:97:f8:a7:02:31:af:d0:a6:5f:7f: 9d:87:ce:f9:53:8c:7f:de:11:3b:ab:76:4e:4b:76: a0:02:5b:ce:64:b2:a7:7b:3d:9b:cc:ec:9c:64:e2: 91:b0:f2:b8:a0:ba:f4:a8:ac:50:5d:3d:ed:fd:b0: 69:00:b2:1b:a1:09:b4:65:14:27:e9:ce:7e:16:a1: 23:3d:05:26:9d:d7:05:1a:38:44:f3:f0:88:62:9a: b7:3b:c8:f4:8c:6d:40:e0:9c:fb:fc:eb:a8:de:74: 72:ab:ad:0d:55:75:dd:ed:d6:e9:9a:6e:e1:2e:dd: 0e:dd:09:4d:f7:1a:06:7c:c0:16:5d:58:0b:23:9c: ef:63:6f:22:d0:00:a3:0f:5a:38:36:82:73:b8:63: 27:c7:fd:01:78:e7:d3:0b:9f:8f:7b:f8:99:2e:d0: f5:79:42:2f:01:32:4b:19:b8:cc:67:72:dd:b9:63: 79:ef:b2:1b:c5:16:56:ca:b4:72:c1:81:54:bc:6e: a4:5a:62:d4:97:05:57:48:e8:c6:48:48:47:35:fa: d3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:2C:77:15:CA:40:FE:C6:7A:8B:E2:4C:8D:7F:6C:C4:93:97:71:23 X509v3 Authority Key Identifier: keyid:7B:E9:8C:7A:AA:D8:7C:9F:25:92:96:30:16:43:A3:61:0A:7B:51:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:40:c5:e8:90:1e:89:64:e6:16:12:cd:e0:df:ca:3b:45:44: 68:54:47:6e:e8:a6:15:53:b3:7c:ea:31:85:20:79:90:28:59: fd:f5:5e:d8:66:8e:f8:13:d1:5c:c8:bc:9a:dd:ed:9f:89:10: ed:77:f1:df:59:21:53:bf:ae:a7:d4:ae:12:0b:6f:43:2d:f5: 85:e0:d9:d6:7c:f2:d8:27:ec:83:79:25:cb:93:ef:1e:ee:b1: 23:7a:c7:1c:96:b8:8f:4b:f9:50:50:e7:22:69:81:62:c8:42: 15:1c:9e:d9:1e:45:a6:5e:b7:30:e6:bb:e2:40:31:94:c7:8f: 76:15:46:e7:12:b2:49:8e:8b:ea:df:16:18:37:78:94:32:2b: d7:6c:10:17:c9:2a:01:e0:7b:c1:f6:17:47:f0:ec:08:ca:63: 5d:68:a7:f3:36:10:9f:94:1d:a5:23:cc:3b:85:45:f2:43:77: 08:2a:da:c1:e1:43:db:fd:8b:1e:17:ca:b8:06:f1:f5:fb:7a: d6:a9:3e:7a:ea:9a:91:0b:54:ea:c3:df:86:5b:95:fb:7f:02: d8:e1:29:01:b2:fe:30:40:d4:83:5d:a5:00:5f:16:f5:a0:ad: b5:00:6b:c0:c1:a5:f0:df:18:94:b6:ec:d7:73:18:87:2b:ec: 8a:92:d0:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RCNzUxMTAvBgNVBAUTKDdCRTk4QzdBQUFEODdDOUYyNTkyOTYzMDE2NDNBMzYx MEE3QjUxODgwHhcNMjUwNDI1MDQyNTQ0WhcNMjUwNTAyMDQyNTQ0WjAYMRYwFAYD VQQDEw02ODBiMGVjOC0yYmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvptzP2bzyWGr+8m+HlefAYgxj8FOA3g+4SudvplKqofrtr53VNtQ2n0zR3fT 7dvbi5f4pwIxr9CmX3+dh875U4x/3hE7q3ZOS3agAlvOZLKnez2bzOycZOKRsPK4 oLr0qKxQXT3t/bBpALIboQm0ZRQn6c5+FqEjPQUmndcFGjhE8/CIYpq3O8j0jG1A 4Jz7/Ouo3nRyq60NVXXd7dbpmm7hLt0O3QlN9xoGfMAWXVgLI5zvY28i0ACjD1o4 NoJzuGMnx/0BeOfTC5+Pe/iZLtD1eUIvATJLGbjMZ3LduWN577IbxRZWyrRywYFU vG6kWmLUlwVXSOjGSEhHNfrTKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPAsdxXK QP7GeoviTI1/bMSTl3EjMB8GA1UdIwQYMBaAFHvpjHqq2HyfJZKWMBZDo2EKe1GI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREI3NS9FNjUxOUExNEJC NzcxMUVFQUFEN0IyNDFDNEY5QUUwMi9lLW1NZXFyWWZKOGxrcFl3RmtPallRcDdV WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UtbU1lcXJZZko4bGtwWXdGa09qWVFwN1VZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REI3NS9FNjUxOUExNEJCNzcxMUVFQUFEN0IyNDFDNEY5QUUwMi9lLW1NZXFyWWZK OGxrcFl3RmtPallRcDdVWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3QMXokB6JZOYWEs3g38o7RURoVEdu6KYVU7N86jGFIHmQKFn99V7Y Zo74E9FcyLya3e2fiRDtd/HfWSFTv66n1K4SC29DLfWF4NnWfPLYJ+yDeSXLk+8e 7rEjescclriPS/lQUOciaYFiyEIVHJ7ZHkWmXrcw5rviQDGUx492FUbnErJJjovq 3xYYN3iUMivXbBAXySoB4HvB9hdH8OwIymNdaKfzNhCflB2lI8w7hUXyQ3cIKtrB 4UPb/YseF8q4BvH1+3rWqT566pqRC1Tqw9+GW5X7fwLY4SkBsv4wQNSDXaUAXxb1 oK21AGvAwaXw3xiUtuzXcxiHK+yKktCj -----END CERTIFICATE-----Generated at Sat Apr 26 12:37:35 2025 by rpki-client