$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft File: EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft (raw, json) Hash identifier: Y0xqyQ0cX+xQ7lRZzpp2aQLeyFV18+7m1qGF1hcAVa0= Subject key identifier: D5:46:8C:0D:B5:3B:85:33:E2:F7:4F:C5:F2:79:A2:78:11:24:FC:7E Authority key identifier: 11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53 Certificate issuer: /CN=A91E7222/serialNumber=11B44556B79627853F4031ED6DD57284056EFF53 Certificate serial: 065C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft Manifest number: 0652 Signing time: Thu 24 Apr 2025 22:15:32 +0000 Manifest this update: Thu 24 Apr 2025 22:15:31 +0000 Manifest next update: Thu 01 May 2025 22:15:31 +0000 Files and hashes: 1: EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl (hash: eBCc3Iv8TbvF+d/cwcHij/wXxvjHTNKkQ2h2GUiByL0=) 2: 6BA11A56807911EBA6F1A955C4F9AE02.roa (hash: BEroe25M20UrAiw8SyEvv6Pk5mXlFp9GQ+z/Vqtvaw0=) 3: 6C46B54C807911EBA6F1A955C4F9AE02.roa (hash: sdo5dB4yf8kL9E/pHn7+OshW8DyNii5atqW56lYezBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:15:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1628 (0x65c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7222, serialNumber=11B44556B79627853F4031ED6DD57284056EFF53 Validity Not Before: Apr 24 22:15:31 2025 GMT Not After : May 1 22:15:31 2025 GMT Subject: CN=680ab803-e034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:65:95:7b:33:70:d0:db:3c:46:2c:0d:ff:0e: 58:8f:f6:a3:60:c1:a1:a2:39:b6:e0:d6:41:6e:2e: f4:df:83:b3:cd:3b:1c:34:fe:6f:64:a3:08:88:9d: 80:15:c3:05:61:18:eb:b1:d8:1b:e0:06:a7:2c:3f: f8:81:fb:c9:54:ff:a1:60:40:b5:7a:9b:b3:bb:30: 41:a9:fb:f2:01:87:78:ab:ba:3b:03:c3:ba:e4:e1: 7e:ee:2c:c4:da:a0:65:6a:af:d7:02:26:30:1d:91: d9:4c:ef:ab:6a:51:be:4c:b7:04:d0:8f:fc:ab:ac: ab:85:df:69:a8:f8:46:18:86:2c:31:d8:97:fa:6a: 00:6a:14:74:c2:ad:e4:44:61:ae:3d:37:85:8a:cb: 44:89:be:14:7e:9a:93:ec:89:0f:84:ce:bf:af:3d: 51:96:7d:13:d7:cf:2d:ac:bf:f0:59:b5:9a:9a:69: b7:e0:14:cd:dd:b6:bd:15:19:54:d0:53:9e:85:d0: 94:3d:bd:01:50:ea:ad:26:1a:bd:e6:e7:94:71:51: af:0c:03:52:ec:ce:f5:7c:63:37:e8:a0:c4:e2:c4: 99:3a:12:f8:60:a4:20:0c:37:96:78:94:c3:63:c4: 60:71:04:fa:70:f0:e6:b3:ac:de:ab:db:ce:7f:3c: 03:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:46:8C:0D:B5:3B:85:33:E2:F7:4F:C5:F2:79:A2:78:11:24:FC:7E X509v3 Authority Key Identifier: keyid:11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c7:44:5f:83:c8:6e:a5:4b:7c:29:ad:9e:0c:43:76:7e:41: 5d:fe:82:04:cb:58:67:58:90:b5:ff:66:6c:c9:bd:eb:ff:d1: 41:2c:9f:64:4e:5d:7e:c7:f4:8b:10:0a:a4:ab:66:05:a6:f5: 32:62:67:d3:cb:9c:5f:cb:64:e9:6b:1d:96:ef:79:7b:fe:26: 98:f3:3e:f5:5b:6e:6a:55:1f:88:59:59:4c:e6:09:80:bf:4f: a0:7c:19:5a:cb:c7:cd:90:87:dc:12:79:4c:19:79:5c:4e:fc: dd:2a:68:d3:e8:80:3d:c5:45:66:90:8c:ce:c2:55:0b:d6:72: 2f:0d:b8:f1:7f:c3:a8:30:12:18:d8:4c:d6:c4:f5:ea:a1:7a: 94:06:3a:b3:29:68:60:23:59:02:c3:ae:45:d6:fe:db:e7:98: 07:54:99:89:e2:2d:d1:6f:1a:b2:36:29:0b:af:14:a3:f4:5c: f7:59:1e:38:e8:e6:1b:54:00:9f:d8:76:45:d5:74:9e:16:83: 5e:a5:50:22:a5:cd:46:b9:8f:4e:31:85:3f:5c:89:5c:33:d8: 60:37:55:f4:1c:c4:ea:fa:dc:f4:4e:29:5c:25:9b:32:2f:61: 93:aa:bd:21:6f:96:bd:a3:8c:12:d5:a1:f5:c0:85:70:b5:98: 2b:c1:69:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcyMjIxMTAvBgNVBAUTKDExQjQ0NTU2Qjc5NjI3ODUzRjQwMzFFRDZERDU3Mjg0 MDU2RUZGNTMwHhcNMjUwNDI0MjIxNTMxWhcNMjUwNTAxMjIxNTMxWjAYMRYwFAYD VQQDEw02ODBhYjgwMy1lMDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArGWVezNw0Ns8RiwN/w5Yj/ajYMGhojm24NZBbi7034OzzTscNP5vZKMIiJ2A FcMFYRjrsdgb4AanLD/4gfvJVP+hYEC1epuzuzBBqfvyAYd4q7o7A8O65OF+7izE 2qBlaq/XAiYwHZHZTO+ralG+TLcE0I/8q6yrhd9pqPhGGIYsMdiX+moAahR0wq3k RGGuPTeFistEib4UfpqT7IkPhM6/rz1Rln0T188trL/wWbWammm34BTN3ba9FRlU 0FOehdCUPb0BUOqtJhq95ueUcVGvDANS7M71fGM36KDE4sSZOhL4YKQgDDeWeJTD Y8RgcQT6cPDms6zeq9vOfzwDewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVGjA21 O4Uz4vdPxfJ5ongRJPx+MB8GA1UdIwQYMBaAFBG0RVa3lieFP0Ax7W3VcoQFbv9T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzIyMi9DQTA3NjE1ODgw NzUxMUVCOERDQjk4NEVDNEY5QUUwMi9FYlJGVnJlV0o0VV9RREh0YmRWeWhBVnVf MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ViUkZWcmVXSjRVX1FESHRiZFZ5aEFWdV8xTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzIyMi9DQTA3NjE1ODgwNzUxMUVCOERDQjk4NEVDNEY5QUUwMi9FYlJGVnJlV0o0 VV9RREh0YmRWeWhBVnVfMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKx0Rfg8hupUt8Ka2eDEN2fkFd/oIEy1hnWJC1/2Zsyb3r/9FBLJ9k Tl1+x/SLEAqkq2YFpvUyYmfTy5xfy2Tpax2W73l7/iaY8z71W25qVR+IWVlM5gmA v0+gfBlay8fNkIfcEnlMGXlcTvzdKmjT6IA9xUVmkIzOwlUL1nIvDbjxf8OoMBIY 2EzWxPXqoXqUBjqzKWhgI1kCw65F1v7b55gHVJmJ4i3RbxqyNikLrxSj9Fz3WR44 6OYbVACf2HZF1XSeFoNepVAipc1GuY9OMYU/XIlcM9hgN1X0HMTq+tz0TilcJZsy L2GTqr0hb5a9o4wS1aH1wIVwtZgrwWl0 -----END CERTIFICATE-----Generated at Sat Apr 26 12:19:07 2025 by rpki-client