$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft File: ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft (raw, json) Hash identifier: P8ITG7/6Ebr6ocpMscFh7bAQrXvtHy+4n15tKheXMBI= Subject key identifier: 41:76:9B:C2:1F:56:98:32:C5:30:E1:67:BA:3E:B7:51:2F:E5:79:2F Authority key identifier: 7A:9F:F8:64:C5:03:18:06:71:30:58:8E:6D:BA:92:8B:A1:C0:3A:5D Certificate issuer: /CN=A91E782F/serialNumber=7A9FF864C50318067130588E6DBA928BA1C03A5D Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft Manifest number: 94 Signing time: Fri 25 Apr 2025 05:22:42 +0000 Manifest this update: Fri 25 Apr 2025 05:22:41 +0000 Manifest next update: Fri 02 May 2025 05:22:41 +0000 Files and hashes: 1: ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl (hash: 2Txovs+dXqWVG2ksHwc6WR7UDI7Dn2RVdbKo/6R06/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E782F, serialNumber=7A9FF864C50318067130588E6DBA928BA1C03A5D Validity Not Before: Apr 25 05:22:41 2025 GMT Not After : May 2 05:22:41 2025 GMT Subject: CN=680b1c22-401e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:92:ed:0c:77:86:f9:47:64:9b:94:14:7d:43: f3:08:68:54:ea:50:e4:9f:28:63:19:86:36:4e:bf: 34:b2:ff:fe:64:98:cf:d1:bb:4f:8b:17:38:cd:13: b5:48:7d:6e:cd:ff:04:c3:f8:37:38:5c:88:a7:b7: 06:14:84:fa:ec:7f:9c:cb:20:f1:dd:01:0d:2f:72: 30:3d:ec:ea:3e:88:d2:c1:8d:65:fc:db:55:3d:74: 52:39:79:d1:1a:f7:0b:13:4e:6f:3a:4a:bb:e2:1c: 77:b9:91:0c:f9:30:4c:f7:f9:e1:1b:b8:0d:26:d3: 17:2e:e1:9f:04:49:44:7b:cc:ce:fa:94:8a:50:1e: 1e:32:1d:e7:5a:80:3a:83:0e:a0:9a:da:aa:b6:42: eb:8a:4a:53:c0:7e:93:3c:ff:8a:84:e5:4f:09:7f: cd:78:b0:f8:32:bb:c7:42:dc:c4:83:9b:8f:b8:65: 00:a3:72:cb:c0:63:1d:f5:ba:8c:e0:32:fe:77:df: 6d:2c:56:93:cd:b2:ab:93:7a:33:e4:fd:81:2a:5e: 6c:ad:53:3c:3f:e8:dc:45:a3:2e:2e:3d:9d:a8:08: 0c:f5:ff:37:7a:8a:6c:b2:97:73:85:3f:5f:08:25: b7:69:da:e4:de:1b:b4:75:61:c0:e8:17:78:12:34: d5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:76:9B:C2:1F:56:98:32:C5:30:E1:67:BA:3E:B7:51:2F:E5:79:2F X509v3 Authority Key Identifier: keyid:7A:9F:F8:64:C5:03:18:06:71:30:58:8E:6D:BA:92:8B:A1:C0:3A:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:9e:0b:84:34:dd:48:ac:2c:52:4a:84:8a:57:22:64:ac:ec: dc:f1:a5:25:d7:13:b2:69:6f:f1:f1:02:ca:d7:f4:dd:b3:fe: c5:71:19:be:7c:3f:41:8a:e1:28:95:6b:5f:f7:9c:87:16:e1: 1b:d1:55:4a:9c:97:91:c5:f4:68:6f:84:05:0e:a8:e4:3a:66: 58:fd:0f:75:24:4b:d8:f2:e6:1f:95:26:cd:2c:68:4a:ca:e5: 5a:34:57:6f:4a:e1:c1:ac:7f:3a:d2:07:11:e4:13:ca:37:06: 1e:4e:ed:02:58:c6:c0:05:af:e2:fd:04:e1:24:a3:01:db:fb: 2b:86:f2:cf:fc:b8:4b:06:9b:99:15:e7:2c:d5:32:f0:4a:8a: 5a:95:bf:81:70:55:f1:53:18:38:7f:aa:c4:55:c5:2e:93:a4: 8f:a1:24:70:68:0a:c1:9b:51:e8:14:af:16:c7:f5:a0:c6:1f: b3:7c:fc:cf:5e:c1:3c:c1:2d:ae:1d:dd:06:ac:21:10:af:7c: 7e:7d:1e:6c:23:2c:99:1a:6a:bd:49:bc:49:d5:79:0f:b7:de: 01:dc:6b:75:e6:98:c9:10:f4:1f:2a:13:d0:65:b6:17:0b:5f: ba:42:d0:06:55:d5:89:e5:99:77:a2:54:b3:02:19:e7:a3:85: 4c:e5:fe:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc4MkYxMTAvBgNVBAUTKDdBOUZGODY0QzUwMzE4MDY3MTMwNTg4RTZEQkE5MjhC QTFDMDNBNUQwHhcNMjUwNDI1MDUyMjQxWhcNMjUwNTAyMDUyMjQxWjAYMRYwFAYD VQQDEw02ODBiMWMyMi00MDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJLtDHeG+Udkm5QUfUPzCGhU6lDknyhjGYY2Tr80sv/+ZJjP0btPixc4zRO1 SH1uzf8Ew/g3OFyIp7cGFIT67H+cyyDx3QENL3IwPezqPojSwY1l/NtVPXRSOXnR GvcLE05vOkq74hx3uZEM+TBM9/nhG7gNJtMXLuGfBElEe8zO+pSKUB4eMh3nWoA6 gw6gmtqqtkLrikpTwH6TPP+KhOVPCX/NeLD4MrvHQtzEg5uPuGUAo3LLwGMd9bqM 4DL+d99tLFaTzbKrk3oz5P2BKl5srVM8P+jcRaMuLj2dqAgM9f83eopsspdzhT9f CCW3adrk3hu0dWHA6Bd4EjTVLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEF2m8If VpgyxTDhZ7o+t1Ev5XkvMB8GA1UdIwQYMBaAFHqf+GTFAxgGcTBYjm26kouhwDpd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzgyRi83NjRDQTJEMDQw NzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi9lcF80Wk1VREdBWnhNRmlPYmJxU2k2SEFP bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwXzRaTVVER0FaeE1GaU9iYnFTaTZIQU9sMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzgyRi83NjRDQTJEMDQwNzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi9lcF80Wk1VREdB WnhNRmlPYmJxU2k2SEFPbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAknguENN1IrCxSSoSKVyJkrOzc8aUl1xOyaW/x8QLK1/Tds/7FcRm+ fD9BiuEolWtf95yHFuEb0VVKnJeRxfRob4QFDqjkOmZY/Q91JEvY8uYflSbNLGhK yuVaNFdvSuHBrH860gcR5BPKNwYeTu0CWMbABa/i/QThJKMB2/srhvLP/LhLBpuZ Fecs1TLwSopalb+BcFXxUxg4f6rEVcUuk6SPoSRwaArBm1HoFK8Wx/Wgxh+zfPzP XsE8wS2uHd0GrCEQr3x+fR5sIyyZGmq9SbxJ1XkPt94B3Gt15pjJEPQfKhPQZbYX C1+6QtAGVdWJ5Zl3olSzAhnno4VM5f7q -----END CERTIFICATE-----Generated at Sat Apr 26 12:27:17 2025 by rpki-client