$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft File: EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft (raw, json) Hash identifier: W8S8uU93SneK310hiXEnWTMzknjd3M7gwhcYuRF5A2Y= Subject key identifier: 38:CF:34:2F:81:DF:C0:38:69:36:18:A1:8B:77:16:AC:FF:F0:6B:CE Authority key identifier: 11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83 Certificate issuer: /CN=A91E9888/serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83 Certificate serial: 0C6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft Manifest number: 0C58 Signing time: Thu 24 Apr 2025 18:16:49 +0000 Manifest this update: Thu 24 Apr 2025 18:16:49 +0000 Manifest next update: Thu 01 May 2025 18:16:49 +0000 Files and hashes: 1: EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl (hash: ptfes+zpd3ApaLOkW6kSaslDMJaFivhsPk293mTkMEE=) 2: E8E88010F2C811EA914D710EC4F9AE02.roa (hash: IFWas/rgHa7uSrgJAOPof+Srn7iqSkG+8jyeDB/7tHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:16:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3178 (0xc6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9888, serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83 Validity Not Before: Apr 24 18:16:49 2025 GMT Not After : May 1 18:16:49 2025 GMT Subject: CN=680a8011-5ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b2:19:2b:1c:f4:98:47:2e:6a:be:23:1a:1e: 07:0b:41:d5:c9:45:fe:96:0e:38:59:8f:21:0c:b3: 5d:30:94:9e:e9:a3:53:92:42:d6:62:4c:63:c5:c4: 06:c3:98:0b:d4:33:a7:ea:25:0c:0a:45:15:04:2a: 43:a4:77:a2:fd:1c:94:d2:29:d9:d9:a3:f8:41:1b: 31:36:ce:58:0a:99:53:ac:b1:76:fd:7e:02:f3:02: 46:48:11:92:fa:bd:e8:b8:25:57:16:5d:56:ac:fc: a2:4a:94:6a:38:ba:37:56:78:cb:f5:64:40:ef:5c: 16:f7:7c:a0:4f:63:62:f1:1f:d4:c7:ae:11:78:c7: 7c:65:0f:73:96:82:37:0f:a9:b2:59:cf:64:40:e3: ef:ed:5c:b4:9a:da:cf:c3:46:6f:ce:bd:9f:67:1b: ae:03:ff:5b:e7:41:8c:10:50:e7:a0:e7:b7:b0:9e: b5:cf:c5:05:ee:83:ae:0f:da:27:d1:e6:90:ef:42: 07:cf:e7:30:26:7f:2c:13:0d:a1:b2:f5:6d:54:1b: 17:eb:94:84:b1:ac:e4:f7:53:b9:1c:a7:de:dd:e1: 91:20:40:fc:f9:c4:6e:48:dc:85:98:68:93:ed:46: cd:76:60:4b:ba:56:27:37:78:64:ad:3f:be:19:30: 5a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CF:34:2F:81:DF:C0:38:69:36:18:A1:8B:77:16:AC:FF:F0:6B:CE X509v3 Authority Key Identifier: keyid:11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:ea:14:15:8f:75:9f:75:60:f5:5b:58:0c:b7:f7:96:a9:ee: 52:d7:eb:0d:6c:a4:ae:c0:e5:68:39:4d:95:67:65:41:4c:ec: 4f:85:2c:99:2b:49:86:c7:54:90:55:3e:91:9e:49:e4:b0:13: ed:42:65:a4:ec:7d:e2:ee:28:34:76:7e:1f:74:b9:76:75:29: 20:14:d3:26:b2:9c:5d:5a:52:5d:4d:40:ce:6c:59:b9:1d:bc: e1:db:62:c3:b9:b8:fa:95:c8:e3:13:b0:ee:35:3d:7f:7b:37: 1a:4a:5a:91:92:f8:29:41:cf:6c:88:78:4b:fc:18:3d:ca:11: 75:54:1c:d8:e0:82:b0:53:82:e7:22:17:15:ec:b4:d5:54:b4: db:5c:36:cc:ca:1c:4d:e0:f9:66:71:34:c4:31:3c:d9:f5:f1: 75:be:51:63:fd:cb:2e:4d:2b:28:40:41:98:9e:b3:c3:5f:57: 0c:20:bd:c6:83:6b:39:bc:cb:d9:6f:b4:71:3c:62:14:29:cd: 9b:ed:ad:c0:63:95:0b:f6:bc:81:dd:52:94:95:65:a4:b1:23: a3:23:cd:7d:63:2b:23:8f:cf:36:c0:50:34:05:b4:0c:52:a0: 5f:26:ed:08:5f:19:28:10:4b:79:a5:7f:f3:c6:62:68:71:7f: df:ae:ef:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk4ODgxMTAvBgNVBAUTKDExRjVBNzA3M0FDMjFBRkY1Q0M0RDNCQkJENjU4REVB MzkzMkNCODMwHhcNMjUwNDI0MTgxNjQ5WhcNMjUwNTAxMTgxNjQ5WjAYMRYwFAYD VQQDEw02ODBhODAxMS01YWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4LIZKxz0mEcuar4jGh4HC0HVyUX+lg44WY8hDLNdMJSe6aNTkkLWYkxjxcQG w5gL1DOn6iUMCkUVBCpDpHei/RyU0inZ2aP4QRsxNs5YCplTrLF2/X4C8wJGSBGS +r3ouCVXFl1WrPyiSpRqOLo3VnjL9WRA71wW93ygT2Ni8R/Ux64ReMd8ZQ9zloI3 D6myWc9kQOPv7Vy0mtrPw0Zvzr2fZxuuA/9b50GMEFDnoOe3sJ61z8UF7oOuD9on 0eaQ70IHz+cwJn8sEw2hsvVtVBsX65SEsazk91O5HKfe3eGRIED8+cRuSNyFmGiT 7UbNdmBLulYnN3hkrT++GTBa3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjPNC+B 38A4aTYYoYt3Fqz/8GvOMB8GA1UdIwQYMBaAFBH1pwc6whr/XMTTu71ljeo5MsuD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTg4OC82RjU0RDEwRUZG RjMxMUU5ODc5QjE0NzlDNEY5QUUwMi9FZlduQnpyQ0d2OWN4Tk83dldXTjZqa3l5 NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VmV25CenJDR3Y5Y3hOTzd2V1dONmpreXk0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTg4OC82RjU0RDEwRUZGRjMxMUU5ODc5QjE0NzlDNEY5QUUwMi9FZlduQnpyQ0d2 OWN4Tk83dldXTjZqa3l5NE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX6hQVj3WfdWD1W1gMt/eWqe5S1+sNbKSuwOVoOU2VZ2VBTOxPhSyZ K0mGx1SQVT6RnknksBPtQmWk7H3i7ig0dn4fdLl2dSkgFNMmspxdWlJdTUDObFm5 Hbzh22LDubj6lcjjE7DuNT1/ezcaSlqRkvgpQc9siHhL/Bg9yhF1VBzY4IKwU4Ln IhcV7LTVVLTbXDbMyhxN4PlmcTTEMTzZ9fF1vlFj/csuTSsoQEGYnrPDX1cMIL3G g2s5vMvZb7RxPGIUKc2b7a3AY5UL9ryB3VKUlWWksSOjI819Yysjj882wFA0BbQM UqBfJu0IXxkoEEt5pX/zxmJocX/fru9/ -----END CERTIFICATE-----Generated at Sat Apr 26 03:45:27 2025 by rpki-client