$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft File: EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft (raw, json) Hash identifier: COeGGVLHyD2g0j9jcJJBS1S4SPo8Uwk49BDFEu7zflU= Subject key identifier: FD:23:07:4F:9B:AC:C4:17:D7:4E:EA:21:2A:4B:FA:98:5E:F4:3E:F7 Authority key identifier: 11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 Certificate issuer: /CN=A91FD4A1/serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544 Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft Manifest number: 01C6 Signing time: Fri 25 Apr 2025 02:07:13 +0000 Manifest this update: Fri 25 Apr 2025 02:07:13 +0000 Manifest next update: Fri 02 May 2025 02:07:13 +0000 Files and hashes: 1: EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl (hash: WD+yPtwwioW2oqY3jbJXsCIktlx0m5cTGGq2ZggzysU=) 2: 16E990CA6B0411ED849E0957C4F9AE02.roa (hash: Uh7B24TrfbcaCXXos+UCRzkq1ccagOkOy3EbQYTwo0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4A1, serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544 Validity Not Before: Apr 25 02:07:13 2025 GMT Not After : May 2 02:07:13 2025 GMT Subject: CN=680aee51-50d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b4:16:96:87:be:0e:c0:ee:f2:f8:b4:b1:26: 43:48:0c:1f:c1:19:81:c8:1a:6e:c0:a1:06:33:ec: 0e:03:ae:56:5f:6e:47:00:54:92:03:bb:12:f7:51: 6b:3a:86:68:02:e9:69:b3:98:3c:36:78:21:e3:e3: ce:13:7e:74:e0:7f:03:fe:5b:10:c5:1e:ec:5c:7f: a5:b5:91:35:22:08:62:5d:e8:2e:be:73:f9:ec:66: a9:c8:2f:b1:15:f3:83:f6:80:af:2b:8f:e1:2c:08: 71:60:51:c4:ed:96:d3:fd:3c:72:0a:05:e6:af:b9: 87:06:dc:1e:79:0a:7c:ef:5d:98:dc:ad:a1:f6:4e: ab:a6:df:3b:8d:6f:96:b2:c3:e1:05:34:9c:ae:c9: 76:b2:63:b2:8d:24:37:28:1a:02:c8:b0:a6:fa:ca: 88:30:f2:bf:ea:a5:ef:e4:61:f1:d8:16:5c:90:ac: 68:5e:3d:f5:d6:63:46:47:35:51:86:51:04:88:a3: 5a:7b:c9:8a:0e:38:46:b5:6c:33:fa:54:29:76:ea: 7d:3c:4e:69:53:2a:c9:3c:50:35:5f:7a:07:fa:92: ac:6b:34:ba:ed:16:49:91:fe:4a:02:45:66:35:87: d9:31:7d:58:cb:68:39:55:f0:25:73:d4:19:dd:25: 32:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:23:07:4F:9B:AC:C4:17:D7:4E:EA:21:2A:4B:FA:98:5E:F4:3E:F7 X509v3 Authority Key Identifier: keyid:11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:07:4c:49:75:f3:83:8e:fc:af:46:ba:84:e9:d1:85:28:bd: 8c:56:01:ae:20:3a:4e:00:15:1a:6e:62:ed:97:40:ca:11:45: 9a:22:d7:06:ea:31:de:ad:14:03:19:da:4e:3d:c4:c1:0d:5d: 66:90:24:a3:dd:2e:ac:2e:e1:90:5f:82:31:82:99:9f:cc:3b: 14:cf:99:3a:ae:89:eb:90:f5:7f:aa:bb:b2:3b:21:15:ab:19: 4d:99:b4:e1:71:9a:34:24:db:9e:fc:77:d0:4d:16:01:0f:8c: d6:19:c2:54:bd:ea:61:b0:f5:27:78:10:5e:38:2c:99:47:54: 9d:d8:3a:f4:46:f2:94:6c:bd:29:8b:e3:81:3a:b5:19:3f:9c: b0:fd:b4:da:95:4c:d5:1f:01:55:58:82:21:7c:0a:67:e6:a7: eb:a9:f7:63:f8:3e:7d:0a:88:74:5c:9b:d2:d8:a9:92:6c:9d: 89:87:d2:b7:fc:bc:b2:f4:c3:f5:5a:34:0b:23:11:80:55:33: c3:cf:47:a0:0f:e4:d8:9d:82:69:e2:92:c6:d0:f8:74:18:ec: e6:84:58:b8:ba:9b:c1:a5:c3:1e:b2:ce:cb:02:18:c9:af:28: 54:fd:e6:e3:8b:ed:e6:ea:66:a6:ae:c8:cb:de:b1:bf:90:8b: dd:6b:a6:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0QTExMTAvBgNVBAUTKDExOTZDRERGREEzRUJEQzVBREE4RkZDNUJDQjM4NDkx MjE0N0Q1NDQwHhcNMjUwNDI1MDIwNzEzWhcNMjUwNTAyMDIwNzEzWjAYMRYwFAYD VQQDEw02ODBhZWU1MS01MGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrQWloe+DsDu8vi0sSZDSAwfwRmByBpuwKEGM+wOA65WX25HAFSSA7sS91Fr OoZoAulps5g8Nngh4+POE3504H8D/lsQxR7sXH+ltZE1IghiXeguvnP57GapyC+x FfOD9oCvK4/hLAhxYFHE7ZbT/TxyCgXmr7mHBtweeQp8712Y3K2h9k6rpt87jW+W ssPhBTScrsl2smOyjSQ3KBoCyLCm+sqIMPK/6qXv5GHx2BZckKxoXj311mNGRzVR hlEEiKNae8mKDjhGtWwz+lQpdup9PE5pUyrJPFA1X3oH+pKsazS67RZJkf5KAkVm NYfZMX1Yy2g5VfAlc9QZ3SUyUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0jB0+b rMQX107qISpL+phe9D73MB8GA1UdIwQYMBaAFBGWzd/aPr3Fraj/xbyzhJEhR9VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDRBMS82MkI0MjNCQTZC MDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZjV3RxUF9GdkxPRWtTRkgx VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VaYk4zOW8tdmNXdHFQX0Z2TE9Fa1NGSDFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDRBMS82MkI0MjNCQTZCMDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZj V3RxUF9GdkxPRWtTRkgxVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWB0xJdfODjvyvRrqE6dGFKL2MVgGuIDpOABUabmLtl0DKEUWaItcG 6jHerRQDGdpOPcTBDV1mkCSj3S6sLuGQX4IxgpmfzDsUz5k6ronrkPV/qruyOyEV qxlNmbThcZo0JNue/HfQTRYBD4zWGcJUvephsPUneBBeOCyZR1Sd2Dr0RvKUbL0p i+OBOrUZP5yw/bTalUzVHwFVWIIhfApn5qfrqfdj+D59Coh0XJvS2KmSbJ2Jh9K3 /Lyy9MP1WjQLIxGAVTPDz0egD+TYnYJp4pLG0Ph0GOzmhFi4upvBpcMess7LAhjJ ryhU/ebji+3m6mamrsjL3rG/kIvda6by -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:55 2025 by rpki-client