$ rpki-client -vvf rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft File: ezpr3tL3tMBYRWjAZKuANDKHI6A.mft (raw, json) Hash identifier: u/QxLot+g8LmaF3XZ8KWuY5viBMWlzHo3itM6kiA4YU= Subject key identifier: F8:A4:F2:F0:34:AD:9C:18:36:79:73:E2:59:3B:38:9A:44:94:ED:B0 Authority key identifier: 7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0 Certificate issuer: /CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0 Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft Manifest number: 0175 Signing time: Sat 17 May 2025 03:28:56 +0000 Manifest this update: Sat 17 May 2025 03:28:55 +0000 Manifest next update: Sat 24 May 2025 03:28:55 +0000 Files and hashes: 1: ezpr3tL3tMBYRWjAZKuANDKHI6A.crl (hash: VF/5IlYwmnhals27c+v17jMRXmV+N7fXmM7pFxVtl54=) 2: 0CB9AF5C200E11EF91F18D75C4F9AE02.roa (hash: xBjv+vXxnqip6awmZ0nrqpewsCYSOweE2hm3wh5fJ/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 03:28:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116190, serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0 Validity Not Before: May 17 03:28:55 2025 GMT Not After : May 24 03:28:55 2025 GMT Subject: CN=68280278-397c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:02:31:f4:10:1e:85:c2:da:8b:9b:47:69:18: f6:e0:03:13:35:65:12:be:96:fc:c8:c0:cb:d4:6f: c4:d3:6f:57:33:49:5c:ce:4d:b0:4a:d3:05:85:68: 83:ad:53:63:97:83:99:77:64:e4:70:3d:d4:4c:9c: 56:fe:bc:0d:83:76:64:37:38:9f:db:b8:b8:9f:d7: 30:25:55:cd:3e:da:d2:5c:75:1e:9a:f4:75:0a:0c: 35:a7:7c:8f:92:5c:ac:c7:76:3f:9c:7d:f7:ed:bf: a7:92:a2:cb:90:56:0b:62:a9:17:db:34:11:31:19: 84:cd:e5:de:30:5d:4c:21:06:f3:c0:ee:27:9e:60: 22:b8:e3:4d:d2:b9:08:00:77:1e:bf:fe:81:64:5a: 53:f8:c6:d4:f9:cf:4d:93:6c:c1:d7:4c:f1:05:fb: 32:7f:38:19:60:64:a1:1c:72:16:76:7e:98:9b:01: a6:11:c5:25:83:45:00:bc:a6:e0:2b:30:fb:84:1d: f3:b1:34:dd:b8:ca:41:ca:68:d5:37:19:a6:30:1d: 2f:54:bd:f9:ef:4c:64:b9:f7:45:a9:44:8c:a5:7e: e4:18:5d:97:b5:44:d5:c5:76:f1:4d:e3:a9:a4:d9: f0:f3:df:94:4f:0e:2d:cf:43:62:be:ae:15:55:fa: 43:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A4:F2:F0:34:AD:9C:18:36:79:73:E2:59:3B:38:9A:44:94:ED:B0 X509v3 Authority Key Identifier: keyid:7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:ef:4e:8a:1a:fa:36:80:05:17:ee:91:72:e1:4c:30:e0:aa: a1:ab:8a:2a:7f:8a:86:c3:5a:79:19:61:eb:c9:43:59:db:84: cb:37:35:2c:d3:03:f8:36:54:f5:c0:dc:bb:95:6b:0e:d3:7b: ba:82:7d:9e:59:3e:1a:ea:7f:fb:30:38:37:c7:21:ba:39:bf: f1:60:0a:f4:49:2c:18:fb:88:4d:1c:05:56:01:d6:44:01:bd: 9d:71:99:90:84:fb:48:f7:72:d3:69:8d:fb:4e:68:f6:8a:c8: 71:ac:a7:aa:cb:e6:78:64:3e:4e:40:23:22:86:ee:1f:db:c2: 9a:58:50:52:e6:89:29:39:9d:bd:7c:eb:1f:ac:bf:09:da:8c: 2f:61:3a:b7:3a:78:41:3e:dc:b4:55:d9:25:f6:ce:18:5e:eb: f4:3d:49:b8:9c:3a:2a:03:ac:0d:5f:0c:24:7a:08:a7:18:ac: 1e:20:cb:14:19:bd:62:56:d3:ae:b5:7d:18:94:25:53:01:f6: 53:30:42:de:18:69:9e:45:0f:cf:a3:2a:2f:01:7f:7a:b0:b8: ec:64:5b:fb:09:5f:2f:a1:6f:61:29:ab:11:c6:8b:b6:8c:d2: 01:24:d0:bb:4f:80:8d:ad:1a:d8:9c:4e:08:51:0b:21:36:23: a5:9a:95:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYxOTAxMTAvBgNVBAUTKDdCM0E2QkRFRDJGN0I0QzA1ODQ1NjhDMDY0QUI4MDM0 MzI4NzIzQTAwHhcNMjUwNTE3MDMyODU1WhcNMjUwNTI0MDMyODU1WjAYMRYwFAYD VQQDEw02ODI4MDI3OC0zOTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wIx9BAehcLai5tHaRj24AMTNWUSvpb8yMDL1G/E029XM0lczk2wStMFhWiD rVNjl4OZd2TkcD3UTJxW/rwNg3ZkNzif27i4n9cwJVXNPtrSXHUemvR1Cgw1p3yP klysx3Y/nH337b+nkqLLkFYLYqkX2zQRMRmEzeXeMF1MIQbzwO4nnmAiuONN0rkI AHcev/6BZFpT+MbU+c9Nk2zB10zxBfsyfzgZYGShHHIWdn6YmwGmEcUlg0UAvKbg KzD7hB3zsTTduMpBymjVNxmmMB0vVL3570xkufdFqUSMpX7kGF2XtUTVxXbxTeOp pNnw89+UTw4tz0Nivq4VVfpDAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPik8vA0 rZwYNnlz4lk7OJpElO2wMB8GA1UdIwQYMBaAFHs6a97S97TAWEVowGSrgDQyhyOg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjE5MC8wQkIzOTY1MjA0 OTYxMUVFQkQzMUVEMzBDNEY5QUUwMi9lenByM3RMM3RNQllSV2pBWkt1QU5ES0hJ NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V6cHIzdEwzdE1CWVJXakFaS3VBTkRLSEk2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjE5MC8wQkIzOTY1MjA0OTYxMUVFQkQzMUVEMzBDNEY5QUUwMi9lenByM3RMM3RN QllSV2pBWkt1QU5ES0hJNkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDA706KGvo2gAUX7pFy4Uww4Kqhq4oqf4qGw1p5GWHryUNZ24TLNzUs 0wP4NlT1wNy7lWsO03u6gn2eWT4a6n/7MDg3xyG6Ob/xYAr0SSwY+4hNHAVWAdZE Ab2dcZmQhPtI93LTaY37Tmj2ishxrKeqy+Z4ZD5OQCMihu4f28KaWFBS5okpOZ29 fOsfrL8J2owvYTq3OnhBPty0Vdkl9s4YXuv0PUm4nDoqA6wNXwwkeginGKweIMsU Gb1iVtOutX0YlCVTAfZTMELeGGmeRQ/PoyovAX96sLjsZFv7CV8voW9hKasRxou2 jNIBJNC7T4CNrRrYnE4IUQshNiOlmpVb -----END CERTIFICATE-----Generated at Sat May 17 14:48:50 2025 by rpki-client