$ rpki-client -vvf rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft File: EkcIHpupfBPH3T1o5EPR9UebKv8.mft (raw, json) Hash identifier: KbQoDZUqCUen/ysnkN1KGvfrLVFNB22pKWGJx5CfOLc= Subject key identifier: B0:30:47:A4:3C:D6:89:D9:C9:60:9C:70:FA:4B:12:54:8E:73:84:41 Authority key identifier: 12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF Certificate issuer: /CN=A91396E7/serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft Manifest number: 6A Signing time: Fri 09 May 2025 05:59:43 +0000 Manifest this update: Fri 09 May 2025 05:59:42 +0000 Manifest next update: Fri 16 May 2025 05:59:42 +0000 Files and hashes: 1: EkcIHpupfBPH3T1o5EPR9UebKv8.crl (hash: OUE2eK6cBPD/fyFztcr8p7nbivJmamHIBliBG5Y6T+w=) 2: A1CF550A912511EF8FF0813AC4F9AE02.roa (hash: 5nFCTmC5xU4JIe+ocqPzYmN20Z681T2Mb6LU4xxafNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 05:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91396E7, serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF Validity Not Before: May 9 05:59:42 2025 GMT Not After : May 16 05:59:42 2025 GMT Subject: CN=681d99ce-c376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:13:36:48:97:7b:96:65:15:0b:76:7a:73:4e: a9:d4:a1:a2:65:83:fb:b3:aa:ce:b9:62:d4:99:20: 55:9e:c1:e9:31:90:f2:a7:b4:a8:74:21:6f:76:1a: bb:43:b4:88:d6:c4:fc:74:db:c2:f4:e8:75:86:c3: c0:3b:5a:a6:ba:28:79:20:df:3f:dc:8d:93:a4:81: 9a:86:e4:13:ec:e0:5e:0c:fe:28:5d:01:0d:d8:22: 0f:14:a4:29:35:16:32:8f:6e:79:c8:d1:2c:77:a6: 2c:ff:69:55:7d:3d:6e:2d:8b:d9:b4:91:8d:47:a9: 0f:50:a5:b9:b3:a8:0f:11:bf:fe:a2:f4:ec:0d:a6: cd:fd:dd:e1:52:b4:96:c1:36:2c:07:fd:7b:6b:ff: 8c:84:0e:3d:e9:91:e5:79:47:bd:40:e4:fe:d8:da: 20:c3:7c:e0:77:c6:3b:72:c0:ac:f7:d6:6f:de:dc: cf:62:b2:d3:f7:fb:77:28:f0:83:a9:fd:7f:51:77: 10:dd:74:05:be:e8:f8:f1:72:3d:01:1a:5d:7e:0b: 0c:c5:17:a2:f3:75:ab:50:52:00:11:bd:1d:a7:b2: 8b:a0:2a:d9:33:75:c7:7c:97:1c:74:ac:47:45:6f: d6:9a:fd:ff:82:46:b9:8e:3f:32:21:f5:8c:60:da: 7b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:30:47:A4:3C:D6:89:D9:C9:60:9C:70:FA:4B:12:54:8E:73:84:41 X509v3 Authority Key Identifier: keyid:12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:5d:81:41:45:bd:2c:53:10:0c:5c:69:70:e6:79:2b:f8:a1: 84:8e:72:d4:d5:c5:b6:da:68:8d:f1:93:a4:78:84:8d:b0:e8: 79:50:a7:d7:38:9b:36:5f:b2:a2:7f:84:5b:86:0d:81:28:c9: e3:1f:22:52:19:89:4b:8d:26:9b:16:6a:ce:77:f2:20:6e:3c: de:e6:17:1a:04:47:be:c2:8f:e0:b4:10:1e:1f:61:33:e4:6a: 59:c2:5a:3e:37:dd:51:22:fd:14:2a:27:29:eb:28:86:3a:3e: 1b:b0:aa:16:f7:6a:d0:74:34:a8:33:03:97:da:5b:62:b8:47: 23:98:fc:96:51:62:0c:d3:b2:46:ce:43:20:02:95:ec:70:6e: aa:09:5a:c7:ff:7b:81:e0:38:c5:33:3f:de:be:22:63:9a:aa: 58:5b:80:86:48:4a:bd:a3:e0:db:15:41:8b:39:34:04:9a:19: ef:8a:3b:9d:d8:f2:42:8a:c6:eb:17:5b:a6:15:99:3c:e0:50: a9:1c:2e:5f:0d:c1:34:fb:56:b0:40:90:e3:94:02:63:fe:9b: a5:22:61:f7:a8:bd:44:39:7e:83:7a:8d:3f:00:af:b0:ed:8e: de:c6:cc:f1:d1:1a:2e:f1:52:20:c4:5d:0d:8f:c9:82:7f:08: c7:d2:1f:dd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OTZFNzExMC8GA1UEBRMoMTI0NzA4MUU5QkE5N0MxM0M3REQzRDY4RTQ0M0QxRjU0 NzlCMkFGRjAeFw0yNTA1MDkwNTU5NDJaFw0yNTA1MTYwNTU5NDJaMBgxFjAUBgNV BAMTDTY4MWQ5OWNlLWMzNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMEzZIl3uWZRULdnpzTqnUoaJlg/uzqs65YtSZIFWewekxkPKntKh0IW92GrtD tIjWxPx028L06HWGw8A7Wqa6KHkg3z/cjZOkgZqG5BPs4F4M/ihdAQ3YIg8UpCk1 FjKPbnnI0Sx3piz/aVV9PW4ti9m0kY1HqQ9QpbmzqA8Rv/6i9OwNps393eFStJbB NiwH/Xtr/4yEDj3pkeV5R71A5P7Y2iDDfOB3xjtywKz31m/e3M9istP3+3co8IOp /X9RdxDddAW+6Pjxcj0BGl1+CwzFF6LzdatQUgARvR2nsougKtkzdcd8lxx0rEdF b9aa/f+CRrmOPzIh9Yxg2ntpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsDBHpDzW idnJYJxw+ksSVI5zhEEwHwYDVR0jBBgwFoAUEkcIHpupfBPH3T1o5EPR9UebKv8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5NkU3LzA2NzlBQ0Y0OTEy NTExRUY5NDJBMkIyOEM0RjlBRTAyL0VrY0lIcHVwZkJQSDNUMW81RVBSOVVlYkt2 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRWtjSUhwdXBmQlBIM1QxbzVFUFI5VWViS3Y4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5 NkU3LzA2NzlBQ0Y0OTEyNTExRUY5NDJBMkIyOEM0RjlBRTAyL0VrY0lIcHVwZkJQ SDNUMW81RVBSOVVlYkt2OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMFdgUFFvSxTEAxcaXDmeSv4oYSOctTVxbbaaI3xk6R4hI2w6HlQp9c4 mzZfsqJ/hFuGDYEoyeMfIlIZiUuNJpsWas538iBuPN7mFxoER77Cj+C0EB4fYTPk alnCWj433VEi/RQqJynrKIY6Phuwqhb3atB0NKgzA5faW2K4RyOY/JZRYgzTskbO QyAClexwbqoJWsf/e4HgOMUzP96+ImOaqlhbgIZISr2j4NsVQYs5NASaGe+KO53Y 8kKKxusXW6YVmTzgUKkcLl8NwTT7VrBAkOOUAmP+m6UiYfeovUQ5foN6jT8Ar7Dt jt7GzPHRGi7xUiDEXQ2PyYJ/CMfSH90= -----END CERTIFICATE-----Generated at Sat May 10 19:31:42 2025 by rpki-client