$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft File: EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft (raw, json) Hash identifier: wgpLcbmODYPJ2TyhoWWw/kg9MW7UlRUCKbSpR3Hu7fs= Subject key identifier: C9:3E:AD:65:54:5D:FE:D3:78:49:27:1B:37:D0:A9:92:7C:6C:18:B1 Authority key identifier: 11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17 Certificate issuer: /CN=A913B1DA/serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17 Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft Manifest number: 013D Signing time: Sat 10 May 2025 15:24:02 +0000 Manifest this update: Sat 10 May 2025 15:24:01 +0000 Manifest next update: Sat 17 May 2025 15:24:01 +0000 Files and hashes: 1: EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl (hash: mVraxOSfF3RUm5RQJYOowsS/lUp4huMQP03BhuN1ppM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B1DA, serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17 Validity Not Before: May 10 15:24:01 2025 GMT Not After : May 17 15:24:01 2025 GMT Subject: CN=681f6f92-4c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a4:f2:e5:fd:3b:d9:1d:0a:12:90:ce:b0:9b: d4:6d:eb:c8:76:ad:2e:27:92:9e:ae:f9:7e:58:1d: 30:b2:07:46:22:15:90:f4:58:b1:50:2f:ee:4f:7c: 69:13:71:58:c1:df:98:d6:35:77:d3:b8:6f:73:29: 3b:3a:c7:a0:24:96:62:31:db:19:ef:b8:3c:61:53: 39:4c:45:5f:83:88:5e:ba:95:60:e6:54:91:be:3d: a3:db:fa:33:0f:0e:5d:98:95:ac:38:d5:89:b8:13: 73:25:cb:a6:68:d9:43:37:48:31:4b:4b:d8:7f:12: ec:c3:85:07:06:5d:16:87:4a:16:51:df:91:63:af: b0:9a:1a:37:1f:62:38:04:a4:89:c1:07:ed:3e:e8: 94:19:0c:dd:6a:48:2e:03:f9:ca:95:27:73:47:ac: 73:87:d6:d8:75:2c:f6:9d:16:c4:b8:6a:42:3b:50: 19:f5:59:24:e6:aa:b2:6b:c0:82:fa:ed:c5:d6:17: f7:f1:6a:30:95:df:78:1a:75:17:e1:76:63:b5:40: 53:d4:96:f9:aa:f0:a8:3f:d8:68:d4:f6:00:e6:6e: 47:08:ed:aa:bb:6e:57:00:b3:54:aa:b4:72:38:a6: 97:71:50:92:5f:b1:03:b2:95:98:e4:1a:88:f7:01: 0a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:3E:AD:65:54:5D:FE:D3:78:49:27:1B:37:D0:A9:92:7C:6C:18:B1 X509v3 Authority Key Identifier: keyid:11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:9e:f5:b5:ca:18:7f:ad:16:eb:f7:c8:04:32:b4:4b:80:c3: f0:9a:87:0a:fe:02:21:9f:fe:ee:ac:26:fc:6f:65:dd:e3:a3: 92:73:d3:e8:3b:53:56:ea:d2:a5:af:9e:b7:5d:ae:22:04:bb: 68:3e:8c:d7:3a:5d:01:2c:70:52:34:a4:5f:16:fc:e8:02:d2: 9d:fd:b0:e8:43:1d:a8:d5:8a:0c:96:a9:61:73:3f:70:47:c1: 74:0c:00:dc:49:f1:c9:05:1f:e0:29:40:55:28:45:19:98:08: 1a:e1:27:9d:f9:7b:a3:4f:82:25:21:fa:d0:40:d7:b1:f3:83: af:f6:a0:f9:79:22:7e:28:96:fb:c5:5b:63:2a:d1:3c:2c:39: b0:92:47:6b:19:06:ca:ab:6d:29:ef:c3:c6:58:f8:dc:b3:fa: cb:27:54:f4:5b:74:d1:96:45:95:34:e7:95:2f:b0:ea:eb:46: 98:32:be:1f:17:bc:1c:59:1c:42:52:2d:71:b6:91:73:6a:7f: 61:c6:11:98:f5:e3:41:5f:7d:d4:98:28:b8:3f:19:58:60:15: ec:7b:f9:d7:c3:5d:40:30:83:91:93:78:c8:12:79:e0:c6:51: db:20:20:d9:a3:23:76:6a:27:c6:03:04:dd:7e:3a:c9:06:79: 73:01:70:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IxREExMTAvBgNVBAUTKDExMDlGQkM3M0ExODlCM0Q2NDcxM0ExRjZDNDg2QTA0 RTdCNDNCMTcwHhcNMjUwNTEwMTUyNDAxWhcNMjUwNTE3MTUyNDAxWjAYMRYwFAYD VQQDEw02ODFmNmY5Mi00YzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtaTy5f072R0KEpDOsJvUbevIdq0uJ5Kervl+WB0wsgdGIhWQ9FixUC/uT3xp E3FYwd+Y1jV307hvcyk7OsegJJZiMdsZ77g8YVM5TEVfg4heupVg5lSRvj2j2/oz Dw5dmJWsONWJuBNzJcumaNlDN0gxS0vYfxLsw4UHBl0Wh0oWUd+RY6+wmho3H2I4 BKSJwQftPuiUGQzdakguA/nKlSdzR6xzh9bYdSz2nRbEuGpCO1AZ9Vkk5qqya8CC +u3F1hf38Wowld94GnUX4XZjtUBT1Jb5qvCoP9ho1PYA5m5HCO2qu25XALNUqrRy OKaXcVCSX7EDspWY5BqI9wEKlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMk+rWVU Xf7TeEknGzfQqZJ8bBixMB8GA1UdIwQYMBaAFBEJ+8c6GJs9ZHE6H2xIagTntDsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjFEQS9BOTBGOERBNDRD NzkxMUVFQTc5RENEM0JDNEY5QUUwMi9FUW43eHpvWW16MWtjVG9mYkVocUJPZTBP eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VRbjd4em9ZbXoxa2NUb2ZiRWhxQk9lME94Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjFEQS9BOTBGOERBNDRDNzkxMUVFQTc5RENEM0JDNEY5QUUwMi9FUW43eHpvWW16 MWtjVG9mYkVocUJPZTBPeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOnvW1yhh/rRbr98gEMrRLgMPwmocK/gIhn/7urCb8b2Xd46OSc9Po O1NW6tKlr563Xa4iBLtoPozXOl0BLHBSNKRfFvzoAtKd/bDoQx2o1YoMlqlhcz9w R8F0DADcSfHJBR/gKUBVKEUZmAga4Sed+XujT4IlIfrQQNex84Ov9qD5eSJ+KJb7 xVtjKtE8LDmwkkdrGQbKq20p78PGWPjcs/rLJ1T0W3TRlkWVNOeVL7Dq60aYMr4f F7wcWRxCUi1xtpFzan9hxhGY9eNBX33UmCi4PxlYYBXse/nXw11AMIORk3jIEnng xlHbICDZoyN2aifGAwTdfjrJBnlzAXBJ -----END CERTIFICATE-----Generated at Sun May 11 09:37:57 2025 by rpki-client