$ rpki-client -vvf rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft File: EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft (raw, json) Hash identifier: IheqkVpv/bMa52JlsbGK3kKFsjALiZNhGYGAtL5ZHoo= Subject key identifier: 4A:5F:B5:8C:1D:F8:72:2F:3F:AF:8F:A5:02:8E:AE:E1:5E:F7:F0:29 Authority key identifier: 12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0 Certificate issuer: /CN=A913C07A/serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0 Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft Manifest number: F3 Signing time: Sun 11 May 2025 04:07:24 +0000 Manifest this update: Sun 11 May 2025 04:07:23 +0000 Manifest next update: Sun 18 May 2025 04:07:23 +0000 Files and hashes: 1: EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl (hash: LHa6rjuDaqPrmzOb0NibD2bWukf1lQDooy8mMOSwL08=) 2: A1456A4CBE6811EEBFF35870C4F9AE02.roa (hash: 97zPU/AWi/C0nV9VIKmemXWGwZXv9hj/Vz3ExXILCII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C07A, serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0 Validity Not Before: May 11 04:07:23 2025 GMT Not After : May 18 04:07:23 2025 GMT Subject: CN=6820227b-b673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8c:ff:b6:26:8d:ab:f1:d7:6d:41:4c:dd:2f: a8:7a:d8:96:e8:2d:3d:5d:88:a2:c5:af:74:17:6a: 25:0e:78:ab:bd:cb:89:9f:a2:1f:87:74:72:d6:66: 8b:26:21:4c:97:ed:1d:40:39:cc:a7:85:49:c2:55: 3f:1a:58:9f:16:f5:57:60:61:af:58:8f:cf:3c:ff: 56:0e:62:18:57:7f:8e:58:58:97:be:80:3b:97:39: 9c:98:42:58:ed:e8:1e:2c:19:9d:ab:f5:e1:10:59: 1c:92:a3:62:bc:66:cb:a7:7d:6e:c5:44:3b:67:4b: 1f:cf:b1:2b:0b:47:6f:a6:d9:d5:99:2b:75:16:59: 20:c7:7b:05:33:14:bf:be:b6:bf:da:a5:55:6f:e2: 23:48:64:41:e5:ef:7a:b5:6b:7f:67:7b:60:25:ee: e4:39:3b:d3:bd:35:ae:87:12:95:19:cb:6a:b0:33: 10:cb:01:8a:e1:f0:e2:20:73:e8:82:83:3f:42:70: e9:1d:67:5b:60:a8:c3:de:cf:c6:32:71:7a:24:ee: a7:fe:c5:53:61:f0:2f:d1:7f:e6:d9:8b:3a:33:6d: 21:d7:5b:a5:c2:a9:16:71:a3:84:a9:17:a8:0a:35: 92:bc:4a:d6:62:73:ad:5d:94:b3:cc:d1:af:78:60: 26:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:5F:B5:8C:1D:F8:72:2F:3F:AF:8F:A5:02:8E:AE:E1:5E:F7:F0:29 X509v3 Authority Key Identifier: keyid:12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:d8:45:af:44:32:51:38:a5:9f:9f:b1:93:c9:44:95:5e:7f: f8:68:1d:77:34:87:05:09:68:1f:5b:49:69:9a:1d:1d:bf:7a: 3b:93:87:32:91:f7:da:f9:72:3b:a1:c4:a0:84:0c:ed:48:4f: 42:a2:35:6d:65:72:1b:3c:7a:97:cf:1e:bc:9c:73:93:85:b2: 38:5e:7f:30:fe:de:ae:f4:8a:b3:f7:ea:fd:b0:0a:af:c8:95: db:32:6b:db:90:10:4d:5c:8c:ba:8e:6b:ea:df:90:3d:33:38: e8:4f:18:5d:19:bb:55:4f:62:c1:a1:7b:c9:84:20:36:ba:8a: e5:36:91:90:96:07:af:7d:18:68:8c:27:d7:25:9e:26:c3:1f: a7:ba:c6:fa:73:05:17:e8:39:67:d7:c0:32:98:ee:79:de:7c: 01:8b:9d:81:13:8e:bf:06:2c:51:ee:45:e2:77:17:43:e7:15: e6:84:78:68:ae:66:0e:1c:bc:27:84:1c:cd:97:18:94:c5:02: 65:8a:f3:84:8e:5d:31:29:b3:0b:73:bc:af:83:4f:01:17:b0: 35:a0:7b:1b:0e:71:52:3a:51:9b:7a:a6:26:ee:df:df:a9:1c: 4c:41:99:88:0f:fb:e7:f4:80:cc:5a:32:6e:b1:9b:1d:97:f9: b9:d9:32:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MwN0ExMTAvBgNVBAUTKDEyMThERTc1QjI1ODhCNjYzM0E2QkY4OENEMzg4RjMx QzQzQUM5QzAwHhcNMjUwNTExMDQwNzIzWhcNMjUwNTE4MDQwNzIzWjAYMRYwFAYD VQQDEw02ODIwMjI3Yi1iNjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Iz/tiaNq/HXbUFM3S+oetiW6C09XYiixa90F2olDnirvcuJn6Ifh3Ry1maL JiFMl+0dQDnMp4VJwlU/GlifFvVXYGGvWI/PPP9WDmIYV3+OWFiXvoA7lzmcmEJY 7egeLBmdq/XhEFkckqNivGbLp31uxUQ7Z0sfz7ErC0dvptnVmSt1Flkgx3sFMxS/ vra/2qVVb+IjSGRB5e96tWt/Z3tgJe7kOTvTvTWuhxKVGctqsDMQywGK4fDiIHPo goM/QnDpHWdbYKjD3s/GMnF6JO6n/sVTYfAv0X/m2Ys6M20h11ulwqkWcaOEqReo CjWSvErWYnOtXZSzzNGveGAmfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEpftYwd +HIvP6+PpQKOruFe9/ApMB8GA1UdIwQYMBaAFBIY3nWyWItmM6a/iM04jzHEOsnA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzA3QS9GMTQyNjE0QUJF NjcxMUVFQjMzQzZENkVDNEY5QUUwMi9FaGplZGJKWWkyWXpwci1JelRpUE1jUTZ5 Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VoamVkYkpZaTJZenByLUl6VGlQTWNRNnljQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzA3QS9GMTQyNjE0QUJFNjcxMUVFQjMzQzZENkVDNEY5QUUwMi9FaGplZGJKWWky WXpwci1JelRpUE1jUTZ5Y0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX2EWvRDJROKWfn7GTyUSVXn/4aB13NIcFCWgfW0lpmh0dv3o7k4cy kffa+XI7ocSghAztSE9CojVtZXIbPHqXzx68nHOThbI4Xn8w/t6u9Iqz9+r9sAqv yJXbMmvbkBBNXIy6jmvq35A9MzjoTxhdGbtVT2LBoXvJhCA2uorlNpGQlgevfRho jCfXJZ4mwx+nusb6cwUX6Dln18AymO553nwBi52BE46/BixR7kXidxdD5xXmhHho rmYOHLwnhBzNlxiUxQJlivOEjl0xKbMLc7yvg08BF7A1oHsbDnFSOlGbeqYm7t/f qRxMQZmID/vn9IDMWjJusZsdl/m52TJE -----END CERTIFICATE-----Generated at Tue May 13 00:00:40 2025 by rpki-client