$ rpki-client -vvf rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft File: eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft (raw, json) Hash identifier: xceqLETNmrRdWdMNUlRD5ALaAEtCg3YlejFlU/7fO3c= Subject key identifier: DC:AB:E3:D0:B9:C5:2A:C9:2D:85:B7:94:4E:B8:C4:04:FF:D5:1D:83 Authority key identifier: 78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2 Certificate issuer: /CN=A914BFE5/serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2 Certificate serial: 0818 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft Manifest number: 07FE Signing time: Sun 04 May 2025 20:39:46 +0000 Manifest this update: Sun 04 May 2025 20:39:46 +0000 Manifest next update: Sun 11 May 2025 20:39:46 +0000 Files and hashes: 1: eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl (hash: 6cIzQCGHhUFhMAgdb4HidSDsFk5+DPoayJIu6u+MTKo=) 2: 58A9026623AD11EBB858645DC4F9AE02.roa (hash: XB8wSFVQZAHvqakZ35MOgP2u0Ix9DouCb4nv3BULPR8=) 3: C664689AE0F511EABB96D531C4F9AE02.roa (hash: dYyNNCNhHnZkGZCDfE/V9Ur6jl+sr7C71Nxoo9EVQmI=) 4: C5639A24E0F511EABB96D531C4F9AE02.roa (hash: DOSZg99mo70HEeL3C6AnH+3DNlQmbU02wS7iu6QLEaI=) 5: 93FE3B60220111EE8E5D8D0FC4F9AE02.roa (hash: B74A200MEGtzjKLkG19+x2nWM7IOpN8G2t0B9881Biw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 20:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2072 (0x818) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BFE5, serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2 Validity Not Before: May 4 20:39:46 2025 GMT Not After : May 11 20:39:46 2025 GMT Subject: CN=6817d092-07b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fa:10:a1:77:ad:a0:2d:d7:ef:1a:68:8e:93: 23:a0:3c:b3:93:11:6c:24:53:5a:88:bb:e5:8c:4f: aa:de:4c:d4:14:a6:56:58:88:27:ee:99:64:e5:04: fa:3f:66:37:8a:0d:ad:34:ed:ec:e5:e9:57:c3:3a: ea:16:09:0b:55:a4:e4:f0:32:ea:09:39:a7:d5:af: eb:f7:54:6f:8f:35:60:a6:9f:c5:ea:68:ac:e5:db: 0d:33:fb:23:37:0b:16:57:28:28:c2:ff:a1:e8:16: b7:61:b4:da:e2:0c:31:5f:c9:02:38:ff:f4:bd:97: ed:a9:81:8a:96:87:fe:90:cb:80:a3:d2:b0:91:ed: 83:8f:63:3c:19:82:74:a2:57:d1:b5:5c:77:49:10: 74:69:1b:98:44:1b:d2:20:76:54:a0:02:e3:5b:3f: c1:7c:49:d9:db:d0:5a:05:2e:7c:78:91:72:17:b1: ed:b7:5c:f6:18:e9:43:b1:54:68:ab:dc:ff:21:f3: ac:c8:cb:4d:20:09:e6:f3:31:0f:d8:19:5f:04:62: 22:42:37:73:fc:61:74:16:f8:af:50:0a:e6:81:07: 13:a0:72:be:1b:58:5e:e9:99:d8:2c:68:fe:91:cf: a4:8c:20:d9:01:bc:f1:24:ea:ce:fb:33:05:6d:24: cf:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:AB:E3:D0:B9:C5:2A:C9:2D:85:B7:94:4E:B8:C4:04:FF:D5:1D:83 X509v3 Authority Key Identifier: keyid:78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:69:49:eb:24:f9:66:9e:6c:37:0b:ab:01:ad:05:50:2d:c5: c0:a2:1e:47:c8:a8:b5:c7:09:26:05:7c:c1:d8:0b:26:33:4d: 2e:26:7d:6e:d2:5f:40:c6:f6:9f:d7:a0:5b:cd:3e:a7:84:83: 0e:0b:2e:c8:5a:36:a3:6c:c3:42:57:66:9a:cc:2f:05:3a:3c: 9e:bd:9d:03:2d:fa:9d:3f:8f:c5:50:e9:04:1c:43:e9:b4:26: e4:d5:32:49:90:de:23:7b:c3:42:cb:fd:60:f4:01:3b:65:4e: a1:6a:be:c3:4e:eb:10:52:9a:43:a2:5c:98:d7:40:84:15:e0: af:21:99:f6:46:15:f1:0d:4d:e3:eb:fd:2b:b9:a6:90:44:d8: 3d:c9:df:42:6e:fb:2a:ca:ce:b4:9e:33:8c:2c:44:df:8b:84: 84:a6:91:3f:a7:c8:25:25:ff:3a:de:67:c9:fe:f3:6e:8b:b1: 30:c7:ef:9c:cb:45:1c:75:46:cf:f1:a0:c5:68:a7:89:0c:03: 10:68:56:03:7f:30:46:0c:99:47:b7:ba:5f:fe:56:4a:00:1b: 69:4e:9a:64:75:5e:31:e4:99:08:b3:6a:75:b8:82:7b:53:23: 66:c7:d0:0c:a9:c3:cf:2e:cd:a7:56:51:e9:b0:f8:db:97:21: bc:e2:4f:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJGRTUxMTAvBgNVBAUTKDc4QTk5NzdGRkI0N0FGM0VDMUU5NDZCQzEwRjgxMzc2 OTQ5RUJFQzIwHhcNMjUwNTA0MjAzOTQ2WhcNMjUwNTExMjAzOTQ2WjAYMRYwFAYD VQQDEw02ODE3ZDA5Mi0wN2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfoQoXetoC3X7xpojpMjoDyzkxFsJFNaiLvljE+q3kzUFKZWWIgn7plk5QT6 P2Y3ig2tNO3s5elXwzrqFgkLVaTk8DLqCTmn1a/r91RvjzVgpp/F6mis5dsNM/sj NwsWVygowv+h6Ba3YbTa4gwxX8kCOP/0vZftqYGKlof+kMuAo9Kwke2Dj2M8GYJ0 olfRtVx3SRB0aRuYRBvSIHZUoALjWz/BfEnZ29BaBS58eJFyF7Htt1z2GOlDsVRo q9z/IfOsyMtNIAnm8zEP2BlfBGIiQjdz/GF0FvivUArmgQcToHK+G1he6ZnYLGj+ kc+kjCDZAbzxJOrO+zMFbSTP/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNyr49C5 xSrJLYW3lE64xAT/1R2DMB8GA1UdIwQYMBaAFHipl3/7R68+welGvBD4E3aUnr7C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkZFNS85REFGNDg2RURE RUIxMUVBQjMwRUQ5MjFDNEY5QUUwMi9lS21YZl90SHJ6N0I2VWE4RVBnVGRwU2V2 c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VLbVhmX3RIcno3QjZVYThFUGdUZHBTZXZzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkZFNS85REFGNDg2RURERUIxMUVBQjMwRUQ5MjFDNEY5QUUwMi9lS21YZl90SHJ6 N0I2VWE4RVBnVGRwU2V2c0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGaUnrJPlmnmw3C6sBrQVQLcXAoh5HyKi1xwkmBXzB2AsmM00uJn1u 0l9Axvaf16BbzT6nhIMOCy7IWjajbMNCV2aazC8FOjyevZ0DLfqdP4/FUOkEHEPp tCbk1TJJkN4je8NCy/1g9AE7ZU6har7DTusQUppDolyY10CEFeCvIZn2RhXxDU3j 6/0ruaaQRNg9yd9Cbvsqys60njOMLETfi4SEppE/p8glJf863mfJ/vNui7Ewx++c y0UcdUbP8aDFaKeJDAMQaFYDfzBGDJlHt7pf/lZKABtpTppkdV4x5JkIs2p1uIJ7 UyNmx9AMqcPPLs2nVlHpsPjblyG84k8D -----END CERTIFICATE-----Generated at Tue May 6 03:39:31 2025 by rpki-client