$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft File: enhVXghERXV_vNAN3R10w2nLoLA.mft (raw, json) Hash identifier: 3zDDFP7ETzSxCQjWYt5JynCY/URMjJwUxuDlJSIUh30= Subject key identifier: F0:0E:96:E5:41:7D:1D:D0:10:EC:3F:81:65:FC:47:AD:03:E8:D7:31 Authority key identifier: 7A:78:55:5E:08:44:45:75:7F:BC:D0:0D:DD:1D:74:C3:69:CB:A0:B0 Certificate issuer: /CN=A914E6AA/serialNumber=7A78555E084445757FBCD00DDD1D74C369CBA0B0 Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft Manifest number: 08BB Signing time: Mon 12 May 2025 22:43:50 +0000 Manifest this update: Mon 12 May 2025 22:43:49 +0000 Manifest next update: Mon 19 May 2025 22:43:49 +0000 Files and hashes: 1: enhVXghERXV_vNAN3R10w2nLoLA.crl (hash: CmJ2mfhHxQwLvZe5iw5MbQ2mhoftDbDhuJTFO5c8mtU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:43:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA, serialNumber=7A78555E084445757FBCD00DDD1D74C369CBA0B0 Validity Not Before: May 12 22:43:49 2025 GMT Not After : May 19 22:43:49 2025 GMT Subject: CN=682279a6-e1bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d8:f0:e9:50:c2:f2:38:43:e5:74:78:c4:73: 62:c7:66:c5:a0:d5:c0:74:f8:75:4a:15:26:24:f6: 08:61:8a:11:f2:93:2f:5d:b2:e9:37:f3:65:eb:91: de:b5:8a:5b:c5:bc:84:83:57:16:d9:5a:3b:e6:87: 53:81:7c:66:39:8b:87:34:78:fb:f7:b6:b3:e1:9d: 6d:8b:13:7c:eb:49:bd:7e:f7:b8:ca:db:56:a6:bb: ed:66:18:c0:55:dc:2c:af:3c:a9:61:06:ff:4c:40: 80:1c:3c:41:e4:9b:39:d3:e6:6f:ef:68:de:f2:74: 16:be:2b:5a:9a:16:22:cd:7e:89:f9:b8:6c:bd:b2: 4b:93:bd:86:f8:83:1b:78:ad:60:f0:e0:8b:83:07: d6:ae:ba:3a:03:64:06:8c:ab:54:cd:ce:05:bb:47: e6:9c:a1:b4:80:83:86:4a:0c:8e:c5:ae:c3:0a:a0: 17:03:27:f5:5f:e3:5d:1b:d4:7b:c7:33:da:6a:c3: ae:34:b9:48:95:57:a6:5e:33:2e:fd:14:f2:cc:bc: ca:7c:cd:9a:3e:5b:0f:23:ba:2e:a6:32:67:46:0d: ab:43:01:1a:0e:8f:92:d9:f0:40:a3:77:cf:af:24: 9c:e6:e4:02:f0:66:83:89:1a:de:d8:5a:0b:62:e5: 87:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:0E:96:E5:41:7D:1D:D0:10:EC:3F:81:65:FC:47:AD:03:E8:D7:31 X509v3 Authority Key Identifier: keyid:7A:78:55:5E:08:44:45:75:7F:BC:D0:0D:DD:1D:74:C3:69:CB:A0:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:c7:6a:38:1a:3a:b5:fa:bb:e2:4e:9a:96:2b:42:e3:0a:77: 90:51:51:3c:4e:ab:c4:93:22:2e:87:ef:89:42:5e:59:50:2e: fb:cc:55:14:74:04:59:a4:ce:a8:4d:6a:47:c1:9a:9b:7b:54: a1:18:19:3c:5a:8d:b9:7d:4a:8a:51:6f:9f:ab:d8:24:09:e0: e4:4f:be:68:34:83:bb:9c:e9:01:7d:2e:2b:da:55:b4:08:d0: d7:83:ee:46:97:40:e3:ff:68:a6:ec:0c:05:f9:c3:56:4b:12: 35:a6:b4:f3:a5:9f:71:17:fb:a2:e2:11:5f:26:ec:76:94:20: 96:2e:c9:a4:d3:19:0d:b3:6f:76:0a:dd:61:55:1e:0e:1c:5a: b9:0e:3b:8c:e7:f5:aa:e7:f2:e3:37:29:3c:8c:07:5c:c0:f9: d8:08:bc:2b:9b:12:4f:33:01:88:57:d8:80:f9:5b:77:23:c9: 61:05:f5:3a:3a:0d:32:98:bf:0b:ff:85:e0:8a:e7:83:93:d8: 13:f0:28:1b:1c:2b:5f:11:6d:b6:e5:18:c8:55:53:a4:8f:ec: 5d:3c:ee:3b:4c:c0:97:58:e2:5b:62:bb:4e:fc:c6:59:17:81: 3d:8d:03:51:28:72:91:54:e7:82:6e:d6:f4:55:24:cd:7d:50: 0f:24:52:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2QUExMTAvBgNVBAUTKDdBNzg1NTVFMDg0NDQ1NzU3RkJDRDAwREREMUQ3NEMz NjlDQkEwQjAwHhcNMjUwNTEyMjI0MzQ5WhcNMjUwNTE5MjI0MzQ5WjAYMRYwFAYD VQQDEw02ODIyNzlhNi1lMWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnNjw6VDC8jhD5XR4xHNix2bFoNXAdPh1ShUmJPYIYYoR8pMvXbLpN/Nl65He tYpbxbyEg1cW2Vo75odTgXxmOYuHNHj797az4Z1tixN860m9fve4yttWprvtZhjA VdwsrzypYQb/TECAHDxB5Js50+Zv72je8nQWvitamhYizX6J+bhsvbJLk72G+IMb eK1g8OCLgwfWrro6A2QGjKtUzc4Fu0fmnKG0gIOGSgyOxa7DCqAXAyf1X+NdG9R7 xzPaasOuNLlIlVemXjMu/RTyzLzKfM2aPlsPI7oupjJnRg2rQwEaDo+S2fBAo3fP rySc5uQC8GaDiRre2FoLYuWH4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPAOluVB fR3QEOw/gWX8R60D6NcxMB8GA1UdIwQYMBaAFHp4VV4IREV1f7zQDd0ddMNpy6Cw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTZBQS84RURCMTA3RUFE QTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9lbmhWWGdoRVJYVl92TkFOM1IxMHcybkxv TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VuaFZYZ2hFUlhWX3ZOQU4zUjEwdzJuTG9MQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTZBQS84RURCMTA3RUFEQTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9lbmhWWGdoRVJY Vl92TkFOM1IxMHcybkxvTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8x2o4Gjq1+rviTpqWK0LjCneQUVE8TqvEkyIuh++JQl5ZUC77zFUU dARZpM6oTWpHwZqbe1ShGBk8Wo25fUqKUW+fq9gkCeDkT75oNIO7nOkBfS4r2lW0 CNDXg+5Gl0Dj/2im7AwF+cNWSxI1prTzpZ9xF/ui4hFfJux2lCCWLsmk0xkNs292 Ct1hVR4OHFq5DjuM5/Wq5/LjNyk8jAdcwPnYCLwrmxJPMwGIV9iA+Vt3I8lhBfU6 Og0ymL8L/4XgiueDk9gT8CgbHCtfEW225RjIVVOkj+xdPO47TMCXWOJbYrtO/MZZ F4E9jQNRKHKRVOeCbtb0VSTNfVAPJFKR -----END CERTIFICATE-----Generated at Tue May 13 10:15:10 2025 by rpki-client