$ rpki-client -vvf rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft File: 7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft (raw, json) Hash identifier: 5wI2Rt3hQovJ7DzPrsJZMsemXMUmPUd/YZfXf1xLAtE= Subject key identifier: C6:C8:CF:BE:B0:6D:78:CD:F4:2A:3E:60:39:6D:3E:40:47:13:CB:96 Authority key identifier: EC:46:19:A3:47:8A:D3:BD:16:AB:56:68:DD:D3:31:1E:4D:2D:B2:2F Certificate issuer: /CN=A915E2CC/serialNumber=EC4619A3478AD3BD16AB5668DDD3311E4D2DB22F Certificate serial: 02FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft Manifest number: 02EB Signing time: Tue 13 May 2025 01:09:52 +0000 Manifest this update: Tue 13 May 2025 01:09:52 +0000 Manifest next update: Tue 20 May 2025 01:09:52 +0000 Files and hashes: 1: 7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl (hash: 8Iwvkeky+3opxZv5ggGtG1TJRznHQakBUpmKWOkMUYo=) 2: 4D6093C2EAD711ECBF99921CC4F9AE02.roa (hash: gjKSDC6B7qsbe2sBo9HUqRMdIYdfTfIQbIhpB1zkpkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 763 (0x2fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E2CC, serialNumber=EC4619A3478AD3BD16AB5668DDD3311E4D2DB22F Validity Not Before: May 13 01:09:52 2025 GMT Not After : May 20 01:09:52 2025 GMT Subject: CN=68229be0-6591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c6:f7:58:b0:be:87:e3:d7:0d:1a:02:3d:2f: 57:5a:79:86:62:d2:d6:c2:62:88:10:f5:bc:69:bd: af:61:16:8c:bb:db:4d:ac:da:8a:03:87:4d:a3:e2: f4:25:4f:9c:fd:ec:6a:e0:b3:80:2a:d6:f2:d7:bb: 94:47:96:95:ad:36:17:29:af:9f:1c:7c:60:75:bc: cc:32:08:ec:12:42:5b:8d:1b:44:2e:d3:63:62:48: 84:e1:18:80:13:b6:6f:ff:94:1e:2d:05:07:f0:8e: f7:4d:be:cb:d2:bf:cc:f0:f4:dc:1b:7e:e6:d4:6e: 0e:7f:4c:e3:11:bf:39:2c:0b:88:b0:64:08:9c:e6: 6d:1c:21:da:8c:98:ab:8d:00:f2:0d:6c:6e:e7:8c: c9:68:de:66:f8:64:df:7b:8b:39:36:87:4c:95:ed: 25:32:07:80:af:da:0b:20:4d:6d:de:88:fb:7b:15: 48:44:51:1c:b6:bd:a8:65:0f:a7:c7:e8:4f:71:7b: 18:60:3b:76:36:3e:f8:4b:f4:e7:9c:62:8b:16:95: 1a:92:6c:52:be:97:ee:8f:76:1d:d5:cf:4c:23:2c: c7:6e:d0:63:49:f2:0e:25:a6:71:9a:63:bd:86:62: f6:a7:74:84:6d:a8:60:f1:ab:c8:9d:87:75:32:f6: 8d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C8:CF:BE:B0:6D:78:CD:F4:2A:3E:60:39:6D:3E:40:47:13:CB:96 X509v3 Authority Key Identifier: keyid:EC:46:19:A3:47:8A:D3:BD:16:AB:56:68:DD:D3:31:1E:4D:2D:B2:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:b0:5b:c7:c0:9b:d6:fe:47:f3:e7:f2:18:b8:ac:40:c3:83: 6b:a9:ad:7c:77:89:95:19:37:9f:cb:fb:ca:8f:1f:3f:4d:52: 1f:ad:e5:12:01:c3:d4:24:30:db:84:bd:fe:11:b1:d9:21:d9: f5:77:e4:64:f4:47:5f:2b:65:1f:f3:c5:9b:f0:46:7b:e9:32: 2a:10:a9:ae:c4:0a:f4:e3:40:71:0a:bd:60:7d:ca:2d:4b:fa: e9:bd:6d:41:99:0e:4a:a9:4d:8d:44:97:11:c8:d4:1f:aa:86: d5:73:3e:10:da:f5:3a:3e:eb:8c:1b:d7:49:bd:cc:46:23:da: 76:6e:e8:6b:93:c3:3d:3f:46:7c:45:0f:e4:77:cd:86:68:fd: 02:b0:97:d2:8f:90:0c:a7:51:28:d6:25:f7:06:43:62:09:ef: 04:08:f4:25:b8:0a:67:66:cf:8b:bb:8a:83:3e:fc:cc:5b:82: c2:67:a1:78:4e:d4:95:c4:76:2a:13:3c:0c:86:8e:24:1e:e3: 96:24:e1:11:31:34:11:15:e7:49:b6:0e:ac:21:ea:6f:89:62: 85:ab:40:cb:de:46:b6:96:04:33:75:b1:61:6f:61:15:2d:0e: b5:d9:5f:28:b6:a6:65:bd:8b:48:c4:c2:20:c4:e0:e2:67:82: 50:42:ff:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUUyQ0MxMTAvBgNVBAUTKEVDNDYxOUEzNDc4QUQzQkQxNkFCNTY2OERERDMzMTFF NEQyREIyMkYwHhcNMjUwNTEzMDEwOTUyWhcNMjUwNTIwMDEwOTUyWjAYMRYwFAYD VQQDEw02ODIyOWJlMC02NTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8b3WLC+h+PXDRoCPS9XWnmGYtLWwmKIEPW8ab2vYRaMu9tNrNqKA4dNo+L0 JU+c/exq4LOAKtby17uUR5aVrTYXKa+fHHxgdbzMMgjsEkJbjRtELtNjYkiE4RiA E7Zv/5QeLQUH8I73Tb7L0r/M8PTcG37m1G4Of0zjEb85LAuIsGQInOZtHCHajJir jQDyDWxu54zJaN5m+GTfe4s5NodMle0lMgeAr9oLIE1t3oj7exVIRFEctr2oZQ+n x+hPcXsYYDt2Nj74S/TnnGKLFpUakmxSvpfuj3Yd1c9MIyzHbtBjSfIOJaZxmmO9 hmL2p3SEbahg8avInYd1MvaNLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbIz76w bXjN9Co+YDltPkBHE8uWMB8GA1UdIwQYMBaAFOxGGaNHitO9FqtWaN3TMR5NLbIv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTJDQy9BRjY3NjVGQ0U1 ODAxMUVDOUI5RDJCNjJDNEY5QUUwMi83RVlabzBlSzA3MFdxMVpvM2RNeEhrMHRz aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFWVpvMGVLMDcwV3ExWm8zZE14SGswdHNpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTJDQy9BRjY3NjVGQ0U1ODAxMUVDOUI5RDJCNjJDNEY5QUUwMi83RVlabzBlSzA3 MFdxMVpvM2RNeEhrMHRzaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASsFvHwJvW/kfz5/IYuKxAw4Nrqa18d4mVGTefy/vKjx8/TVIfreUS AcPUJDDbhL3+EbHZIdn1d+Rk9EdfK2Uf88Wb8EZ76TIqEKmuxAr040BxCr1gfcot S/rpvW1BmQ5KqU2NRJcRyNQfqobVcz4Q2vU6PuuMG9dJvcxGI9p2buhrk8M9P0Z8 RQ/kd82GaP0CsJfSj5AMp1Eo1iX3BkNiCe8ECPQluApnZs+Lu4qDPvzMW4LCZ6F4 TtSVxHYqEzwMho4kHuOWJOERMTQRFedJtg6sIepviWKFq0DL3ka2lgQzdbFhb2EV LQ612V8otqZlvYtIxMIgxODiZ4JQQv+w -----END CERTIFICATE-----Generated at Tue May 13 05:00:23 2025 by rpki-client