$ rpki-client -vvf rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft File: cEb4mD38NwS25c1-oSgP0PUpeaA.mft (raw, json) Hash identifier: yJxTOl6gqzuP0W9SZREhxzavmozB2gDezDIIjSA+aRE= Subject key identifier: 61:06:CC:03:92:CE:C0:4A:0C:E0:F0:12:9F:57:7A:B4:E9:33:76:07 Authority key identifier: 70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0 Certificate issuer: /CN=A916320B/serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0 Certificate serial: 0B9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft Manifest number: 0B8C Signing time: Sat 10 May 2025 18:48:16 +0000 Manifest this update: Sat 10 May 2025 18:48:16 +0000 Manifest next update: Sat 17 May 2025 18:48:16 +0000 Files and hashes: 1: cEb4mD38NwS25c1-oSgP0PUpeaA.crl (hash: np1cnC6CQBWY3sYvPZH/caz9Y83vJgzNmLWxpTVxVBo=) 2: B9003CC84EE811EA8C045D52C4F9AE02.roa (hash: kbjVSRJWVNsKP886UTdCXje46K3vQ/OgBysCSuexrdk=) 3: 1B8483D04EEA11EA828FA155C4F9AE02.roa (hash: 0VsxW37CUzW4AoNDh7cYqP2zuBQmSz8Y4/jKr2zDwys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:48:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2973 (0xb9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916320B, serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0 Validity Not Before: May 10 18:48:16 2025 GMT Not After : May 17 18:48:16 2025 GMT Subject: CN=681f9f70-b1e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2c:0f:16:1c:0b:eb:7e:a9:1f:8c:fb:9f:66: e4:b4:85:2e:6d:30:fd:2c:ef:bc:75:f2:55:e2:b4: ec:ee:ce:95:7e:bd:f8:52:87:95:e9:73:e1:75:f5: 47:d4:40:80:bf:7e:c3:3e:b2:5d:67:08:c3:97:6a: 8b:2f:bc:61:32:77:8d:f0:ce:2a:74:07:98:ce:1a: 67:72:bb:b6:9e:30:20:86:2c:12:15:e0:31:26:9e: ae:29:92:ec:9f:37:51:44:02:23:93:b7:38:a9:30: 39:f5:a6:92:31:97:11:bb:05:8c:61:9b:83:06:d1: 69:f0:9e:87:53:d2:bc:28:8b:ea:a5:39:b9:b1:a0: 31:f6:34:3c:55:56:ff:b7:80:85:65:96:58:ea:bc: 52:b2:85:e4:b6:cd:5a:c6:5c:41:84:58:81:e9:21: 1f:ea:ec:42:a6:fe:4b:da:c9:7e:67:96:9b:88:57: 0b:fd:4e:66:99:75:da:27:3f:49:fe:4e:ba:1e:c9: 6f:08:21:ac:4f:b0:65:98:7b:53:38:23:3b:29:f6: 33:fe:05:f4:b2:63:6e:30:c9:1b:31:e0:89:6c:11: 09:0b:f0:31:c8:94:03:61:d2:6e:d1:57:f8:de:41: a1:a8:03:1e:d6:53:19:35:cd:f1:db:cf:6e:d4:b7: 46:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:06:CC:03:92:CE:C0:4A:0C:E0:F0:12:9F:57:7A:B4:E9:33:76:07 X509v3 Authority Key Identifier: keyid:70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:24:9b:5a:43:65:60:70:6d:e1:19:c9:f1:63:a4:40:c8:e2: d8:c5:09:e1:89:15:d2:34:93:3c:56:33:d4:a6:53:43:a0:3b: 8f:23:4a:d7:d4:af:81:61:df:b2:33:50:ef:04:0c:ad:fe:58: bc:d3:5a:c2:a1:c6:ab:9d:61:e7:d7:45:87:5d:d7:da:15:3b: 04:2d:95:99:3d:cd:2e:58:d9:0e:a7:bc:15:4d:62:dd:1b:7e: 29:51:7d:98:91:a6:66:69:92:aa:ea:d9:32:d3:84:10:89:85: 60:74:f3:c0:02:9a:71:0a:65:86:3f:4d:f1:07:c5:b3:1b:20: d7:28:5b:d9:64:0a:1f:d5:57:85:21:f5:ed:a5:51:84:36:31: dc:87:d6:37:d8:d7:4d:cf:dd:50:28:9b:6c:65:4b:2b:c7:12: 32:98:0d:7f:b3:b6:94:24:89:7a:9f:63:d1:1d:36:9c:fe:2b: bd:a6:31:90:78:66:6c:b3:c9:f0:81:52:7a:a0:ce:5c:4d:9f: 1b:99:64:43:8b:27:59:83:24:06:7d:1c:92:04:36:f7:fd:6b: a7:90:0a:7a:f7:3d:3c:b5:e8:93:2c:f2:6c:35:75:99:85:ac: e1:7d:ae:2d:45:e5:99:aa:e5:8e:39:9b:62:c1:f4:c7:5c:8a: ae:7b:ba:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMyMEIxMTAvBgNVBAUTKDcwNDZGODk4M0RGQzM3MDRCNkU1Q0Q3RUExMjgwRkQw RjUyOTc5QTAwHhcNMjUwNTEwMTg0ODE2WhcNMjUwNTE3MTg0ODE2WjAYMRYwFAYD VQQDEw02ODFmOWY3MC1iMWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCwPFhwL636pH4z7n2bktIUubTD9LO+8dfJV4rTs7s6Vfr34UoeV6XPhdfVH 1ECAv37DPrJdZwjDl2qLL7xhMneN8M4qdAeYzhpncru2njAghiwSFeAxJp6uKZLs nzdRRAIjk7c4qTA59aaSMZcRuwWMYZuDBtFp8J6HU9K8KIvqpTm5saAx9jQ8VVb/ t4CFZZZY6rxSsoXkts1axlxBhFiB6SEf6uxCpv5L2sl+Z5abiFcL/U5mmXXaJz9J /k66HslvCCGsT7BlmHtTOCM7KfYz/gX0smNuMMkbMeCJbBEJC/AxyJQDYdJu0Vf4 3kGhqAMe1lMZNc3x289u1LdGXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGEGzAOS zsBKDODwEp9XerTpM3YHMB8GA1UdIwQYMBaAFHBG+Jg9/DcEtuXNfqEoD9D1KXmg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzIwQi8wRkZGN0FBQTI3 QUUxMUVBODU5NTZFNzhDNEY5QUUwMi9jRWI0bUQzOE53UzI1YzEtb1NnUDBQVXBl YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NFYjRtRDM4TndTMjVjMS1vU2dQMFBVcGVhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzIwQi8wRkZGN0FBQTI3QUUxMUVBODU5NTZFNzhDNEY5QUUwMi9jRWI0bUQzOE53 UzI1YzEtb1NnUDBQVXBlYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1JJtaQ2VgcG3hGcnxY6RAyOLYxQnhiRXSNJM8VjPUplNDoDuPI0rX 1K+BYd+yM1DvBAyt/li801rCocarnWHn10WHXdfaFTsELZWZPc0uWNkOp7wVTWLd G34pUX2YkaZmaZKq6tky04QQiYVgdPPAAppxCmWGP03xB8WzGyDXKFvZZAof1VeF IfXtpVGENjHch9Y32NdNz91QKJtsZUsrxxIymA1/s7aUJIl6n2PRHTac/iu9pjGQ eGZss8nwgVJ6oM5cTZ8bmWRDiydZgyQGfRySBDb3/WunkAp69z08teiTLPJsNXWZ hazhfa4tReWZquWOOZtiwfTHXIque7qb -----END CERTIFICATE-----Generated at Mon May 12 15:50:56 2025 by rpki-client