$ rpki-client -vvf rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft File: eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft (raw, json) Hash identifier: +Iq2+GbRS5dQWTPbOMo6Oy0BxcLz1wvPXrHMVz85K0U= Subject key identifier: B1:7A:4B:F2:EC:F3:D3:8F:89:10:E1:30:07:84:2D:6E:AF:1B:E5:4D Authority key identifier: 78:A9:92:67:D7:EE:F1:27:F5:FB:45:24:F7:9C:59:AF:0A:BB:C1:F4 Certificate issuer: /CN=A9163824/serialNumber=78A99267D7EEF127F5FB4524F79C59AF0ABBC1F4 Certificate serial: 25FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft Manifest number: 2CEC Signing time: Mon 12 May 2025 15:40:55 +0000 Manifest this update: Mon 12 May 2025 15:40:54 +0000 Manifest next update: Mon 19 May 2025 15:40:54 +0000 Files and hashes: 1: eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.crl (hash: xQI5ChKS6qjpR9Japu+au+BKARBTbp8NrAydP1m5Ra4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.crl rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:40:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9723 (0x25fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163824, serialNumber=78A99267D7EEF127F5FB4524F79C59AF0ABBC1F4 Validity Not Before: May 12 15:40:54 2025 GMT Not After : May 19 15:40:54 2025 GMT Subject: CN=68221687-4419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:35:3b:83:dd:dd:06:9d:af:24:fd:53:df:8f: cb:d5:38:f3:7f:72:3a:a8:e4:90:3a:21:a1:83:ed: 66:69:7b:32:f6:61:80:64:12:19:60:2f:12:9b:ce: 50:0b:e2:60:19:94:81:07:0b:4a:a4:d5:bb:1a:df: 95:63:de:1f:34:8d:8a:08:0f:95:a6:67:90:7a:6e: bb:c1:1c:ef:8f:19:e9:bc:45:c9:59:aa:f2:4c:58: 34:2e:4a:d6:a9:24:a0:ca:a0:c4:32:cc:39:02:4c: dc:30:9b:4d:a1:35:40:fb:9a:14:42:0c:d4:dd:df: 86:2e:5e:1b:11:9f:24:a9:f8:4d:aa:03:28:73:80: 89:84:a9:be:67:ff:73:49:fe:e1:4d:95:6a:dd:fd: 44:15:fe:7e:fa:98:ff:94:98:d0:f7:ca:49:b7:f3: db:44:a2:a3:1e:1d:0f:a4:30:d4:80:c1:53:74:d4: ef:d9:a3:06:ab:a9:43:a9:ff:8e:30:8b:89:5f:d1: 88:20:8c:15:85:14:32:73:98:11:37:53:4e:f9:60: f8:53:29:86:46:6e:91:98:63:58:06:d7:3b:0a:7d: 52:28:c2:a9:b6:63:18:3b:f5:24:ce:a7:ec:a5:01: 25:06:7f:08:b8:1e:5f:d2:8d:b9:72:9a:5b:e8:b0: 2e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:7A:4B:F2:EC:F3:D3:8F:89:10:E1:30:07:84:2D:6E:AF:1B:E5:4D X509v3 Authority Key Identifier: keyid:78:A9:92:67:D7:EE:F1:27:F5:FB:45:24:F7:9C:59:AF:0A:BB:C1:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:82:b9:d1:f2:c7:aa:5c:4f:53:b1:2a:30:5e:90:13:08:89: 60:4e:7a:a6:6f:71:a6:0d:55:92:9c:fa:c8:24:5c:4c:2a:06: ae:dc:8d:69:08:b4:2e:55:5c:a8:d4:d5:a6:c5:54:0c:4f:5e: f8:12:69:9e:ff:99:23:8a:77:e4:d8:97:b9:a3:a3:05:58:33: b7:0b:0f:e2:e5:e2:8c:88:87:67:7d:d3:e0:ea:90:c1:eb:dc: a9:52:b6:6a:74:f4:5c:0d:3a:d4:31:73:c2:7e:02:e2:c0:61: 70:4b:2b:01:eb:9b:16:00:b2:76:6b:c1:ff:63:8b:c0:5e:3a: 60:c1:2e:2d:f9:68:e7:82:54:e4:0f:8c:f7:cb:0e:e4:b0:14: cb:1d:0a:05:68:c6:aa:83:37:51:45:c4:91:8e:c4:79:5d:4e: bd:90:c2:fa:da:38:bd:8d:22:5e:dd:05:b9:d0:57:4a:7a:d5: a3:d7:e4:eb:e8:69:54:75:f1:12:aa:9c:08:c1:bc:60:1b:60: 5b:c3:9a:b3:8d:f7:5c:2f:f5:e8:3a:a0:72:a3:2e:79:94:15: 0c:39:00:f6:d1:a7:f5:e5:e8:0b:34:86:fd:f0:be:c2:ba:97: 46:4a:19:9b:33:c9:d8:c9:bf:41:5a:37:42:c1:c0:b0:7d:3c: 54:90:43:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM4MjQxMTAvBgNVBAUTKDc4QTk5MjY3RDdFRUYxMjdGNUZCNDUyNEY3OUM1OUFG MEFCQkMxRjQwHhcNMjUwNTEyMTU0MDU0WhcNMjUwNTE5MTU0MDU0WjAYMRYwFAYD VQQDEw02ODIyMTY4Ny00NDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApTU7g93dBp2vJP1T34/L1Tjzf3I6qOSQOiGhg+1maXsy9mGAZBIZYC8Sm85Q C+JgGZSBBwtKpNW7Gt+VY94fNI2KCA+VpmeQem67wRzvjxnpvEXJWaryTFg0LkrW qSSgyqDEMsw5AkzcMJtNoTVA+5oUQgzU3d+GLl4bEZ8kqfhNqgMoc4CJhKm+Z/9z Sf7hTZVq3f1EFf5++pj/lJjQ98pJt/PbRKKjHh0PpDDUgMFTdNTv2aMGq6lDqf+O MIuJX9GIIIwVhRQyc5gRN1NO+WD4UymGRm6RmGNYBtc7Cn1SKMKptmMYO/Ukzqfs pQElBn8IuB5f0o25cppb6LAuIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLF6S/Ls 89OPiRDhMAeELW6vG+VNMB8GA1UdIwQYMBaAFHipkmfX7vEn9ftFJPecWa8Ku8H0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzgyNC9CQTBFRkU1MkZE MjUxMUU0OUQ5MzI3M0JDNEY5QUUwMi9lS21TWjlmdThTZjEtMFVrOTV4WnJ3cTd3 ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VLbVNaOWZ1OFNmMS0wVWs5NXhacndxN3dmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzgyNC9CQTBFRkU1MkZEMjUxMUU0OUQ5MzI3M0JDNEY5QUUwMi9lS21TWjlmdThT ZjEtMFVrOTV4WnJ3cTd3ZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAegrnR8seqXE9TsSowXpATCIlgTnqmb3GmDVWSnPrIJFxMKgau3I1p CLQuVVyo1NWmxVQMT174Emme/5kjinfk2Je5o6MFWDO3Cw/i5eKMiIdnfdPg6pDB 69ypUrZqdPRcDTrUMXPCfgLiwGFwSysB65sWALJ2a8H/Y4vAXjpgwS4t+WjnglTk D4z3yw7ksBTLHQoFaMaqgzdRRcSRjsR5XU69kML62ji9jSJe3QW50FdKetWj1+Tr 6GlUdfESqpwIwbxgG2Bbw5qzjfdcL/XoOqByoy55lBUMOQD20af15egLNIb98L7C updGShmbM8nYyb9BWjdCwcCwfTxUkEOH -----END CERTIFICATE-----Generated at Tue May 13 14:15:09 2025 by rpki-client