$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft File: _eNrbpSTmOUtleidQL32CyXbabk.mft (raw, json) Hash identifier: kZkSMLdHWl2BOd61krgP7HQc4ySgCb/TeoRM2vqAmqw= Subject key identifier: 4D:78:FC:80:4A:CC:F1:7C:69:CB:D3:D7:51:F2:DE:86:8D:96:72:FD Authority key identifier: FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9 Certificate issuer: /CN=A916B18B/serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9 Certificate serial: 1859 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft Manifest number: 17DB Signing time: Sun 04 May 2025 16:31:27 +0000 Manifest this update: Sun 04 May 2025 16:31:27 +0000 Manifest next update: Sun 11 May 2025 16:31:27 +0000 Files and hashes: 1: _eNrbpSTmOUtleidQL32CyXbabk.crl (hash: TiaxsmS/sPsRU9/Wom/MF27zrjFs51uCbXhbavl5riU=) 2: EF885538C28B11EBBF310469C4F9AE02.roa (hash: RF/S4KRa0Daxc1wRMUy6rkjMc6TZCjTUC2lD+JidsGI=) 3: C5B70210E46D11EF82B5C81EC4F9AE02.roa (hash: dIFQqFmec3JjXDYVi/rG2+bG0OcjYLfutfONK3TQQqY=) 4: BE214D76FCFF11EF8523525DC4F9AE02.roa (hash: gL9n01tg7hfFPYIoOTQcFIV62YMU0bGHHk7tMWji8uA=) 5: E807C5CC52A411EEB770555CC4F9AE02.roa (hash: 4QaTtqJ6fCb5Gkmj3dPd7fei5dnVQ+bqBH21oxNpxXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 16:31:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6233 (0x1859) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B18B, serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9 Validity Not Before: May 4 16:31:27 2025 GMT Not After : May 11 16:31:27 2025 GMT Subject: CN=6817965f-389b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:49:51:20:5e:a7:a1:e5:08:9a:e1:e7:e5:83: 4e:70:b6:88:32:9e:34:20:a8:18:fd:76:e4:dc:d1: 5d:ee:6d:41:39:62:01:90:70:10:60:68:38:2c:60: 45:b5:81:ce:c2:19:e2:95:d8:03:f8:61:a3:08:dd: 6b:9a:ce:04:c1:a9:f5:bd:2a:d0:c3:bd:7d:3c:5a: 8b:99:07:79:d1:07:31:7d:e4:c7:0e:c1:cc:47:20: ff:8f:cd:22:e1:9a:35:4d:86:40:77:f9:d6:ac:6e: 66:b6:63:63:07:59:b8:82:e7:52:8d:cf:70:65:0a: 5a:dc:13:19:8d:31:51:1c:8b:91:62:5f:8e:9e:f5: 63:c7:c9:33:3c:9b:e0:87:54:36:8a:2c:0f:ce:86: 2c:40:b3:4e:ea:fe:96:f0:45:ce:0b:48:9b:43:81: 56:77:29:69:ba:1b:65:77:8d:90:06:17:99:b5:74: da:18:82:a3:3e:a8:e1:e4:d6:e0:0b:51:5d:8f:50: ad:0f:72:ca:8e:56:ec:26:1e:41:8c:38:1d:62:27: 89:19:b5:21:31:0b:d9:f0:2e:df:2b:e4:64:19:56: ad:85:e4:95:af:0d:de:6d:a2:46:91:b8:78:9f:df: 12:ed:37:8f:9b:5c:9d:5b:9b:f0:71:85:ea:c3:0a: f8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:78:FC:80:4A:CC:F1:7C:69:CB:D3:D7:51:F2:DE:86:8D:96:72:FD X509v3 Authority Key Identifier: keyid:FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:65:2d:f1:5c:69:a0:d9:86:51:39:39:f3:18:f1:67:fe:0c: 64:8e:4d:d0:82:dc:26:38:4d:41:02:5e:eb:46:f0:86:d0:5c: 30:ea:33:82:2a:cb:1a:ec:bd:24:9d:62:e5:56:6e:df:43:eb: 94:5c:cb:bf:d7:86:88:04:36:9a:12:03:70:22:4e:26:b1:72: 33:89:2a:72:f6:54:7d:e1:b1:59:97:5e:bd:d6:83:ce:c9:c9: 20:ec:ff:78:81:9d:71:14:c8:92:0d:07:a7:be:f1:30:08:56: 1a:bf:47:b8:b9:68:3f:35:97:b6:80:72:b0:cd:43:07:7e:a9: dd:f6:22:74:03:78:3f:eb:50:ff:6c:97:7c:ea:1f:66:dc:a8: ac:b6:ab:ba:ee:47:92:37:3e:64:35:a6:06:2c:96:d8:00:18: 78:4c:91:68:78:22:fb:42:e9:c9:1e:f5:2c:fd:04:7f:59:61: 2b:ab:2e:d8:f9:9b:ec:22:af:6e:8b:30:1c:f6:ff:2f:0e:5a: 93:69:f2:74:f8:0c:e3:f3:b2:65:65:ce:e6:07:90:42:df:e6: 34:f3:fe:95:85:f1:ad:9f:6e:ee:41:ae:7c:32:41:9d:d1:d7: 6d:03:95:bc:6f:6f:b1:fd:ac:88:c6:06:27:5c:8c:3e:43:8e: c4:89:55:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIxOEIxMTAvBgNVBAUTKEZERTM2QjZFOTQ5Mzk4RTUyRDk1RTg5RDQwQkRGNjBC MjVEQjY5QjkwHhcNMjUwNTA0MTYzMTI3WhcNMjUwNTExMTYzMTI3WjAYMRYwFAYD VQQDEw02ODE3OTY1Zi0zODliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqklRIF6noeUImuHn5YNOcLaIMp40IKgY/Xbk3NFd7m1BOWIBkHAQYGg4LGBF tYHOwhnildgD+GGjCN1rms4Ewan1vSrQw719PFqLmQd50QcxfeTHDsHMRyD/j80i 4Zo1TYZAd/nWrG5mtmNjB1m4gudSjc9wZQpa3BMZjTFRHIuRYl+OnvVjx8kzPJvg h1Q2iiwPzoYsQLNO6v6W8EXOC0ibQ4FWdylpuhtld42QBheZtXTaGIKjPqjh5Nbg C1Fdj1CtD3LKjlbsJh5BjDgdYieJGbUhMQvZ8C7fK+RkGVatheSVrw3ebaJGkbh4 n98S7TePm1ydW5vwcYXqwwr4jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE14/IBK zPF8acvT11Hy3oaNlnL9MB8GA1UdIwQYMBaAFP3ja26Uk5jlLZXonUC99gsl22m5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjE4Qi82MjhERTUwMkRG MjMxMUU3OTcyMjVEMkVDNEY5QUUwMi9fZU5yYnBTVG1PVXRsZWlkUUwzMkN5WGJh YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19lTnJicFNUbU9VdGxlaWRRTDMyQ3lYYmFiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjE4Qi82MjhERTUwMkRGMjMxMUU3OTcyMjVEMkVDNEY5QUUwMi9fZU5yYnBTVG1P VXRsZWlkUUwzMkN5WGJhYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2ZS3xXGmg2YZROTnzGPFn/gxkjk3QgtwmOE1BAl7rRvCG0Fww6jOC Kssa7L0knWLlVm7fQ+uUXMu/14aIBDaaEgNwIk4msXIziSpy9lR94bFZl1691oPO yckg7P94gZ1xFMiSDQenvvEwCFYav0e4uWg/NZe2gHKwzUMHfqnd9iJ0A3g/61D/ bJd86h9m3Kistqu67keSNz5kNaYGLJbYABh4TJFoeCL7QunJHvUs/QR/WWErqy7Y +ZvsIq9uizAc9v8vDlqTafJ0+Azj87JlZc7mB5BC3+Y08/6VhfGtn27uQa58MkGd 0ddtA5W8b2+x/ayIxgYnXIw+Q47EiVUF -----END CERTIFICATE-----Generated at Tue May 6 03:05:41 2025 by rpki-client