$ rpki-client -vvf rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft File: E8ct8cUeLKIRyldmUWjPfHx0cpI.mft (raw, json) Hash identifier: SR86TlHhLsFImlARJgsni7l7UGTdaRz6gyK6d8sxWnQ= Subject key identifier: BC:0B:BD:69:88:7F:0D:ED:7A:6A:FA:9D:64:5F:EE:FB:72:6D:9A:33 Authority key identifier: 13:C7:2D:F1:C5:1E:2C:A2:11:CA:57:66:51:68:CF:7C:7C:74:72:92 Certificate issuer: /CN=A916B73C/serialNumber=13C72DF1C51E2CA211CA57665168CF7C7C747292 Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft Manifest number: CC Signing time: Sun 11 May 2025 04:31:34 +0000 Manifest this update: Sun 11 May 2025 04:31:33 +0000 Manifest next update: Sun 18 May 2025 04:31:33 +0000 Files and hashes: 1: E8ct8cUeLKIRyldmUWjPfHx0cpI.crl (hash: Sk8yBPmhwj8koPhfqeuCuDu+h2B2bE/CD/87wFh7tZQ=) 2: 7D211148F64911EEBE36B826C4F9AE02.roa (hash: vmRYB9YjVxPUFtJF4W9JReSoWqAELgcoRVlkvO1WYEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.crl rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B73C, serialNumber=13C72DF1C51E2CA211CA57665168CF7C7C747292 Validity Not Before: May 11 04:31:33 2025 GMT Not After : May 18 04:31:33 2025 GMT Subject: CN=68202826-055f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0d:c2:47:b8:b4:39:ba:94:d8:4b:dd:af:8e: 20:bc:21:d1:5e:62:d4:59:d5:7b:b2:81:d8:3e:23: 7b:e4:0e:71:cd:06:36:94:1d:2e:c9:bf:1b:19:10: 7e:21:70:aa:59:d5:17:d5:a2:d2:9f:e5:2c:ae:4e: 66:10:a8:a7:d4:0c:73:10:2e:c7:17:97:62:a3:1d: 3a:c1:63:22:76:9c:3b:c5:b6:35:85:f9:e8:13:fc: 28:ce:55:16:7b:ef:c4:84:09:e0:0a:16:ea:50:01: a6:57:36:0b:23:1e:fa:a0:f5:b4:ae:22:42:d2:61: 1b:c5:51:17:e3:4a:19:56:12:04:48:e6:74:8e:50: 90:fe:c2:b0:ec:16:3d:f7:b3:fb:5a:bb:93:f3:99: c5:d6:dd:8e:20:bd:90:9b:95:b1:02:54:2c:cc:ff: 90:94:56:95:39:ef:8a:a8:b8:e2:38:57:06:46:9e: 7b:42:04:80:4e:55:3a:66:58:ef:3f:10:55:d7:87: 36:b1:1e:7d:97:d8:f7:8d:7a:75:e6:90:ba:fb:63: 0f:47:95:d0:10:11:40:a2:72:13:ef:0f:7d:2e:fc: 48:fa:94:c6:eb:45:5e:1a:4b:a3:53:a4:ce:9f:3e: 96:21:5c:76:eb:48:1c:87:ce:d1:c0:18:fa:f7:55: 81:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:0B:BD:69:88:7F:0D:ED:7A:6A:FA:9D:64:5F:EE:FB:72:6D:9A:33 X509v3 Authority Key Identifier: keyid:13:C7:2D:F1:C5:1E:2C:A2:11:CA:57:66:51:68:CF:7C:7C:74:72:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:a6:17:8d:ee:df:32:a3:8d:2e:a0:fc:8d:73:50:a7:35:97: b0:d1:a5:cd:bc:1f:47:d1:ac:a3:6d:92:07:4f:13:9d:34:96: ac:e8:fe:cf:e6:12:1c:0c:d1:36:81:92:5d:6e:79:c9:f2:4c: 94:c0:b2:09:a5:f6:ad:26:bb:3b:84:dd:d1:5a:2f:ea:20:d2: d9:78:39:93:8c:9a:f0:3a:a5:fb:48:c3:46:9a:ef:b6:2b:03: 29:33:b6:bb:a5:79:25:aa:41:9b:f0:77:83:40:89:78:2e:f8: fd:be:e1:4a:27:76:97:64:9f:42:b6:6e:2e:05:2f:a7:10:2e: 9c:88:d5:ee:60:69:57:a4:ec:ee:29:7c:cc:18:3d:17:29:5e: da:ba:ed:ce:d3:03:d0:e1:4c:7c:92:a5:00:a3:01:3c:a0:bd: 98:26:71:f8:84:e8:b7:fb:c1:72:23:08:61:46:80:99:f9:b5: 49:e1:0a:b5:65:30:59:7e:91:de:af:89:40:0f:ca:14:72:d7: d9:bc:20:72:d3:88:22:90:ca:fe:3b:34:b0:3a:49:bd:92:1a: 79:60:6f:cd:8d:f4:c6:d2:89:e4:86:97:3a:40:3f:e0:c1:ce: 94:5a:89:43:0c:44:b7:3d:22:55:22:7e:f7:9c:87:71:c3:be: 4a:32:02:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI3M0MxMTAvBgNVBAUTKDEzQzcyREYxQzUxRTJDQTIxMUNBNTc2NjUxNjhDRjdD N0M3NDcyOTIwHhcNMjUwNTExMDQzMTMzWhcNMjUwNTE4MDQzMTMzWjAYMRYwFAYD VQQDEw02ODIwMjgyNi0wNTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Q3CR7i0ObqU2Evdr44gvCHRXmLUWdV7soHYPiN75A5xzQY2lB0uyb8bGRB+ IXCqWdUX1aLSn+Usrk5mEKin1AxzEC7HF5diox06wWMidpw7xbY1hfnoE/wozlUW e+/EhAngChbqUAGmVzYLIx76oPW0riJC0mEbxVEX40oZVhIESOZ0jlCQ/sKw7BY9 97P7WruT85nF1t2OIL2Qm5WxAlQszP+QlFaVOe+KqLjiOFcGRp57QgSATlU6Zljv PxBV14c2sR59l9j3jXp15pC6+2MPR5XQEBFAonIT7w99LvxI+pTG60VeGkujU6TO nz6WIVx260gch87RwBj691WBAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwLvWmI fw3temr6nWRf7vtybZozMB8GA1UdIwQYMBaAFBPHLfHFHiyiEcpXZlFoz3x8dHKS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjczQy9DQkQ2MjExQ0Y2 NDgxMUVFQTRBNkZFMEVDNEY5QUUwMi9FOGN0OGNVZUxLSVJ5bGRtVVdqUGZIeDBj cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U4Y3Q4Y1VlTEtJUnlsZG1VV2pQZkh4MGNwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjczQy9DQkQ2MjExQ0Y2NDgxMUVFQTRBNkZFMEVDNEY5QUUwMi9FOGN0OGNVZUxL SVJ5bGRtVVdqUGZIeDBjcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmpheN7t8yo40uoPyNc1CnNZew0aXNvB9H0ayjbZIHTxOdNJas6P7P 5hIcDNE2gZJdbnnJ8kyUwLIJpfatJrs7hN3RWi/qINLZeDmTjJrwOqX7SMNGmu+2 KwMpM7a7pXklqkGb8HeDQIl4Lvj9vuFKJ3aXZJ9Ctm4uBS+nEC6ciNXuYGlXpOzu KXzMGD0XKV7auu3O0wPQ4Ux8kqUAowE8oL2YJnH4hOi3+8FyIwhhRoCZ+bVJ4Qq1 ZTBZfpHer4lAD8oUctfZvCBy04gikMr+OzSwOkm9khp5YG/NjfTG0onkhpc6QD/g wc6UWolDDES3PSJVIn73nIdxw75KMgJ7 -----END CERTIFICATE-----Generated at Sun May 11 12:32:19 2025 by rpki-client