$ rpki-client -vvf rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft File: Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft (raw, json) Hash identifier: /RGT5G+7Ol6ug2eN/vShFah5RRwHaucAPavuYP7GynA= Subject key identifier: BD:96:6C:25:0E:DC:99:6D:E2:27:8D:2C:BD:B8:85:34:53:74:57:AE Authority key identifier: 11:E7:3F:52:BF:0F:58:6F:2B:9F:A6:9E:E2:CA:15:F2:18:5F:66:C2 Certificate issuer: /CN=A916E39F/serialNumber=11E73F52BF0F586F2B9FA69EE2CA15F2185F66C2 Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft Manifest number: C2 Signing time: Sun 11 May 2025 04:38:52 +0000 Manifest this update: Sun 11 May 2025 04:38:51 +0000 Manifest next update: Sun 18 May 2025 04:38:51 +0000 Files and hashes: 1: Eec_Ur8PWG8rn6ae4soV8hhfZsI.crl (hash: ZeZSXoNWLJdhSVwazRJDK6rrU0WY2mDt0oLcdl6jsu8=) 2: 66387A6C087211EF9EDFC673C4F9AE02.roa (hash: HS/fldQZ4RrI6nmzaLMIdIrXDhqFavfV6tsG7wDJ0JM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.crl rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E39F, serialNumber=11E73F52BF0F586F2B9FA69EE2CA15F2185F66C2 Validity Not Before: May 11 04:38:51 2025 GMT Not After : May 18 04:38:51 2025 GMT Subject: CN=682029db-60b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6c:b2:d6:6e:36:01:90:97:ff:78:54:14:98: f2:1a:5a:b0:05:df:2a:87:64:03:0a:a7:04:8f:47: d5:42:82:71:57:49:ab:5a:95:59:b6:89:ce:e2:f4: d2:00:f8:f1:d8:0b:67:05:63:8d:b5:ba:e7:30:36: 54:8e:88:88:0e:f3:dd:2c:ed:4f:8a:0f:87:93:19: f6:90:7c:cf:cf:5f:56:b8:70:33:a2:91:c1:78:8a: 78:ea:42:ff:da:d1:27:82:08:00:62:84:09:90:5d: 9e:28:1a:2f:39:bb:fb:dd:bb:d5:42:31:f7:79:4d: 31:50:01:86:55:df:e4:3e:5a:d5:a3:b6:0a:89:97: 29:32:3b:8c:af:63:8f:5f:ea:f3:57:fa:63:06:87: 56:4d:0e:47:bd:69:fc:d5:44:3a:58:4f:fb:f8:1d: 0a:3f:51:3f:cd:50:34:62:30:7f:91:9b:b4:03:55: de:33:a0:17:63:8e:e4:99:28:fc:38:3a:3d:51:8e: 88:09:ad:48:a4:b0:cb:49:85:1f:3d:80:13:37:a3: 28:9b:96:68:4f:c8:1e:6e:40:7e:ac:ec:60:19:3a: 3d:26:5d:b2:ef:75:0e:1c:2c:0f:51:b6:56:47:5d: 1d:6f:1d:67:38:65:2c:9d:22:64:50:0f:f5:d2:7d: 2a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:96:6C:25:0E:DC:99:6D:E2:27:8D:2C:BD:B8:85:34:53:74:57:AE X509v3 Authority Key Identifier: keyid:11:E7:3F:52:BF:0F:58:6F:2B:9F:A6:9E:E2:CA:15:F2:18:5F:66:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e9:c7:ab:0e:94:c8:6e:f8:64:37:6d:1e:fa:b0:3f:87:e7: 54:fe:fa:38:23:79:12:7e:5c:25:4e:86:b7:cf:4d:d5:6b:7d: 27:2f:9a:fa:ab:17:c8:17:13:e3:20:a4:01:74:3f:61:bf:3d: a8:70:40:0c:13:c0:5c:93:5c:86:9c:70:56:07:48:80:63:c3: 07:d9:9b:81:d2:45:e9:7a:4d:c4:40:23:57:e8:91:1b:ac:56: fd:f0:1c:f1:95:e3:a9:20:40:62:cf:d0:2b:40:50:84:43:8e: ac:c6:61:68:b0:2b:cf:c9:b1:ee:32:ac:07:d7:c1:00:0c:2e: 44:03:34:f5:0c:ee:a3:c6:0f:39:9e:a7:55:b7:54:f4:15:3f: f8:c1:f6:a8:09:0d:6f:d3:f5:2d:e5:27:bb:93:04:3b:06:4e: 70:27:d6:75:6f:e1:f7:0a:5b:8e:86:0d:8c:18:e6:02:19:0f: 06:f8:23:91:93:95:3d:6f:34:16:58:8a:03:de:e1:f0:22:27: ff:11:ff:1e:17:90:c1:a4:41:67:5b:40:8f:01:2f:6b:2e:49: 8e:de:19:b7:bc:a8:9c:93:83:5a:80:52:9d:66:83:7d:ac:a4: 8e:38:7f:15:2c:2d:8f:db:92:82:f6:a7:5b:13:56:ac:98:27: 6c:2b:d4:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUzOUYxMTAvBgNVBAUTKDExRTczRjUyQkYwRjU4NkYyQjlGQTY5RUUyQ0ExNUYy MTg1RjY2QzIwHhcNMjUwNTExMDQzODUxWhcNMjUwNTE4MDQzODUxWjAYMRYwFAYD VQQDEw02ODIwMjlkYi02MGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA32yy1m42AZCX/3hUFJjyGlqwBd8qh2QDCqcEj0fVQoJxV0mrWpVZtonO4vTS APjx2AtnBWONtbrnMDZUjoiIDvPdLO1Pig+Hkxn2kHzPz19WuHAzopHBeIp46kL/ 2tEngggAYoQJkF2eKBovObv73bvVQjH3eU0xUAGGVd/kPlrVo7YKiZcpMjuMr2OP X+rzV/pjBodWTQ5HvWn81UQ6WE/7+B0KP1E/zVA0YjB/kZu0A1XeM6AXY47kmSj8 ODo9UY6ICa1IpLDLSYUfPYATN6Mom5ZoT8gebkB+rOxgGTo9Jl2y73UOHCwPUbZW R10dbx1nOGUsnSJkUA/10n0qqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2WbCUO 3Jlt4ieNLL24hTRTdFeuMB8GA1UdIwQYMBaAFBHnP1K/D1hvK5+mnuLKFfIYX2bC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTM5Ri9CNTA5NUEyMjA4 NkMxMUVGQTA4NTJFMTZDNEY5QUUwMi9FZWNfVXI4UFdHOHJuNmFlNHNvVjhoaGZa c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VlY19VcjhQV0c4cm42YWU0c29WOGhoZlpzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTM5Ri9CNTA5NUEyMjA4NkMxMUVGQTA4NTJFMTZDNEY5QUUwMi9FZWNfVXI4UFdH OHJuNmFlNHNvVjhoaGZac0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO6cerDpTIbvhkN20e+rA/h+dU/vo4I3kSflwlToa3z03Va30nL5r6 qxfIFxPjIKQBdD9hvz2ocEAME8Bck1yGnHBWB0iAY8MH2ZuB0kXpek3EQCNX6JEb rFb98BzxleOpIEBiz9ArQFCEQ46sxmFosCvPybHuMqwH18EADC5EAzT1DO6jxg85 nqdVt1T0FT/4wfaoCQ1v0/Ut5Se7kwQ7Bk5wJ9Z1b+H3CluOhg2MGOYCGQ8G+COR k5U9bzQWWIoD3uHwIif/Ef8eF5DBpEFnW0CPAS9rLkmO3hm3vKick4NagFKdZoN9 rKSOOH8VLC2P25KC9qdbE1asmCdsK9Ss -----END CERTIFICATE-----Generated at Tue May 13 02:20:19 2025 by rpki-client