$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft File: ezWJ19jaa93mDzmOflK6heWuM1c.mft (raw, json) Hash identifier: IYRMynvbAz5WHruLrkj8F4/U04c69bQm8qQ/PNVmcTI= Subject key identifier: 67:06:12:EE:70:9E:ED:AD:21:C4:57:39:39:70:44:7E:67:4B:A1:B2 Authority key identifier: 7B:35:89:D7:D8:DA:6B:DD:E6:0F:39:8E:7E:52:BA:85:E5:AE:33:57 Certificate issuer: /CN=A916EF76/serialNumber=7B3589D7D8DA6BDDE60F398E7E52BA85E5AE3357 Certificate serial: 17F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft Manifest number: 17EC Signing time: Fri 16 May 2025 16:45:53 +0000 Manifest this update: Fri 16 May 2025 16:45:53 +0000 Manifest next update: Fri 23 May 2025 16:45:53 +0000 Files and hashes: 1: ezWJ19jaa93mDzmOflK6heWuM1c.crl (hash: G4j6K2rHvh3OZyx/4m87vwEeqMRSQDPtPyCgyHrCZtI=) 2: B4F0A9F800A011E8B6C9E20AC4F9AE02.roa (hash: nE2SMAFaQ2lno0OXjrXqdk80Cil1YlPktKv0bTOPaBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.crl rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 16:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6132 (0x17f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EF76, serialNumber=7B3589D7D8DA6BDDE60F398E7E52BA85E5AE3357 Validity Not Before: May 16 16:45:53 2025 GMT Not After : May 23 16:45:53 2025 GMT Subject: CN=68276bc1-22e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:30:f0:90:4c:99:48:ac:98:5c:af:dc:eb:97: 24:91:3c:ad:92:ca:8e:7b:7b:77:15:53:d3:ba:cd: a8:f5:0f:d4:81:32:29:2f:d6:a1:46:91:92:ac:07: 69:1c:bb:25:a3:b4:fd:46:5a:84:50:07:6f:b4:11: cd:90:7e:c2:0b:25:8e:19:0e:88:7f:0d:95:8a:4f: 33:14:e1:77:e8:6d:65:e3:d1:88:e4:57:d1:b8:8f: cf:2c:86:4a:55:b1:d5:94:45:2e:ec:12:11:cd:43: 35:55:21:f7:75:63:8b:e0:72:12:a7:73:82:16:6a: a9:c9:5c:3c:b4:6f:0d:15:91:5a:57:a0:9e:ff:f4: c0:94:bd:80:99:e1:a7:68:cb:d2:ca:5d:f3:b2:de: cd:d2:aa:08:5d:ed:84:cc:14:51:e4:7d:ea:de:86: c9:9e:c4:49:0a:32:b3:4b:17:15:76:fc:8f:37:65: db:4f:ae:8f:98:7c:11:8a:b4:27:99:4f:cf:06:d5: 1e:59:bb:d8:20:6c:d5:ff:0d:df:44:dd:6a:1b:5c: f2:36:f3:83:4f:6d:db:ee:3d:68:70:f7:7d:07:06: 6c:84:9f:e0:81:8d:16:a6:7c:40:91:17:7e:d3:09: 03:42:96:52:1d:83:41:a1:12:06:99:22:c4:24:fb: 6b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:06:12:EE:70:9E:ED:AD:21:C4:57:39:39:70:44:7E:67:4B:A1:B2 X509v3 Authority Key Identifier: keyid:7B:35:89:D7:D8:DA:6B:DD:E6:0F:39:8E:7E:52:BA:85:E5:AE:33:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:2c:32:76:a3:18:66:0f:6a:b6:d3:32:2d:57:5a:6f:6e:d3: 3a:de:d4:a2:96:38:48:ec:74:cd:8e:63:88:1c:e6:30:20:67: 3f:04:2d:5c:eb:a5:ae:6f:d1:34:7a:d8:b7:c6:eb:fa:40:dc: 4c:e0:b2:7c:8a:ec:0e:5d:f4:df:71:00:d7:76:8e:b0:e8:66: e7:70:2d:35:ea:c4:47:45:ba:4f:13:a9:64:a3:50:e6:4e:c6: 59:76:26:07:89:f2:91:ff:55:fe:7f:7d:00:71:02:46:6e:44: 10:8f:62:e0:e1:a8:41:87:25:39:9b:42:0a:3f:6d:09:7b:93: af:71:ab:dd:bd:a9:8e:41:6b:71:c2:af:f8:3e:7b:b3:25:9c: 08:e8:cd:01:1b:90:a8:fa:b3:a9:d4:f9:ac:32:ae:f1:21:e7: cc:1a:38:de:d3:26:1a:10:49:83:ac:40:bb:d5:2e:b0:20:24: 57:b4:cc:a8:e4:a8:22:e5:0a:df:ae:61:c7:c1:53:56:6d:8b: f9:c7:36:6f:5c:73:13:fe:b8:e0:61:28:69:c3:cc:85:13:e7: 8a:62:5b:b9:ac:70:d2:b5:fa:b7:ca:89:9a:e0:da:10:0b:93: 5d:f9:b0:54:9d:e3:dc:84:4e:3a:b1:b0:58:79:0b:ed:43:2c: c3:73:e1:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVGNzYxMTAvBgNVBAUTKDdCMzU4OUQ3RDhEQTZCRERFNjBGMzk4RTdFNTJCQTg1 RTVBRTMzNTcwHhcNMjUwNTE2MTY0NTUzWhcNMjUwNTIzMTY0NTUzWjAYMRYwFAYD VQQDEw02ODI3NmJjMS0yMmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujDwkEyZSKyYXK/c65ckkTytksqOe3t3FVPTus2o9Q/UgTIpL9ahRpGSrAdp HLslo7T9RlqEUAdvtBHNkH7CCyWOGQ6Ifw2Vik8zFOF36G1l49GI5FfRuI/PLIZK VbHVlEUu7BIRzUM1VSH3dWOL4HISp3OCFmqpyVw8tG8NFZFaV6Ce//TAlL2AmeGn aMvSyl3zst7N0qoIXe2EzBRR5H3q3obJnsRJCjKzSxcVdvyPN2XbT66PmHwRirQn mU/PBtUeWbvYIGzV/w3fRN1qG1zyNvODT23b7j1ocPd9BwZshJ/ggY0WpnxAkRd+ 0wkDQpZSHYNBoRIGmSLEJPtrDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGcGEu5w nu2tIcRXOTlwRH5nS6GyMB8GA1UdIwQYMBaAFHs1idfY2mvd5g85jn5SuoXlrjNX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY3Ni8yOUJFNThGMEI4 Q0QxMUU3OUU0MzE4NjFDNEY5QUUwMi9leldKMTlqYWE5M21Eem1PZmxLNmhlV3VN MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V6V0oxOWphYTkzbUR6bU9mbEs2aGVXdU0xYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUY3Ni8yOUJFNThGMEI4Q0QxMUU3OUU0MzE4NjFDNEY5QUUwMi9leldKMTlqYWE5 M21Eem1PZmxLNmhlV3VNMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoLDJ2oxhmD2q20zItV1pvbtM63tSiljhI7HTNjmOIHOYwIGc/BC1c 66Wub9E0eti3xuv6QNxM4LJ8iuwOXfTfcQDXdo6w6GbncC016sRHRbpPE6lko1Dm TsZZdiYHifKR/1X+f30AcQJGbkQQj2Lg4ahBhyU5m0IKP20Je5OvcavdvamOQWtx wq/4PnuzJZwI6M0BG5Co+rOp1PmsMq7xIefMGjje0yYaEEmDrEC71S6wICRXtMyo 5Kgi5QrfrmHHwVNWbYv5xzZvXHMT/rjgYShpw8yFE+eKYlu5rHDStfq3yoma4NoQ C5Nd+bBUnePchE46sbBYeQvtQyzDc+Hy -----END CERTIFICATE-----Generated at Sat May 17 02:31:27 2025 by rpki-client