$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft File: ech9xZWwwn0jMpvJkoSiPIv9oOc.mft (raw, json) Hash identifier: v867ufh1Ws00bTY2GVEqhl2nE7Sd/NOsmqa8ynvVdzA= Subject key identifier: 94:07:33:93:02:3D:2E:10:29:C6:59:26:A4:69:D3:A7:EF:3F:1B:53 Authority key identifier: 79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7 Certificate issuer: /CN=A91B2D4F/serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7 Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft Manifest number: 014F Signing time: Sun 11 May 2025 03:04:03 +0000 Manifest this update: Sun 11 May 2025 03:04:03 +0000 Manifest next update: Sun 18 May 2025 03:04:03 +0000 Files and hashes: 1: ech9xZWwwn0jMpvJkoSiPIv9oOc.crl (hash: DoVnaBgcnt/75f8TptOuexWj0JGRkDeCQs4P/EZPBEM=) 2: 416EB4022F6111EE8C156634C4F9AE02.roa (hash: UzoADIDRcmbkR0v1b40VKhU4NXIbJvMsYpFVM0H3D88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:04:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D4F, serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7 Validity Not Before: May 11 03:04:03 2025 GMT Not After : May 18 03:04:03 2025 GMT Subject: CN=682013a3-63ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:de:e3:ee:23:5d:0a:c2:f2:fe:fb:63:9d:f3: c2:47:af:25:54:e0:2c:84:07:00:4a:85:8e:b3:53: a7:1b:4a:76:91:af:74:63:fa:25:9e:9a:c7:6d:7b: 8c:68:72:f1:e7:f7:ec:6c:ec:23:0b:a6:ad:43:48: 6d:3e:8c:dd:ae:cc:93:56:6a:9d:9c:a4:76:2d:63: 67:4f:df:2d:25:98:f8:29:01:8c:66:a7:2e:ed:53: c6:d9:d8:c9:c3:9a:7e:07:d3:c6:fe:bf:b8:0a:9e: 58:1a:f3:a3:c9:de:21:a3:29:f9:02:55:d1:65:60: 1e:99:5f:e7:8d:aa:ef:46:06:41:d5:55:83:95:94: 15:79:f9:cb:2d:0c:9f:c6:78:b0:da:13:b2:d2:17: 97:6a:ed:39:78:76:49:0a:b1:e7:a8:d4:3c:71:2b: 1f:4b:73:2b:b8:7c:fc:2f:8c:40:bc:37:87:a5:09: ae:a8:a1:2e:87:ee:b0:2d:61:7c:7f:1f:aa:29:0f: 07:0a:a5:13:89:67:c8:0d:48:86:7c:15:7f:d3:78: de:43:d4:e8:bd:4f:dd:3f:09:24:2f:c4:f3:45:96: c6:62:8d:75:d4:09:8f:db:2e:6a:7c:fb:81:d3:fa: 3e:7f:39:0a:ca:95:a8:a1:f8:7d:58:a8:aa:4e:43: 99:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:07:33:93:02:3D:2E:10:29:C6:59:26:A4:69:D3:A7:EF:3F:1B:53 X509v3 Authority Key Identifier: keyid:79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:ff:3e:39:db:1e:da:28:02:ea:bb:e7:26:e2:e0:0e:c6:aa: a7:f3:25:6a:70:4d:69:d6:b5:34:c6:92:e7:5a:76:2c:9f:40: 33:d2:b9:87:67:31:44:40:2c:7d:b7:4e:42:d1:34:46:97:43: 43:d3:d8:39:80:79:24:3a:19:a9:b4:46:8b:9e:90:70:35:73: 74:3c:40:1e:d8:20:18:9d:20:90:8c:0f:ba:07:ae:4f:54:f4: 91:fc:27:65:2a:da:8f:4e:fb:ab:af:a1:2f:76:93:74:2e:14: b8:d3:11:d4:13:89:ef:43:5d:1f:69:a5:e1:2f:c8:08:b6:0f: aa:0c:be:d2:d5:cb:74:1c:e6:9b:c4:4f:26:78:0c:d4:1b:ce: 81:de:f7:0c:35:a8:e0:71:ae:c0:32:4e:85:04:f5:e0:52:d3: 74:cb:3f:67:6a:8e:d5:dc:ad:e3:4b:cf:52:45:45:6d:64:85: ab:5e:37:26:d5:8f:9e:68:6b:a3:18:c2:36:3e:7c:ff:05:26: 55:81:19:6b:35:9d:8d:9c:4b:e2:6a:92:f9:c2:14:57:ae:a1: 2e:b2:05:f4:2d:ac:b4:e9:d2:d4:ae:c0:fd:9b:48:dc:ce:4b: 35:33:93:12:f2:c2:93:26:34:83:fe:7e:c6:03:d0:ab:73:08: 08:f1:cf:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJENEYxMTAvBgNVBAUTKDc5Qzg3REM1OTVCMEMyN0QyMzMyOUJDOTkyODRBMjND OEJGREEwRTcwHhcNMjUwNTExMDMwNDAzWhcNMjUwNTE4MDMwNDAzWjAYMRYwFAYD VQQDEw02ODIwMTNhMy02M2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqN7j7iNdCsLy/vtjnfPCR68lVOAshAcASoWOs1OnG0p2ka90Y/olnprHbXuM aHLx5/fsbOwjC6atQ0htPozdrsyTVmqdnKR2LWNnT98tJZj4KQGMZqcu7VPG2djJ w5p+B9PG/r+4Cp5YGvOjyd4hoyn5AlXRZWAemV/njarvRgZB1VWDlZQVefnLLQyf xniw2hOy0heXau05eHZJCrHnqNQ8cSsfS3MruHz8L4xAvDeHpQmuqKEuh+6wLWF8 fx+qKQ8HCqUTiWfIDUiGfBV/03jeQ9TovU/dPwkkL8TzRZbGYo111AmP2y5qfPuB 0/o+fzkKypWoofh9WKiqTkOZQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQHM5MC PS4QKcZZJqRp06fvPxtTMB8GA1UdIwQYMBaAFHnIfcWVsMJ9IzKbyZKEojyL/aDn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQ0Ri9FRjg3NTUxODJG NjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3duMGpNcHZKa29TaVBJdjlv T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VjaDl4Wld3d24wak1wdkprb1NpUEl2OW9PYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQ0Ri9FRjg3NTUxODJGNjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3du MGpNcHZKa29TaVBJdjlvT2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4/z452x7aKALqu+cm4uAOxqqn8yVqcE1p1rU0xpLnWnYsn0Az0rmH ZzFEQCx9t05C0TRGl0ND09g5gHkkOhmptEaLnpBwNXN0PEAe2CAYnSCQjA+6B65P VPSR/CdlKtqPTvurr6EvdpN0LhS40xHUE4nvQ10faaXhL8gItg+qDL7S1ct0HOab xE8meAzUG86B3vcMNajgca7AMk6FBPXgUtN0yz9nao7V3K3jS89SRUVtZIWrXjcm 1Y+eaGujGMI2Pnz/BSZVgRlrNZ2NnEviapL5whRXrqEusgX0Lay06dLUrsD9m0jc zks1M5MS8sKTJjSD/n7GA9CrcwgI8c/d -----END CERTIFICATE-----Generated at Mon May 12 22:27:02 2025 by rpki-client