$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft File: EBEGw3VRsRR1-6qyOQEVt6zygC0.mft (raw, json) Hash identifier: qAYRsyzW4NHgcfvrKWzpPTmAzCj1NaVV3QRbWz7+9wI= Subject key identifier: 63:7A:98:C8:44:29:45:7E:8E:AA:DB:7D:6E:24:CB:EE:71:DF:CE:E3 Authority key identifier: 10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D Certificate issuer: /CN=A91BF286/serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft Manifest number: 012D Signing time: Sun 11 May 2025 03:27:55 +0000 Manifest this update: Sun 11 May 2025 03:27:55 +0000 Manifest next update: Sun 18 May 2025 03:27:55 +0000 Files and hashes: 1: EBEGw3VRsRR1-6qyOQEVt6zygC0.crl (hash: PDCncqOlMP5btpHVwZW0MLmaQJmXLnCzv7nSghCrMUg=) 2: 44BA2B8C671011EEB41FB227C4F9AE02.roa (hash: 8KY8F5aAbZQBF/Qe5iecqKDmzqJcSSXnzASxQlPbo4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:27:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF286, serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D Validity Not Before: May 11 03:27:55 2025 GMT Not After : May 18 03:27:55 2025 GMT Subject: CN=6820193b-5f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d9:da:42:ee:16:a9:ea:22:72:1a:5d:c7:1a: 72:ca:97:49:82:3a:6a:9e:71:3c:46:ba:72:af:7d: 31:b9:b3:55:ab:31:cb:62:90:7f:00:83:a2:41:77: c7:cc:ac:01:a4:7f:80:b3:46:e6:7a:b8:c0:0d:bb: e7:53:dd:89:ac:c1:a1:80:47:b0:c4:7b:1a:df:e9: 5e:f3:ea:40:56:25:ee:b1:5d:32:a5:9a:8f:ed:a6: ab:95:ce:b1:32:7e:b3:6b:c0:c8:c4:3d:99:92:e8: 86:41:42:c0:31:eb:68:25:9f:bb:c4:5a:84:d2:de: 1b:e6:e2:1b:b6:32:88:5b:f9:fd:f1:90:15:e5:92: 27:c9:ea:64:8a:72:f4:bf:84:7d:17:d9:1e:4b:79: 66:71:8b:30:e2:21:53:c7:7f:36:9c:db:aa:cf:71: 57:da:70:9b:ba:35:f8:70:c5:e4:db:2a:78:78:9c: 08:38:c5:b1:34:0a:b9:b7:e8:16:9f:ca:5a:b0:b8: 25:19:e9:91:22:56:26:33:a6:84:93:47:a2:a6:74: ff:8e:c9:29:c6:2a:35:f4:3d:07:27:81:f3:0e:86: 2b:a9:fe:8e:05:9c:52:25:0a:c2:bf:05:1e:7d:da: 0c:1b:46:34:79:04:e6:e3:f1:a6:9b:ad:22:e8:e8: 66:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:7A:98:C8:44:29:45:7E:8E:AA:DB:7D:6E:24:CB:EE:71:DF:CE:E3 X509v3 Authority Key Identifier: keyid:10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:aa:d8:90:b7:ce:a2:2e:92:a2:de:8a:51:1f:45:08:4e:7d: ee:ea:04:d6:40:05:6a:5b:1a:86:b7:b9:f6:74:64:c4:1a:96: 52:61:73:21:e6:a1:6b:0d:b0:b8:34:88:43:37:d5:0a:48:13: 70:17:65:d7:61:fc:5b:a0:c1:28:0a:32:59:3f:90:36:71:36: 9e:a0:bb:6c:c6:97:3d:fe:82:b0:18:81:23:bb:46:3a:09:21: 79:41:ed:f6:13:e3:84:a0:de:3e:ba:f5:94:7d:68:39:f3:0d: 54:d7:3b:5f:5e:0f:e1:4b:6b:b5:bc:56:e3:ca:03:68:fe:2c: c4:c1:bd:d0:9e:c6:e5:ee:91:22:16:54:da:11:e1:6a:7b:ba: e0:a9:fa:a0:85:bc:87:74:94:6e:6c:c8:fc:32:db:86:90:e4: 13:ee:6a:46:c5:ee:9f:4a:19:58:14:2f:31:bb:8d:12:2c:c0: a9:d9:6a:eb:54:12:e2:7a:fe:aa:5a:73:31:af:47:40:da:3b: b5:e7:60:77:4d:2b:16:9d:ae:46:32:ef:4f:f7:93:35:37:03: 37:ca:be:50:f0:b5:06:2c:36:77:26:c6:43:bd:e4:b4:82:bb: 9c:44:24:a4:75:bc:4a:15:d3:47:83:e9:cb:bd:c5:c3:2f:0d: 54:bd:c6:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyODYxMTAvBgNVBAUTKDEwMTEwNkMzNzU1MUIxMTQ3NUZCQUFCMjM5MDExNUI3 QUNGMjgwMkQwHhcNMjUwNTExMDMyNzU1WhcNMjUwNTE4MDMyNzU1WjAYMRYwFAYD VQQDEw02ODIwMTkzYi01ZjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxNnaQu4WqeoichpdxxpyypdJgjpqnnE8Rrpyr30xubNVqzHLYpB/AIOiQXfH zKwBpH+As0bmerjADbvnU92JrMGhgEewxHsa3+le8+pAViXusV0ypZqP7aarlc6x Mn6za8DIxD2ZkuiGQULAMetoJZ+7xFqE0t4b5uIbtjKIW/n98ZAV5ZInyepkinL0 v4R9F9keS3lmcYsw4iFTx382nNuqz3FX2nCbujX4cMXk2yp4eJwIOMWxNAq5t+gW n8pasLglGemRIlYmM6aEk0eipnT/jskpxio19D0HJ4HzDoYrqf6OBZxSJQrCvwUe fdoMG0Y0eQTm4/Gmm60i6OhmxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGN6mMhE KUV+jqrbfW4ky+5x387jMB8GA1UdIwQYMBaAFBARBsN1UbEUdfuqsjkBFbes8oAt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI4Ni8xQ0UyQjBDNDY2 OTQxMUVFQTA0NTI5NTFDNEY5QUUwMi9FQkVHdzNWUnNSUjEtNnF5T1FFVnQ2enln QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VCRUd3M1ZSc1JSMS02cXlPUUVWdDZ6eWdDMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjI4Ni8xQ0UyQjBDNDY2OTQxMUVFQTA0NTI5NTFDNEY5QUUwMi9FQkVHdzNWUnNS UjEtNnF5T1FFVnQ2enlnQzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHqtiQt86iLpKi3opRH0UITn3u6gTWQAVqWxqGt7n2dGTEGpZSYXMh 5qFrDbC4NIhDN9UKSBNwF2XXYfxboMEoCjJZP5A2cTaeoLtsxpc9/oKwGIEju0Y6 CSF5Qe32E+OEoN4+uvWUfWg58w1U1ztfXg/hS2u1vFbjygNo/izEwb3Qnsbl7pEi FlTaEeFqe7rgqfqghbyHdJRubMj8MtuGkOQT7mpGxe6fShlYFC8xu40SLMCp2Wrr VBLiev6qWnMxr0dA2ju152B3TSsWna5GMu9P95M1NwM3yr5Q8LUGLDZ3JsZDveS0 grucRCSkdbxKFdNHg+nLvcXDLw1UvcZs -----END CERTIFICATE-----Generated at Mon May 12 01:42:54 2025 by rpki-client