$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft File: ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft (raw, json) Hash identifier: JdKJ0QMTD6nFKbw5hTxKx/87b3yNhr/y3mt35EdS9K4= Subject key identifier: 36:1D:66:BF:D2:F0:3F:94:43:42:09:5F:82:24:53:B4:AC:E6:BE:82 Authority key identifier: 7A:9F:F8:64:C5:03:18:06:71:30:58:8E:6D:BA:92:8B:A1:C0:3A:5D Certificate issuer: /CN=A91E782F/serialNumber=7A9FF864C50318067130588E6DBA928BA1C03A5D Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft Manifest number: 9D Signing time: Tue 13 May 2025 05:26:53 +0000 Manifest this update: Tue 13 May 2025 05:26:53 +0000 Manifest next update: Tue 20 May 2025 05:26:53 +0000 Files and hashes: 1: ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl (hash: kItuU5jSkqlyaxIGQPr0XknlMv76/7SCRvnTFEabUAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E782F, serialNumber=7A9FF864C50318067130588E6DBA928BA1C03A5D Validity Not Before: May 13 05:26:53 2025 GMT Not After : May 20 05:26:53 2025 GMT Subject: CN=6822d81d-5549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:93:af:bb:59:70:6a:3f:88:57:24:97:f5:aa: 53:12:57:f2:c8:b9:21:97:88:f2:06:b4:79:9b:6d: 7d:f5:33:71:af:72:19:6f:9f:23:05:5e:51:10:45: 75:26:20:eb:f1:cc:b6:16:07:40:b5:1e:55:88:30: 28:4e:0b:18:d7:e3:fc:5f:e9:66:61:43:df:4f:b6: 22:f5:c3:00:30:17:cc:cd:1f:60:0c:0c:46:7b:e1: 2d:66:7f:56:68:7a:43:75:09:8c:42:5b:51:a9:9b: 36:2b:10:49:bb:fc:21:4a:0e:86:4c:d0:cd:04:34: c2:85:b3:86:f2:ce:f4:b5:5c:f4:00:14:d3:50:4e: d6:05:e9:6e:62:ec:70:0d:be:a9:7e:18:0a:c5:c3: 54:9a:59:85:62:f5:93:01:ac:0e:23:c4:79:88:df: 86:77:76:6d:bd:01:d0:1c:0d:19:a5:ff:35:8f:69: cc:53:bf:8f:6c:da:f8:41:e5:9c:f5:e4:cd:5b:ed: 4c:d2:6c:4f:3a:8f:08:6b:59:f4:d2:21:5b:93:8e: f2:7c:1e:cc:4a:0c:3f:4f:cc:8d:99:a2:41:99:ca: 42:43:19:25:70:e5:17:d3:92:22:f4:21:d1:42:a5: cd:e7:e0:ba:27:ba:91:ac:31:6c:10:00:db:6d:d2: 7d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:1D:66:BF:D2:F0:3F:94:43:42:09:5F:82:24:53:B4:AC:E6:BE:82 X509v3 Authority Key Identifier: keyid:7A:9F:F8:64:C5:03:18:06:71:30:58:8E:6D:BA:92:8B:A1:C0:3A:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:ff:09:d3:62:49:23:8a:8c:85:98:e0:f9:9c:48:8d:6c:3b: 3b:68:bc:be:46:95:97:49:f7:05:d8:e1:e9:80:3b:76:21:4b: 86:38:09:09:68:37:55:ce:b6:a9:70:1c:db:c4:65:af:5b:13: c2:33:eb:16:56:d1:21:93:91:2e:cf:28:d0:20:fd:4d:3a:77: 2a:15:ab:d0:43:a1:c5:ce:52:15:29:f4:3b:55:52:2e:cf:10: 7a:fe:fd:b0:47:9c:e0:21:c4:87:2a:12:5a:4d:68:2a:c8:14: 56:ac:05:e5:7b:74:e7:ed:56:38:c0:1d:8b:4c:be:db:96:bf: e2:41:e3:e7:53:76:83:f7:7c:b2:86:96:53:b1:e1:eb:cf:0a: 98:ff:24:12:bf:35:1a:d6:2b:95:21:11:fc:1a:a5:58:e8:c3: 23:d8:79:91:e6:13:6e:44:ad:58:a9:18:bb:09:60:6a:78:30: 52:4a:87:ea:35:04:d0:ba:75:a6:92:da:b4:b5:fe:19:46:63: f5:4d:90:97:c3:fc:a7:fd:d1:db:a0:e8:d8:11:dc:ac:21:4a: d4:50:77:b4:64:24:19:d0:8d:16:03:1e:2b:63:d7:16:03:4b: 5b:c0:33:ac:5c:62:99:d2:29:b5:23:b1:75:6b:82:f6:7c:99: 15:d6:38:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc4MkYxMTAvBgNVBAUTKDdBOUZGODY0QzUwMzE4MDY3MTMwNTg4RTZEQkE5MjhC QTFDMDNBNUQwHhcNMjUwNTEzMDUyNjUzWhcNMjUwNTIwMDUyNjUzWjAYMRYwFAYD VQQDEw02ODIyZDgxZC01NTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnJOvu1lwaj+IVySX9apTElfyyLkhl4jyBrR5m2199TNxr3IZb58jBV5REEV1 JiDr8cy2FgdAtR5ViDAoTgsY1+P8X+lmYUPfT7Yi9cMAMBfMzR9gDAxGe+EtZn9W aHpDdQmMQltRqZs2KxBJu/whSg6GTNDNBDTChbOG8s70tVz0ABTTUE7WBeluYuxw Db6pfhgKxcNUmlmFYvWTAawOI8R5iN+Gd3ZtvQHQHA0Zpf81j2nMU7+PbNr4QeWc 9eTNW+1M0mxPOo8Ia1n00iFbk47yfB7MSgw/T8yNmaJBmcpCQxklcOUX05Ii9CHR QqXN5+C6J7qRrDFsEADbbdJ9YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDYdZr/S 8D+UQ0IJX4IkU7Ss5r6CMB8GA1UdIwQYMBaAFHqf+GTFAxgGcTBYjm26kouhwDpd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzgyRi83NjRDQTJEMDQw NzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi9lcF80Wk1VREdBWnhNRmlPYmJxU2k2SEFP bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwXzRaTVVER0FaeE1GaU9iYnFTaTZIQU9sMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzgyRi83NjRDQTJEMDQwNzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi9lcF80Wk1VREdB WnhNRmlPYmJxU2k2SEFPbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt/wnTYkkjioyFmOD5nEiNbDs7aLy+RpWXSfcF2OHpgDt2IUuGOAkJ aDdVzrapcBzbxGWvWxPCM+sWVtEhk5EuzyjQIP1NOncqFavQQ6HFzlIVKfQ7VVIu zxB6/v2wR5zgIcSHKhJaTWgqyBRWrAXle3Tn7VY4wB2LTL7blr/iQePnU3aD93yy hpZTseHrzwqY/yQSvzUa1iuVIRH8GqVY6MMj2HmR5hNuRK1YqRi7CWBqeDBSSofq NQTQunWmktq0tf4ZRmP1TZCXw/yn/dHboOjYEdysIUrUUHe0ZCQZ0I0WAx4rY9cW A0tbwDOsXGKZ0im1I7F1a4L2fJkV1jhM -----END CERTIFICATE-----Generated at Tue May 13 21:49:37 2025 by rpki-client