$ rpki-client -vvf rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft File: EdT02sf7qLXBIiQwBTm9xhVEXeU.mft (raw, json) Hash identifier: ahJuFb+uW9t2dAzVOg1dseXOpjFgF0aRwN1ssSsXIAk= Subject key identifier: 64:EE:A4:7B:DE:99:52:D0:3F:4E:EF:18:86:42:A1:DB:0B:5B:5F:E5 Authority key identifier: 11:D4:F4:DA:C7:FB:A8:B5:C1:22:24:30:05:39:BD:C6:15:44:5D:E5 Certificate issuer: /CN=A91F79A2/serialNumber=11D4F4DAC7FBA8B5C12224300539BDC615445DE5 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft Manifest number: B3 Signing time: Thu 15 May 2025 05:20:50 +0000 Manifest this update: Thu 15 May 2025 05:20:49 +0000 Manifest next update: Thu 22 May 2025 05:20:49 +0000 Files and hashes: 1: EdT02sf7qLXBIiQwBTm9xhVEXeU.crl (hash: CwAgob3tB6ne5eLh4t2s44L1Epff6G4Sv+5VlQvmzIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.crl rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:20:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F79A2, serialNumber=11D4F4DAC7FBA8B5C12224300539BDC615445DE5 Validity Not Before: May 15 05:20:49 2025 GMT Not After : May 22 05:20:49 2025 GMT Subject: CN=682579b1-936f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0a:57:c7:53:0b:d7:d0:55:2b:74:ab:8b:04: eb:f7:99:43:3f:df:00:96:d6:ca:4b:48:11:7e:88: 42:d8:44:9a:55:48:27:51:9f:b0:ef:86:93:a1:f1: b5:f8:68:7e:5d:4e:69:e6:19:17:f2:e4:d1:3c:16: 56:46:b9:07:e8:a2:06:e1:38:9b:bb:27:b1:bf:6d: eb:22:5a:e2:38:df:c4:36:92:cf:de:77:0f:8d:51: b6:5f:7f:7c:3e:bf:83:d4:c3:c3:b4:9c:7f:1d:41: d4:44:01:a3:7f:1f:e5:29:9a:50:d6:8f:5e:70:59: e6:52:91:f2:c8:6a:75:32:dc:0d:a2:fe:2e:b9:34: e4:c9:9e:b4:84:6c:61:67:47:54:62:f3:15:f7:5c: cf:e2:95:5b:b5:21:cd:41:2f:6a:af:ca:6a:79:56: 91:6a:7b:ef:f9:57:03:bc:14:46:11:ca:5e:e4:2c: 21:a1:d2:08:73:28:b4:11:56:d7:19:32:a1:80:1e: 7f:08:12:21:53:c5:8c:fa:19:5d:7b:54:cc:3c:af: c6:6c:9f:f5:71:a3:64:65:63:f2:a0:e6:a2:fc:8e: a7:c2:2a:1b:8f:9f:86:81:be:30:12:13:ea:0a:00: 3d:a6:52:4e:ee:2b:a6:2d:14:17:88:62:e6:86:86: 17:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:EE:A4:7B:DE:99:52:D0:3F:4E:EF:18:86:42:A1:DB:0B:5B:5F:E5 X509v3 Authority Key Identifier: keyid:11:D4:F4:DA:C7:FB:A8:B5:C1:22:24:30:05:39:BD:C6:15:44:5D:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:21:fd:bc:e1:0d:3e:3d:3b:bd:8f:86:54:91:20:7b:cf:9f: 25:a4:75:79:ac:97:2a:b6:19:a5:2a:cf:de:4f:4f:76:b8:dc: e1:6f:9d:1d:a1:67:37:45:44:df:31:d5:42:31:bb:fe:7c:ee: 0f:b7:f6:27:e6:9d:17:b5:6a:80:64:f4:5d:f8:d6:c4:19:22: ce:4c:8b:dd:34:b8:cf:ef:f9:0c:7a:a7:4c:81:5e:54:61:3c: 78:8e:35:7f:af:9f:2f:c7:50:9a:d8:8a:2d:08:05:ad:d9:15: de:19:e0:aa:f7:14:03:48:97:08:73:c3:09:f2:d2:c2:24:e7: 4d:6c:7d:e1:ab:c0:12:79:53:fb:11:66:2c:16:8f:4c:55:6a: c4:0a:d6:c1:84:2e:61:8c:24:73:df:34:c4:41:30:e5:99:21: 1a:a5:45:b3:05:8a:52:c3:8d:10:8d:f0:2e:19:99:80:a3:95: 7c:2d:c6:a8:a5:7c:84:a6:b0:d7:47:e5:ce:5c:01:6d:a1:06: c7:a2:db:0c:37:b8:d3:49:6c:f4:e0:6c:0b:15:e4:2f:22:53: 6d:05:a3:b3:d0:d5:b2:1a:79:1a:77:e9:73:2b:b1:5f:5c:78: 25:68:8c:3b:50:9c:6b:ad:26:cb:d8:81:a1:d0:cd:c8:b4:a7: 6a:f7:bd:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc5QTIxMTAvBgNVBAUTKDExRDRGNERBQzdGQkE4QjVDMTIyMjQzMDA1MzlCREM2 MTU0NDVERTUwHhcNMjUwNTE1MDUyMDQ5WhcNMjUwNTIyMDUyMDQ5WjAYMRYwFAYD VQQDEw02ODI1NzliMS05MzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQpXx1ML19BVK3SriwTr95lDP98AltbKS0gRfohC2ESaVUgnUZ+w74aTofG1 +Gh+XU5p5hkX8uTRPBZWRrkH6KIG4Tibuyexv23rIlriON/ENpLP3ncPjVG2X398 Pr+D1MPDtJx/HUHURAGjfx/lKZpQ1o9ecFnmUpHyyGp1MtwNov4uuTTkyZ60hGxh Z0dUYvMV91zP4pVbtSHNQS9qr8pqeVaRanvv+VcDvBRGEcpe5CwhodIIcyi0EVbX GTKhgB5/CBIhU8WM+hlde1TMPK/GbJ/1caNkZWPyoOai/I6nwiobj5+Ggb4wEhPq CgA9plJO7iumLRQXiGLmhoYXqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTupHve mVLQP07vGIZCodsLW1/lMB8GA1UdIwQYMBaAFBHU9NrH+6i1wSIkMAU5vcYVRF3l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzlBMi9COEMwQjBBMDI2 QTAxMUVGQjlBMzdFMzlDNEY5QUUwMi9FZFQwMnNmN3FMWEJJaVF3QlRtOXhoVkVY ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VkVDAyc2Y3cUxYQklpUXdCVG05eGhWRVhlVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzlBMi9COEMwQjBBMDI2QTAxMUVGQjlBMzdFMzlDNEY5QUUwMi9FZFQwMnNmN3FM WEJJaVF3QlRtOXhoVkVYZVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8If284Q0+PTu9j4ZUkSB7z58lpHV5rJcqthmlKs/eT092uNzhb50d oWc3RUTfMdVCMbv+fO4Pt/Yn5p0XtWqAZPRd+NbEGSLOTIvdNLjP7/kMeqdMgV5U YTx4jjV/r58vx1Ca2IotCAWt2RXeGeCq9xQDSJcIc8MJ8tLCJOdNbH3hq8ASeVP7 EWYsFo9MVWrECtbBhC5hjCRz3zTEQTDlmSEapUWzBYpSw40QjfAuGZmAo5V8Lcao pXyEprDXR+XOXAFtoQbHotsMN7jTSWz04GwLFeQvIlNtBaOz0NWyGnkad+lzK7Ff XHglaIw7UJxrrSbL2IGh0M3ItKdq972t -----END CERTIFICATE-----Generated at Sat May 17 02:35:11 2025 by rpki-client