$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft File: EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft (raw, json) Hash identifier: xxrkipFGUcDaBnuS3Uu8lHLP9CmPTkRcKZn4g5On5Wg= Subject key identifier: 79:82:87:6E:96:34:0C:67:20:8B:B2:60:F0:22:96:1C:26:98:8D:9B Authority key identifier: 11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 Certificate issuer: /CN=A91FD4A1/serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544 Certificate serial: 01D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft Manifest number: 01CE Signing time: Sun 11 May 2025 01:51:00 +0000 Manifest this update: Sun 11 May 2025 01:50:59 +0000 Manifest next update: Sun 18 May 2025 01:50:59 +0000 Files and hashes: 1: EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl (hash: K97wTWHXWPHnzNqRXsJw0/+YoDSVxTdm9WtXHlky4rQ=) 2: 16E990CA6B0411ED849E0957C4F9AE02.roa (hash: Uh7B24TrfbcaCXXos+UCRzkq1ccagOkOy3EbQYTwo0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:50:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 466 (0x1d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4A1, serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544 Validity Not Before: May 11 01:50:59 2025 GMT Not After : May 18 01:50:59 2025 GMT Subject: CN=68200283-9be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9e:c2:37:86:d4:16:0f:61:99:53:f0:78:81: 6a:54:61:0a:24:10:d9:f7:32:f9:ca:0e:65:b6:c9: c5:7a:eb:3e:ef:0b:08:f6:af:c8:42:38:35:2c:84: 5b:77:a7:31:de:d7:d4:f6:98:6a:4e:aa:d1:87:b1: f4:d5:1f:a3:be:7a:76:62:17:8a:c4:6a:08:80:1b: a1:d3:d7:75:ab:1a:53:3b:ca:02:a3:90:1f:63:d6: c0:dc:7f:b5:87:69:cd:d0:9d:73:d7:a2:8e:70:d0: 7a:9f:79:88:69:32:85:a9:7c:8c:72:3f:1f:9d:bb: 52:4f:98:a6:be:88:3e:29:b5:16:c1:5d:00:2e:76: f3:72:32:01:f9:94:dc:7b:9e:24:65:5f:bd:ea:cc: 06:80:1e:84:39:4c:94:b0:cf:0c:55:93:09:46:52: f2:17:0a:b7:ec:da:4c:08:3a:f5:78:44:89:69:18: 0c:3a:b2:5c:8a:1d:5b:c6:55:6f:63:7f:65:ea:6d: 06:80:5f:3b:bd:33:eb:61:fd:ca:b2:ef:85:93:ef: e3:da:87:cb:43:37:ba:61:15:1d:e7:28:ea:2a:ce: 43:5e:4d:df:db:a9:b5:ff:90:63:3d:71:08:e7:de: 61:09:68:30:08:7c:24:32:b4:87:51:48:66:f0:21: ab:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:82:87:6E:96:34:0C:67:20:8B:B2:60:F0:22:96:1C:26:98:8D:9B X509v3 Authority Key Identifier: keyid:11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:2f:cd:d3:12:58:18:5e:1d:e2:80:e4:68:80:83:27:19:f3: dc:01:1e:26:9a:94:f6:d4:c1:08:c3:73:c5:98:53:45:72:6f: 50:4f:45:bf:4b:06:cc:14:96:24:57:2c:86:b3:dc:ec:44:fb: 51:70:49:08:33:f6:06:cf:44:69:72:db:11:f4:c0:fd:64:b2: 89:b0:37:4c:ba:36:b5:ff:a3:a0:57:ce:09:d6:8d:c0:84:71: ce:3f:5d:3b:e3:e8:e3:0e:41:71:e4:33:8d:62:06:cc:c8:61: a3:0f:68:87:c0:34:c1:68:4e:a3:d6:09:3c:76:32:68:94:ed: 7b:e2:6e:94:0d:cf:57:6c:fb:68:cb:16:4d:ba:95:9a:d1:5e: 5b:f1:de:b8:df:1a:7a:30:d9:6c:39:50:34:2c:b2:44:9c:18: 93:0d:c1:e9:fa:3f:57:01:1f:54:47:04:e1:2c:4a:27:7c:16: 18:3f:63:e4:00:63:89:b7:f0:33:fb:9e:66:97:5b:af:c5:29: 69:7c:c8:d6:f9:39:f2:09:e0:94:d3:98:6e:3e:36:7f:ae:b1: 7c:08:ba:4d:05:51:a5:96:a0:1d:1a:5d:df:8e:30:2b:6b:b5: a6:a2:b6:eb:c2:fb:11:85:7d:b1:92:5a:d6:f5:8d:31:ac:09: 97:77:5d:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0QTExMTAvBgNVBAUTKDExOTZDRERGREEzRUJEQzVBREE4RkZDNUJDQjM4NDkx MjE0N0Q1NDQwHhcNMjUwNTExMDE1MDU5WhcNMjUwNTE4MDE1MDU5WjAYMRYwFAYD VQQDEw02ODIwMDI4My05YmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Z7CN4bUFg9hmVPweIFqVGEKJBDZ9zL5yg5ltsnFeus+7wsI9q/IQjg1LIRb d6cx3tfU9phqTqrRh7H01R+jvnp2YheKxGoIgBuh09d1qxpTO8oCo5AfY9bA3H+1 h2nN0J1z16KOcNB6n3mIaTKFqXyMcj8fnbtST5imvog+KbUWwV0ALnbzcjIB+ZTc e54kZV+96swGgB6EOUyUsM8MVZMJRlLyFwq37NpMCDr1eESJaRgMOrJcih1bxlVv Y39l6m0GgF87vTPrYf3Ksu+Fk+/j2ofLQze6YRUd5yjqKs5DXk3f26m1/5BjPXEI 595hCWgwCHwkMrSHUUhm8CGrtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmCh26W NAxnIIuyYPAilhwmmI2bMB8GA1UdIwQYMBaAFBGWzd/aPr3Fraj/xbyzhJEhR9VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDRBMS82MkI0MjNCQTZC MDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZjV3RxUF9GdkxPRWtTRkgx VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VaYk4zOW8tdmNXdHFQX0Z2TE9Fa1NGSDFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDRBMS82MkI0MjNCQTZCMDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZj V3RxUF9GdkxPRWtTRkgxVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADL83TElgYXh3igORogIMnGfPcAR4mmpT21MEIw3PFmFNFcm9QT0W/ SwbMFJYkVyyGs9zsRPtRcEkIM/YGz0RpctsR9MD9ZLKJsDdMuja1/6OgV84J1o3A hHHOP1074+jjDkFx5DONYgbMyGGjD2iHwDTBaE6j1gk8djJolO174m6UDc9XbPto yxZNupWa0V5b8d643xp6MNlsOVA0LLJEnBiTDcHp+j9XAR9URwThLEonfBYYP2Pk AGOJt/Az+55ml1uvxSlpfMjW+TnyCeCU05huPjZ/rrF8CLpNBVGllqAdGl3fjjAr a7WmorbrwvsRhX2xklrW9Y0xrAmXd13i -----END CERTIFICATE-----Generated at Sun May 11 12:34:21 2025 by rpki-client