$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft File: EcBLr8HLQLBzED91iraOWH9b_gQ.mft (raw, json) Hash identifier: D2WBGirL66syeuh+XEAmKqK+sxHlqWqbvwMVE0QfVfs= Subject key identifier: 39:58:6D:50:CA:24:DE:63:7D:C5:CF:0D:4B:5E:96:46:44:56:0D:BA Authority key identifier: 11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04 Certificate issuer: /CN=A91FE295/serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04 Certificate serial: 0383 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft Manifest number: 0381 Signing time: Fri 09 May 2025 00:39:29 +0000 Manifest this update: Fri 09 May 2025 00:39:29 +0000 Manifest next update: Fri 16 May 2025 00:39:29 +0000 Files and hashes: 1: EcBLr8HLQLBzED91iraOWH9b_gQ.crl (hash: +vPj8vxUikXtMEDg4QN+meOWrtxBVqagQoJ1ssWiMNY=) 2: 4153181E1D4211ED99608059C4F9AE02.roa (hash: bo3M0SHEmY6fxlknnF6CrnoZr8k2yntFb0qjHa/esME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 00:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 899 (0x383) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE295, serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04 Validity Not Before: May 9 00:39:29 2025 GMT Not After : May 16 00:39:29 2025 GMT Subject: CN=681d4ec1-870d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0f:ef:c2:a5:ad:62:0c:f0:a4:a4:9d:1c:a0: 39:ba:b2:fb:13:0a:c8:81:ef:fc:f3:f8:e6:cf:ef: d0:19:5a:d2:76:4c:75:c4:20:8e:1a:78:98:97:7d: 50:f0:40:38:94:c0:b3:c7:73:62:c1:da:0d:45:12: 7f:86:56:82:15:86:8e:ec:e2:8b:ae:10:f3:3a:d2: 86:0f:7d:42:11:e2:96:29:9f:1e:ac:fa:f9:a3:34: 13:24:25:af:17:30:5d:06:55:34:94:e1:14:fa:b2: 43:f2:4b:2d:c3:8a:2a:2a:4b:5a:40:4e:ad:61:c1: 0a:10:bd:47:32:85:e8:6a:72:d7:f4:23:aa:61:0d: 72:87:6a:6a:8e:30:5c:b3:8e:0f:58:e2:c2:14:e6: 12:12:31:b0:19:1b:a1:12:c1:b4:d7:bf:75:0c:e6: 61:d0:69:f4:bf:5b:ff:65:03:ab:50:37:6e:29:57: be:d6:65:42:66:f1:2c:06:14:06:96:68:68:b4:d6: ba:ca:fa:c3:7b:7a:6e:3f:bc:11:b4:b5:90:fa:c4: 89:b4:33:59:3e:2a:1d:b8:b2:f3:c2:34:07:c6:99: a8:2c:6f:61:4a:df:de:67:1e:94:3e:4e:47:d7:d3: 82:ce:4b:e3:ca:4c:58:1d:e2:30:e5:d6:5f:6e:3a: 42:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:58:6D:50:CA:24:DE:63:7D:C5:CF:0D:4B:5E:96:46:44:56:0D:BA X509v3 Authority Key Identifier: keyid:11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:f1:aa:4d:e4:d1:ef:e4:1a:34:ce:e5:70:bb:e6:1f:63:1f: e2:e2:29:b6:b7:72:a9:ac:d8:a8:7a:ea:75:d7:56:1f:08:2b: 25:6e:03:0e:61:15:ee:f6:ba:38:72:0f:4b:a3:22:c7:2d:b1: ff:a5:2f:1b:d9:ce:2f:d0:dc:89:18:1f:8d:be:2b:7b:e3:94: d6:05:10:e2:11:cf:91:4b:65:7a:0e:03:d8:cd:ad:d8:ca:f2: 7d:95:1b:9e:79:07:d3:11:d4:e9:86:a4:31:b1:4e:a4:9b:9f: cf:bc:18:b9:55:f1:04:42:60:bf:51:53:57:6b:78:3c:06:11: bb:f1:09:d3:f7:cf:dd:6c:d6:92:14:1e:b8:d8:83:68:ed:ed: 86:ab:29:8c:e9:dc:84:af:37:d1:ca:c7:4c:66:df:d0:d2:bd: 6a:ef:de:45:66:f6:d8:db:c5:4d:69:96:6d:9d:ac:5d:22:4b: 67:56:fb:c0:fb:05:8c:2c:5b:27:b5:23:2e:4d:04:6b:17:17: 51:6b:d0:ca:3d:3c:c8:b8:94:86:a4:cd:10:71:98:2f:4e:97: 1c:8d:fc:af:13:a9:b0:50:0b:ca:5f:64:00:2b:e3:71:38:4b: 24:5d:69:59:33:1b:b3:9b:76:1f:61:d2:ef:1f:a0:7c:a0:8a: 2f:b5:55:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUyOTUxMTAvBgNVBAUTKDExQzA0QkFGQzFDQjQwQjA3MzEwM0Y3NThBQjY4RTU4 N0Y1QkZFMDQwHhcNMjUwNTA5MDAzOTI5WhcNMjUwNTE2MDAzOTI5WjAYMRYwFAYD VQQDEw02ODFkNGVjMS04NzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzw/vwqWtYgzwpKSdHKA5urL7EwrIge/88/jmz+/QGVrSdkx1xCCOGniYl31Q 8EA4lMCzx3NiwdoNRRJ/hlaCFYaO7OKLrhDzOtKGD31CEeKWKZ8erPr5ozQTJCWv FzBdBlU0lOEU+rJD8kstw4oqKktaQE6tYcEKEL1HMoXoanLX9COqYQ1yh2pqjjBc s44PWOLCFOYSEjGwGRuhEsG01791DOZh0Gn0v1v/ZQOrUDduKVe+1mVCZvEsBhQG lmhotNa6yvrDe3puP7wRtLWQ+sSJtDNZPioduLLzwjQHxpmoLG9hSt/eZx6UPk5H 19OCzkvjykxYHeIw5dZfbjpCFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDlYbVDK JN5jfcXPDUtelkZEVg26MB8GA1UdIwQYMBaAFBHAS6/By0CwcxA/dYq2jlh/W/4E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTI5NS82Rjk2QzBEQ0Ew MTkxMUVDOTQ4NEQxMkZDNEY5QUUwMi9FY0JMcjhITFFMQnpFRDkxaXJhT1dIOWJf Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VjQkxyOEhMUUxCekVEOTFpcmFPV0g5Yl9nUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTI5NS82Rjk2QzBEQ0EwMTkxMUVDOTQ4NEQxMkZDNEY5QUUwMi9FY0JMcjhITFFM QnpFRDkxaXJhT1dIOWJfZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBs8apN5NHv5Bo0zuVwu+YfYx/i4im2t3KprNioeup111YfCCslbgMO YRXu9ro4cg9LoyLHLbH/pS8b2c4v0NyJGB+Nvit745TWBRDiEc+RS2V6DgPYza3Y yvJ9lRueeQfTEdTphqQxsU6km5/PvBi5VfEEQmC/UVNXa3g8BhG78QnT98/dbNaS FB642INo7e2GqymM6dyErzfRysdMZt/Q0r1q795FZvbY28VNaZZtnaxdIktnVvvA +wWMLFsntSMuTQRrFxdRa9DKPTzIuJSGpM0QcZgvTpccjfyvE6mwUAvKX2QAK+Nx OEskXWlZMxuzm3YfYdLvH6B8oIovtVVz -----END CERTIFICATE-----Generated at Sun May 11 00:58:40 2025 by rpki-client