$ rpki-client -vvf rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft File: _Ern2eP0GafSBKVMedHz76mn1sg.mft (raw, json) Hash identifier: 9HGqN+z9ASk3AnTRR6qbwzMDeQX2VR0m1VbHkyY4YKE= Subject key identifier: F0:2C:A2:31:00:64:62:87:50:74:84:CF:DA:51:4D:BD:75:0B:36:D6 Authority key identifier: FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8 Certificate issuer: /CN=A91262F0/serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8 Certificate serial: 019C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft Manifest number: 0197 Signing time: Sat 05 Apr 2025 02:52:44 +0000 Manifest this update: Sat 05 Apr 2025 02:52:44 +0000 Manifest next update: Sat 12 Apr 2025 02:52:44 +0000 Files and hashes: 1: _Ern2eP0GafSBKVMedHz76mn1sg.crl (hash: oiyczq70BY2ROKpn6lpn9V5XPSJai3laUuTdxAFEGC0=) 2: 8E412748A33311EDA2CB2420C4F9AE02.roa (hash: VYee2tDfZOJDgRSyvh9847Isyru0Slu6wYlhlW9JZCM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 412 (0x19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262F0 Validity Not Before: Apr 5 02:52:44 2025 GMT Not After : Apr 12 02:52:44 2025 GMT Subject: CN=67f09afc-001a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8d:b0:52:54:af:01:97:ea:2c:fd:60:ac:17: 0f:a5:18:f6:75:03:f5:ec:ea:08:ca:77:29:b7:98: 78:69:15:ca:b0:3b:72:54:47:dd:15:c9:28:c1:36: 35:3b:97:7e:5f:e0:8d:2e:b2:56:c1:02:28:52:61: 88:b9:ea:30:d9:99:d6:6b:0f:62:d1:3d:5a:03:32: d0:ca:5f:cc:6e:ab:d5:28:36:d2:24:29:6f:65:59: 86:cf:e5:10:3d:b3:b3:a6:a1:7c:83:6a:de:fb:02: ce:0c:9d:03:e2:30:f8:2d:4f:84:ff:80:6c:77:1c: 8f:6b:a5:bb:d7:e9:82:2a:22:32:22:bd:bc:db:49: d4:7d:ef:8d:9b:72:c5:33:94:1e:bc:c8:f5:ed:ed: 49:8d:7d:60:d0:d0:98:e8:a1:e6:1a:bb:44:06:a2: 90:b7:c5:de:2e:32:72:a3:73:71:19:a0:fa:00:a9: 5b:c7:d7:52:40:ea:cc:3b:87:b5:6f:60:64:d2:a1: 49:65:15:4f:7e:fb:c7:ba:aa:a0:4a:8f:98:82:79: 75:95:62:65:ca:bd:4a:d7:12:8f:5d:8d:4f:c6:53: a9:1c:85:68:d5:cf:4a:35:c3:a4:73:de:52:50:7b: 51:d5:b4:38:92:f0:2d:11:63:5f:46:bd:23:d5:ea: 18:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:2C:A2:31:00:64:62:87:50:74:84:CF:DA:51:4D:BD:75:0B:36:D6 X509v3 Authority Key Identifier: keyid:FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:f7:0f:7c:c9:d6:97:ef:29:9a:44:61:b3:b7:6c:a7:4b:0e: c6:f9:c7:13:d7:d9:92:3d:b7:82:1f:17:77:26:9d:58:6b:48: 3d:9f:28:37:be:a8:45:06:f4:13:72:a9:95:f7:1e:42:d4:ea: 11:7a:da:56:3a:73:4a:35:eb:d2:0b:9f:db:2a:b1:ea:6c:f4: 2c:85:8c:a2:92:35:93:99:43:5f:9e:f0:9a:e5:e5:8c:d0:85: ac:69:27:bf:94:e6:d0:f3:c9:ec:ff:af:99:55:c9:5e:72:6f: 30:90:2f:89:6e:ba:f7:3e:77:04:62:10:fa:8a:f4:25:bc:2d: c8:b1:01:22:b5:9c:53:28:5c:63:d5:4c:4c:d0:81:55:e5:3f: f2:d1:fa:e9:6b:83:62:9d:d8:74:7e:31:3b:c4:2c:ae:d6:6b: c3:70:dc:30:9e:e7:27:68:85:3e:7d:a9:93:e9:ac:5a:8f:01: 1b:1f:b6:14:38:e9:0d:92:85:bd:be:ab:7a:d7:9b:bf:ee:41: 12:93:0b:29:af:a7:0a:ba:36:6b:96:cd:78:04:86:97:27:97: 31:3f:1c:ae:e5:0d:b8:db:c2:54:63:e0:31:1e:4b:c4:f5:e4: 0d:5b:0b:ff:24:d4:d4:de:fc:54:3c:95:bf:81:fc:6d:78:68: e4:8e:61:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyRjAxMTAvBgNVBAUTKEZDNEFFN0Q5RTNGNDE5QTdEMjA0QTU0Qzc5RDFGM0VG QTlBN0Q2QzgwHhcNMjUwNDA1MDI1MjQ0WhcNMjUwNDEyMDI1MjQ0WjAYMRYwFAYD VQQDEw02N2YwOWFmYy0wMDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Y2wUlSvAZfqLP1grBcPpRj2dQP17OoIyncpt5h4aRXKsDtyVEfdFckowTY1 O5d+X+CNLrJWwQIoUmGIueow2ZnWaw9i0T1aAzLQyl/MbqvVKDbSJClvZVmGz+UQ PbOzpqF8g2re+wLODJ0D4jD4LU+E/4BsdxyPa6W71+mCKiIyIr2820nUfe+Nm3LF M5QevMj17e1JjX1g0NCY6KHmGrtEBqKQt8XeLjJyo3NxGaD6AKlbx9dSQOrMO4e1 b2Bk0qFJZRVPfvvHuqqgSo+Ygnl1lWJlyr1K1xKPXY1PxlOpHIVo1c9KNcOkc95S UHtR1bQ4kvAtEWNfRr0j1eoYBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPAsojEA ZGKHUHSEz9pRTb11CzbWMB8GA1UdIwQYMBaAFPxK59nj9Bmn0gSlTHnR8++pp9bI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJGMC8zM0FEMEE2MkEz MEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdhZlNCS1ZNZWRIejc2bW4x c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19Fcm4yZVAwR2FmU0JLVk1lZEh6NzZtbjFzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjJGMC8zM0FEMEE2MkEzMEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdh ZlNCS1ZNZWRIejc2bW4xc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCu9w98ydaX7ymaRGGzt2ynSw7G+ccT19mSPbeCHxd3Jp1Ya0g9nyg3 vqhFBvQTcqmV9x5C1OoRetpWOnNKNevSC5/bKrHqbPQshYyikjWTmUNfnvCa5eWM 0IWsaSe/lObQ88ns/6+ZVclecm8wkC+Jbrr3PncEYhD6ivQlvC3IsQEitZxTKFxj 1UxM0IFV5T/y0frpa4Nindh0fjE7xCyu1mvDcNwwnucnaIU+famT6axajwEbH7YU OOkNkoW9vqt615u/7kESkwspr6cKujZrls14BIaXJ5cxPxyu5Q2428JUY+AxHkvE 9eQNWwv/JNTU3vxUPJW/gfxteGjkjmG4 -----END CERTIFICATE-----Generated at Sun Apr 6 02:16:44 2025 by rpki-client