$ rpki-client -vvf rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft File: EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft (raw, json) Hash identifier: XqcR6lcJ8LSus1/okD+2egsk1bM2CGJgDPK3Y2tLPJ4= Subject key identifier: 5D:CC:0F:FB:5B:EA:61:6D:D3:4E:9B:49:B7:F4:F6:1C:4C:46:FA:A6 Authority key identifier: 10:36:C1:E0:FF:E1:CF:C3:7D:65:5D:89:FA:65:D6:5F:E2:2E:1F:7A Certificate issuer: /CN=A91383F0/serialNumber=1036C1E0FFE1CFC37D655D89FA65D65FE22E1F7A Certificate serial: 0184 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft Manifest number: 016A Signing time: Thu 03 Apr 2025 03:25:03 +0000 Manifest this update: Thu 03 Apr 2025 03:25:02 +0000 Manifest next update: Thu 10 Apr 2025 03:25:02 +0000 Files and hashes: 1: EDbB4P_hz8N9ZV2J-mXWX-IuH3o.crl (hash: HdtMoxRJYa9t1TWNyXWAQ2enAVIE5C6kk/BM713Vj9o=) 2: F098580828C511EFB2C79E5FC4F9AE02.roa (hash: hGyVKJOy3s+uSXiEJLjSDUVmn7ewhXLjDLBZl593H3w=) 3: 14C77BFA28C611EFA33ED95FC4F9AE02.roa (hash: kiepz3d3PXC78matqhezJSK/iL+kv++r/FbCbnosOR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.crl rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:25:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383F0 Validity Not Before: Apr 3 03:25:02 2025 GMT Not After : Apr 10 03:25:02 2025 GMT Subject: CN=67edff8e-a7bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:40:bc:3a:aa:01:a5:18:60:36:99:1e:ea:ca: ed:e2:8e:aa:8d:19:c8:f8:b9:60:e2:52:03:18:58: da:de:6a:b6:4b:ed:41:ab:0b:25:1b:3b:cd:91:20: 03:6e:f7:1e:84:2f:7a:53:cb:30:ff:bc:c5:bd:0d: 08:b0:42:d4:52:fc:6f:7a:51:81:1b:33:7b:47:c5: 03:d5:60:56:f2:c3:9d:43:7d:b0:01:d6:2c:51:1a: 69:f5:95:e9:62:37:e3:9d:f9:3c:7c:28:15:95:39: ea:e0:fc:80:c9:29:0c:69:a2:5f:2c:a9:5f:c2:d4: 09:99:4a:66:c9:f5:29:9f:9a:39:97:5a:f9:92:c5: 1e:ce:8b:30:3e:d2:c5:e4:ee:8d:c3:d9:f6:1c:ff: fd:51:8c:3b:d9:fa:f1:7d:b5:ae:90:e3:23:37:06: 7e:57:d4:c7:ba:e6:2e:9a:74:c3:ff:35:68:7c:20: b9:ae:6b:be:07:9d:9f:8e:57:cb:a6:9e:5a:db:e4: b2:7a:72:1b:6f:30:9b:6b:f6:9b:65:87:ed:50:5d: fc:63:e8:d6:69:b2:df:f6:98:48:f6:1b:99:3c:86: 17:85:f1:84:db:f4:28:32:21:24:1b:2b:03:c1:db: 4b:4e:d1:a7:e8:4a:98:18:98:04:a1:4d:a3:6a:bd: 2b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:CC:0F:FB:5B:EA:61:6D:D3:4E:9B:49:B7:F4:F6:1C:4C:46:FA:A6 X509v3 Authority Key Identifier: keyid:10:36:C1:E0:FF:E1:CF:C3:7D:65:5D:89:FA:65:D6:5F:E2:2E:1F:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:41:90:09:dc:3f:20:4b:ec:6e:47:dd:6a:e6:95:cc:11:76: 19:69:0f:24:76:25:4b:94:64:23:3f:25:6e:a7:1d:bd:fb:13: 26:70:26:eb:6e:85:9e:cf:bb:3a:ff:7b:b4:54:b5:e8:9b:07: ad:4d:65:c9:2a:63:6a:ae:9f:78:cd:47:ff:ad:82:09:b1:e3: a3:3f:db:9a:47:45:6f:93:b3:37:f3:3e:15:13:e5:a8:76:4b: 81:69:07:ca:4e:25:ce:a4:cf:73:89:07:31:60:12:ef:ac:da: cc:22:8c:9a:ab:01:13:f6:49:ec:e2:a3:ed:a7:87:71:77:6a: b8:ff:b7:65:9c:40:f0:b6:b7:e9:06:73:80:b3:55:17:83:75: ce:6e:8f:8f:ee:f2:3b:3f:06:37:d4:01:c1:f5:c8:4d:06:36: e4:c3:4a:a5:08:ec:ba:0a:02:4d:48:7a:c7:bc:c9:78:0c:b6: a1:2c:8e:4a:4e:58:0a:db:44:db:24:7f:95:b7:21:56:58:37: b4:10:e5:3a:b4:1a:e4:47:a3:31:6c:ae:1b:11:57:fb:1d:da: ed:a8:66:44:56:f6:ef:c4:8a:13:62:dd:ae:f1:3b:1a:dd:77: f6:74:31:70:7c:5f:81:0d:02:a5:35:72:8a:15:03:79:45:4c: f5:26:f8:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzRjAxMTAvBgNVBAUTKDEwMzZDMUUwRkZFMUNGQzM3RDY1NUQ4OUZBNjVENjVG RTIyRTFGN0EwHhcNMjUwNDAzMDMyNTAyWhcNMjUwNDEwMDMyNTAyWjAYMRYwFAYD VQQDEw02N2VkZmY4ZS1hN2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0C8OqoBpRhgNpke6srt4o6qjRnI+Llg4lIDGFja3mq2S+1BqwslGzvNkSAD bvcehC96U8sw/7zFvQ0IsELUUvxvelGBGzN7R8UD1WBW8sOdQ32wAdYsURpp9ZXp Yjfjnfk8fCgVlTnq4PyAySkMaaJfLKlfwtQJmUpmyfUpn5o5l1r5ksUezoswPtLF 5O6Nw9n2HP/9UYw72frxfbWukOMjNwZ+V9THuuYumnTD/zVofCC5rmu+B52fjlfL pp5a2+SyenIbbzCba/abZYftUF38Y+jWabLf9phI9huZPIYXhfGE2/QoMiEkGysD wdtLTtGn6EqYGJgEoU2jar0r6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3MD/tb 6mFt006bSbf09hxMRvqmMB8GA1UdIwQYMBaAFBA2weD/4c/DfWVdifpl1l/iLh96 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNGMC9EQ0ZDQTZBMjBB ODMxMUVFOUU2QTkyNTBDNEY5QUUwMi9FRGJCNFBfaHo4TjlaVjJKLW1YV1gtSXVI M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VEYkI0UF9oejhOOVpWMkotbVhXWC1JdUgzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNGMC9EQ0ZDQTZBMjBBODMxMUVFOUU2QTkyNTBDNEY5QUUwMi9FRGJCNFBfaHo4 TjlaVjJKLW1YV1gtSXVIM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqQZAJ3D8gS+xuR91q5pXMEXYZaQ8kdiVLlGQjPyVupx29+xMmcCbr boWez7s6/3u0VLXomwetTWXJKmNqrp94zUf/rYIJseOjP9uaR0Vvk7M38z4VE+Wo dkuBaQfKTiXOpM9ziQcxYBLvrNrMIoyaqwET9kns4qPtp4dxd2q4/7dlnEDwtrfp BnOAs1UXg3XObo+P7vI7PwY31AHB9chNBjbkw0qlCOy6CgJNSHrHvMl4DLahLI5K TlgK20TbJH+VtyFWWDe0EOU6tBrkR6MxbK4bEVf7HdrtqGZEVvbvxIoTYt2u8Tsa 3Xf2dDFwfF+BDQKlNXKKFQN5RUz1Jvgs -----END CERTIFICATE-----Generated at Fri Apr 4 18:00:42 2025 by rpki-client