$ rpki-client -vvf rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft File: EkcIHpupfBPH3T1o5EPR9UebKv8.mft (raw, json) Hash identifier: EOEMKaiJE7w+ks+xkTVw0QbwAtdKcZpcf6h6Z+ePSrE= Subject key identifier: E5:D2:DB:00:2A:D4:53:F8:21:A9:16:6E:6F:7B:4B:F9:0E:DA:E0:2B Authority key identifier: 12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF Certificate issuer: /CN=A91396E7/serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft Manifest number: 5C Signing time: Fri 11 Apr 2025 06:21:10 +0000 Manifest this update: Fri 11 Apr 2025 06:21:10 +0000 Manifest next update: Fri 18 Apr 2025 06:21:10 +0000 Files and hashes: 1: EkcIHpupfBPH3T1o5EPR9UebKv8.crl (hash: npE4BHCmZbAKJG/X0pXpBoh9C+/1+zfaI5WI3jKrBCI=) 2: A1CF550A912511EF8FF0813AC4F9AE02.roa (hash: 5nFCTmC5xU4JIe+ocqPzYmN20Z681T2Mb6LU4xxafNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 06:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91396E7, serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF Validity Not Before: Apr 11 06:21:10 2025 GMT Not After : Apr 18 06:21:10 2025 GMT Subject: CN=67f8b4d6-5505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fa:59:e3:00:4f:9e:0b:ab:35:ef:fe:f2:90: 67:31:7f:5c:d7:d3:58:9c:12:4f:e4:8f:dc:88:a1: 55:76:cd:ae:34:a8:0d:27:5d:22:d9:8e:cb:2a:74: 9f:35:e5:3e:6e:78:b3:f5:df:bd:a9:f6:2e:ee:8e: ee:e0:18:2f:a4:6c:1a:76:00:ca:48:fc:5e:48:91: ff:4e:5b:f1:be:a1:be:84:78:03:96:db:ec:62:6a: 9c:52:f7:88:cd:b0:7d:8d:3c:60:46:6d:20:e9:40: 24:4d:14:68:d8:68:66:58:1b:1b:4b:a2:f1:3e:f4: 77:0c:ca:6a:fd:19:23:cd:e7:e5:cf:40:41:27:3d: 4c:0a:8b:fc:fc:4c:48:1b:ee:7c:91:e8:9f:ab:70: 7e:7a:39:01:a6:47:1d:f8:69:47:76:1a:84:e9:fc: ca:f7:ec:60:87:a2:45:41:f9:bf:53:03:1f:ed:41: 11:6f:bb:c7:6b:82:0d:12:63:71:89:9a:fe:11:a0: 59:fe:ad:e1:72:d6:8f:56:9b:ff:1b:5d:ef:a2:81: c3:89:7f:d6:22:50:04:b8:d8:c1:9a:9b:72:ab:2d: 4f:dc:a3:15:90:72:53:2f:7d:1c:56:40:0f:e5:fc: 94:83:aa:1e:9d:5b:0b:e0:2c:71:a9:19:a6:cf:7e: 28:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D2:DB:00:2A:D4:53:F8:21:A9:16:6E:6F:7B:4B:F9:0E:DA:E0:2B X509v3 Authority Key Identifier: keyid:12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:77:0c:fb:28:d1:a1:8d:2f:af:ac:07:79:43:3a:f1:01:bc: fa:4d:5f:90:13:fa:77:37:35:bf:db:2d:76:3b:47:69:35:72: 73:5f:3e:48:3e:97:c6:9c:9a:aa:1d:7b:f6:33:30:4c:29:17: 5e:b5:83:23:19:4a:d7:42:22:02:02:ad:de:98:82:86:9d:d1: 12:3c:35:ad:c8:b2:e1:bd:c6:75:81:5b:13:fb:05:76:39:92: 38:8a:af:ea:4f:3f:a7:3d:5f:3a:d2:e3:ec:34:7d:29:b9:c4: 04:22:d1:d6:b4:6e:ed:d4:18:25:d4:0d:67:f2:27:ff:bf:7f: 6d:f1:af:bf:c6:24:64:0a:29:cb:49:d5:e3:56:ac:5c:f4:99: b8:09:da:d5:72:20:7a:65:c0:c0:26:9c:68:0a:ac:11:dd:22: 73:53:e9:55:4e:11:91:1c:58:ae:70:a5:40:29:13:88:49:a5: c6:8f:4a:43:26:f5:72:17:80:a2:11:16:53:5b:ac:a9:99:c4: c9:2b:01:36:80:82:7f:95:1d:97:14:19:8c:22:ac:64:d0:a3: 39:e4:9b:bb:e1:3b:e2:5e:91:eb:c0:05:f3:bf:ed:d0:5d:51: d2:6f:a4:ca:d4:b2:78:ae:f6:01:12:1f:24:ca:80:fe:db:69: 43:31:6d:03 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OTZFNzExMC8GA1UEBRMoMTI0NzA4MUU5QkE5N0MxM0M3REQzRDY4RTQ0M0QxRjU0 NzlCMkFGRjAeFw0yNTA0MTEwNjIxMTBaFw0yNTA0MTgwNjIxMTBaMBgxFjAUBgNV BAMTDTY3ZjhiNGQ2LTU1MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCy+lnjAE+eC6s17/7ykGcxf1zX01icEk/kj9yIoVV2za40qA0nXSLZjssqdJ81 5T5ueLP1372p9i7uju7gGC+kbBp2AMpI/F5Ikf9OW/G+ob6EeAOW2+xiapxS94jN sH2NPGBGbSDpQCRNFGjYaGZYGxtLovE+9HcMymr9GSPN5+XPQEEnPUwKi/z8TEgb 7nyR6J+rcH56OQGmRx34aUd2GoTp/Mr37GCHokVB+b9TAx/tQRFvu8drgg0SY3GJ mv4RoFn+reFy1o9Wm/8bXe+igcOJf9YiUAS42MGam3KrLU/coxWQclMvfRxWQA/l /JSDqh6dWwvgLHGpGabPfihjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5dLbACrU U/ghqRZub3tL+Q7a4CswHwYDVR0jBBgwFoAUEkcIHpupfBPH3T1o5EPR9UebKv8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5NkU3LzA2NzlBQ0Y0OTEy NTExRUY5NDJBMkIyOEM0RjlBRTAyL0VrY0lIcHVwZkJQSDNUMW81RVBSOVVlYkt2 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRWtjSUhwdXBmQlBIM1QxbzVFUFI5VWViS3Y4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5 NkU3LzA2NzlBQ0Y0OTEyNTExRUY5NDJBMkIyOEM0RjlBRTAyL0VrY0lIcHVwZkJQ SDNUMW81RVBSOVVlYkt2OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHN3DPso0aGNL6+sB3lDOvEBvPpNX5AT+nc3Nb/bLXY7R2k1cnNfPkg+ l8acmqode/YzMEwpF161gyMZStdCIgICrd6Ygoad0RI8Na3IsuG9xnWBWxP7BXY5 kjiKr+pPP6c9XzrS4+w0fSm5xAQi0da0bu3UGCXUDWfyJ/+/f23xr7/GJGQKKctJ 1eNWrFz0mbgJ2tVyIHplwMAmnGgKrBHdInNT6VVOEZEcWK5wpUApE4hJpcaPSkMm 9XIXgKIRFlNbrKmZxMkrATaAgn+VHZcUGYwirGTQoznkm7vhO+JekevABfO/7dBd UdJvpMrUsniu9gESHyTKgP7baUMxbQM= -----END CERTIFICATE-----Generated at Sun Apr 13 05:11:09 2025 by rpki-client