$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft File: enhVXghERXV_vNAN3R10w2nLoLA.mft (raw, json) Hash identifier: mPBvrM7n39zq/rraJmQfIn4T+ED9rqL3Oox07VtRwss= Subject key identifier: 81:BB:36:44:3E:A8:8D:DB:51:78:2A:81:B7:4F:24:23:0B:52:7B:62 Authority key identifier: 7A:78:55:5E:08:44:45:75:7F:BC:D0:0D:DD:1D:74:C3:69:CB:A0:B0 Certificate issuer: /CN=A914E6AA/serialNumber=7A78555E084445757FBCD00DDD1D74C369CBA0B0 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft Manifest number: 0877 Signing time: Tue 08 Apr 2025 22:44:17 +0000 Manifest this update: Tue 08 Apr 2025 22:44:16 +0000 Manifest next update: Tue 15 Apr 2025 22:44:16 +0000 Files and hashes: 1: enhVXghERXV_vNAN3R10w2nLoLA.crl (hash: MpOPE1eKdo4GIhjn0t+WyK1JmUl6ptgLvN2hFUXbg+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 22:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA Validity Not Before: Apr 8 22:44:16 2025 GMT Not After : Apr 15 22:44:16 2025 GMT Subject: CN=67f5a6c0-7c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:6b:e8:85:79:1c:5c:d3:49:82:ef:ec:c2:85: 83:dc:00:78:d4:df:a2:ba:0f:68:5a:0c:48:ba:ec: a1:df:c7:b7:0f:7b:50:77:6b:44:77:d5:0d:cd:a1: 28:87:8c:78:2e:12:28:ce:b6:b7:27:c7:c7:b0:51: 31:7d:db:e0:65:8e:8e:72:86:e9:99:06:09:7c:e5: 8f:cb:69:44:a6:4d:32:15:23:15:41:2f:5a:e9:29: 23:eb:bf:76:11:f5:11:33:ca:81:6f:97:a1:e1:c7: be:b0:d9:06:ec:69:d3:86:ad:30:a7:83:40:a5:65: d5:8e:3f:aa:ca:5f:19:cc:19:2b:39:5f:d9:ec:20: cb:17:83:e7:3e:a4:c6:98:f0:94:ea:28:d4:9f:40: 18:ce:1b:a7:47:a5:a0:c9:4c:0f:c2:fd:d8:b7:15: d5:fc:60:a0:ec:06:cd:31:45:e6:93:d6:92:92:f3: f1:4d:59:22:d4:0f:04:cf:f7:4d:50:b4:ee:9d:e9: 93:37:54:46:c1:75:cc:56:89:80:ee:6c:d2:72:46: 63:be:cc:37:eb:17:9f:28:c9:76:05:2d:97:e9:31: 3a:36:d1:ac:46:fe:05:4c:70:93:1f:5a:cc:0b:96: 7a:52:03:ff:0d:cb:b0:1d:5d:31:08:25:89:f5:9f: 6e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:BB:36:44:3E:A8:8D:DB:51:78:2A:81:B7:4F:24:23:0B:52:7B:62 X509v3 Authority Key Identifier: keyid:7A:78:55:5E:08:44:45:75:7F:BC:D0:0D:DD:1D:74:C3:69:CB:A0:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:92:cd:32:79:41:c9:50:4e:4e:fd:53:d1:ef:46:0c:0c:a5: 9d:16:ed:69:ec:2e:8e:0b:4e:b9:8d:6b:70:66:fe:33:21:09: 1c:6a:e9:43:ca:39:94:95:4d:33:23:f1:68:dc:93:63:fd:8a: 75:fb:df:71:71:68:5d:05:50:8e:47:4c:8a:3a:8c:36:fe:6e: ae:a5:22:7e:e1:4d:a6:f4:bf:cc:1b:9b:99:1f:66:b1:4f:5f: 76:61:51:1d:e6:96:ac:aa:a1:80:33:81:33:ba:1f:70:9d:21: cb:9f:92:4a:35:f3:94:ed:91:5b:60:1e:f2:b9:da:4c:70:03: f2:c7:e6:4a:8b:ff:a6:ac:68:7e:85:38:67:16:9b:8a:7c:c0: 61:04:8b:e1:2b:f1:61:78:90:cf:19:f2:03:0f:30:1e:7c:f7: 23:2c:38:f6:99:d3:bf:29:7c:98:3f:40:25:42:6a:bd:55:e8: 92:93:b0:27:b2:57:1c:cb:e0:31:05:13:f4:79:0c:d7:32:a8: 62:8e:25:ae:ff:e6:af:58:af:aa:cf:fd:81:75:50:4e:9e:37: 29:27:28:21:f4:a8:c9:63:aa:e6:56:6f:50:f5:18:d3:d7:d2: f6:6e:21:ae:70:8d:ec:cd:e2:fb:7c:6b:71:81:93:53:bd:25: 46:a7:f6:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2QUExMTAvBgNVBAUTKDdBNzg1NTVFMDg0NDQ1NzU3RkJDRDAwREREMUQ3NEMz NjlDQkEwQjAwHhcNMjUwNDA4MjI0NDE2WhcNMjUwNDE1MjI0NDE2WjAYMRYwFAYD VQQDEw02N2Y1YTZjMC03YzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8mvohXkcXNNJgu/swoWD3AB41N+iug9oWgxIuuyh38e3D3tQd2tEd9UNzaEo h4x4LhIozra3J8fHsFExfdvgZY6OcobpmQYJfOWPy2lEpk0yFSMVQS9a6Skj6792 EfURM8qBb5eh4ce+sNkG7GnThq0wp4NApWXVjj+qyl8ZzBkrOV/Z7CDLF4PnPqTG mPCU6ijUn0AYzhunR6WgyUwPwv3YtxXV/GCg7AbNMUXmk9aSkvPxTVki1A8Ez/dN ULTunemTN1RGwXXMVomA7mzSckZjvsw36xefKMl2BS2X6TE6NtGsRv4FTHCTH1rM C5Z6UgP/DcuwHV0xCCWJ9Z9ufwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIG7NkQ+ qI3bUXgqgbdPJCMLUntiMB8GA1UdIwQYMBaAFHp4VV4IREV1f7zQDd0ddMNpy6Cw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTZBQS84RURCMTA3RUFE QTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9lbmhWWGdoRVJYVl92TkFOM1IxMHcybkxv TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VuaFZYZ2hFUlhWX3ZOQU4zUjEwdzJuTG9MQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTZBQS84RURCMTA3RUFEQTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9lbmhWWGdoRVJY Vl92TkFOM1IxMHcybkxvTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9ks0yeUHJUE5O/VPR70YMDKWdFu1p7C6OC065jWtwZv4zIQkcaulD yjmUlU0zI/Fo3JNj/Yp1+99xcWhdBVCOR0yKOow2/m6upSJ+4U2m9L/MG5uZH2ax T192YVEd5pasqqGAM4Ezuh9wnSHLn5JKNfOU7ZFbYB7yudpMcAPyx+ZKi/+mrGh+ hThnFpuKfMBhBIvhK/FheJDPGfIDDzAefPcjLDj2mdO/KXyYP0AlQmq9VeiSk7An slccy+AxBRP0eQzXMqhijiWu/+avWK+qz/2BdVBOnjcpJygh9KjJY6rmVm9Q9RjT 19L2biGucI3szeL7fGtxgZNTvSVGp/Y2 -----END CERTIFICATE-----Generated at Thu Apr 10 18:42:02 2025 by rpki-client