$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft File: ej5CbJYle98kPDxjt4A4NAUlwqk.mft (raw, json) Hash identifier: hjN4JNqgavI6s1tlIFDSdfdYlx+/GGPDK3rw5FgLxso= Subject key identifier: B8:99:61:38:B2:17:19:40:66:91:CE:CF:0B:20:CD:CB:86:30:B0:42 Authority key identifier: 7A:3E:42:6C:96:25:7B:DF:24:3C:3C:63:B7:80:38:34:05:25:C2:A9 Certificate issuer: /CN=A9150CF3/serialNumber=7A3E426C96257BDF243C3C63B78038340525C2A9 Certificate serial: 020C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej5CbJYle98kPDxjt4A4NAUlwqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft Manifest number: 02FD Signing time: Sat 29 Mar 2025 02:16:51 +0000 Manifest this update: Sat 29 Mar 2025 02:16:51 +0000 Manifest next update: Sat 05 Apr 2025 02:16:51 +0000 Files and hashes: 1: ej5CbJYle98kPDxjt4A4NAUlwqk.crl (hash: eRjdTCPPGgYX9IHEXzSqlN0OuqSojuANfChZb1OH4co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.crl rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej5CbJYle98kPDxjt4A4NAUlwqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 524 (0x20c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF3 Validity Not Before: Mar 29 02:16:51 2025 GMT Not After : Apr 5 02:16:51 2025 GMT Subject: CN=67e75813-0fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:90:7e:ae:ee:2e:4a:55:80:e9:84:aa:67:38: bd:0f:81:c9:fd:0b:e0:05:09:e4:73:2b:9c:41:89: 65:ff:ec:05:2b:d3:69:53:f1:33:2f:70:fa:02:3d: 36:a8:93:4b:8b:0a:d7:0c:04:f3:f0:bd:df:4e:bb: 8a:ca:dd:ea:5a:95:5e:42:62:8d:e1:21:80:b4:86: 0a:6d:90:d9:0a:e3:08:9d:96:b9:8a:2b:17:92:5e: db:c3:cd:be:79:16:ff:89:09:e2:21:72:77:88:e5: a9:bd:e5:8f:00:1f:53:f0:9a:e2:db:c7:20:08:f9: 72:b7:db:0e:52:59:5a:08:5b:9b:65:00:4e:d4:9f: 54:2f:fe:12:0e:c9:6d:6b:a7:76:1a:4c:83:0e:8c: 59:c0:c9:4a:e5:ca:65:51:df:43:7c:6d:4e:a9:0f: 72:22:64:87:ac:34:0d:38:12:22:9d:93:a5:b8:53: da:a6:ad:bf:c8:88:87:08:81:90:4f:ab:71:e8:30: 2c:64:0d:cc:23:75:10:32:77:dd:06:16:86:7b:21: 94:3a:f5:83:ca:06:d2:80:c6:25:85:f0:63:e7:8a: a2:12:0c:dc:98:fb:b0:e4:1c:3f:fc:83:93:ff:ad: 47:de:4f:16:65:dd:03:99:39:ce:89:0e:07:54:99: 62:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:99:61:38:B2:17:19:40:66:91:CE:CF:0B:20:CD:CB:86:30:B0:42 X509v3 Authority Key Identifier: keyid:7A:3E:42:6C:96:25:7B:DF:24:3C:3C:63:B7:80:38:34:05:25:C2:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej5CbJYle98kPDxjt4A4NAUlwqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:95:e6:95:95:89:88:91:22:17:4f:21:5a:17:a7:7f:2b:a8: 11:06:50:fe:8b:21:8c:8f:8a:ee:57:6c:4b:22:dd:bd:92:22: 18:1c:11:2c:19:8c:66:1a:66:b4:ae:5f:96:0a:12:c0:8e:77: c9:fa:8e:f9:2f:da:7a:82:4d:0d:e0:9e:07:69:3d:a4:fa:0b: f6:aa:0a:12:4e:1d:42:b5:13:c8:76:a1:af:34:e8:28:c2:ce: e5:a0:c9:4d:05:bc:62:99:3e:62:28:20:d1:e0:c7:28:17:65: de:c3:51:ef:51:53:a3:96:34:ae:f2:76:ea:b0:0e:be:84:06: 78:07:3b:cd:9a:b7:74:92:a9:39:50:10:ef:78:86:45:63:98: ac:bc:1e:32:14:78:0e:37:70:62:35:4c:30:88:46:91:8a:9d: 15:64:bb:3a:9d:44:9c:a0:6c:fe:a6:34:c6:56:ae:60:bc:c2: 28:e6:fd:19:73:06:0c:04:5a:fd:5f:99:a9:4a:7a:10:02:c1: 88:8a:93:83:6f:ba:d7:8a:77:28:cb:54:b6:f7:ac:d1:4e:97: b1:d0:32:7b:b2:bc:97:06:3f:e0:d1:83:0c:82:0b:b6:15:d0: 74:05:4f:19:53:cf:0b:1d:15:68:c8:86:88:9e:f4:3b:12:15: b0:24:7d:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjMxMTAvBgNVBAUTKDdBM0U0MjZDOTYyNTdCREYyNDNDM0M2M0I3ODAzODM0 MDUyNUMyQTkwHhcNMjUwMzI5MDIxNjUxWhcNMjUwNDA1MDIxNjUxWjAYMRYwFAYD VQQDEw02N2U3NTgxMy0wZmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5B+ru4uSlWA6YSqZzi9D4HJ/QvgBQnkcyucQYll/+wFK9NpU/EzL3D6Aj02 qJNLiwrXDATz8L3fTruKyt3qWpVeQmKN4SGAtIYKbZDZCuMInZa5iisXkl7bw82+ eRb/iQniIXJ3iOWpveWPAB9T8Jri28cgCPlyt9sOUllaCFubZQBO1J9UL/4SDslt a6d2GkyDDoxZwMlK5cplUd9DfG1OqQ9yImSHrDQNOBIinZOluFPapq2/yIiHCIGQ T6tx6DAsZA3MI3UQMnfdBhaGeyGUOvWDygbSgMYlhfBj54qiEgzcmPuw5Bw//IOT /61H3k8WZd0DmTnOiQ4HVJliUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLiZYTiy FxlAZpHOzwsgzcuGMLBCMB8GA1UdIwQYMBaAFHo+QmyWJXvfJDw8Y7eAODQFJcKp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMy8wMjhGOUVGRTJF ODYxMUVEOUQyRURDNERDNEY5QUUwMi9lajVDYkpZbGU5OGtQRHhqdDRBNE5BVWx3 cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VqNUNiSllsZTk4a1BEeGp0NEE0TkFVbHdxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMy8wMjhGOUVGRTJFODYxMUVEOUQyRURDNERDNEY5QUUwMi9lajVDYkpZbGU5 OGtQRHhqdDRBNE5BVWx3cWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPleaVlYmIkSIXTyFaF6d/K6gRBlD+iyGMj4ruV2xLIt29kiIYHBEs GYxmGma0rl+WChLAjnfJ+o75L9p6gk0N4J4HaT2k+gv2qgoSTh1CtRPIdqGvNOgo ws7loMlNBbximT5iKCDR4McoF2Xew1HvUVOjljSu8nbqsA6+hAZ4BzvNmrd0kqk5 UBDveIZFY5isvB4yFHgON3BiNUwwiEaRip0VZLs6nUScoGz+pjTGVq5gvMIo5v0Z cwYMBFr9X5mpSnoQAsGIipODb7rXincoy1S296zRTpex0DJ7sryXBj/g0YMMggu2 FdB0BU8ZU88LHRVoyIaInvQ7EhWwJH2Z -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:51 2025 by rpki-client