$ rpki-client -vvf rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft File: EA50kJn6U4BRdLz4MMPrIcUwMac.mft (raw, json) Hash identifier: JmVkiO2BjNtofXl4xOOlrMnzK4kIB3wLwUFKFdg8fMU= Subject key identifier: 9C:B3:15:F9:E7:10:19:4A:F6:9B:BA:5E:2A:D0:E2:1F:BC:2E:45:F1 Authority key identifier: 10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7 Certificate issuer: /CN=A916A027/serialNumber=100E749099FA53805174BCF830C3EB21C53031A7 Certificate serial: 042C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft Manifest number: 0428 Signing time: Sat 29 Mar 2025 00:36:28 +0000 Manifest this update: Sat 29 Mar 2025 00:36:27 +0000 Manifest next update: Sat 05 Apr 2025 00:36:27 +0000 Files and hashes: 1: EA50kJn6U4BRdLz4MMPrIcUwMac.crl (hash: m+2PfyVRcbuursvrOLL28laGIBOWURVXappsgLnILc8=) 2: 385B6DAE577411ECBF021B66C4F9AE02.roa (hash: XjunMNzYncJwuOqeAscMtpgQiJ/lvJGQsFB1GF7BxVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1068 (0x42c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A027 Validity Not Before: Mar 29 00:36:27 2025 GMT Not After : Apr 5 00:36:27 2025 GMT Subject: CN=67e7408c-fbcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:87:53:35:16:2b:3f:4d:1b:18:37:d5:e6:a4: 70:aa:10:1d:47:2c:fc:3c:56:70:30:32:3a:7d:f5: 7b:d5:cf:7e:54:b2:7e:e8:c1:12:a6:af:4e:1f:18: cb:b5:82:e9:e9:f9:7f:7b:d5:3d:bb:25:57:dd:3a: 08:27:0c:0b:06:ba:40:1b:66:9a:ae:29:c7:36:77: 0d:82:ed:44:21:dc:64:75:5d:19:90:e7:d9:d8:b4: fa:55:57:2d:6b:c9:09:dc:38:c5:6f:9e:29:e4:dc: f8:45:2d:f8:d1:ed:d7:aa:08:3e:68:dc:ce:f6:dd: e9:ed:8b:91:d9:3f:8c:8e:2e:4a:19:9d:53:8f:29: 99:81:35:bf:49:98:7c:61:60:d5:03:da:f1:fe:2f: 96:f9:f4:c9:c3:aa:f8:2a:59:1a:8b:91:de:4e:ef: 71:73:ce:f6:2a:a0:01:10:a9:81:81:22:08:f9:e1: bd:86:fe:d6:ed:81:3c:a9:6b:a3:d3:f0:44:a2:d4: 33:ed:62:53:c0:47:f1:bf:9e:cb:a1:7c:00:52:db: 0e:f0:60:a1:b1:f2:91:4e:dd:fd:71:e5:ca:41:35: 8d:6d:28:f0:03:13:87:56:f3:27:20:a4:83:f9:85: 48:59:5e:6f:a5:f7:94:06:c2:d0:b1:cd:22:6a:9a: 5a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B3:15:F9:E7:10:19:4A:F6:9B:BA:5E:2A:D0:E2:1F:BC:2E:45:F1 X509v3 Authority Key Identifier: keyid:10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:bb:af:01:c5:6c:65:d9:4b:ec:e2:0a:b3:c5:42:4c:b9:98: 75:f7:79:06:73:5d:21:15:ed:c8:77:de:6d:a3:0f:75:79:47: 86:1e:b8:a5:fd:a6:b3:d1:5f:f0:ee:3e:be:2c:80:12:fc:b7: 98:70:19:b0:fe:ff:d2:b7:45:a3:79:bc:e3:19:64:dd:b3:ae: 06:ed:a2:25:ad:91:87:30:fc:76:7c:19:eb:37:97:04:29:0d: 49:74:c5:2f:2c:80:7f:fb:5b:f8:f4:b4:11:c4:5d:89:f3:06: 04:1a:09:60:b9:c2:4a:50:30:55:ea:f5:6a:86:fb:0c:cc:63: 77:94:98:b3:98:80:99:5e:a5:d7:ab:85:1d:14:55:67:c7:32: e7:48:84:23:04:2a:f2:f0:f7:61:45:b2:71:94:b2:87:a5:4f: c0:c4:db:eb:9f:57:8e:67:7c:ce:6a:c6:27:e2:b2:35:0f:57: 52:bd:1f:3e:df:7a:07:42:67:dc:f8:be:6a:15:21:cd:51:46: a2:e0:f5:5b:2c:f4:ef:f2:ea:76:9d:cb:90:de:a9:22:41:bc: fb:87:f3:bd:ea:ca:74:84:b0:50:6a:d1:ca:8c:cb:b6:64:38: 74:23:01:54:77:07:76:bd:c4:a9:53:37:ba:2b:e9:89:b4:6c: 02:3f:8a:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwMjcxMTAvBgNVBAUTKDEwMEU3NDkwOTlGQTUzODA1MTc0QkNGODMwQzNFQjIx QzUzMDMxQTcwHhcNMjUwMzI5MDAzNjI3WhcNMjUwNDA1MDAzNjI3WjAYMRYwFAYD VQQDEw02N2U3NDA4Yy1mYmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApYdTNRYrP00bGDfV5qRwqhAdRyz8PFZwMDI6ffV71c9+VLJ+6MESpq9OHxjL tYLp6fl/e9U9uyVX3ToIJwwLBrpAG2aarinHNncNgu1EIdxkdV0ZkOfZ2LT6VVct a8kJ3DjFb54p5Nz4RS340e3Xqgg+aNzO9t3p7YuR2T+Mji5KGZ1TjymZgTW/SZh8 YWDVA9rx/i+W+fTJw6r4Klkai5HeTu9xc872KqABEKmBgSII+eG9hv7W7YE8qWuj 0/BEotQz7WJTwEfxv57LoXwAUtsO8GChsfKRTt39ceXKQTWNbSjwAxOHVvMnIKSD +YVIWV5vpfeUBsLQsc0iappaaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyzFfnn EBlK9pu6XirQ4h+8LkXxMB8GA1UdIwQYMBaAFBAOdJCZ+lOAUXS8+DDD6yHFMDGn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTAyNy8wNDIwN0RGODU3 NzAxMUVDQjk1NzdBNUJDNEY5QUUwMi9FQTUwa0puNlU0QlJkTHo0TU1QckljVXdN YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBNTBrSm42VTRCUmRMejRNTVBySWNVd01hYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTAyNy8wNDIwN0RGODU3NzAxMUVDQjk1NzdBNUJDNEY5QUUwMi9FQTUwa0puNlU0 QlJkTHo0TU1QckljVXdNYWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWu68BxWxl2Uvs4gqzxUJMuZh193kGc10hFe3Id95tow91eUeGHril /aaz0V/w7j6+LIAS/LeYcBmw/v/St0WjebzjGWTds64G7aIlrZGHMPx2fBnrN5cE KQ1JdMUvLIB/+1v49LQRxF2J8wYEGglgucJKUDBV6vVqhvsMzGN3lJizmICZXqXX q4UdFFVnxzLnSIQjBCry8PdhRbJxlLKHpU/AxNvrn1eOZ3zOasYn4rI1D1dSvR8+ 33oHQmfc+L5qFSHNUUai4PVbLPTv8up2ncuQ3qkiQbz7h/O96sp0hLBQatHKjMu2 ZDh0IwFUdwd2vcSpUze6K+mJtGwCP4rF -----END CERTIFICATE-----Generated at Fri Apr 4 18:34:02 2025 by rpki-client