$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft File: eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft (raw, json) Hash identifier: r/ELmwc5nrztcIe6zRcEVdh95QdylzH5ayuB1JVAoVU= Subject key identifier: C1:54:B9:65:D3:2F:D8:99:9B:B6:6A:21:43:D1:5A:5F:46:8E:57:E7 Authority key identifier: 78:11:27:0E:78:E5:2F:81:EC:6F:0E:96:D9:96:C7:90:93:C1:24:32 Certificate issuer: /CN=A917ACF1/serialNumber=7811270E78E52F81EC6F0E96D996C79093C12432 Certificate serial: 0373 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft Manifest number: 0373 Signing time: Fri 11 Apr 2025 00:52:17 +0000 Manifest this update: Fri 11 Apr 2025 00:52:16 +0000 Manifest next update: Fri 18 Apr 2025 00:52:16 +0000 Files and hashes: 1: eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.crl (hash: kGjOLU0i1Occ1f/MLh+VNcmbrMkJtJyv3gQ2E3++3uY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.crl rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 00:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 883 (0x373) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ACF1, serialNumber=7811270E78E52F81EC6F0E96D996C79093C12432 Validity Not Before: Apr 11 00:52:16 2025 GMT Not After : Apr 18 00:52:16 2025 GMT Subject: CN=67f867c1-e7a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7e:f9:44:ee:01:4f:91:0b:5b:3d:ed:da:d1: 8a:0f:4b:cf:de:8e:51:70:97:6e:64:5f:16:fb:61: 2e:a5:41:13:57:6f:8e:49:ce:e0:6d:be:dc:78:a4: 91:f4:0b:db:cf:cd:ce:fe:cb:52:9e:7f:dd:8b:e7: e7:95:87:ff:00:ec:6e:4f:d8:91:7f:30:eb:51:de: a0:c1:aa:fa:78:de:e1:f9:1d:8e:25:a4:1d:42:91: 89:0f:1e:98:bf:fd:a4:fa:84:0a:d0:38:d5:2f:5d: 8e:32:7c:92:98:6c:10:76:b4:1a:85:26:b1:ca:bc: a3:9a:23:f3:f1:e1:a0:b7:f8:0b:0c:3b:dd:33:76: 7e:04:57:a1:d1:76:ff:12:f6:b0:d0:cf:6c:93:5f: 55:3b:9f:5b:f2:0d:20:14:5d:06:38:e4:e3:4f:5a: f0:4a:2e:72:e0:52:e5:a3:bc:43:a9:17:43:ab:0f: fe:6a:ef:d8:2f:32:ee:19:94:13:5b:d4:77:cb:91: 1c:d9:73:7a:65:2d:29:9e:78:52:36:25:57:c2:e5: ff:18:01:d8:6f:c8:af:e4:7e:83:7e:f5:ff:5c:22: 7d:b0:06:9a:db:4a:71:bb:eb:1d:b0:c9:2d:38:08: bb:ec:a8:ec:8c:fc:39:02:9b:ca:ff:d5:7d:d7:37: 03:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:54:B9:65:D3:2F:D8:99:9B:B6:6A:21:43:D1:5A:5F:46:8E:57:E7 X509v3 Authority Key Identifier: keyid:78:11:27:0E:78:E5:2F:81:EC:6F:0E:96:D9:96:C7:90:93:C1:24:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e1:d1:05:a8:a3:0d:5d:b3:8d:fd:27:75:cd:9c:12:cd:98:72: ee:d1:b9:b0:bf:ec:3c:f8:4e:72:23:33:5b:0a:5d:0d:96:8a: f8:8c:35:7e:5f:be:29:1f:d7:04:c4:30:0c:9a:d7:3e:a5:ec: 41:aa:ff:29:88:a1:8c:e0:8d:f9:0d:0a:cd:34:90:58:f5:5e: e3:eb:b7:dc:04:64:93:81:98:2f:0d:7b:aa:99:c7:de:07:c4: 26:9b:4d:95:60:15:3b:4b:6d:88:93:07:1f:49:14:47:8a:68: a1:59:1e:67:10:7d:e5:36:f5:2a:f4:a1:ae:80:69:6c:c3:25: db:5b:3f:f6:5b:b8:a9:e3:60:63:2a:a7:ad:2a:79:96:68:3d: ac:7f:22:81:ac:fd:8d:96:81:69:4d:12:d9:ce:fc:47:55:bb: d7:2d:7a:7a:0d:fc:40:f0:c7:1d:02:a9:a1:a3:02:13:ac:24: 28:73:78:87:dc:95:cd:84:79:1b:fd:a1:f5:af:83:d5:5c:56: c8:58:11:73:6e:97:6c:a8:4f:32:d6:8d:d1:cc:ba:c6:6f:4e: 45:51:76:e5:02:71:3b:be:78:15:5c:ac:22:8e:34:77:e5:e4: 6b:7a:13:b1:7a:32:0a:51:8b:a7:3d:ff:d9:d2:39:48:08:21: 25:1d:0c:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDRjExMTAvBgNVBAUTKDc4MTEyNzBFNzhFNTJGODFFQzZGMEU5NkQ5OTZDNzkw OTNDMTI0MzIwHhcNMjUwNDExMDA1MjE2WhcNMjUwNDE4MDA1MjE2WjAYMRYwFAYD VQQDEw02N2Y4NjdjMS1lN2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApX75RO4BT5ELWz3t2tGKD0vP3o5RcJduZF8W+2EupUETV2+OSc7gbb7ceKSR 9Avbz83O/stSnn/di+fnlYf/AOxuT9iRfzDrUd6gwar6eN7h+R2OJaQdQpGJDx6Y v/2k+oQK0DjVL12OMnySmGwQdrQahSaxyryjmiPz8eGgt/gLDDvdM3Z+BFeh0Xb/ Evaw0M9sk19VO59b8g0gFF0GOOTjT1rwSi5y4FLlo7xDqRdDqw/+au/YLzLuGZQT W9R3y5Ec2XN6ZS0pnnhSNiVXwuX/GAHYb8iv5H6DfvX/XCJ9sAaa20pxu+sdsMkt OAi77KjsjPw5ApvK/9V91zcDBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFUuWXT L9iZm7ZqIUPRWl9GjlfnMB8GA1UdIwQYMBaAFHgRJw545S+B7G8OltmWx5CTwSQy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUNGMS85MDlCQzAyOEEw MzkxMUVDOEExRjFDMjNDNEY5QUUwMi9lQkVuRG5qbEw0SHNidzZXMlpiSGtKUEJK REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VCRW5EbmpsTDRIc2J3NlcyWmJIa0pQQkpESS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUNGMS85MDlCQzAyOEEwMzkxMUVDOEExRjFDMjNDNEY5QUUwMi9lQkVuRG5qbEw0 SHNidzZXMlpiSGtKUEJKREkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDh0QWoow1ds439J3XNnBLNmHLu0bmwv+w8+E5yIzNbCl0Nlor4jDV+ X74pH9cExDAMmtc+pexBqv8piKGM4I35DQrNNJBY9V7j67fcBGSTgZgvDXuqmcfe B8Qmm02VYBU7S22IkwcfSRRHimihWR5nEH3lNvUq9KGugGlswyXbWz/2W7ip42Bj KqetKnmWaD2sfyKBrP2NloFpTRLZzvxHVbvXLXp6DfxA8McdAqmhowITrCQoc3iH 3JXNhHkb/aH1r4PVXFbIWBFzbpdsqE8y1o3RzLrGb05FUXblAnE7vngVXKwijjR3 5eRrehOxejIKUYunPf/Z0jlICCElHQy0 -----END CERTIFICATE-----Generated at Sat Apr 12 17:47:57 2025 by rpki-client