$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft File: EhCVgwI-GF3korKUIxWZ1jZAvJo.mft (raw, json) Hash identifier: 51vqdHrVh+m9g0MZ2HIvglbSZXw0OpGUgv9E/Frg6w0= Subject key identifier: 00:48:F0:65:21:4D:47:BF:7E:BE:60:42:BE:27:2F:25:20:5B:9E:99 Authority key identifier: 12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A Certificate issuer: /CN=A918B5FE/serialNumber=12109583023E185DE4A2B294231599D63640BC9A Certificate serial: 069A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft Manifest number: 0687 Signing time: Sun 06 Apr 2025 21:54:52 +0000 Manifest this update: Sun 06 Apr 2025 21:54:52 +0000 Manifest next update: Sun 13 Apr 2025 21:54:52 +0000 Files and hashes: 1: EhCVgwI-GF3korKUIxWZ1jZAvJo.crl (hash: wkOyfVGU9mVEgEqD8jNN1bJXGKFfVLZtLtAx4eTqTP4=) 2: E744DAB06C0D11EB89BF4725C4F9AE02.roa (hash: GwGIG8w2Paja8QeJTC/4mPTw5xBTF4eu77tf9+sFGXE=) 3: E649E89E6C0D11EB89BF4725C4F9AE02.roa (hash: mUNLSSwDIjdC6PSsJdAOAQiuBxAVwe81C3tB9ntlwCU=) 4: 4652D2C2DF3C11EBAC0C7536C4F9AE02.roa (hash: WSWSmKF2Dr04+H2IY6+uuwpQnhp2M2KysyXEj72OLxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 18:52:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1690 (0x69a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B5FE Validity Not Before: Apr 6 21:54:52 2025 GMT Not After : Apr 13 21:54:52 2025 GMT Subject: CN=67f2f82c-4137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f5:42:b6:40:d0:0d:1a:5f:37:ab:0d:8d:ef: 2f:fc:6e:b7:65:6a:3f:f2:28:c9:91:97:77:8b:45: db:13:00:0d:b7:c3:ae:4c:91:bd:23:5f:8f:df:5c: 4d:61:49:c6:15:0f:ec:8a:f2:58:49:64:30:ff:1a: 5a:59:8c:4d:bb:ef:a2:7d:85:5f:c0:ef:f2:b3:42: 4c:b6:fe:bf:9e:c0:f0:c1:23:b3:42:5a:ba:a1:63: a2:ac:7b:8e:3c:00:eb:3d:f6:b0:87:43:de:82:85: 57:31:57:20:3b:8d:75:5b:10:3d:25:b2:42:c4:c6: 38:0f:4a:8d:cb:6a:22:1c:12:e1:ec:3b:0a:b7:3e: c2:4f:0b:e3:6d:45:0e:3b:91:a4:0e:87:a3:d5:31: 28:68:d6:d8:ba:43:4f:41:66:9b:f0:8d:e1:ba:df: de:e9:12:da:a5:2f:3a:32:3d:b0:51:f5:65:f0:bc: 99:22:58:7a:2a:8e:24:b5:8a:67:bf:ac:88:1a:69: 13:1c:96:85:0b:ce:09:8f:34:54:13:c6:57:78:fc: 82:8f:95:67:78:0f:a8:1a:75:c8:8a:29:b4:0e:f0: 8d:9b:13:b5:6a:59:02:ed:5d:06:ff:fa:db:23:91: 3a:48:5a:ab:02:71:15:f5:4a:46:b4:1c:de:1b:4c: dd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:48:F0:65:21:4D:47:BF:7E:BE:60:42:BE:27:2F:25:20:5B:9E:99 X509v3 Authority Key Identifier: keyid:12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:3f:86:ea:c6:54:d3:e2:96:9e:eb:e1:d5:c3:ae:ad:30:6e: 41:9e:fd:8b:c4:d2:75:ff:d9:31:87:b1:1e:c7:f3:1f:65:25: 9c:70:1d:c1:db:b8:3f:ac:44:39:39:2b:30:d4:d6:d8:c2:49: a0:8b:41:d3:42:bd:eb:57:b9:72:02:26:86:96:2a:20:23:ec: d8:4b:52:e3:69:1b:c4:3e:06:d4:87:ac:42:75:9c:8f:4f:88: 2f:91:ca:68:49:56:6a:8b:06:e3:45:c1:83:32:36:86:eb:7f: e6:2f:a8:10:10:94:0f:76:7a:1f:9d:4d:b7:01:07:d7:77:30: ff:3b:22:93:13:b6:25:3b:a0:83:6f:83:f6:77:54:f6:a1:16: 61:93:0c:c8:c9:94:e1:73:32:33:ee:13:16:89:b9:f6:ea:b1: 0d:45:fa:dd:0d:06:d3:96:3b:f4:c9:04:9e:7c:92:6f:69:97: b4:1c:bf:b7:35:f1:01:7b:f7:67:f1:c3:79:68:fb:80:05:11: ec:53:5e:f1:c4:37:dd:94:19:1b:88:18:73:bc:c4:c6:67:90: a6:02:e3:38:91:cc:45:26:95:3b:1e:f0:bf:bf:c9:66:31:e2: f3:c4:5f:60:a7:4d:27:44:c5:08:26:22:40:40:2c:be:27:c1: 90:b4:f7:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI1RkUxMTAvBgNVBAUTKDEyMTA5NTgzMDIzRTE4NURFNEEyQjI5NDIzMTU5OUQ2 MzY0MEJDOUEwHhcNMjUwNDA2MjE1NDUyWhcNMjUwNDEzMjE1NDUyWjAYMRYwFAYD VQQDEw02N2YyZjgyYy00MTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/VCtkDQDRpfN6sNje8v/G63ZWo/8ijJkZd3i0XbEwANt8OuTJG9I1+P31xN YUnGFQ/sivJYSWQw/xpaWYxNu++ifYVfwO/ys0JMtv6/nsDwwSOzQlq6oWOirHuO PADrPfawh0PegoVXMVcgO411WxA9JbJCxMY4D0qNy2oiHBLh7DsKtz7CTwvjbUUO O5GkDoej1TEoaNbYukNPQWab8I3hut/e6RLapS86Mj2wUfVl8LyZIlh6Ko4ktYpn v6yIGmkTHJaFC84JjzRUE8ZXePyCj5VneA+oGnXIiim0DvCNmxO1alkC7V0G//rb I5E6SFqrAnEV9UpGtBzeG0zdtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABI8GUh TUe/fr5gQr4nLyUgW56ZMB8GA1UdIwQYMBaAFBIQlYMCPhhd5KKylCMVmdY2QLya MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjVGRS8zQ0VFREY5MDZB OUUxMUVCQjY3NjIzMThDNEY5QUUwMi9FaENWZ3dJLUdGM2tvcktVSXhXWjFqWkF2 Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VoQ1Znd0ktR0Yza29yS1VJeFdaMWpaQXZKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjVGRS8zQ0VFREY5MDZBOUUxMUVCQjY3NjIzMThDNEY5QUUwMi9FaENWZ3dJLUdG M2tvcktVSXhXWjFqWkF2Sm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArP4bqxlTT4pae6+HVw66tMG5Bnv2LxNJ1/9kxh7Eex/MfZSWccB3B 27g/rEQ5OSsw1NbYwkmgi0HTQr3rV7lyAiaGliogI+zYS1LjaRvEPgbUh6xCdZyP T4gvkcpoSVZqiwbjRcGDMjaG63/mL6gQEJQPdnofnU23AQfXdzD/OyKTE7YlO6CD b4P2d1T2oRZhkwzIyZThczIz7hMWibn26rENRfrdDQbTljv0yQSefJJvaZe0HL+3 NfEBe/dn8cN5aPuABRHsU17xxDfdlBkbiBhzvMTGZ5CmAuM4kcxFJpU7HvC/v8lm MeLzxF9gp00nRMUIJiJAQCy+J8GQtPdg -----END CERTIFICATE-----Generated at Mon Apr 7 01:25:49 2025 by rpki-client