$ rpki-client -vvf rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft File: et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft (raw, json) Hash identifier: /G+LK8fszPF5H7hfmfNgg9x7GV5T4dSjjU9FIVpcTjA= Subject key identifier: 4E:F1:75:65:C9:2B:15:4F:D1:EA:38:ED:02:19:18:AC:E1:D6:60:8D Authority key identifier: 7A:DE:40:93:5A:00:7E:0B:5B:E1:76:14:05:06:4E:C9:43:AF:E0:C1 Certificate issuer: /CN=A918E1CC/serialNumber=7ADE40935A007E0B5BE1761405064EC943AFE0C1 Certificate serial: 06A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft Manifest number: 0699 Signing time: Fri 04 Apr 2025 22:22:15 +0000 Manifest this update: Fri 04 Apr 2025 22:22:14 +0000 Manifest next update: Fri 11 Apr 2025 22:22:14 +0000 Files and hashes: 1: et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl (hash: keIgpC2W5mKSJId0WzN8KUGdaIujgLk8yDpbF9+TNQE=) 2: 210E6234639E11EB81185C31C4F9AE02.roa (hash: lpW0NjdmrOMG9GEGghvuTfgytfrpOcK9mbpw3h0K59c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1696 (0x6a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E1CC Validity Not Before: Apr 4 22:22:14 2025 GMT Not After : Apr 11 22:22:14 2025 GMT Subject: CN=67f05b96-275b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f6:b8:ef:85:32:20:25:41:37:a0:fd:7a:a4: b0:87:8d:8d:66:1b:ba:54:6e:dc:af:7d:67:c4:5e: 72:b2:6c:b0:3c:df:dc:e1:88:5f:00:4f:62:4f:a6: 2f:39:10:93:a3:1f:ee:2d:eb:35:ad:93:db:f7:28: 03:7a:d8:5c:50:9a:48:2c:5b:08:a5:7f:e9:bd:cb: b6:2a:00:ac:c2:4b:62:a7:ca:65:48:f5:22:af:5b: 5a:63:5b:24:ad:ca:a7:7c:6b:58:2b:d5:5e:33:93: c7:e7:89:27:28:96:53:89:64:55:c2:95:bc:24:3c: dc:f7:a5:8f:83:8e:a3:5c:d2:43:22:54:72:71:29: 1b:b1:81:81:24:fd:64:4a:df:2a:c4:75:bc:d1:3a: 0d:4b:7a:42:dd:90:cd:d9:99:e9:1c:b7:b5:83:9c: 5d:83:d8:c4:0e:0e:ff:f1:2b:ca:c3:7a:90:54:ee: 51:81:bc:38:57:3d:af:7f:9e:9d:d4:fd:34:ef:b7: b1:c5:79:0d:f0:83:f2:3f:19:c8:d0:80:22:ca:4f: 5f:1d:da:02:54:b9:b8:c8:6c:22:58:6a:bf:90:76: 77:9d:20:d4:7d:12:44:00:a8:9e:42:53:15:d4:74: f3:87:b5:2d:1a:54:bb:6b:6b:f2:a2:97:38:09:b9: a4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F1:75:65:C9:2B:15:4F:D1:EA:38:ED:02:19:18:AC:E1:D6:60:8D X509v3 Authority Key Identifier: keyid:7A:DE:40:93:5A:00:7E:0B:5B:E1:76:14:05:06:4E:C9:43:AF:E0:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:4e:63:99:30:c8:37:8e:e4:77:68:f1:88:0e:38:36:ef:1e: fb:47:c3:b1:96:d6:54:63:b5:28:a5:6e:09:89:67:c7:19:c4: a0:08:08:ff:08:13:20:4a:72:e1:ae:c2:22:26:6a:30:d3:9c: 09:6e:2a:50:70:ca:a9:21:2e:ef:3a:42:44:46:fd:cf:89:30: 7c:f7:53:8e:dc:1f:96:98:51:49:d4:55:78:c0:f9:be:e9:34: 63:46:87:5f:2e:2d:d1:44:6b:98:3f:ab:81:59:ff:70:70:8c: 13:a4:b8:fa:77:da:31:4c:f4:54:ec:a7:4b:e4:71:d2:30:e6: a4:cc:61:6c:ad:00:80:23:d4:4f:bf:9d:ea:6b:8e:45:06:72: 33:b3:7c:43:cf:f4:c2:32:3a:61:54:db:51:69:42:f4:29:a0: 38:0c:1b:88:e5:52:cb:81:ed:f1:d9:69:2b:7d:48:78:90:7f: ae:e1:8f:1f:0f:f2:f4:d3:1d:17:08:f8:1a:92:ae:e6:99:fe: 58:91:04:a5:19:1b:6f:1a:12:6e:7a:f1:9d:eb:2d:89:f3:24: 9e:96:2e:8e:7f:82:8e:86:1e:08:ba:31:ad:fb:05:1e:a8:80: 77:1a:48:e5:fd:d6:d1:a5:c9:5a:1b:98:fa:96:bb:4e:17:74: 6b:d3:79:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUxQ0MxMTAvBgNVBAUTKDdBREU0MDkzNUEwMDdFMEI1QkUxNzYxNDA1MDY0RUM5 NDNBRkUwQzEwHhcNMjUwNDA0MjIyMjE0WhcNMjUwNDExMjIyMjE0WjAYMRYwFAYD VQQDEw02N2YwNWI5Ni0yNzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/a474UyICVBN6D9eqSwh42NZhu6VG7cr31nxF5ysmywPN/c4YhfAE9iT6Yv ORCTox/uLes1rZPb9ygDethcUJpILFsIpX/pvcu2KgCswktip8plSPUir1taY1sk rcqnfGtYK9VeM5PH54knKJZTiWRVwpW8JDzc96WPg46jXNJDIlRycSkbsYGBJP1k St8qxHW80ToNS3pC3ZDN2ZnpHLe1g5xdg9jEDg7/8SvKw3qQVO5Rgbw4Vz2vf56d 1P0077exxXkN8IPyPxnI0IAiyk9fHdoCVLm4yGwiWGq/kHZ3nSDUfRJEAKieQlMV 1HTzh7UtGlS7a2vyopc4CbmkgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7xdWXJ KxVP0eo47QIZGKzh1mCNMB8GA1UdIwQYMBaAFHreQJNaAH4LW+F2FAUGTslDr+DB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTFDQy81RkVGREE4RTYz OUMxMUVCOTBCODMwMTNDNEY5QUUwMi9ldDVBazFvQWZndGI0WFlVQlFaT3lVT3Y0 TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V0NUFrMW9BZmd0YjRYWVVCUVpPeVVPdjRNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTFDQy81RkVGREE4RTYzOUMxMUVCOTBCODMwMTNDNEY5QUUwMi9ldDVBazFvQWZn dGI0WFlVQlFaT3lVT3Y0TUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxTmOZMMg3juR3aPGIDjg27x77R8OxltZUY7UopW4JiWfHGcSgCAj/ CBMgSnLhrsIiJmow05wJbipQcMqpIS7vOkJERv3PiTB891OO3B+WmFFJ1FV4wPm+ 6TRjRodfLi3RRGuYP6uBWf9wcIwTpLj6d9oxTPRU7KdL5HHSMOakzGFsrQCAI9RP v53qa45FBnIzs3xDz/TCMjphVNtRaUL0KaA4DBuI5VLLge3x2WkrfUh4kH+u4Y8f D/L00x0XCPgakq7mmf5YkQSlGRtvGhJuevGd6y2J8ySeli6Of4KOhh4IujGt+wUe qIB3Gkjl/dbRpclaG5j6lrtOF3Rr03lL -----END CERTIFICATE-----Generated at Sat Apr 5 13:44:59 2025 by rpki-client