$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft File: ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft (raw, json) Hash identifier: OZIiqbWz25EwMRH8v5uHiD3IfPaMhZCu+RUYNTH2jFA= Subject key identifier: D7:04:72:DD:6D:4E:21:01:C3:55:2E:E9:E2:C0:21:07:ED:EF:14:44 Authority key identifier: 7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60 Certificate issuer: /CN=A91A5DC1/serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160 Certificate serial: 06EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft Manifest number: 06EF Signing time: Mon 14 Apr 2025 20:34:09 +0000 Manifest this update: Mon 14 Apr 2025 20:34:09 +0000 Manifest next update: Mon 21 Apr 2025 20:34:09 +0000 Files and hashes: 1: ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl (hash: n4rtIx7hYbcqB8mPH3kpIR9o+/yEBsxtDTdcfEoIpJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 20:34:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1775 (0x6ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5DC1, serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160 Validity Not Before: Apr 14 20:34:09 2025 GMT Not After : Apr 21 20:34:09 2025 GMT Subject: CN=67fd7141-bb27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ca:db:d1:76:98:d2:9d:29:cc:33:79:99:18: 62:03:87:ea:5e:aa:0c:0d:84:c2:84:9e:ed:fb:25: e0:c4:6c:86:74:7c:2e:9f:23:6c:5c:7e:16:2c:46: 2a:0f:16:dc:8b:7e:cb:0c:3a:3b:93:6e:46:f2:36: c7:97:6b:4f:e5:37:3f:6f:2a:ea:42:49:16:0c:17: 5c:06:89:2c:c3:e0:19:0b:62:29:de:3b:99:ff:6f: 5f:d5:a6:95:5e:5e:df:20:78:f7:9d:1e:e7:82:e7: a1:c4:e9:c0:b8:66:78:c5:60:c7:81:c4:47:a4:73: 87:c2:39:84:02:d8:52:da:ab:5b:ba:a5:57:6f:2a: d9:91:fb:af:59:40:c9:60:18:a2:7c:1a:b9:43:03: b0:2a:81:fe:6c:d9:04:1c:37:2d:e8:98:f0:7e:d1: 29:42:ad:00:d8:c3:c3:aa:8e:5c:2a:bb:7e:72:3f: b7:2a:58:c2:24:23:82:ba:5b:86:84:ff:c3:58:68: ec:db:d2:14:75:be:3f:a8:88:52:f3:9c:ba:8b:f7: 1b:df:62:2e:3e:b5:a6:53:2a:1c:3c:a6:3b:c9:a1: cc:d0:5d:3c:30:cf:54:2d:a6:3e:db:54:d8:3d:07: 65:c6:6e:b8:5c:10:21:33:76:b7:be:1b:00:26:4c: 3f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:04:72:DD:6D:4E:21:01:C3:55:2E:E9:E2:C0:21:07:ED:EF:14:44 X509v3 Authority Key Identifier: keyid:7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:09:76:47:ac:c0:c2:3e:5c:77:4c:ce:ad:0d:4c:60:53:b8: fb:b9:58:77:4a:e3:4b:b6:4b:95:8c:91:52:cf:90:0a:fa:62: 6f:27:89:db:72:98:93:37:e9:19:96:ca:d2:e4:a3:f6:3c:48: 24:6a:c9:18:ec:db:ca:32:91:10:ae:82:1c:85:6e:98:d4:08: 8b:29:e3:00:8b:14:e8:6a:40:ba:15:7b:d0:23:6e:d9:fa:4b: f0:4a:d1:f8:40:97:0f:57:20:cf:d1:db:3c:dc:ef:b8:b2:05: ee:d4:be:e9:c2:bb:3b:84:ec:e0:f0:bd:51:f9:dd:c4:d5:d0: c0:fb:b3:85:bc:11:44:95:f7:4c:27:3e:01:6a:ae:d6:37:f1: 0a:20:21:76:53:f3:a3:63:c0:8d:27:8d:a1:62:d9:8e:3d:cd: 2c:9b:4b:dd:bd:8d:b6:a7:87:b3:76:db:75:97:3e:2a:cf:08: 56:7f:67:9e:bc:da:3b:2a:b9:f9:bb:ee:e8:a0:fd:b8:7a:30: 3a:e6:ae:c8:70:f5:05:ea:97:2b:70:45:bf:f6:99:72:13:c5: 64:a3:75:1f:4a:a2:82:60:19:57:ed:a6:49:e3:05:32:1a:ed: 9b:0b:0b:db:75:22:f7:7b:8a:22:f5:b3:29:fd:86:4e:45:df: ec:c4:1b:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVEQzExMTAvBgNVBAUTKDdBOURBNDYxRUJFQkQxNTMxNjQyMDczOUM4OUVDNEND RUU5OUMxNjAwHhcNMjUwNDE0MjAzNDA5WhcNMjUwNDIxMjAzNDA5WjAYMRYwFAYD VQQDEw02N2ZkNzE0MS1iYjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1srb0XaY0p0pzDN5mRhiA4fqXqoMDYTChJ7t+yXgxGyGdHwunyNsXH4WLEYq Dxbci37LDDo7k25G8jbHl2tP5Tc/byrqQkkWDBdcBoksw+AZC2Ip3juZ/29f1aaV Xl7fIHj3nR7nguehxOnAuGZ4xWDHgcRHpHOHwjmEAthS2qtbuqVXbyrZkfuvWUDJ YBiifBq5QwOwKoH+bNkEHDct6JjwftEpQq0A2MPDqo5cKrt+cj+3KljCJCOCuluG hP/DWGjs29IUdb4/qIhS85y6i/cb32IuPrWmUyocPKY7yaHM0F08MM9ULaY+21TY PQdlxm64XBAhM3a3vhsAJkw/yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNcEct1t TiEBw1Uu6eLAIQft7xREMB8GA1UdIwQYMBaAFHqdpGHr69FTFkIHOciexMzumcFg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNURDMS80MTNBODkyNDQ1 ODExMUVCOEUwRTc0MkNDNEY5QUUwMi9lcDJrWWV2cjBWTVdRZ2M1eUo3RXpPNlp3 V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwMmtZZXZyMFZNV1FnYzV5SjdFek82WndXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NURDMS80MTNBODkyNDQ1ODExMUVCOEUwRTc0MkNDNEY5QUUwMi9lcDJrWWV2cjBW TVdRZ2M1eUo3RXpPNlp3V0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyCXZHrMDCPlx3TM6tDUxgU7j7uVh3SuNLtkuVjJFSz5AK+mJvJ4nb cpiTN+kZlsrS5KP2PEgkaskY7NvKMpEQroIchW6Y1AiLKeMAixToakC6FXvQI27Z +kvwStH4QJcPVyDP0ds83O+4sgXu1L7pwrs7hOzg8L1R+d3E1dDA+7OFvBFElfdM Jz4Baq7WN/EKICF2U/OjY8CNJ42hYtmOPc0sm0vdvY22p4ezdtt1lz4qzwhWf2ee vNo7Krn5u+7ooP24ejA65q7IcPUF6pcrcEW/9plyE8Vko3UfSqKCYBlX7aZJ4wUy Gu2bCwvbdSL3e4oi9bMp/YZORd/sxBuM -----END CERTIFICATE-----Generated at Tue Apr 15 19:22:35 2025 by rpki-client