$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft File: EHo5wcwE8nzHJmPb97rm2SqVA4A.mft (raw, json) Hash identifier: dNL7tJIbFESLBYr8K3+jHUAOicM21AAu85JbPErRcFY= Subject key identifier: 32:E7:6C:D7:36:A2:68:51:37:E8:26:82:82:A8:58:B1:23:7B:CB:01 Authority key identifier: 10:7A:39:C1:CC:04:F2:7C:C7:26:63:DB:F7:BA:E6:D9:2A:95:03:80 Certificate issuer: /CN=A91AFBDA/serialNumber=107A39C1CC04F27CC72663DBF7BAE6D92A950380 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft Manifest number: CE Signing time: Mon 21 Apr 2025 04:33:46 +0000 Manifest this update: Mon 21 Apr 2025 04:33:45 +0000 Manifest next update: Mon 28 Apr 2025 04:33:45 +0000 Files and hashes: 1: EHo5wcwE8nzHJmPb97rm2SqVA4A.crl (hash: d93+umC/wmHeXsf104XkNTFoEjRz8iHY/dYhVlAlB80=) 2: 62246EC4E67E11EEAD030482C4F9AE02.roa (hash: 6duqYPlVAYgFYXyMYfQRt0UOQZ9fwNVTaTSO3qscAF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.crl rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 04:33:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFBDA, serialNumber=107A39C1CC04F27CC72663DBF7BAE6D92A950380 Validity Not Before: Apr 21 04:33:45 2025 GMT Not After : Apr 28 04:33:45 2025 GMT Subject: CN=6805caa9-52d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ee:9d:27:ce:60:eb:b6:dd:63:df:1e:0e:5b: 36:c2:0d:d5:f7:62:5a:3d:5a:66:41:e7:13:fa:5a: f2:ad:a8:9f:0b:a3:5d:a9:a1:9a:93:4c:be:c4:6b: 91:ad:d0:31:e3:8f:65:e1:b7:22:f2:88:f9:26:fe: 8e:e8:6b:02:42:74:3b:43:5c:09:9d:9c:41:b3:05: a5:75:6b:39:cd:26:24:bf:d5:4b:a4:f4:1f:d5:b6: 80:5c:19:f4:77:c3:2f:32:7f:34:ee:c3:69:06:b2: 92:13:89:9d:b2:e3:bc:9b:0c:bd:16:78:2e:05:69: 46:26:91:83:c9:87:d9:2e:73:36:d4:f9:e9:3c:3f: 0d:4c:d8:7e:f9:38:85:82:ac:41:02:0b:06:0b:ad: 53:16:c4:2f:59:a3:dc:53:0b:72:38:8d:71:04:2e: 61:74:c5:d0:40:6b:e5:0e:33:87:89:b0:43:7d:d1: 0d:37:cd:34:1e:c2:59:11:b9:b0:ee:3e:08:4e:56: 17:e1:d0:c5:1f:73:b0:6d:58:ae:42:e0:92:00:51: 17:2a:1e:a9:06:47:12:bf:f6:5b:5c:80:a5:c7:eb: 18:9e:26:54:ab:f2:c7:c8:97:51:99:89:6b:ba:a6: 22:89:f6:c2:fb:46:ee:7d:28:8e:aa:8d:cb:ed:9a: eb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E7:6C:D7:36:A2:68:51:37:E8:26:82:82:A8:58:B1:23:7B:CB:01 X509v3 Authority Key Identifier: keyid:10:7A:39:C1:CC:04:F2:7C:C7:26:63:DB:F7:BA:E6:D9:2A:95:03:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:cb:13:63:52:5d:0c:2d:5c:38:75:55:85:73:eb:ff:05:5a: 98:75:10:af:59:bc:64:3e:89:04:3c:3d:d9:04:e5:07:20:1b: c4:97:0d:67:03:6d:fd:27:9c:3d:5c:39:b9:8e:ac:c2:04:b1: b6:82:c0:7c:b4:cd:36:5a:f2:1a:2a:e7:40:04:e1:6e:ca:b9: be:02:5f:a6:c2:39:5c:60:aa:eb:75:21:0a:c3:0b:d9:24:2d: 01:94:4b:7a:58:aa:5e:df:14:ef:d0:8d:d9:ad:b7:7b:60:4c: d1:c8:10:78:63:d1:d2:9d:ea:fc:10:19:d9:d1:ea:b0:09:57: e6:74:d7:28:de:14:07:50:4d:b0:f9:61:97:20:32:7c:62:68: 3b:67:f4:eb:39:8f:6c:4a:cb:4a:44:13:47:c8:33:9c:34:87: a6:ef:99:23:ae:e6:fe:87:bb:c1:70:f4:a6:e6:31:87:61:0d: 1c:3b:cc:3f:af:c2:28:cc:21:27:8f:d6:81:aa:d7:79:46:da: 78:2e:4b:39:18:9b:38:d0:68:5d:3e:f7:06:0b:ea:0b:32:3b: 1c:74:ce:75:55:3c:f1:e7:83:6f:06:42:db:f6:7a:a6:50:7e: 3e:87:2f:02:f5:87:61:2a:74:a2:a6:04:9c:75:a3:ae:e7:6e: 42:24:0f:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZCREExMTAvBgNVBAUTKDEwN0EzOUMxQ0MwNEYyN0NDNzI2NjNEQkY3QkFFNkQ5 MkE5NTAzODAwHhcNMjUwNDIxMDQzMzQ1WhcNMjUwNDI4MDQzMzQ1WjAYMRYwFAYD VQQDEw02ODA1Y2FhOS01MmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxu6dJ85g67bdY98eDls2wg3V92JaPVpmQecT+lryraifC6NdqaGak0y+xGuR rdAx449l4bci8oj5Jv6O6GsCQnQ7Q1wJnZxBswWldWs5zSYkv9VLpPQf1baAXBn0 d8MvMn807sNpBrKSE4mdsuO8mwy9FnguBWlGJpGDyYfZLnM21PnpPD8NTNh++TiF gqxBAgsGC61TFsQvWaPcUwtyOI1xBC5hdMXQQGvlDjOHibBDfdENN800HsJZEbmw 7j4ITlYX4dDFH3OwbViuQuCSAFEXKh6pBkcSv/ZbXIClx+sYniZUq/LHyJdRmYlr uqYiifbC+0bufSiOqo3L7ZrrsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLnbNc2 omhRN+gmgoKoWLEje8sBMB8GA1UdIwQYMBaAFBB6OcHMBPJ8xyZj2/e65tkqlQOA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkJEQS82QUQzNzRBQUU2 NUQxMUVFQjYxMjNFNDFDNEY5QUUwMi9FSG81d2N3RThuekhKbVBiOTdybTJTcVZB NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VIbzV3Y3dFOG56SEptUGI5N3JtMlNxVkE0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkJEQS82QUQzNzRBQUU2NUQxMUVFQjYxMjNFNDFDNEY5QUUwMi9FSG81d2N3RThu ekhKbVBiOTdybTJTcVZBNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjyxNjUl0MLVw4dVWFc+v/BVqYdRCvWbxkPokEPD3ZBOUHIBvElw1n A239J5w9XDm5jqzCBLG2gsB8tM02WvIaKudABOFuyrm+Al+mwjlcYKrrdSEKwwvZ JC0BlEt6WKpe3xTv0I3Zrbd7YEzRyBB4Y9HSner8EBnZ0eqwCVfmdNco3hQHUE2w +WGXIDJ8Ymg7Z/TrOY9sSstKRBNHyDOcNIem75kjrub+h7vBcPSm5jGHYQ0cO8w/ r8IozCEnj9aBqtd5Rtp4Lks5GJs40GhdPvcGC+oLMjscdM51VTzx54NvBkLb9nqm UH4+hy8C9YdhKnSipgScdaOu525CJA/5 -----END CERTIFICATE-----Generated at Mon Apr 21 10:48:23 2025 by rpki-client