$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft File: ech9xZWwwn0jMpvJkoSiPIv9oOc.mft (raw, json) Hash identifier: CYpSLZ35I0kRIUpYLYnRCjbk5fd2pnYxb1+0d5svXsA= Subject key identifier: 53:51:AE:C6:FF:62:BA:7D:BB:1D:6A:14:81:97:C3:24:D8:DC:71:AE Authority key identifier: 79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7 Certificate issuer: /CN=A91B2D4F/serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7 Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft Manifest number: 013C Signing time: Thu 03 Apr 2025 03:38:40 +0000 Manifest this update: Thu 03 Apr 2025 03:38:40 +0000 Manifest next update: Thu 10 Apr 2025 03:38:40 +0000 Files and hashes: 1: ech9xZWwwn0jMpvJkoSiPIv9oOc.crl (hash: Zi8h1duGYYfBbS08UHh/qlPvZ8+7x+VZxcyM6TrjkKg=) 2: 416EB4022F6111EE8C156634C4F9AE02.roa (hash: UzoADIDRcmbkR0v1b40VKhU4NXIbJvMsYpFVM0H3D88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D4F Validity Not Before: Apr 3 03:38:40 2025 GMT Not After : Apr 10 03:38:40 2025 GMT Subject: CN=67ee02c0-24d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:64:10:65:85:dd:0b:7b:57:59:d1:77:86:96: b8:01:b6:73:c6:1a:5c:7b:56:c7:79:83:66:9e:24: 7b:a4:ff:16:28:83:78:0e:65:d8:5e:1e:10:3c:ef: 6c:32:fe:40:71:98:56:39:dc:68:88:6c:56:42:3e: 12:00:39:44:30:71:50:f6:e9:72:d0:cf:6f:4b:50: ed:a6:ff:53:3f:95:10:da:38:f3:64:22:fd:d7:8c: db:dd:8a:95:62:f3:21:c6:7f:8d:64:48:28:2e:35: 3a:ef:94:ac:ba:88:cc:7e:be:03:5c:4a:0f:f9:c3: 94:a6:87:57:36:38:ef:7a:9b:ef:74:e4:c1:79:45: c9:13:3c:7e:7d:72:aa:f5:d6:ad:e8:a8:3b:a1:32: cc:3c:7e:e1:0b:5a:10:1f:30:5f:9b:12:a8:5e:5b: 44:ed:3c:84:b2:76:65:7b:1a:69:3c:b1:47:71:ae: 03:be:1f:66:ba:93:f5:13:c7:51:98:ab:b7:44:65: 93:60:06:3d:19:70:29:31:64:a1:80:7b:c7:54:ae: ba:81:e6:6c:3d:b8:52:d0:42:32:8e:f6:72:8e:06: a3:78:af:b9:1c:69:03:92:f2:46:6d:93:3b:a6:2c: e7:19:8b:5b:0b:bb:9d:63:0f:37:16:aa:30:4f:97: 57:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:51:AE:C6:FF:62:BA:7D:BB:1D:6A:14:81:97:C3:24:D8:DC:71:AE X509v3 Authority Key Identifier: keyid:79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:76:9f:9b:20:fb:7a:d5:c9:f9:82:cb:01:e3:8d:36:7d:bc: 54:c4:96:bb:83:77:7a:39:ea:bf:0b:69:ed:79:fe:f7:d9:1c: ff:fd:ef:a6:7b:34:1e:d8:7c:40:f6:7e:2d:d0:a6:45:95:4d: ce:48:ca:9f:24:e5:24:83:49:b2:7c:e6:b4:10:97:2f:7c:a3: db:9f:27:28:14:81:31:01:a7:65:72:4f:05:f9:17:04:1f:43: 4f:fe:4a:02:f6:a5:8c:51:7b:d2:6c:b4:91:ae:91:d3:28:83: 85:b0:f2:75:10:c7:48:96:96:e6:0c:d0:e7:8a:76:b8:bc:c6: 4b:b7:e4:2f:46:55:fe:12:17:e5:36:fb:04:b6:db:6a:f5:3d: 54:f9:8a:4f:fc:9a:f8:87:47:d0:3a:40:c6:2f:01:b9:da:95: 00:7f:e0:41:8c:94:9d:e0:a2:22:0e:e1:a8:73:74:ca:91:95: 8d:12:77:fe:34:b5:96:89:32:84:48:ed:a8:52:58:59:02:ff: 08:2f:c4:88:06:85:47:b7:9a:a0:22:b4:46:77:14:b9:de:a3: da:c3:4e:23:00:70:e4:0b:6b:1b:da:69:ef:0b:1c:27:3a:fb: 99:08:a2:4b:46:cd:0c:ed:9b:23:a2:78:2e:59:5e:4f:50:f4: a0:a2:59:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJENEYxMTAvBgNVBAUTKDc5Qzg3REM1OTVCMEMyN0QyMzMyOUJDOTkyODRBMjND OEJGREEwRTcwHhcNMjUwNDAzMDMzODQwWhcNMjUwNDEwMDMzODQwWjAYMRYwFAYD VQQDEw02N2VlMDJjMC0yNGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnGQQZYXdC3tXWdF3hpa4AbZzxhpce1bHeYNmniR7pP8WKIN4DmXYXh4QPO9s Mv5AcZhWOdxoiGxWQj4SADlEMHFQ9uly0M9vS1Dtpv9TP5UQ2jjzZCL914zb3YqV YvMhxn+NZEgoLjU675SsuojMfr4DXEoP+cOUpodXNjjvepvvdOTBeUXJEzx+fXKq 9dat6Kg7oTLMPH7hC1oQHzBfmxKoXltE7TyEsnZlexppPLFHca4Dvh9mupP1E8dR mKu3RGWTYAY9GXApMWShgHvHVK66geZsPbhS0EIyjvZyjgajeK+5HGkDkvJGbZM7 piznGYtbC7udYw83FqowT5dXWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNRrsb/ Yrp9ux1qFIGXwyTY3HGuMB8GA1UdIwQYMBaAFHnIfcWVsMJ9IzKbyZKEojyL/aDn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQ0Ri9FRjg3NTUxODJG NjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3duMGpNcHZKa29TaVBJdjlv T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VjaDl4Wld3d24wak1wdkprb1NpUEl2OW9PYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQ0Ri9FRjg3NTUxODJGNjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3du MGpNcHZKa29TaVBJdjlvT2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIdp+bIPt61cn5gssB4402fbxUxJa7g3d6Oeq/C2ntef732Rz//e+m ezQe2HxA9n4t0KZFlU3OSMqfJOUkg0myfOa0EJcvfKPbnycoFIExAadlck8F+RcE H0NP/koC9qWMUXvSbLSRrpHTKIOFsPJ1EMdIlpbmDNDnina4vMZLt+QvRlX+Ehfl NvsEtttq9T1U+YpP/Jr4h0fQOkDGLwG52pUAf+BBjJSd4KIiDuGoc3TKkZWNEnf+ NLWWiTKESO2oUlhZAv8IL8SIBoVHt5qgIrRGdxS53qPaw04jAHDkC2sb2mnvCxwn OvuZCKJLRs0M7ZsjonguWV5PUPSgolmo -----END CERTIFICATE-----Generated at Fri Apr 4 21:58:06 2025 by rpki-client