$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft File: EBEGw3VRsRR1-6qyOQEVt6zygC0.mft (raw, json) Hash identifier: mFmqBUsXz1LZCrCAl9EXLwVYeyz3tvMFA/2xhMyvm9w= Subject key identifier: A2:FB:E3:B2:65:F2:B3:76:11:E9:17:1D:02:44:C5:B5:D4:BA:4B:EF Authority key identifier: 10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D Certificate issuer: /CN=A91BF286/serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft Manifest number: 0121 Signing time: Thu 17 Apr 2025 03:38:49 +0000 Manifest this update: Thu 17 Apr 2025 03:38:48 +0000 Manifest next update: Thu 24 Apr 2025 03:38:48 +0000 Files and hashes: 1: EBEGw3VRsRR1-6qyOQEVt6zygC0.crl (hash: soyB9LCGBL3YkEX3K0BbXT9ySrMjmNd/bmuEUilGg68=) 2: 44BA2B8C671011EEB41FB227C4F9AE02.roa (hash: 8KY8F5aAbZQBF/Qe5iecqKDmzqJcSSXnzASxQlPbo4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 03:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF286, serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D Validity Not Before: Apr 17 03:38:48 2025 GMT Not After : Apr 24 03:38:48 2025 GMT Subject: CN=680077c8-7739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:51:2c:9a:12:44:18:b2:37:61:1f:51:98:4d: 5c:a8:30:c9:14:2b:76:f9:24:91:a1:6c:2a:19:e0: 72:ec:0a:63:a0:0a:37:56:f2:ab:24:b8:ff:20:00: cf:37:5d:37:0f:f3:7c:f9:11:29:27:f3:e1:93:66: 44:e1:10:41:41:b9:7b:77:d1:3f:53:54:58:30:d7: 05:50:32:a4:93:ad:e9:aa:35:50:de:11:8f:75:ec: 7c:55:32:18:69:cd:db:43:f4:ea:94:4a:ad:77:0a: e1:95:69:8f:62:b6:71:d9:56:60:b8:a3:2f:14:15: 5a:2a:76:8f:30:cc:19:19:04:0f:64:0f:83:47:52: 81:76:4c:37:d2:26:72:cd:89:1c:7e:01:b7:dd:bd: d0:1e:63:e4:f7:2d:78:77:3f:02:76:19:8e:7c:07: f6:d6:95:d2:3a:a3:76:48:ce:69:c5:0f:9a:24:d5: aa:3c:18:9e:93:2e:4a:d4:69:2f:cb:45:0f:77:79: 33:a6:18:87:cf:b1:76:b9:da:70:42:34:9d:ad:35: 18:f5:dd:04:a9:9c:da:3b:42:47:a0:06:c4:ff:32: bd:3b:fd:74:47:0e:06:05:01:f1:37:d6:29:4a:d7: 5e:3a:ee:19:67:28:9e:83:d4:97:4f:07:80:1c:01: e5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FB:E3:B2:65:F2:B3:76:11:E9:17:1D:02:44:C5:B5:D4:BA:4B:EF X509v3 Authority Key Identifier: keyid:10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:ba:8a:94:29:13:d9:51:69:0f:29:42:2d:8a:c3:20:84:db: 31:b1:37:48:5d:c9:de:89:e1:47:e5:8c:b8:89:4e:0f:b3:a6: 9a:f6:69:77:35:e8:1f:7e:60:81:21:ee:60:5a:dd:f6:76:a2: 03:04:50:70:de:ba:f7:69:c7:ed:4b:e1:b6:97:06:38:bb:98: 01:74:4a:db:92:39:46:a4:43:ee:c3:17:6b:0e:27:cb:86:77: 9c:bb:62:d5:d8:05:a8:14:f3:51:a6:63:13:77:72:6c:f7:8f: 07:d3:93:3f:7d:ed:83:a0:af:a0:62:46:19:34:af:19:42:59: 7d:dd:1f:f3:f5:1f:a8:14:b4:7c:3a:85:a2:c0:4f:c9:55:23: 4d:30:f3:76:df:dc:64:5e:c2:de:5e:aa:51:d9:32:e2:da:f7: 80:fd:78:28:5f:2c:24:7e:94:c3:fd:47:79:f1:9f:8c:e1:44: 07:8e:34:1f:75:bf:ec:21:3e:a4:32:f4:4d:9a:3a:a7:b1:93: 52:07:ea:23:b8:93:71:c7:25:0c:a1:67:02:92:8a:de:23:be: 36:7c:ee:31:96:ab:87:df:f0:62:3b:dc:a5:0c:28:3d:e8:69: b5:0d:fe:56:62:cb:f1:7c:fd:88:48:28:f5:eb:dc:09:8c:2a: a7:fd:03:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyODYxMTAvBgNVBAUTKDEwMTEwNkMzNzU1MUIxMTQ3NUZCQUFCMjM5MDExNUI3 QUNGMjgwMkQwHhcNMjUwNDE3MDMzODQ4WhcNMjUwNDI0MDMzODQ4WjAYMRYwFAYD VQQDEw02ODAwNzdjOC03NzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA31EsmhJEGLI3YR9RmE1cqDDJFCt2+SSRoWwqGeBy7ApjoAo3VvKrJLj/IADP N103D/N8+REpJ/Phk2ZE4RBBQbl7d9E/U1RYMNcFUDKkk63pqjVQ3hGPdex8VTIY ac3bQ/TqlEqtdwrhlWmPYrZx2VZguKMvFBVaKnaPMMwZGQQPZA+DR1KBdkw30iZy zYkcfgG33b3QHmPk9y14dz8CdhmOfAf21pXSOqN2SM5pxQ+aJNWqPBieky5K1Gkv y0UPd3kzphiHz7F2udpwQjSdrTUY9d0EqZzaO0JHoAbE/zK9O/10Rw4GBQHxN9Yp StdeOu4ZZyieg9SXTweAHAHlOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKL747Jl 8rN2EekXHQJExbXUukvvMB8GA1UdIwQYMBaAFBARBsN1UbEUdfuqsjkBFbes8oAt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI4Ni8xQ0UyQjBDNDY2 OTQxMUVFQTA0NTI5NTFDNEY5QUUwMi9FQkVHdzNWUnNSUjEtNnF5T1FFVnQ2enln QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VCRUd3M1ZSc1JSMS02cXlPUUVWdDZ6eWdDMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjI4Ni8xQ0UyQjBDNDY2OTQxMUVFQTA0NTI5NTFDNEY5QUUwMi9FQkVHdzNWUnNS UjEtNnF5T1FFVnQ2enlnQzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsuoqUKRPZUWkPKUItisMghNsxsTdIXcneieFH5Yy4iU4Ps6aa9ml3 NegffmCBIe5gWt32dqIDBFBw3rr3acftS+G2lwY4u5gBdErbkjlGpEPuwxdrDifL hnecu2LV2AWoFPNRpmMTd3Js948H05M/fe2DoK+gYkYZNK8ZQll93R/z9R+oFLR8 OoWiwE/JVSNNMPN239xkXsLeXqpR2TLi2veA/XgoXywkfpTD/Ud58Z+M4UQHjjQf db/sIT6kMvRNmjqnsZNSB+ojuJNxxyUMoWcCkoreI742fO4xlquH3/BiO9ylDCg9 6Gm1Df5WYsvxfP2ISCj169wJjCqn/QOS -----END CERTIFICATE-----Generated at Sat Apr 19 02:07:21 2025 by rpki-client