$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft File: ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft (raw, json) Hash identifier: 6IImCv2EVU8GDjWxtX6fGYOIqYVR6xx1O9O4vLij6Oo= Subject key identifier: 9F:80:F7:28:C8:81:F3:9E:17:79:58:6D:88:45:03:F9:67:B8:96:9E Authority key identifier: 7A:9F:F8:64:C5:03:18:06:71:30:58:8E:6D:BA:92:8B:A1:C0:3A:5D Certificate issuer: /CN=A91E782F/serialNumber=7A9FF864C50318067130588E6DBA928BA1C03A5D Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft Manifest number: 86 Signing time: Sat 29 Mar 2025 05:53:06 +0000 Manifest this update: Sat 29 Mar 2025 05:53:05 +0000 Manifest next update: Sat 05 Apr 2025 05:53:05 +0000 Files and hashes: 1: ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl (hash: NBY/kSU8k6NbL+ROpd3p70LlZCp9IzvsU7Wd2IMCzJY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E782F Validity Not Before: Mar 29 05:53:05 2025 GMT Not After : Apr 5 05:53:05 2025 GMT Subject: CN=67e78ac1-e09f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5c:c7:76:3b:df:4f:6b:2c:eb:08:ef:8e:ae: bb:14:89:d8:46:3d:6f:51:e8:13:56:4e:dd:ee:b6: c2:71:26:ad:45:1d:c9:e0:d5:5b:cd:2e:74:eb:76: d7:18:55:ca:ed:82:0d:2a:c6:db:ea:14:6b:77:56: 44:a2:9f:65:23:7c:4c:75:d2:5a:43:22:7c:e4:6e: 68:55:13:23:06:b5:7c:db:e3:85:c0:0e:1a:6d:98: a0:6d:5a:c5:d2:b7:38:c2:9b:53:a1:ae:9b:c7:ea: 5c:2e:bd:df:08:94:06:e3:7e:8e:e2:d2:9c:77:04: 13:9c:ba:9a:3e:d3:15:b5:d7:e5:05:9a:df:05:a8: 6f:81:7b:68:47:36:6d:7e:f7:64:ab:5a:e2:2b:ec: 6a:a6:fb:ab:38:93:85:e0:fe:85:e2:92:40:a5:3f: 9a:83:ff:53:e5:a1:ea:10:f8:14:27:06:90:fb:4f: 0a:92:87:e4:af:cd:1a:2e:58:9c:4e:67:3f:f0:00: 57:d5:96:f2:ba:bc:4e:18:c9:fe:ef:b5:c1:4d:10: c9:47:a0:81:2e:e1:4b:4b:27:5e:9d:70:c5:db:65: ae:53:62:05:e8:4f:e1:f3:d6:65:44:f2:d4:06:a8: 74:2a:53:42:31:1c:88:95:15:8f:26:87:a5:32:f5: 26:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:80:F7:28:C8:81:F3:9E:17:79:58:6D:88:45:03:F9:67:B8:96:9E X509v3 Authority Key Identifier: keyid:7A:9F:F8:64:C5:03:18:06:71:30:58:8E:6D:BA:92:8B:A1:C0:3A:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:22:57:79:9b:52:42:99:48:72:cd:4b:0b:e7:78:9e:40:29: 12:c1:84:ef:44:40:36:17:38:8b:74:4e:0f:14:9d:2c:17:50: 0b:ae:bf:5d:85:92:2a:2b:29:3f:49:d5:da:e9:fb:30:e2:05: 31:2f:f7:ac:db:d5:96:e7:3e:3d:c2:78:2c:94:47:c4:53:85: 79:01:39:a6:3b:40:cf:58:97:a4:43:23:71:7b:be:6a:d8:c8: 84:38:59:ed:af:56:19:d4:31:5e:54:a7:1e:96:e1:cb:5f:1c: e6:56:bc:2d:81:6c:47:18:02:a0:bb:4c:f4:2d:af:48:54:99: db:85:4c:cb:9c:2a:bd:7d:6c:53:eb:7a:61:13:a6:e1:8b:bb: 51:f6:ab:7d:82:49:3c:93:18:5b:9f:0f:84:84:93:12:96:29: 98:b2:36:92:8d:8e:f5:36:44:f9:29:fa:36:ec:ce:f5:a8:6d: 47:9c:d2:9e:98:6e:f6:15:06:f7:06:6e:4c:ee:ec:05:35:ea: d0:d7:a5:13:40:02:7d:0d:2c:55:87:39:dc:c6:70:d4:d9:4e: f7:82:41:21:33:b0:9d:45:f9:2d:c8:0f:90:36:c9:bd:ec:fb: 90:75:a3:ed:e6:cc:8a:31:c0:97:72:ac:d8:ac:aa:32:19:23: e4:97:78:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc4MkYxMTAvBgNVBAUTKDdBOUZGODY0QzUwMzE4MDY3MTMwNTg4RTZEQkE5MjhC QTFDMDNBNUQwHhcNMjUwMzI5MDU1MzA1WhcNMjUwNDA1MDU1MzA1WjAYMRYwFAYD VQQDEw02N2U3OGFjMS1lMDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulzHdjvfT2ss6wjvjq67FInYRj1vUegTVk7d7rbCcSatRR3J4NVbzS5063bX GFXK7YINKsbb6hRrd1ZEop9lI3xMddJaQyJ85G5oVRMjBrV82+OFwA4abZigbVrF 0rc4wptToa6bx+pcLr3fCJQG436O4tKcdwQTnLqaPtMVtdflBZrfBahvgXtoRzZt fvdkq1riK+xqpvurOJOF4P6F4pJApT+ag/9T5aHqEPgUJwaQ+08Kkofkr80aLlic Tmc/8ABX1ZbyurxOGMn+77XBTRDJR6CBLuFLSydenXDF22WuU2IF6E/h89ZlRPLU Bqh0KlNCMRyIlRWPJoelMvUmTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+A9yjI gfOeF3lYbYhFA/lnuJaeMB8GA1UdIwQYMBaAFHqf+GTFAxgGcTBYjm26kouhwDpd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzgyRi83NjRDQTJEMDQw NzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi9lcF80Wk1VREdBWnhNRmlPYmJxU2k2SEFP bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwXzRaTVVER0FaeE1GaU9iYnFTaTZIQU9sMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzgyRi83NjRDQTJEMDQwNzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi9lcF80Wk1VREdB WnhNRmlPYmJxU2k2SEFPbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtIld5m1JCmUhyzUsL53ieQCkSwYTvREA2FziLdE4PFJ0sF1ALrr9d hZIqKyk/SdXa6fsw4gUxL/es29WW5z49wngslEfEU4V5ATmmO0DPWJekQyNxe75q 2MiEOFntr1YZ1DFeVKceluHLXxzmVrwtgWxHGAKgu0z0La9IVJnbhUzLnCq9fWxT 63phE6bhi7tR9qt9gkk8kxhbnw+EhJMSlimYsjaSjY71NkT5Kfo27M71qG1HnNKe mG72FQb3Bm5M7uwFNerQ16UTQAJ9DSxVhzncxnDU2U73gkEhM7CdRfktyA+QNsm9 7PuQdaPt5syKMcCXcqzYrKoyGSPkl3im -----END CERTIFICATE-----Generated at Fri Apr 4 18:17:21 2025 by rpki-client