$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft File: EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft (raw, json) Hash identifier: nRyxgWXlx0MCWWVmXMoP0B7ToSmWmrLnKMjBFPx0aQo= Subject key identifier: D4:27:C7:CB:E4:F4:B2:15:73:14:DD:C7:73:0A:AD:71:22:0A:92:FD Authority key identifier: 11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 Certificate issuer: /CN=A91FD4A1/serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544 Certificate serial: 01BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft Manifest number: 01BB Signing time: Thu 03 Apr 2025 02:23:33 +0000 Manifest this update: Thu 03 Apr 2025 02:23:33 +0000 Manifest next update: Thu 10 Apr 2025 02:23:33 +0000 Files and hashes: 1: EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl (hash: CmrFGupwMQEZvWZtlvaVx+efhwFi0VVaH2SybwkNA/s=) 2: 16E990CA6B0411ED849E0957C4F9AE02.roa (hash: Uh7B24TrfbcaCXXos+UCRzkq1ccagOkOy3EbQYTwo0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:23:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4A1 Validity Not Before: Apr 3 02:23:33 2025 GMT Not After : Apr 10 02:23:33 2025 GMT Subject: CN=67edf125-dc53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:df:27:5b:58:26:42:b5:94:17:cf:54:fd:db: af:e9:ea:1e:42:7f:47:94:f7:cf:48:07:04:21:0a: 16:a1:18:07:8a:9e:14:f1:ad:e1:2b:ec:99:db:a4: d8:cd:42:5f:e3:0a:23:12:32:67:32:57:d9:c7:30: 33:6a:6b:7b:6a:1a:24:37:6d:c1:3b:79:12:75:83: a7:fd:af:3d:11:15:07:60:89:be:4e:b7:68:f6:d5: b6:50:3f:dc:a2:e6:8d:85:fa:21:a6:ce:de:04:64: 0a:32:d0:c9:15:59:4e:a2:4a:cb:29:b2:94:47:32: a1:72:b7:17:82:99:98:0b:ec:af:b1:0c:12:60:a8: 00:56:7c:b6:68:87:d2:ce:f4:58:24:86:b7:c2:4c: 00:b8:09:7d:90:85:b7:a6:13:30:47:41:b7:2d:db: 72:fb:c2:d7:9d:a7:2b:7c:87:11:3b:ed:71:e3:3f: 70:3c:5d:3e:f2:98:28:db:8b:ec:c0:bb:84:5a:1d: 06:53:48:f6:fd:c4:05:98:5d:c0:97:8a:7b:49:41: e7:b4:46:d7:7f:d9:4a:ba:1f:7e:a4:88:f7:61:5f: 38:ec:51:73:b7:9d:33:03:0b:0c:03:59:04:d1:46: 0b:ad:28:16:21:1a:8f:28:71:55:41:19:8b:96:2a: 86:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:27:C7:CB:E4:F4:B2:15:73:14:DD:C7:73:0A:AD:71:22:0A:92:FD X509v3 Authority Key Identifier: keyid:11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:53:ff:52:31:6c:a9:f5:1a:53:99:5c:c7:a9:76:d2:63:4b: a3:3d:f1:98:b1:47:df:b8:e3:7d:a3:61:e8:54:5c:22:ab:14: f0:38:b0:74:1b:1b:aa:cb:82:0e:08:71:c7:54:12:6f:8d:37: 2e:2e:80:90:80:74:be:86:4d:33:bf:c8:e8:9a:0a:f7:70:21: fa:f9:c6:25:60:71:d3:12:b5:f3:38:7e:fd:03:3a:83:56:0f: 99:f9:61:ff:db:20:aa:51:bf:cb:a8:9a:77:7a:15:8d:82:0e: be:69:a0:a4:1e:d8:06:4d:99:36:dd:91:e8:03:b0:29:cc:f1: c0:d9:7a:8e:12:eb:a3:df:4d:20:2f:a0:36:ce:9b:cf:68:d0: 23:6a:d2:1b:f6:93:20:f7:0f:d1:16:d5:93:a2:b8:51:45:ce: 0a:d1:a4:b1:56:8f:45:86:d8:78:8b:33:17:bf:44:4e:ac:6a: 2a:f7:5c:dd:db:6a:fe:72:f0:e7:97:e3:68:cc:7f:65:c8:64: f3:72:4f:a4:20:94:bc:77:35:96:9c:4c:8d:cc:6f:42:54:48: db:7e:25:60:73:cc:a3:b5:7e:2e:3c:c8:9c:33:3a:e0:9c:c2: ff:bb:8e:41:aa:1f:dd:ce:dc:e3:c6:e4:6d:26:a2:cf:73:c4: 3f:fc:1b:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0QTExMTAvBgNVBAUTKDExOTZDRERGREEzRUJEQzVBREE4RkZDNUJDQjM4NDkx MjE0N0Q1NDQwHhcNMjUwNDAzMDIyMzMzWhcNMjUwNDEwMDIyMzMzWjAYMRYwFAYD VQQDEw02N2VkZjEyNS1kYzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArN8nW1gmQrWUF89U/duv6eoeQn9HlPfPSAcEIQoWoRgHip4U8a3hK+yZ26TY zUJf4wojEjJnMlfZxzAzamt7ahokN23BO3kSdYOn/a89ERUHYIm+Trdo9tW2UD/c ouaNhfohps7eBGQKMtDJFVlOokrLKbKURzKhcrcXgpmYC+yvsQwSYKgAVny2aIfS zvRYJIa3wkwAuAl9kIW3phMwR0G3Ldty+8LXnacrfIcRO+1x4z9wPF0+8pgo24vs wLuEWh0GU0j2/cQFmF3Al4p7SUHntEbXf9lKuh9+pIj3YV847FFzt50zAwsMA1kE 0UYLrSgWIRqPKHFVQRmLliqGpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQnx8vk 9LIVcxTdx3MKrXEiCpL9MB8GA1UdIwQYMBaAFBGWzd/aPr3Fraj/xbyzhJEhR9VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDRBMS82MkI0MjNCQTZC MDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZjV3RxUF9GdkxPRWtTRkgx VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VaYk4zOW8tdmNXdHFQX0Z2TE9Fa1NGSDFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDRBMS82MkI0MjNCQTZCMDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZj V3RxUF9GdkxPRWtTRkgxVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpU/9SMWyp9RpTmVzHqXbSY0ujPfGYsUffuON9o2HoVFwiqxTwOLB0 Gxuqy4IOCHHHVBJvjTcuLoCQgHS+hk0zv8jomgr3cCH6+cYlYHHTErXzOH79AzqD Vg+Z+WH/2yCqUb/LqJp3ehWNgg6+aaCkHtgGTZk23ZHoA7ApzPHA2XqOEuuj300g L6A2zpvPaNAjatIb9pMg9w/RFtWTorhRRc4K0aSxVo9Fhth4izMXv0ROrGoq91zd 22r+cvDnl+NozH9lyGTzck+kIJS8dzWWnEyNzG9CVEjbfiVgc8yjtX4uPMicMzrg nML/u45Bqh/dztzjxuRtJqLPc8Q//BsY -----END CERTIFICATE-----Generated at Fri Apr 4 21:49:16 2025 by rpki-client