$ rpki-client -vvf rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft File: ezpr3tL3tMBYRWjAZKuANDKHI6A.mft (raw, json) Hash identifier: A0ccrPRUxWGVSG0uC8C4QegMHluQ9+Qd+W1bfs2+QL4= Subject key identifier: 5D:C1:53:76:C0:78:83:1C:EA:8C:9B:F6:A3:08:D2:2D:AF:6B:73:30 Authority key identifier: 7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0 Certificate issuer: /CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0 Certificate serial: 0184 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft Manifest number: 017B Signing time: Sat 31 May 2025 03:27:12 +0000 Manifest this update: Sat 31 May 2025 03:27:12 +0000 Manifest next update: Sat 07 Jun 2025 03:27:12 +0000 Files and hashes: 1: ezpr3tL3tMBYRWjAZKuANDKHI6A.crl (hash: 6P1I+lsncY0ujVza2pCslSkwBu6mZvCCuvyi2i0J9V0=) 2: 0CB9AF5C200E11EF91F18D75C4F9AE02.roa (hash: xBjv+vXxnqip6awmZ0nrqpewsCYSOweE2hm3wh5fJ/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116190, serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0 Validity Not Before: May 31 03:27:12 2025 GMT Not After : Jun 7 03:27:12 2025 GMT Subject: CN=683a7710-efb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:d1:c7:af:ba:a3:d5:9a:0e:e7:3b:dd:23:39: 5c:b0:93:de:77:f7:cd:8c:98:e1:0d:ac:17:40:71: e9:eb:19:cd:26:ad:8c:ac:90:18:40:ac:d6:03:58: a6:75:d2:d0:bf:5a:9b:ba:87:47:23:7b:0d:e1:73: 01:c3:32:2e:78:36:c8:1d:ec:02:f5:27:05:9a:78: 90:77:59:4e:0f:ff:01:72:40:c8:ac:48:9e:a3:20: 12:58:1c:90:5e:b7:0a:82:e8:78:02:5c:40:1a:0a: 3d:8a:b8:63:ee:65:11:f1:c3:25:75:c4:80:d1:03: 38:4a:d2:4a:28:19:ce:8c:cd:a9:eb:c0:4a:85:ed: a8:93:da:d3:60:9a:e2:be:13:97:ca:dc:25:52:11: e0:75:3d:1e:db:ce:66:28:8e:7f:fa:67:1e:8a:1c: da:59:1c:3d:9b:a9:a5:52:b9:97:e4:cf:04:5c:e9: fe:3a:db:10:e8:5c:e1:6c:1b:07:d1:db:14:52:b0: 27:be:0a:43:62:08:9c:ff:f2:10:f1:e0:01:24:0f: ad:6d:14:cb:df:42:34:cb:85:bd:e5:ae:a0:2f:68: c2:90:c3:a7:b8:5c:93:a4:03:b3:a5:0a:4a:1b:c4: 01:7c:cc:94:f3:0e:64:bf:ed:2e:28:f5:ad:25:eb: 7c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C1:53:76:C0:78:83:1C:EA:8C:9B:F6:A3:08:D2:2D:AF:6B:73:30 X509v3 Authority Key Identifier: keyid:7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:c1:cd:57:2f:28:ae:b3:50:ee:e9:e7:c0:de:36:12:e9:86: 24:1f:38:fe:ed:f8:85:63:d6:83:7b:a2:5a:41:91:e3:38:53: f4:d2:27:d0:e8:e0:17:02:5f:c7:d8:37:62:58:46:b1:16:1e: 3f:3c:34:e6:27:fa:0c:51:a0:63:47:32:1b:02:57:f6:b6:68: 30:55:7c:ad:c5:00:26:80:d7:3b:78:3a:75:c9:e6:70:93:0a: ee:ae:e6:69:d3:86:95:1b:c4:08:80:4b:31:13:1a:5f:26:d1: 23:40:b5:a9:f5:36:ef:c8:8d:29:df:60:c8:03:94:d0:d0:71: db:48:14:bc:bd:2b:aa:2c:04:74:be:fd:3b:8b:5c:02:f4:06: f2:60:af:f2:c4:8f:c8:1c:7e:cf:75:13:61:b4:22:e3:07:8d: fb:80:4c:4f:f0:af:d3:0a:47:d6:d1:7b:49:29:7a:ab:5c:77: 3e:04:89:98:e1:d8:dd:8e:2b:a2:55:13:aa:0c:92:d9:7d:6c: ed:ef:14:06:8f:c8:be:24:74:f1:8e:ba:05:15:c5:6b:87:2e: 6f:3e:02:ed:d5:4a:61:ca:04:13:34:3a:1b:e2:f8:a4:b7:22: ab:97:a0:d3:2c:ec:a5:bc:59:9c:dd:9e:94:bc:cf:d6:3b:83: b0:88:01:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYxOTAxMTAvBgNVBAUTKDdCM0E2QkRFRDJGN0I0QzA1ODQ1NjhDMDY0QUI4MDM0 MzI4NzIzQTAwHhcNMjUwNTMxMDMyNzEyWhcNMjUwNjA3MDMyNzEyWjAYMRYwFAYD VQQDEw02ODNhNzcxMC1lZmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA89HHr7qj1ZoO5zvdIzlcsJPed/fNjJjhDawXQHHp6xnNJq2MrJAYQKzWA1im ddLQv1qbuodHI3sN4XMBwzIueDbIHewC9ScFmniQd1lOD/8BckDIrEieoyASWByQ XrcKguh4AlxAGgo9irhj7mUR8cMldcSA0QM4StJKKBnOjM2p68BKhe2ok9rTYJri vhOXytwlUhHgdT0e285mKI5/+mceihzaWRw9m6mlUrmX5M8EXOn+OtsQ6FzhbBsH 0dsUUrAnvgpDYgic//IQ8eABJA+tbRTL30I0y4W95a6gL2jCkMOnuFyTpAOzpQpK G8QBfMyU8w5kv+0uKPWtJet8ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3BU3bA eIMc6oyb9qMI0i2va3MwMB8GA1UdIwQYMBaAFHs6a97S97TAWEVowGSrgDQyhyOg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjE5MC8wQkIzOTY1MjA0 OTYxMUVFQkQzMUVEMzBDNEY5QUUwMi9lenByM3RMM3RNQllSV2pBWkt1QU5ES0hJ NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V6cHIzdEwzdE1CWVJXakFaS3VBTkRLSEk2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjE5MC8wQkIzOTY1MjA0OTYxMUVFQkQzMUVEMzBDNEY5QUUwMi9lenByM3RMM3RN QllSV2pBWkt1QU5ES0hJNkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDwc1XLyius1Du6efA3jYS6YYkHzj+7fiFY9aDe6JaQZHjOFP00ifQ 6OAXAl/H2DdiWEaxFh4/PDTmJ/oMUaBjRzIbAlf2tmgwVXytxQAmgNc7eDp1yeZw kwruruZp04aVG8QIgEsxExpfJtEjQLWp9TbvyI0p32DIA5TQ0HHbSBS8vSuqLAR0 vv07i1wC9AbyYK/yxI/IHH7PdRNhtCLjB437gExP8K/TCkfW0XtJKXqrXHc+BImY 4djdjiuiVROqDJLZfWzt7xQGj8i+JHTxjroFFcVrhy5vPgLt1UphygQTNDob4vik tyKrl6DTLOylvFmc3Z6UvM/WO4OwiAGF -----END CERTIFICATE-----Generated at Sat May 31 17:56:19 2025 by rpki-client