$ rpki-client -vvf rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft File: EW-SD4cwZnR6jO3a_-hLz72wNRo.mft (raw, json) Hash identifier: 4IFQZCOG7EFSAZkpe7k3a8fshBxrXN5MrMr1uMNzh3U= Subject key identifier: 2E:44:89:05:50:80:28:FC:CD:D1:A8:A0:6E:4E:15:6E:B3:78:54:1E Authority key identifier: 11:6F:92:0F:87:30:66:74:7A:8C:ED:DA:FF:E8:4B:CF:BD:B0:35:1A Certificate issuer: /CN=A9120CDE/serialNumber=116F920F873066747A8CEDDAFFE84BCFBDB0351A Certificate serial: 1197 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft Manifest number: 118B Signing time: Fri 30 May 2025 17:23:30 +0000 Manifest this update: Fri 30 May 2025 17:23:30 +0000 Manifest next update: Fri 06 Jun 2025 17:23:30 +0000 Files and hashes: 1: EW-SD4cwZnR6jO3a_-hLz72wNRo.crl (hash: tqCjZmRz05OyxrCObOezpptn/wIT9UFd706u5DdC5mw=) 2: D8D63660B9A811ECB7EE5A71C4F9AE02.roa (hash: DIX09IMqDwhYz9qe1Nv5iQBk3kT+S7TLOQSBMI/PtT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.crl rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4503 (0x1197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120CDE, serialNumber=116F920F873066747A8CEDDAFFE84BCFBDB0351A Validity Not Before: May 30 17:23:30 2025 GMT Not After : Jun 6 17:23:30 2025 GMT Subject: CN=6839e992-ab66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:5d:52:1e:0f:6a:16:15:58:42:30:56:2c:42: bd:ef:f9:c2:03:27:bc:e8:03:cb:32:a8:53:c2:6a: 00:c5:98:72:96:54:69:1c:b3:a5:0c:0e:ca:bc:35: b4:bd:f1:5d:11:e3:72:af:7a:e2:e1:1e:dd:74:4c: c4:8c:79:d4:7b:3d:b8:3d:f4:bc:b8:a1:f2:32:b6: e2:3d:7e:34:8f:40:cc:10:8f:29:19:04:44:fe:ca: b9:5f:68:a0:77:25:b1:07:90:8a:d6:35:85:fb:ad: e7:67:29:fb:b3:90:ac:be:92:ab:05:40:a6:6c:b5: 50:9a:50:9c:0d:80:b3:c9:6b:20:d5:e5:6d:b8:9b: aa:2d:8f:eb:fe:c6:65:5e:2d:da:3d:36:e4:c5:70: 06:97:33:24:5c:3f:f9:86:a7:c2:02:2d:35:07:a8: d0:90:65:00:eb:6a:ec:ef:ff:e6:55:57:50:fe:d8: 29:a4:ab:ec:0f:42:4a:27:57:34:2d:c5:98:ed:d0: ff:c5:59:c6:70:50:e4:21:23:cd:9c:31:1e:03:23: 97:af:76:ef:5e:99:08:66:dd:c9:da:1b:a2:b7:6b: b0:68:64:51:1f:c1:71:f5:4e:8a:22:69:5a:c6:a0: d6:e2:9a:e1:84:35:98:ea:55:a6:18:92:97:d8:bc: 9f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:44:89:05:50:80:28:FC:CD:D1:A8:A0:6E:4E:15:6E:B3:78:54:1E X509v3 Authority Key Identifier: keyid:11:6F:92:0F:87:30:66:74:7A:8C:ED:DA:FF:E8:4B:CF:BD:B0:35:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:98:c9:bb:65:93:35:01:b7:97:ef:f3:5b:ab:ff:f6:e9:ee: 05:0e:0b:57:6b:a7:ba:01:a0:46:bf:ff:b0:ba:d1:c5:74:e3: e7:45:ce:95:15:fa:bb:e2:f8:ab:ac:a1:ee:95:6e:dd:0a:af: 18:b0:a5:83:66:67:aa:38:9a:1c:cc:52:cf:8d:dd:1f:11:ed: a7:c1:eb:34:aa:98:38:39:65:48:71:f0:64:83:f7:35:9d:74: 34:0c:09:20:28:ac:e0:64:c3:2f:0c:d5:8a:e0:bb:96:5f:06: 18:1c:53:f8:a9:92:d5:9f:ba:2e:f6:63:d2:2b:f4:0d:cf:d5: 41:d3:ed:bd:5c:4c:7d:90:c9:93:18:9a:81:54:79:f6:57:77: 7c:79:90:7c:f7:ec:17:ba:b2:5e:bb:ad:c2:ea:8d:b0:ff:2d: 1c:96:65:ce:93:86:85:73:a1:60:d8:22:fc:28:7b:b6:37:40: eb:e2:01:aa:82:25:66:9a:e7:97:1a:46:ec:7e:43:cc:03:88: 9f:27:5e:21:0b:a0:66:17:05:1d:42:76:fd:4b:ac:98:33:0f: 5a:92:81:65:5a:f2:03:41:4e:e7:a7:5c:d9:18:18:af:b6:0c: fd:11:47:2a:11:70:f4:2d:a5:2e:c0:0e:7b:98:81:83:61:be: 86:65:c8:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBDREUxMTAvBgNVBAUTKDExNkY5MjBGODczMDY2NzQ3QThDRUREQUZGRTg0QkNG QkRCMDM1MUEwHhcNMjUwNTMwMTcyMzMwWhcNMjUwNjA2MTcyMzMwWjAYMRYwFAYD VQQDEw02ODM5ZTk5Mi1hYjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7F1SHg9qFhVYQjBWLEK97/nCAye86APLMqhTwmoAxZhyllRpHLOlDA7KvDW0 vfFdEeNyr3ri4R7ddEzEjHnUez24PfS8uKHyMrbiPX40j0DMEI8pGQRE/sq5X2ig dyWxB5CK1jWF+63nZyn7s5CsvpKrBUCmbLVQmlCcDYCzyWsg1eVtuJuqLY/r/sZl Xi3aPTbkxXAGlzMkXD/5hqfCAi01B6jQkGUA62rs7//mVVdQ/tgppKvsD0JKJ1c0 LcWY7dD/xVnGcFDkISPNnDEeAyOXr3bvXpkIZt3J2huit2uwaGRRH8Fx9U6KImla xqDW4prhhDWY6lWmGJKX2LyfkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5EiQVQ gCj8zdGooG5OFW6zeFQeMB8GA1UdIwQYMBaAFBFvkg+HMGZ0eozt2v/oS8+9sDUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMENERS8yM0Q4NTY2RUZC REIxMUU4OTIwQ0IwNDRDNEY5QUUwMi9FVy1TRDRjd1puUjZqTzNhXy1oTHo3MndO Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VXLVNENGN3Wm5SNmpPM2FfLWhMejcyd05Sby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MENERS8yM0Q4NTY2RUZCREIxMUU4OTIwQ0IwNDRDNEY5QUUwMi9FVy1TRDRjd1pu UjZqTzNhXy1oTHo3MndOUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrmMm7ZZM1AbeX7/Nbq//26e4FDgtXa6e6AaBGv/+wutHFdOPnRc6V Ffq74virrKHulW7dCq8YsKWDZmeqOJoczFLPjd0fEe2nwes0qpg4OWVIcfBkg/c1 nXQ0DAkgKKzgZMMvDNWK4LuWXwYYHFP4qZLVn7ou9mPSK/QNz9VB0+29XEx9kMmT GJqBVHn2V3d8eZB89+wXurJeu63C6o2w/y0clmXOk4aFc6Fg2CL8KHu2N0Dr4gGq giVmmueXGkbsfkPMA4ifJ14hC6BmFwUdQnb9S6yYMw9akoFlWvIDQU7np1zZGBiv tgz9EUcqEXD0LaUuwA57mIGDYb6GZciZ -----END CERTIFICATE-----Generated at Sat May 31 17:23:41 2025 by rpki-client