$ rpki-client -vvf rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft File: 0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft (raw, json) Hash identifier: b/JFnR4CtTEXfOCZcIKRm0GOZwPzoR/pxCNG0wkFXNA= Subject key identifier: FA:6B:56:E9:43:FA:CF:B1:84:0B:01:40:A0:EC:0A:55:35:94:64:10 Authority key identifier: D0:49:F1:5C:5B:00:41:98:3E:8B:35:C5:17:B6:51:71:F7:16:5C:DC Certificate issuer: /CN=A9128077/serialNumber=D049F15C5B0041983E8B35C517B65171F7165CDC Certificate serial: 072B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft Manifest number: 071F Signing time: Fri 30 May 2025 22:04:43 +0000 Manifest this update: Fri 30 May 2025 22:04:42 +0000 Manifest next update: Fri 06 Jun 2025 22:04:42 +0000 Files and hashes: 1: 0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl (hash: TeENibfGpbQ+OIA/VGP58Y8FbjrQ5qS17NE8fCZsi6g=) 2: 7AD47B2234EE11EE927E9F6AC4F9AE02.roa (hash: Mt4tb4VC4mD0Nqt0BXFmGgw6RIVVzrPQVbsXvi8D500=) 3: 1D4A72B2350811EE96CD9F16C4F9AE02.roa (hash: aL7cUy872ECZEAqqjrWWrqFvQPWZOr2k97DKB+JwHf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1835 (0x72b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128077, serialNumber=D049F15C5B0041983E8B35C517B65171F7165CDC Validity Not Before: May 30 22:04:42 2025 GMT Not After : Jun 6 22:04:42 2025 GMT Subject: CN=683a2b7a-fbbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:cc:af:27:94:3c:a2:aa:1c:92:3e:db:d8:44: 28:3f:a0:ea:88:92:27:e8:d7:a9:17:b7:b3:10:c7: 78:7b:93:6b:ad:ca:b9:f1:17:b6:98:ec:a2:45:23: fc:c5:be:2b:f7:cd:9a:ad:02:4b:4b:92:66:86:41: 75:e8:24:12:bb:f4:a5:d6:29:0e:85:41:6e:b5:03: 2c:9c:88:56:03:05:2a:0b:73:bf:eb:4f:47:28:16: da:4b:29:fc:a4:94:7e:5f:87:00:5c:18:d8:a0:7d: 5a:7c:54:d1:a9:dc:a5:a5:42:30:e3:60:1b:9a:72: fa:60:14:26:c0:20:13:d3:ef:36:05:b7:0c:d5:b4: 96:e8:c6:2b:ae:9c:11:c6:4d:5c:00:15:08:af:77: 99:64:a1:e3:bc:23:05:48:0c:aa:95:d9:de:24:84: de:2a:48:e2:17:6c:fc:01:cb:a3:6d:c1:3e:9b:dc: 07:30:d8:63:bb:3f:b2:cd:d5:de:08:8e:e9:c9:43: 69:b1:23:52:2f:76:a4:bc:41:e2:79:ce:0e:c0:3c: 20:74:4c:0c:3e:09:1e:cd:48:31:87:36:09:f7:d2: 8d:86:8f:67:38:a5:08:12:91:07:13:da:2e:a9:87: 13:12:ba:03:e0:0e:c8:5a:a1:29:63:76:b4:53:d5: fb:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:6B:56:E9:43:FA:CF:B1:84:0B:01:40:A0:EC:0A:55:35:94:64:10 X509v3 Authority Key Identifier: keyid:D0:49:F1:5C:5B:00:41:98:3E:8B:35:C5:17:B6:51:71:F7:16:5C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:58:5c:86:28:11:7d:b4:28:39:28:8a:55:ae:31:2b:fe:f4: 01:6e:40:12:51:db:1b:f6:67:09:27:8f:90:d1:f5:69:4e:20: 00:44:5a:b6:2b:53:09:e1:ee:3f:db:d9:80:dc:e2:35:14:e7: 41:cc:d7:f8:ec:05:5f:9d:8f:99:16:e4:81:75:a3:c1:84:4f: fa:c1:3e:38:28:15:1c:7b:e0:d3:10:7b:42:c9:ed:0b:6b:39: 6e:cc:95:a7:97:50:85:be:eb:77:9b:35:11:f2:de:55:73:b8: 4a:3b:a2:9f:07:0e:a2:bd:cb:c8:b5:a8:fa:ce:09:6b:89:d5: c8:bd:28:4b:23:e0:f9:9f:46:4d:89:23:44:ae:91:d0:52:65: 8c:03:c2:95:99:6e:7f:0c:8c:ad:0a:7c:cf:11:6d:ca:67:2f: c0:d0:89:24:fd:d2:06:6a:26:cb:02:2a:dd:63:79:91:f6:e0: ee:9d:b2:29:84:26:43:fd:4d:95:8e:6a:7c:0b:6d:51:b5:72: 2c:eb:e4:d1:46:95:31:79:56:62:09:b1:d8:31:06:b1:2f:f3: 12:5a:b8:36:76:dc:cd:24:37:05:c0:15:ac:af:7f:85:aa:88: 61:be:cb:ec:b7:33:44:04:5d:2c:47:13:67:8e:5a:c2:51:4e: 0d:22:81:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgwNzcxMTAvBgNVBAUTKEQwNDlGMTVDNUIwMDQxOTgzRThCMzVDNTE3QjY1MTcx RjcxNjVDREMwHhcNMjUwNTMwMjIwNDQyWhcNMjUwNjA2MjIwNDQyWjAYMRYwFAYD VQQDEw02ODNhMmI3YS1mYmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6syvJ5Q8oqockj7b2EQoP6DqiJIn6NepF7ezEMd4e5Nrrcq58Re2mOyiRSP8 xb4r982arQJLS5JmhkF16CQSu/Sl1ikOhUFutQMsnIhWAwUqC3O/609HKBbaSyn8 pJR+X4cAXBjYoH1afFTRqdylpUIw42AbmnL6YBQmwCAT0+82BbcM1bSW6MYrrpwR xk1cABUIr3eZZKHjvCMFSAyqldneJITeKkjiF2z8AcujbcE+m9wHMNhjuz+yzdXe CI7pyUNpsSNSL3akvEHiec4OwDwgdEwMPgkezUgxhzYJ99KNho9nOKUIEpEHE9ou qYcTEroD4A7IWqEpY3a0U9X7IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPprVulD +s+xhAsBQKDsClU1lGQQMB8GA1UdIwQYMBaAFNBJ8VxbAEGYPos1xRe2UXH3Flzc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODA3Ny85ODBDQThGRTNB RDcxMUVCQTI5MjFBNEFDNEY5QUUwMi8wRW54WEZzQVFaZy1pelhGRjdaUmNmY1dY TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBFbnhYRnNBUVpnLWl6WEZGN1pSY2ZjV1hOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODA3Ny85ODBDQThGRTNBRDcxMUVCQTI5MjFBNEFDNEY5QUUwMi8wRW54WEZzQVFa Zy1pelhGRjdaUmNmY1dYTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhWFyGKBF9tCg5KIpVrjEr/vQBbkASUdsb9mcJJ4+Q0fVpTiAARFq2 K1MJ4e4/29mA3OI1FOdBzNf47AVfnY+ZFuSBdaPBhE/6wT44KBUce+DTEHtCye0L azluzJWnl1CFvut3mzUR8t5Vc7hKO6KfBw6ivcvItaj6zglridXIvShLI+D5n0ZN iSNErpHQUmWMA8KVmW5/DIytCnzPEW3KZy/A0Ikk/dIGaibLAirdY3mR9uDunbIp hCZD/U2Vjmp8C21RtXIs6+TRRpUxeVZiCbHYMQaxL/MSWrg2dtzNJDcFwBWsr3+F qohhvsvstzNEBF0sRxNnjlrCUU4NIoHI -----END CERTIFICATE-----Generated at Sat May 31 17:48:38 2025 by rpki-client