$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft File: EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft (raw, json) Hash identifier: fbdFSNn7TUTnC+M5e2I1yt6FnYcyb4+TEEuwIQ0/KKY= Subject key identifier: 22:8D:2B:78:15:1E:D6:67:DA:99:92:2B:9A:8F:E5:8E:59:8A:00:B1 Authority key identifier: 11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17 Certificate issuer: /CN=A913B1DA/serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17 Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft Manifest number: 0149 Signing time: Mon 02 Jun 2025 15:32:37 +0000 Manifest this update: Mon 02 Jun 2025 15:32:37 +0000 Manifest next update: Mon 09 Jun 2025 15:32:37 +0000 Files and hashes: 1: EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl (hash: vqELq/td7xFGEoiu6PAi017qmM99EcVNr4hTjfw5/dk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 15:32:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B1DA, serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17 Validity Not Before: Jun 2 15:32:37 2025 GMT Not After : Jun 9 15:32:37 2025 GMT Subject: CN=683dc415-e74b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6e:02:7e:ef:de:5d:2b:95:3a:f0:aa:9a:49: 07:d8:cb:91:ce:43:1a:f9:5d:c0:e4:e1:01:e0:83: ce:3d:7f:8b:12:c1:57:52:0a:72:f2:b2:65:8d:7f: d8:da:71:d0:8d:ef:16:c3:e0:a7:11:90:52:67:ec: 5e:05:af:b8:60:42:a0:3c:ae:4c:11:fc:99:bf:50: c6:51:86:58:44:c3:14:d8:3a:45:40:d6:32:1e:47: c9:17:4c:30:e3:1f:bb:ba:7b:0c:05:a8:4f:cc:7a: 73:d7:04:34:73:84:43:0d:93:80:c8:4e:22:60:f7: 3d:b2:73:34:44:56:71:21:23:7d:bc:0f:dc:fc:66: 9d:ee:4f:fa:dd:6e:fb:77:47:f9:83:39:93:b6:f8: 9f:24:c6:ac:0a:43:d1:33:d6:e6:a0:84:c9:57:8e: 3d:f0:a8:59:6a:c2:67:88:d7:c4:07:74:80:e2:32: 72:ea:9a:44:c7:a1:d7:04:88:b5:b9:66:58:8e:67: 72:55:22:39:10:b4:89:09:f0:5c:c7:10:6e:60:a8: 34:a3:00:11:58:1e:28:ac:a5:24:12:11:9c:5c:5e: a4:84:e6:35:c2:dd:75:75:95:0b:05:8b:e4:fb:5f: 67:a6:15:6d:d5:89:da:5a:a9:f4:09:1a:df:9a:37: da:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8D:2B:78:15:1E:D6:67:DA:99:92:2B:9A:8F:E5:8E:59:8A:00:B1 X509v3 Authority Key Identifier: keyid:11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:fa:ee:c5:b1:cd:d9:d1:0e:26:5d:29:70:d9:78:92:0a:95: 7f:17:58:d0:70:b6:8f:4b:1a:34:be:d8:e2:cd:23:61:7c:48: fd:87:de:e4:04:27:95:32:b6:86:15:13:29:f7:37:2a:c6:b2: 5d:05:96:a7:60:8d:9f:48:d2:41:78:57:9e:26:2c:f9:be:b1: 2c:ba:8b:8b:7f:16:a2:72:d9:9f:a2:46:85:7a:9c:49:e3:43: eb:6b:91:b5:73:61:67:1e:eb:4b:6a:55:bf:51:59:37:92:48: 87:05:d3:0e:32:73:a8:25:90:c0:dc:de:ef:2b:c7:58:26:f4: 69:af:b6:84:17:da:be:85:31:da:59:d3:f9:28:da:3d:98:aa: ab:3b:05:43:ef:af:94:aa:63:a8:0a:ab:b4:4f:05:0b:54:90: 22:47:bf:b0:ad:3d:42:cc:29:64:5a:6d:89:50:37:a0:c7:f1: f5:a7:c3:6c:bd:3c:92:35:b6:f6:69:cb:50:4d:2e:a1:4d:e8: 0f:0b:57:48:40:7b:03:75:6b:dc:1f:a2:f9:93:d5:07:cc:ed: ef:fb:a6:74:19:f7:72:df:68:57:4b:ee:e1:53:f8:d7:5c:4a: f9:29:ae:b6:ca:49:36:f0:ff:19:62:24:08:25:03:55:20:f9: 87:56:dc:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IxREExMTAvBgNVBAUTKDExMDlGQkM3M0ExODlCM0Q2NDcxM0ExRjZDNDg2QTA0 RTdCNDNCMTcwHhcNMjUwNjAyMTUzMjM3WhcNMjUwNjA5MTUzMjM3WjAYMRYwFAYD VQQDEw02ODNkYzQxNS1lNzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo24Cfu/eXSuVOvCqmkkH2MuRzkMa+V3A5OEB4IPOPX+LEsFXUgpy8rJljX/Y 2nHQje8Ww+CnEZBSZ+xeBa+4YEKgPK5MEfyZv1DGUYZYRMMU2DpFQNYyHkfJF0ww 4x+7unsMBahPzHpz1wQ0c4RDDZOAyE4iYPc9snM0RFZxISN9vA/c/Gad7k/63W77 d0f5gzmTtvifJMasCkPRM9bmoITJV4498KhZasJniNfEB3SA4jJy6ppEx6HXBIi1 uWZYjmdyVSI5ELSJCfBcxxBuYKg0owARWB4orKUkEhGcXF6khOY1wt11dZULBYvk +19nphVt1YnaWqn0CRrfmjfa5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKNK3gV HtZn2pmSK5qP5Y5ZigCxMB8GA1UdIwQYMBaAFBEJ+8c6GJs9ZHE6H2xIagTntDsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjFEQS9BOTBGOERBNDRD NzkxMUVFQTc5RENEM0JDNEY5QUUwMi9FUW43eHpvWW16MWtjVG9mYkVocUJPZTBP eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VRbjd4em9ZbXoxa2NUb2ZiRWhxQk9lME94Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjFEQS9BOTBGOERBNDRDNzkxMUVFQTc5RENEM0JDNEY5QUUwMi9FUW43eHpvWW16 MWtjVG9mYkVocUJPZTBPeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL+u7Fsc3Z0Q4mXSlw2XiSCpV/F1jQcLaPSxo0vtjizSNhfEj9h97k BCeVMraGFRMp9zcqxrJdBZanYI2fSNJBeFeeJiz5vrEsuouLfxaictmfokaFepxJ 40Pra5G1c2FnHutLalW/UVk3kkiHBdMOMnOoJZDA3N7vK8dYJvRpr7aEF9q+hTHa WdP5KNo9mKqrOwVD76+UqmOoCqu0TwULVJAiR7+wrT1CzClkWm2JUDegx/H1p8Ns vTySNbb2actQTS6hTegPC1dIQHsDdWvcH6L5k9UHzO3v+6Z0Gfdy32hXS+7hU/jX XEr5Ka62ykk28P8ZYiQIJQNVIPmHVtzu -----END CERTIFICATE-----Generated at Tue Jun 3 23:44:23 2025 by rpki-client