$ rpki-client -vvf rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.mft File: EgT-MVwAkLFdkSW0KYVaBvTUIR0.mft (raw, json) Hash identifier: DLJYgJNGKZl+E1LspS06NWjy7hO5ntwm6KtogxBxqds= Subject key identifier: EA:D6:07:9F:8C:7E:3B:5F:20:56:35:A9:F7:E7:B4:CE:D9:17:7D:E6 Authority key identifier: 12:04:FE:31:5C:00:90:B1:5D:91:25:B4:29:85:5A:06:F4:D4:21:1D Certificate issuer: /CN=A914B46A/serialNumber=1204FE315C0090B15D9125B429855A06F4D4211D Certificate serial: 0574 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EgT-MVwAkLFdkSW0KYVaBvTUIR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.mft Manifest number: 0572 Signing time: Sat 31 May 2025 23:30:16 +0000 Manifest this update: Sat 31 May 2025 23:30:16 +0000 Manifest next update: Sat 07 Jun 2025 23:30:16 +0000 Files and hashes: 1: EgT-MVwAkLFdkSW0KYVaBvTUIR0.crl (hash: QrQeR/2/mvbwYS2XorsLyND7Z1BCZfrey7bD1WJHbGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.crl rsync://rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EgT-MVwAkLFdkSW0KYVaBvTUIR0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 23:30:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1396 (0x574) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B46A, serialNumber=1204FE315C0090B15D9125B429855A06F4D4211D Validity Not Before: May 31 23:30:16 2025 GMT Not After : Jun 7 23:30:16 2025 GMT Subject: CN=683b9108-386c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:bf:2c:7a:f9:13:39:05:89:a3:8a:b6:5e:3d: 3a:2a:bd:e2:9a:2c:06:d0:55:86:0e:da:96:92:ea: 08:09:c2:76:45:0b:b3:80:48:94:9d:e7:c8:9d:d7: 6c:25:36:fe:9c:5a:ab:73:df:f8:b8:e7:31:49:11: f9:c6:b2:dd:a3:cb:3f:7b:55:43:6b:d7:92:c1:a6: c4:63:a7:94:b1:cd:c3:bd:a8:21:64:09:c7:c9:ab: 66:97:eb:e8:be:93:9b:54:d0:6f:4c:8c:b3:ed:6b: f0:52:61:14:79:70:32:13:16:f4:cd:a1:5d:3e:03: d3:bc:33:bf:c4:07:4c:ca:49:5d:a5:83:d5:25:75: 99:d8:17:97:2d:09:18:6c:61:eb:b3:25:e4:2a:9a: a7:7d:32:c8:e3:d0:26:5c:52:95:fe:9f:23:bf:59: 5c:82:8f:96:3b:d2:0a:c9:f4:e7:e9:25:5c:a3:6e: bc:4c:8d:ed:82:e1:2f:4b:88:12:01:44:29:a2:70: 95:30:c5:c1:85:9b:c4:5e:d6:ad:e8:b8:eb:4c:49: 68:d8:4a:d4:53:db:b8:b6:9a:78:a6:27:ec:9f:72: c3:df:63:49:79:33:bf:d7:77:11:64:c1:91:00:6e: 38:35:94:af:8a:91:5a:58:bc:2c:20:4c:e9:ee:07: d9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D6:07:9F:8C:7E:3B:5F:20:56:35:A9:F7:E7:B4:CE:D9:17:7D:E6 X509v3 Authority Key Identifier: keyid:12:04:FE:31:5C:00:90:B1:5D:91:25:B4:29:85:5A:06:F4:D4:21:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EgT-MVwAkLFdkSW0KYVaBvTUIR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:fa:dd:b1:c8:8e:39:55:44:c8:0e:28:c5:62:c1:3d:76:17: fd:1c:56:4f:ed:96:e0:46:4a:be:7a:09:c8:99:97:df:ae:40: 10:85:69:b9:40:7c:1e:a4:34:e8:20:7d:c7:cb:15:cf:cb:f8: b5:6a:cc:ff:03:51:9d:34:9d:02:12:46:d9:8a:0b:11:02:a8: 94:b0:80:f2:5a:01:eb:c0:21:88:5a:35:64:bd:31:87:cb:be: 42:51:f1:72:e2:55:90:59:10:89:23:58:ac:c1:a4:1f:43:66: f8:e7:0e:22:cc:6a:b8:9b:8e:34:3e:55:74:df:ef:ac:b5:81: a1:82:bd:fc:9f:c6:a6:10:84:14:bc:0b:fd:26:cc:d7:24:0b: b7:90:49:7f:31:92:d2:80:93:6d:f9:e8:3e:76:7a:2f:f5:43: 7d:b7:39:05:1b:26:52:6a:7f:46:bf:23:94:ff:23:70:08:6e: c2:05:f8:ce:86:2e:49:9e:4c:e8:37:03:af:87:d0:57:eb:c3: 6c:e9:ca:6e:9c:50:3a:c8:99:78:dd:f7:cb:b4:9b:2c:e4:13: a6:af:53:77:96:82:c6:6e:d2:b6:5b:a1:cf:75:f8:29:3a:c1: a7:47:e6:6a:f8:bc:05:f2:99:c4:b3:87:b8:07:d1:c5:b9:cf: 56:65:b5:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI0NkExMTAvBgNVBAUTKDEyMDRGRTMxNUMwMDkwQjE1RDkxMjVCNDI5ODU1QTA2 RjRENDIxMUQwHhcNMjUwNTMxMjMzMDE2WhcNMjUwNjA3MjMzMDE2WjAYMRYwFAYD VQQDEw02ODNiOTEwOC0zODZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4L8sevkTOQWJo4q2Xj06Kr3imiwG0FWGDtqWkuoICcJ2RQuzgEiUnefIndds JTb+nFqrc9/4uOcxSRH5xrLdo8s/e1VDa9eSwabEY6eUsc3DvaghZAnHyatml+vo vpObVNBvTIyz7WvwUmEUeXAyExb0zaFdPgPTvDO/xAdMykldpYPVJXWZ2BeXLQkY bGHrsyXkKpqnfTLI49AmXFKV/p8jv1lcgo+WO9IKyfTn6SVco268TI3tguEvS4gS AUQponCVMMXBhZvEXtat6LjrTElo2ErUU9u4tpp4pifsn3LD32NJeTO/13cRZMGR AG44NZSvipFaWLwsIEzp7gfZ1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOrWB5+M fjtfIFY1qffntM7ZF33mMB8GA1UdIwQYMBaAFBIE/jFcAJCxXZEltCmFWgb01CEd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjQ2QS8wMEE0RDVGMEUw OTkxMUVCOTI3NjBCNERDNEY5QUUwMi9FZ1QtTVZ3QWtMRmRrU1cwS1lWYUJ2VFVJ UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VnVC1NVndBa0xGZGtTVzBLWVZhQnZUVUlSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjQ2QS8wMEE0RDVGMEUwOTkxMUVCOTI3NjBCNERDNEY5QUUwMi9FZ1QtTVZ3QWtM RmRrU1cwS1lWYUJ2VFVJUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI+t2xyI45VUTIDijFYsE9dhf9HFZP7ZbgRkq+egnImZffrkAQhWm5 QHwepDToIH3HyxXPy/i1asz/A1GdNJ0CEkbZigsRAqiUsIDyWgHrwCGIWjVkvTGH y75CUfFy4lWQWRCJI1iswaQfQ2b45w4izGq4m440PlV03++stYGhgr38n8amEIQU vAv9JszXJAu3kEl/MZLSgJNt+eg+dnov9UN9tzkFGyZSan9GvyOU/yNwCG7CBfjO hi5JnkzoNwOvh9BX68Ns6cpunFA6yJl43ffLtJss5BOmr1N3loLGbtK2W6HPdfgp OsGnR+Zq+LwF8pnEs4e4B9HFuc9WZbWO -----END CERTIFICATE-----Generated at Mon Jun 2 19:52:33 2025 by rpki-client