$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft File: Epbn674wET_h0_KXMDOkyzEUSB0.mft (raw, json) Hash identifier: vLvaUCYy9j4qq9K0hPIYtQ+yjWkCyqDPk77FtyzNRZM= Subject key identifier: DF:04:1D:0A:FC:67:A6:96:3C:B8:94:87:A6:E4:D0:EE:0B:E8:34:E2 Authority key identifier: 12:96:E7:EB:BE:30:11:3F:E1:D3:F2:97:30:33:A4:CB:31:14:48:1D Certificate issuer: /CN=A9160DEB/serialNumber=1296E7EBBE30113FE1D3F2973033A4CB3114481D Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft Manifest number: 012D Signing time: Sat 31 May 2025 04:14:13 +0000 Manifest this update: Sat 31 May 2025 04:14:12 +0000 Manifest next update: Sat 07 Jun 2025 04:14:12 +0000 Files and hashes: 1: Epbn674wET_h0_KXMDOkyzEUSB0.crl (hash: OMty6Z8JTJFyjADv5iV9W0i1W65uEMwWdBgrTbCdh7w=) 2: F0E06498748B11EE92D55F6AC4F9AE02.roa (hash: NDSD+KkV1yB3rzPC/NhFv9JI1zaXTY8fuhw8gPA8DhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.crl rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160DEB, serialNumber=1296E7EBBE30113FE1D3F2973033A4CB3114481D Validity Not Before: May 31 04:14:12 2025 GMT Not After : Jun 7 04:14:12 2025 GMT Subject: CN=683a8214-339b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e1:8a:b4:c2:31:22:9d:ce:59:a8:dd:90:a3: 40:09:9f:7f:36:06:aa:bb:cd:8a:56:a5:ad:a6:20: 47:a1:74:c9:51:85:c6:01:94:10:32:78:56:68:cf: ff:b7:a9:97:cb:ad:66:5b:16:54:8b:81:a9:33:fd: 08:44:52:56:8b:b7:b8:59:57:f4:21:c7:cc:c5:ea: fd:aa:ed:89:07:b1:0f:41:45:cb:66:d2:46:0b:92: f5:15:5a:94:ae:32:7d:84:8c:0d:17:bc:0c:a4:5d: 74:9b:e7:e9:80:f7:cf:42:61:88:da:2c:bb:f6:46: ed:8f:1b:e5:3e:b3:37:27:08:89:19:45:7f:84:7a: e6:03:6f:74:bc:3c:84:38:3d:ed:72:48:a9:e9:23: a5:56:d7:c6:ce:10:27:d7:76:70:3a:39:e9:35:1d: 97:3f:9a:2d:08:f7:c6:6e:54:e0:95:f9:42:48:7d: a4:69:13:97:f4:c5:7d:3d:51:09:8d:1d:a1:74:3c: 0d:f0:52:4a:2d:a2:47:18:aa:16:67:33:8c:a0:b1: e5:7d:ae:67:b5:9d:6e:fa:37:49:b8:9e:77:36:62: 36:d5:ff:2c:03:a8:83:c6:d2:0b:6d:2c:9a:d7:27: 1f:01:13:ca:52:9d:36:9d:23:65:21:d5:91:96:85: 77:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:04:1D:0A:FC:67:A6:96:3C:B8:94:87:A6:E4:D0:EE:0B:E8:34:E2 X509v3 Authority Key Identifier: keyid:12:96:E7:EB:BE:30:11:3F:E1:D3:F2:97:30:33:A4:CB:31:14:48:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:ed:98:3a:c6:3b:6e:80:d8:c9:61:dc:8f:1b:b5:24:1b:33: 05:12:40:e4:65:08:f8:f5:38:ac:27:63:e3:09:a2:a3:d8:93: d8:2a:be:fb:0a:db:7a:14:c2:7c:6c:74:bf:dc:56:04:88:d4: dc:c8:b9:96:a8:9e:2c:09:97:bf:8f:69:a3:e9:e6:b5:fb:c2: e6:50:d2:46:ee:3c:bf:ad:75:7d:55:b5:80:1a:e5:59:60:12: 89:5b:42:00:06:3e:9c:46:eb:1c:6b:1b:e2:94:ff:2d:6a:5a: 16:98:fc:2d:96:0d:46:24:92:78:af:b8:40:c5:93:3c:08:34: 94:80:9d:10:3b:27:6e:2d:43:d4:cd:b4:f6:2e:3f:33:e7:fd: 50:5d:45:7f:cc:65:ef:ad:b6:55:c5:6d:d6:8e:14:99:56:8e: 44:23:34:48:02:95:5d:15:fb:7d:e1:41:aa:bf:7f:98:39:5d: f6:60:77:d7:3e:96:7d:bf:73:1f:9a:48:0f:c5:25:42:61:35: 1d:8b:12:2b:2e:f7:0d:51:c0:94:2c:6e:05:7a:c2:b8:2d:ef: 66:cd:24:fc:01:7d:69:f9:ea:e7:f1:a0:75:73:a6:87:d2:8c: 08:e2:16:73:73:bb:ab:a3:4f:7d:94:06:a6:b7:8d:09:b2:46: 2c:d6:46:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBERUIxMTAvBgNVBAUTKDEyOTZFN0VCQkUzMDExM0ZFMUQzRjI5NzMwMzNBNENC MzExNDQ4MUQwHhcNMjUwNTMxMDQxNDEyWhcNMjUwNjA3MDQxNDEyWjAYMRYwFAYD VQQDEw02ODNhODIxNC0zMzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueGKtMIxIp3OWajdkKNACZ9/Ngaqu82KVqWtpiBHoXTJUYXGAZQQMnhWaM// t6mXy61mWxZUi4GpM/0IRFJWi7e4WVf0IcfMxer9qu2JB7EPQUXLZtJGC5L1FVqU rjJ9hIwNF7wMpF10m+fpgPfPQmGI2iy79kbtjxvlPrM3JwiJGUV/hHrmA290vDyE OD3tckip6SOlVtfGzhAn13ZwOjnpNR2XP5otCPfGblTglflCSH2kaROX9MV9PVEJ jR2hdDwN8FJKLaJHGKoWZzOMoLHlfa5ntZ1u+jdJuJ53NmI21f8sA6iDxtILbSya 1ycfARPKUp02nSNlIdWRloV3/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8EHQr8 Z6aWPLiUh6bk0O4L6DTiMB8GA1UdIwQYMBaAFBKW5+u+MBE/4dPylzAzpMsxFEgd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MERFQi9BMzMxRjQ3NDcy NjkxMUVFQTNGOEU3NTdDNEY5QUUwMi9FcGJuNjc0d0VUX2gwX0tYTURPa3l6RVVT QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VwYm42NzR3RVRfaDBfS1hNRE9reXpFVVNCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MERFQi9BMzMxRjQ3NDcyNjkxMUVFQTNGOEU3NTdDNEY5QUUwMi9FcGJuNjc0d0VU X2gwX0tYTURPa3l6RVVTQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB37Zg6xjtugNjJYdyPG7UkGzMFEkDkZQj49TisJ2PjCaKj2JPYKr77 Ctt6FMJ8bHS/3FYEiNTcyLmWqJ4sCZe/j2mj6ea1+8LmUNJG7jy/rXV9VbWAGuVZ YBKJW0IABj6cRuscaxvilP8taloWmPwtlg1GJJJ4r7hAxZM8CDSUgJ0QOyduLUPU zbT2Lj8z5/1QXUV/zGXvrbZVxW3WjhSZVo5EIzRIApVdFft94UGqv3+YOV32YHfX PpZ9v3MfmkgPxSVCYTUdixIrLvcNUcCULG4FesK4Le9mzST8AX1p+ern8aB1c6aH 0owI4hZzc7uro099lAamt40JskYs1kaE -----END CERTIFICATE-----Generated at Sat May 31 17:54:48 2025 by rpki-client