$ rpki-client -vvf rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft File: EA50kJn6U4BRdLz4MMPrIcUwMac.mft (raw, json) Hash identifier: 4BjcTy1A+dbRu18vltRl79bA1hs9OvSO4YJRkw8eC5k= Subject key identifier: 9D:10:7B:46:DC:1C:28:10:12:A4:C0:AB:9C:F8:47:07:34:E7:6F:4C Authority key identifier: 10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7 Certificate issuer: /CN=A916A027/serialNumber=100E749099FA53805174BCF830C3EB21C53031A7 Certificate serial: 044B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft Manifest number: 0447 Signing time: Sat 31 May 2025 00:27:11 +0000 Manifest this update: Sat 31 May 2025 00:27:10 +0000 Manifest next update: Sat 07 Jun 2025 00:27:10 +0000 Files and hashes: 1: EA50kJn6U4BRdLz4MMPrIcUwMac.crl (hash: aVsuU5FRzUeC/+FxRQjOo4+dROOMKpeW7jM/mIfEIlA=) 2: 385B6DAE577411ECBF021B66C4F9AE02.roa (hash: XjunMNzYncJwuOqeAscMtpgQiJ/lvJGQsFB1GF7BxVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1099 (0x44b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A027, serialNumber=100E749099FA53805174BCF830C3EB21C53031A7 Validity Not Before: May 31 00:27:10 2025 GMT Not After : Jun 7 00:27:10 2025 GMT Subject: CN=683a4cde-bc77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:be:84:11:f7:ad:8a:3b:ce:25:34:4f:cc:c6: cd:c9:e7:c1:de:aa:44:1f:fb:23:e2:fe:df:59:09: a3:8d:c0:28:48:7c:a0:91:9a:08:19:ac:62:95:cf: 64:e1:53:5e:a8:22:06:a6:21:e2:d5:9a:69:3e:1b: 3b:06:73:48:7e:73:6d:ec:a7:25:c8:9c:57:15:63: 98:ef:1a:a2:22:c9:98:d7:aa:e4:dc:b7:5f:be:d4: cc:89:3c:10:59:05:a6:33:4a:bd:45:c4:41:09:a7: f1:e9:8d:a4:09:e3:e2:6d:e4:8a:21:e1:94:48:9c: 69:83:bd:b3:02:b0:c1:b7:6e:fa:ca:e1:aa:0b:b9: c5:fe:56:00:c6:40:78:6a:8c:03:ff:08:e5:02:cc: 55:71:48:65:05:c3:63:f5:3c:7e:5b:4f:95:dd:1e: fb:bd:2a:b5:d1:49:6d:be:f2:f9:df:f7:92:0c:a3: dd:e3:8b:fd:1c:cb:17:dc:1e:5e:04:7b:9d:6a:c0: ee:02:5d:c0:2c:01:5d:39:26:fc:22:29:d9:2a:1f: 29:09:8d:2d:79:08:48:04:24:1d:0e:57:ef:2a:3d: 07:d2:e1:c6:e5:d2:b9:0b:d9:3d:fb:07:91:2f:ef: f1:4a:57:39:28:26:d6:d7:99:6a:b2:85:01:bd:92: 5d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:10:7B:46:DC:1C:28:10:12:A4:C0:AB:9C:F8:47:07:34:E7:6F:4C X509v3 Authority Key Identifier: keyid:10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:2f:92:4c:16:c7:db:96:8c:cb:dd:ce:3a:95:be:52:dd:b4: b0:fe:e0:f7:68:b6:75:dc:c3:79:4b:6d:a1:ff:81:ec:60:19: 75:f3:8b:47:e2:6e:0c:cc:d9:86:6b:18:35:d7:d9:db:69:e5: ed:be:fe:05:c0:b5:44:7a:82:0d:f5:77:b7:ad:03:72:3d:72: 25:3a:9f:f9:6b:8d:b2:f3:2d:d2:6f:0a:a7:ab:e1:66:7a:14: 2d:b5:50:37:c3:cd:fe:1d:7b:d5:59:40:5b:fc:b9:cb:4d:c9: 07:d0:9a:e4:73:35:b1:a2:16:9d:e4:04:38:80:89:45:54:fa: 92:60:21:8d:75:c6:75:1e:51:ca:f1:90:19:70:bc:3e:48:fd: 8a:6d:54:bf:3d:8b:24:3e:70:a6:6f:ff:50:47:6a:d9:b6:60: 0f:63:5b:af:a5:0b:6a:30:a5:6d:7f:95:cc:e0:71:c8:1c:6d: 65:d5:35:64:23:33:a3:ca:8f:46:79:6f:c0:03:ac:61:29:50: 02:9c:4e:b9:36:85:2f:39:02:7f:d6:05:88:b1:47:cd:30:13: fa:0b:f9:35:5b:de:16:67:5a:07:20:c0:6e:7b:03:1a:bd:dc: f5:29:22:5f:c0:03:ca:bd:ff:a1:00:6c:cd:ca:ca:34:bf:44: 7c:5f:62:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwMjcxMTAvBgNVBAUTKDEwMEU3NDkwOTlGQTUzODA1MTc0QkNGODMwQzNFQjIx QzUzMDMxQTcwHhcNMjUwNTMxMDAyNzEwWhcNMjUwNjA3MDAyNzEwWjAYMRYwFAYD VQQDEw02ODNhNGNkZS1iYzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1L6EEfetijvOJTRPzMbNyefB3qpEH/sj4v7fWQmjjcAoSHygkZoIGaxilc9k 4VNeqCIGpiHi1ZppPhs7BnNIfnNt7KclyJxXFWOY7xqiIsmY16rk3LdfvtTMiTwQ WQWmM0q9RcRBCafx6Y2kCePibeSKIeGUSJxpg72zArDBt276yuGqC7nF/lYAxkB4 aowD/wjlAsxVcUhlBcNj9Tx+W0+V3R77vSq10UltvvL53/eSDKPd44v9HMsX3B5e BHudasDuAl3ALAFdOSb8IinZKh8pCY0teQhIBCQdDlfvKj0H0uHG5dK5C9k9+weR L+/xSlc5KCbW15lqsoUBvZJdfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0Qe0bc HCgQEqTAq5z4Rwc0529MMB8GA1UdIwQYMBaAFBAOdJCZ+lOAUXS8+DDD6yHFMDGn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTAyNy8wNDIwN0RGODU3 NzAxMUVDQjk1NzdBNUJDNEY5QUUwMi9FQTUwa0puNlU0QlJkTHo0TU1QckljVXdN YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBNTBrSm42VTRCUmRMejRNTVBySWNVd01hYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTAyNy8wNDIwN0RGODU3NzAxMUVDQjk1NzdBNUJDNEY5QUUwMi9FQTUwa0puNlU0 QlJkTHo0TU1QckljVXdNYWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrL5JMFsfblozL3c46lb5S3bSw/uD3aLZ13MN5S22h/4HsYBl184tH 4m4MzNmGaxg119nbaeXtvv4FwLVEeoIN9Xe3rQNyPXIlOp/5a42y8y3Sbwqnq+Fm ehQttVA3w83+HXvVWUBb/LnLTckH0JrkczWxohad5AQ4gIlFVPqSYCGNdcZ1HlHK 8ZAZcLw+SP2KbVS/PYskPnCmb/9QR2rZtmAPY1uvpQtqMKVtf5XM4HHIHG1l1TVk IzOjyo9GeW/AA6xhKVACnE65NoUvOQJ/1gWIsUfNMBP6C/k1W94WZ1oHIMBuewMa vdz1KSJfwAPKvf+hAGzNyso0v0R8X2JF -----END CERTIFICATE-----Generated at Sat May 31 17:49:44 2025 by rpki-client