$ rpki-client -vvf rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.mft File: esbv-wTCtYD1pWtqdGzf4FOvap4.mft (raw, json) Hash identifier: ILSlrNPPxhU0lzAznXUWS+oMImgeKikfASh10F8ww+c= Subject key identifier: 74:F7:5D:3B:A2:DB:30:A2:37:B1:3E:74:D2:AC:DC:AB:1C:93:57:C3 Authority key identifier: 7A:C6:EF:FB:04:C2:B5:80:F5:A5:6B:6A:74:6C:DF:E0:53:AF:6A:9E Certificate issuer: /CN=A91747E1/serialNumber=7AC6EFFB04C2B580F5A56B6A746CDFE053AF6A9E Certificate serial: 0AF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esbv-wTCtYD1pWtqdGzf4FOvap4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.mft Manifest number: 0ADF Signing time: Fri 30 May 2025 19:37:46 +0000 Manifest this update: Fri 30 May 2025 19:37:45 +0000 Manifest next update: Fri 06 Jun 2025 19:37:45 +0000 Files and hashes: 1: esbv-wTCtYD1pWtqdGzf4FOvap4.crl (hash: RH9BU6cCH2YtVixjR8zamCkajWONc+Gpg0HOp+5+CFU=) 2: D9C33050560B11EDA1636E52C4F9AE02.roa (hash: RuSZgMZ4QoYvu76O7V8W4nab76a8ye3lfqmWyPmtPvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.crl rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esbv-wTCtYD1pWtqdGzf4FOvap4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2803 (0xaf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91747E1, serialNumber=7AC6EFFB04C2B580F5A56B6A746CDFE053AF6A9E Validity Not Before: May 30 19:37:45 2025 GMT Not After : Jun 6 19:37:45 2025 GMT Subject: CN=683a0909-3a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:57:03:80:20:00:cc:6e:29:d3:58:78:9d:58: 6a:39:b6:d3:da:12:23:d8:16:ac:f6:da:70:8e:28: 4a:77:7a:04:40:8f:8c:a1:8c:4c:9f:ea:6f:19:11: 99:65:01:09:c0:53:fc:04:59:a0:e6:ea:c5:7c:9c: 62:40:9c:c7:05:52:61:89:54:fe:59:f2:12:81:16: b5:af:f9:58:44:ac:d0:71:ac:1f:b5:1e:68:42:25: 5d:19:14:d9:d9:94:89:c2:df:e0:d2:14:5e:f0:e6: 64:90:e1:ba:ad:78:cd:40:2b:46:7f:e0:10:0d:1c: 1e:83:40:d7:5b:33:36:30:a3:e4:e7:bf:59:02:9b: a4:d4:0f:05:bc:64:1a:1d:39:ec:5a:f5:32:49:a3: 86:6b:8d:fb:74:67:25:c7:fa:57:da:4e:ec:b4:14: 7d:f4:f0:6a:fa:16:9d:e8:bf:27:36:67:34:60:25: 0d:bc:36:39:cd:55:54:47:e5:fd:36:0f:9a:fd:b0: e5:09:89:78:1b:a0:c6:42:18:c2:5a:7f:69:e7:6a: 85:ca:9c:be:8c:e6:b6:47:90:4b:98:21:78:31:98: 14:3f:ff:b0:4b:75:a6:0d:b2:a7:8c:63:38:e6:f5: 6c:b2:a5:ab:b3:93:6a:a6:e7:dd:45:57:4a:b4:a5: 97:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F7:5D:3B:A2:DB:30:A2:37:B1:3E:74:D2:AC:DC:AB:1C:93:57:C3 X509v3 Authority Key Identifier: keyid:7A:C6:EF:FB:04:C2:B5:80:F5:A5:6B:6A:74:6C:DF:E0:53:AF:6A:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esbv-wTCtYD1pWtqdGzf4FOvap4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:b1:f6:19:fc:8f:5e:c6:44:22:15:26:34:9e:dc:f3:63:56: 7b:82:49:26:45:9a:f6:88:93:40:ee:0d:2b:fa:75:58:70:4b: 20:9c:54:ff:0b:aa:7a:28:06:79:f4:e1:2d:6a:a5:b8:ac:1c: 12:bc:8b:43:08:05:7b:fb:f9:3a:bd:f9:6b:ed:06:5e:01:af: 01:3d:73:41:64:bb:6a:64:76:97:39:ef:32:82:da:e6:21:55: f4:79:c9:c1:ad:a4:16:f4:1d:ab:ac:93:07:05:6e:7f:2f:5a: f6:97:f6:6d:4f:30:a9:c2:d1:ac:5f:3f:4b:2e:63:53:95:d1: b7:29:33:14:74:f9:40:18:f5:47:1c:fc:d2:92:08:97:54:45: c5:e9:61:fe:5c:73:f7:e2:ec:f6:db:49:3f:2d:d6:85:74:3d: 46:bd:cd:c5:e9:3d:15:03:b4:d1:e2:38:e7:5b:47:62:02:d0: 8d:3f:92:d8:58:29:77:36:a7:a6:18:82:00:43:9e:c5:02:49: 54:ed:e1:ff:4f:cb:6b:60:2f:92:2d:74:d7:d8:1b:39:7f:48: 4c:e6:64:0a:8c:21:f3:c7:bf:0e:80:92:0d:af:86:97:51:9f: 42:ca:00:e8:1c:bb:20:9d:7d:a5:82:49:22:0e:46:d7:a4:ee: 8d:e8:d5:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ3RTExMTAvBgNVBAUTKDdBQzZFRkZCMDRDMkI1ODBGNUE1NkI2QTc0NkNERkUw NTNBRjZBOUUwHhcNMjUwNTMwMTkzNzQ1WhcNMjUwNjA2MTkzNzQ1WjAYMRYwFAYD VQQDEw02ODNhMDkwOS0zYTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVcDgCAAzG4p01h4nVhqObbT2hIj2Bas9tpwjihKd3oEQI+MoYxMn+pvGRGZ ZQEJwFP8BFmg5urFfJxiQJzHBVJhiVT+WfISgRa1r/lYRKzQcawftR5oQiVdGRTZ 2ZSJwt/g0hRe8OZkkOG6rXjNQCtGf+AQDRweg0DXWzM2MKPk579ZApuk1A8FvGQa HTnsWvUySaOGa437dGclx/pX2k7stBR99PBq+had6L8nNmc0YCUNvDY5zVVUR+X9 Ng+a/bDlCYl4G6DGQhjCWn9p52qFypy+jOa2R5BLmCF4MZgUP/+wS3WmDbKnjGM4 5vVssqWrs5NqpufdRVdKtKWX0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHT3XTui 2zCiN7E+dNKs3Ksck1fDMB8GA1UdIwQYMBaAFHrG7/sEwrWA9aVranRs3+BTr2qe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDdFMS9DRTM0NzJERTRD QzgxMUVBQTA1OEVDMTRDNEY5QUUwMi9lc2J2LXdUQ3RZRDFwV3RxZEd6ZjRGT3Zh cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VzYnYtd1RDdFlEMXBXdHFkR3pmNEZPdmFwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDdFMS9DRTM0NzJERTRDQzgxMUVBQTA1OEVDMTRDNEY5QUUwMi9lc2J2LXdUQ3RZ RDFwV3RxZEd6ZjRGT3ZhcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwsfYZ/I9exkQiFSY0ntzzY1Z7gkkmRZr2iJNA7g0r+nVYcEsgnFT/ C6p6KAZ59OEtaqW4rBwSvItDCAV7+/k6vflr7QZeAa8BPXNBZLtqZHaXOe8ygtrm IVX0ecnBraQW9B2rrJMHBW5/L1r2l/ZtTzCpwtGsXz9LLmNTldG3KTMUdPlAGPVH HPzSkgiXVEXF6WH+XHP34uz220k/LdaFdD1Gvc3F6T0VA7TR4jjnW0diAtCNP5LY WCl3NqemGIIAQ57FAklU7eH/T8trYC+SLXTX2Bs5f0hM5mQKjCHzx78OgJINr4aX UZ9CygDoHLsgnX2lgkkiDkbXpO6N6NVx -----END CERTIFICATE-----Generated at Sat May 31 17:40:59 2025 by rpki-client