$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft File: EhCVgwI-GF3korKUIxWZ1jZAvJo.mft (raw, json) Hash identifier: RrxBur5IIbqbzFccnnAcxKbuNs15OaP94JAMPJ10UcI= Subject key identifier: E3:25:DA:50:64:49:F9:17:16:53:B8:00:1C:EE:0D:40:1A:79:FB:67 Authority key identifier: 12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A Certificate issuer: /CN=A918B5FE/serialNumber=12109583023E185DE4A2B294231599D63640BC9A Certificate serial: 06B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft Manifest number: 06A2 Signing time: Fri 30 May 2025 22:24:23 +0000 Manifest this update: Fri 30 May 2025 22:24:22 +0000 Manifest next update: Fri 06 Jun 2025 22:24:22 +0000 Files and hashes: 1: EhCVgwI-GF3korKUIxWZ1jZAvJo.crl (hash: /ec3b9pqqFNrlJfJw0MYl2wPlKVKSMCei3fZEbFFXk8=) 2: E744DAB06C0D11EB89BF4725C4F9AE02.roa (hash: GwGIG8w2Paja8QeJTC/4mPTw5xBTF4eu77tf9+sFGXE=) 3: E649E89E6C0D11EB89BF4725C4F9AE02.roa (hash: mUNLSSwDIjdC6PSsJdAOAQiuBxAVwe81C3tB9ntlwCU=) 4: 4652D2C2DF3C11EBAC0C7536C4F9AE02.roa (hash: WSWSmKF2Dr04+H2IY6+uuwpQnhp2M2KysyXEj72OLxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1717 (0x6b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B5FE, serialNumber=12109583023E185DE4A2B294231599D63640BC9A Validity Not Before: May 30 22:24:22 2025 GMT Not After : Jun 6 22:24:22 2025 GMT Subject: CN=683a3016-02b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:53:90:7f:18:e7:e4:84:4b:40:e1:a2:b6:09: fd:eb:43:fe:54:67:dc:5a:5a:fa:66:4e:a2:c2:17: d3:d5:2f:02:e2:ca:90:33:1a:9c:e8:20:0e:cf:c4: 90:81:e4:aa:e0:c3:4d:75:bd:e8:91:0f:ae:f6:05: 9f:be:01:5b:74:b4:bd:5f:e7:8b:c4:35:2a:40:a6: a6:95:29:55:0f:4a:02:e4:1d:b4:44:d2:26:60:52: 48:b5:37:08:cf:b3:a3:33:04:4e:04:49:1c:75:ef: a5:68:42:62:02:07:63:54:d1:cd:71:17:98:3b:8a: 73:84:e4:6e:ee:16:fa:e2:3b:ba:1b:2b:75:d6:bf: 4c:0a:20:cf:1c:76:32:ad:b5:77:40:93:5b:08:9d: bd:69:fe:4b:33:f6:14:4f:3b:da:0c:01:24:d9:b0: 3f:ef:e2:32:4c:b7:50:ca:9a:b9:78:74:79:f8:0f: c7:5a:96:65:0f:ab:7f:e2:58:e9:dc:46:d1:d1:eb: 01:6b:4b:fa:4e:fc:c3:fc:72:fa:96:a1:ee:ad:6b: 2a:14:96:84:d5:46:31:a1:20:63:ff:55:7c:54:a1: 4d:8a:1a:1f:b6:20:7c:82:8c:71:43:84:a1:f8:78: 33:31:b8:85:e0:d1:38:6b:14:62:00:25:37:ee:fa: 0e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:25:DA:50:64:49:F9:17:16:53:B8:00:1C:EE:0D:40:1A:79:FB:67 X509v3 Authority Key Identifier: keyid:12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:e9:87:a2:16:8c:22:0b:30:d2:de:8c:76:68:6b:0f:57:6c: 7c:88:35:5d:a7:c6:0d:11:af:58:07:3f:c5:64:81:d9:dd:b3: c1:e8:ff:c6:d0:13:69:e6:7a:6e:e5:e5:ec:f4:c0:1a:39:c6: 8c:eb:89:d3:f4:fd:2f:ae:58:0c:ec:aa:da:18:e6:8c:05:e5: f9:f4:ed:c4:33:32:df:38:04:ba:e6:c6:04:06:92:70:6b:06: e6:3d:e4:e3:82:f3:cc:a5:da:e8:a7:b4:02:27:04:d8:38:35: db:8c:cc:e5:e6:e8:2b:19:0f:1f:9f:47:ef:47:3e:03:2a:c7: cf:a4:85:31:91:1f:73:e6:d7:ae:c6:ae:a9:0e:07:04:da:bd: 9e:f4:dd:19:a9:6c:e2:8f:0c:3d:18:a9:22:3b:4b:c5:d8:33: 38:e7:93:e6:d5:a8:fb:4d:86:63:c0:89:e7:c0:66:34:39:d3: 64:96:08:39:e6:11:df:e0:0f:d9:7c:aa:08:5e:8c:24:9d:ae: b2:d4:e1:aa:a6:27:7b:68:4e:ae:5f:19:a7:26:95:45:ff:75: e5:e2:84:a8:44:bd:f6:b7:bf:42:d4:b9:e4:50:63:3e:ce:ec: 69:2b:26:fc:85:01:2b:c9:59:8d:ee:44:32:46:dd:08:4d:fb: 98:db:18:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI1RkUxMTAvBgNVBAUTKDEyMTA5NTgzMDIzRTE4NURFNEEyQjI5NDIzMTU5OUQ2 MzY0MEJDOUEwHhcNMjUwNTMwMjIyNDIyWhcNMjUwNjA2MjIyNDIyWjAYMRYwFAYD VQQDEw02ODNhMzAxNi0wMmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1OQfxjn5IRLQOGitgn960P+VGfcWlr6Zk6iwhfT1S8C4sqQMxqc6CAOz8SQ geSq4MNNdb3okQ+u9gWfvgFbdLS9X+eLxDUqQKamlSlVD0oC5B20RNImYFJItTcI z7OjMwROBEkcde+laEJiAgdjVNHNcReYO4pzhORu7hb64ju6Gyt11r9MCiDPHHYy rbV3QJNbCJ29af5LM/YUTzvaDAEk2bA/7+IyTLdQypq5eHR5+A/HWpZlD6t/4ljp 3EbR0esBa0v6TvzD/HL6lqHurWsqFJaE1UYxoSBj/1V8VKFNihoftiB8goxxQ4Sh +HgzMbiF4NE4axRiACU37voOqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMl2lBk SfkXFlO4ABzuDUAaeftnMB8GA1UdIwQYMBaAFBIQlYMCPhhd5KKylCMVmdY2QLya MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjVGRS8zQ0VFREY5MDZB OUUxMUVCQjY3NjIzMThDNEY5QUUwMi9FaENWZ3dJLUdGM2tvcktVSXhXWjFqWkF2 Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VoQ1Znd0ktR0Yza29yS1VJeFdaMWpaQXZKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjVGRS8zQ0VFREY5MDZBOUUxMUVCQjY3NjIzMThDNEY5QUUwMi9FaENWZ3dJLUdG M2tvcktVSXhXWjFqWkF2Sm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC6YeiFowiCzDS3ox2aGsPV2x8iDVdp8YNEa9YBz/FZIHZ3bPB6P/G 0BNp5npu5eXs9MAaOcaM64nT9P0vrlgM7KraGOaMBeX59O3EMzLfOAS65sYEBpJw awbmPeTjgvPMpdrop7QCJwTYODXbjMzl5ugrGQ8fn0fvRz4DKsfPpIUxkR9z5teu xq6pDgcE2r2e9N0ZqWzijww9GKkiO0vF2DM455Pm1aj7TYZjwInnwGY0OdNklgg5 5hHf4A/ZfKoIXowkna6y1OGqpid7aE6uXxmnJpVF/3Xl4oSoRL32t79C1LnkUGM+ zuxpKyb8hQEryVmN7kQyRt0ITfuY2xil -----END CERTIFICATE-----Generated at Sat May 31 17:03:26 2025 by rpki-client