$ rpki-client -vvf rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft File: S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft (raw, json) Hash identifier: XyWghy7MGHxCEITp+m93ii4Y53ptZZ9vrIRqlQEi+q0= Subject key identifier: D3:78:3D:31:2C:75:C2:19:17:92:5E:F4:30:BC:8B:40:34:93:4E:D9 Authority key identifier: 4B:E1:07:39:36:25:2E:3C:F0:72:F9:89:D7:FD:C4:E7:E7:C6:62:74 Certificate issuer: /CN=A918E269/serialNumber=4BE1073936252E3CF072F989D7FDC4E7E7C66274 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft Manifest number: 0F Signing time: Sat 31 May 2025 07:38:51 +0000 Manifest this update: Sat 31 May 2025 07:38:50 +0000 Manifest next update: Sat 07 Jun 2025 07:38:50 +0000 Files and hashes: 1: S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.crl (hash: fR9n8dv2CZ9ahT+hglyta3SIbKYTYQYbSytTazUq4UE=) 2: 2B1A3764302A11F0B211AD0BC4F9AE02.roa (hash: 5PpNOEZEUrmc1vn5FvjeokwBWv9BOPfyJY3ybR1sQKs=) 3: F56C1CCC2B6F11F0B921B80EC4F9AE02.roa (hash: xE6bIhdn++6m4++H8g25LIhLe1MxCe3PRzQyPVY78VA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.crl rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E269, serialNumber=4BE1073936252E3CF072F989D7FDC4E7E7C66274 Validity Not Before: May 31 07:38:50 2025 GMT Not After : Jun 7 07:38:50 2025 GMT Subject: CN=683ab20a-fa8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:43:35:d1:b4:d0:8b:02:f5:61:a4:4c:2a:64: 71:4b:12:ce:a7:f1:32:c5:a8:ca:9a:56:5a:f0:66: d5:08:b6:0b:4e:ed:fb:86:6c:ac:6b:bd:5c:1d:f0: 18:2d:e5:c4:5e:33:7f:07:da:22:c5:5a:f9:25:af: c5:3f:ac:2c:2e:b8:52:f8:ab:ff:71:8a:0b:6a:87: 25:bd:26:da:7a:fc:32:d6:2d:e5:4a:4c:f6:28:7e: 50:00:f4:34:82:d5:b3:11:92:7e:15:20:eb:07:3e: 63:a2:a6:a0:c0:51:1d:ce:68:35:35:74:71:db:93: 6a:f8:c1:8a:84:58:23:80:b1:a8:ba:05:8c:b3:12: bb:92:50:3d:5f:67:54:d9:58:2f:60:98:a1:96:d6: ef:95:7e:1e:00:45:fb:0e:ab:c2:c1:17:a4:f0:b1: 9d:6b:3e:fb:82:88:e7:1e:67:87:2f:2a:aa:41:48: 46:ea:e6:65:4d:fe:a6:ce:8e:35:63:45:5b:69:0e: 5e:6a:92:58:15:ae:1f:5a:9a:d2:ff:55:af:0b:31: ff:89:cc:ef:7d:a7:a3:98:fc:90:9e:5f:51:64:95: 7d:76:d8:ac:7d:28:c1:33:15:ea:81:2c:6f:89:85: 8c:ed:52:6b:93:a8:f2:11:96:ec:41:88:b3:2a:79: 3d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:78:3D:31:2C:75:C2:19:17:92:5E:F4:30:BC:8B:40:34:93:4E:D9 X509v3 Authority Key Identifier: keyid:4B:E1:07:39:36:25:2E:3C:F0:72:F9:89:D7:FD:C4:E7:E7:C6:62:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:8f:d5:52:74:7d:75:19:cf:e1:5e:d8:a1:72:5a:3e:14:10: fc:bd:79:a5:45:67:d3:02:f0:e9:1f:04:98:b1:30:5e:0a:c7: 2a:d6:1b:bf:5c:da:6f:72:28:ad:a8:2e:d3:5d:d0:3c:0f:d7: 2a:ee:ca:e2:f2:c7:1f:44:49:fd:9a:96:d6:c3:18:3d:f6:0f: 51:23:ff:fb:db:d2:ee:43:35:56:f1:2b:60:17:e7:6e:f0:da: 04:ff:bb:d9:87:68:59:fa:84:7c:ba:14:b3:62:a2:4f:d8:3a: 8c:79:3d:c8:be:43:63:5e:3d:e9:d6:41:18:3c:9d:09:50:db: bb:bc:19:56:08:8c:c6:35:8e:ac:05:43:40:3e:ed:4b:5f:83: 8b:f9:22:0a:1f:29:14:c1:ff:3d:7b:84:16:8c:0d:c1:f1:ed: 29:18:b9:99:ac:29:b9:d0:fd:24:62:de:ec:bb:6d:bc:d7:d9: 59:9a:c7:ba:ce:52:95:f9:2b:0f:97:f8:97:3e:5b:5e:3b:32: 7e:00:49:36:a1:44:e5:2f:d5:64:83:5c:4a:3a:ed:33:f7:5a: eb:ba:29:af:f4:43:be:d3:32:8d:88:d5:81:12:ca:26:ca:2b: 78:3b:24:d6:4a:d6:07:98:6c:d8:5a:18:e4:f0:13:e9:05:0f: 61:b7:c4:82 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTI2OTExMC8GA1UEBRMoNEJFMTA3MzkzNjI1MkUzQ0YwNzJGOTg5RDdGREM0RTdF N0M2NjI3NDAeFw0yNTA1MzEwNzM4NTBaFw0yNTA2MDcwNzM4NTBaMBgxFjAUBgNV BAMTDTY4M2FiMjBhLWZhOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpQzXRtNCLAvVhpEwqZHFLEs6n8TLFqMqaVlrwZtUItgtO7fuGbKxrvVwd8Bgt 5cReM38H2iLFWvklr8U/rCwuuFL4q/9xigtqhyW9Jtp6/DLWLeVKTPYoflAA9DSC 1bMRkn4VIOsHPmOipqDAUR3OaDU1dHHbk2r4wYqEWCOAsai6BYyzEruSUD1fZ1TZ WC9gmKGW1u+Vfh4ARfsOq8LBF6TwsZ1rPvuCiOceZ4cvKqpBSEbq5mVN/qbOjjVj RVtpDl5qklgVrh9amtL/Va8LMf+JzO99p6OY/JCeX1FklX122Kx9KMEzFeqBLG+J hYztUmuTqPIRluxBiLMqeT2FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU03g9MSx1 whkXkl70MLyLQDSTTtkwHwYDVR0jBBgwFoAUS+EHOTYlLjzwcvmJ1/3E5+fGYnQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFMjY5LzM5M0JBOENFMkI2 RjExRjA4NkFERTU0RUM0RjlBRTAyL1MtRUhPVFlsTGp6d2N2bUoxXzNFNS1mR1lu US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUy1FSE9UWWxManp3Y3ZtSjFfM0U1LWZHWW5RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF MjY5LzM5M0JBOENFMkI2RjExRjA4NkFERTU0RUM0RjlBRTAyL1MtRUhPVFlsTGp6 d2N2bUoxXzNFNS1mR1luUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALWP1VJ0fXUZz+Fe2KFyWj4UEPy9eaVFZ9MC8OkfBJixMF4KxyrWG79c 2m9yKK2oLtNd0DwP1yruyuLyxx9ESf2altbDGD32D1Ej//vb0u5DNVbxK2AX527w 2gT/u9mHaFn6hHy6FLNiok/YOox5Pci+Q2NePenWQRg8nQlQ27u8GVYIjMY1jqwF Q0A+7Utfg4v5IgofKRTB/z17hBaMDcHx7SkYuZmsKbnQ/SRi3uy7bbzX2Vmax7rO UpX5Kw+X+Jc+W147Mn4ASTahROUv1WSDXEo67TP3Wuu6Ka/0Q77TMo2I1YESyibK K3g7JNZK1geYbNhaGOTwE+kFD2G3xII= -----END CERTIFICATE-----Generated at Sat May 31 16:25:52 2025 by rpki-client