$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft File: ech9xZWwwn0jMpvJkoSiPIv9oOc.mft (raw, json) Hash identifier: jsVUmbnrKCEk3ZJhysody9v90ucf0hcNnxhrVsP121M= Subject key identifier: 40:0B:DB:E9:09:1F:90:13:3C:AA:E9:1B:49:AD:05:8F:49:B1:52:0B Authority key identifier: 79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7 Certificate issuer: /CN=A91B2D4F/serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7 Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft Manifest number: 0158 Signing time: Sat 31 May 2025 03:44:18 +0000 Manifest this update: Sat 31 May 2025 03:44:17 +0000 Manifest next update: Sat 07 Jun 2025 03:44:17 +0000 Files and hashes: 1: ech9xZWwwn0jMpvJkoSiPIv9oOc.crl (hash: uqT9TFqvAKVLE+9zJezmwN7Yw0VFUrHESTLZ1JGNZUw=) 2: 416EB4022F6111EE8C156634C4F9AE02.roa (hash: UzoADIDRcmbkR0v1b40VKhU4NXIbJvMsYpFVM0H3D88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:44:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D4F, serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7 Validity Not Before: May 31 03:44:17 2025 GMT Not After : Jun 7 03:44:17 2025 GMT Subject: CN=683a7b11-4e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d4:43:47:f7:9a:d8:d0:bf:c4:e2:bd:bb:e5: 06:fa:79:1c:82:72:97:0a:16:53:b3:b0:8f:4f:b4: 50:c2:cd:fe:c6:b8:13:d9:47:c7:5a:9d:a6:a6:86: 18:6b:bb:97:b9:b9:45:df:95:25:33:e9:08:70:ba: f8:02:79:9b:e4:38:0f:bf:0d:ee:8b:d5:45:a9:29: 7b:46:be:e3:12:8e:47:fe:ee:75:2a:a1:f1:ed:6c: d6:bb:66:e4:da:5b:a3:d5:14:b0:50:d0:db:50:df: 9e:50:4f:06:89:69:70:b9:c5:cd:01:c0:72:87:e9: 8b:ac:8a:33:6c:c5:d1:80:0a:49:04:5e:f7:dc:fe: e2:bd:1a:7e:41:32:3a:e9:d1:1b:d7:f1:ed:3a:e7: 1d:86:61:43:c0:d7:3f:18:3c:98:05:b4:d1:1b:48: 64:c0:a5:d8:e2:ef:85:af:9e:7b:77:c6:04:3a:c3: 77:cc:4c:91:4a:b0:4c:2d:01:8f:82:d6:d1:d4:76: 7c:81:63:e5:e1:dd:da:c3:fc:f9:2b:c8:c2:e3:13: 80:6a:34:f0:89:fd:e6:43:91:36:ef:fc:02:2e:63: 92:cd:49:c9:cb:ed:53:ee:bb:6c:b0:1e:66:e0:10: dc:a2:bb:71:bb:94:dc:34:bc:a6:ca:47:2d:15:03: f8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:0B:DB:E9:09:1F:90:13:3C:AA:E9:1B:49:AD:05:8F:49:B1:52:0B X509v3 Authority Key Identifier: keyid:79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:0f:35:d6:89:ed:73:5b:ea:32:05:f2:d3:8f:81:2f:76:6f: 05:fc:f9:51:65:cc:ef:e4:7b:e9:19:b4:83:e9:21:90:14:64: ec:6c:13:bb:3d:3f:13:06:8a:63:41:a6:72:af:84:0e:a9:66: 51:e3:45:6c:2a:f6:7b:3e:d7:de:6a:fe:fa:9c:17:33:48:49: a5:73:45:51:17:b3:cd:ee:b7:30:ad:a3:5f:d1:e2:b4:b9:54: c2:90:60:0a:40:2b:ff:88:d0:0b:ca:ab:75:fd:3e:c2:b5:54: 97:eb:d3:ce:fe:45:a6:fb:be:22:d4:c2:ce:4b:f3:d8:0e:65: 6f:2f:5d:95:55:b4:8b:c4:b4:15:27:15:30:93:a9:be:c2:18: b7:68:f4:39:3b:eb:5f:52:aa:46:72:f9:7a:05:65:b2:c2:e3: a4:0b:08:cd:bc:c4:c2:e0:2e:18:a3:0a:1a:48:b1:b0:1b:40: 4f:25:22:c4:96:72:35:d4:27:57:78:1a:cf:8e:f3:e1:c0:4c: 32:6f:bc:4e:20:59:a6:15:4f:5a:80:d7:b0:13:a5:7d:4c:8f: d6:ac:87:1c:b6:7c:c6:1a:7a:4f:9b:40:35:25:01:ff:1e:5d: 69:7e:fa:a8:e9:46:de:8f:54:4a:8b:7c:15:a3:4e:b7:fa:91: 28:10:ff:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJENEYxMTAvBgNVBAUTKDc5Qzg3REM1OTVCMEMyN0QyMzMyOUJDOTkyODRBMjND OEJGREEwRTcwHhcNMjUwNTMxMDM0NDE3WhcNMjUwNjA3MDM0NDE3WjAYMRYwFAYD VQQDEw02ODNhN2IxMS00ZTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5NRDR/ea2NC/xOK9u+UG+nkcgnKXChZTs7CPT7RQws3+xrgT2UfHWp2mpoYY a7uXublF35UlM+kIcLr4Anmb5DgPvw3ui9VFqSl7Rr7jEo5H/u51KqHx7WzWu2bk 2luj1RSwUNDbUN+eUE8GiWlwucXNAcByh+mLrIozbMXRgApJBF733P7ivRp+QTI6 6dEb1/HtOucdhmFDwNc/GDyYBbTRG0hkwKXY4u+Fr557d8YEOsN3zEyRSrBMLQGP gtbR1HZ8gWPl4d3aw/z5K8jC4xOAajTwif3mQ5E27/wCLmOSzUnJy+1T7rtssB5m 4BDcortxu5TcNLymykctFQP4dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEAL2+kJ H5ATPKrpG0mtBY9JsVILMB8GA1UdIwQYMBaAFHnIfcWVsMJ9IzKbyZKEojyL/aDn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQ0Ri9FRjg3NTUxODJG NjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3duMGpNcHZKa29TaVBJdjlv T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VjaDl4Wld3d24wak1wdkprb1NpUEl2OW9PYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQ0Ri9FRjg3NTUxODJGNjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3du MGpNcHZKa29TaVBJdjlvT2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiDzXWie1zW+oyBfLTj4Evdm8F/PlRZczv5HvpGbSD6SGQFGTsbBO7 PT8TBopjQaZyr4QOqWZR40VsKvZ7Ptfeav76nBczSEmlc0VRF7PN7rcwraNf0eK0 uVTCkGAKQCv/iNALyqt1/T7CtVSX69PO/kWm+74i1MLOS/PYDmVvL12VVbSLxLQV JxUwk6m+whi3aPQ5O+tfUqpGcvl6BWWywuOkCwjNvMTC4C4YowoaSLGwG0BPJSLE lnI11CdXeBrPjvPhwEwyb7xOIFmmFU9agNewE6V9TI/WrIcctnzGGnpPm0A1JQH/ Hl1pfvqo6Ubej1RKi3wVo063+pEoEP+0 -----END CERTIFICATE-----Generated at Sat May 31 16:56:10 2025 by rpki-client