$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft File: EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft (raw, json) Hash identifier: v4/KTn+0cJTD1q4OJUN5PleMOJs+eRyi1Um34dfBKLg= Subject key identifier: 10:DF:1D:30:FC:88:EC:AE:FA:C0:A6:37:0D:64:7B:D7:E4:DC:67:C0 Authority key identifier: 11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 Certificate issuer: /CN=A91FD4A1/serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544 Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft Manifest number: 01D7 Signing time: Sat 31 May 2025 02:29:35 +0000 Manifest this update: Sat 31 May 2025 02:29:34 +0000 Manifest next update: Sat 07 Jun 2025 02:29:34 +0000 Files and hashes: 1: EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl (hash: iYE+GzsNwR599diKcGhNrvRHknj0xkA2MwwKBBkQHrM=) 2: 16E990CA6B0411ED849E0957C4F9AE02.roa (hash: Uh7B24TrfbcaCXXos+UCRzkq1ccagOkOy3EbQYTwo0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4A1, serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544 Validity Not Before: May 31 02:29:34 2025 GMT Not After : Jun 7 02:29:34 2025 GMT Subject: CN=683a698e-b1fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:55:81:10:73:ec:81:92:a5:33:e0:f7:10:2d: cc:5a:29:58:5a:56:58:0d:03:1a:d2:3c:c9:0b:33: 12:54:9c:80:df:b5:7d:82:11:a7:a2:97:80:15:dd: 19:c6:db:82:10:bb:1c:25:db:00:a0:42:ff:c5:8c: ac:ab:6a:b1:1a:fd:63:22:ac:7b:c1:d4:24:60:6c: b4:84:d6:99:3a:97:5a:bd:b2:82:74:15:2a:8a:d6: d6:02:48:48:0c:fa:2f:3f:19:54:7c:93:7d:b8:92: 57:00:8a:7c:26:0c:24:08:de:62:48:00:83:f5:d1: 5e:ba:e5:52:69:d1:a4:51:90:70:a1:e2:55:14:2c: 3e:56:71:b6:5c:d6:6c:17:1c:60:1f:a9:06:d8:c8: dc:f6:84:35:e7:5a:83:de:f3:a7:c6:8d:25:43:1b: 37:77:69:1d:80:31:93:41:87:24:03:e5:b8:30:c0: 60:ce:d8:80:b2:74:20:96:f1:f5:10:82:61:d5:a6: 02:28:ec:8e:b1:cb:8c:af:7d:17:e0:f0:59:b5:ff: 1f:64:65:3b:70:16:41:94:ac:72:32:45:57:de:ac: 19:85:89:fb:e5:06:8f:a7:e2:2d:0b:7e:fd:a5:ce: d8:99:42:9e:8b:88:e3:7f:5b:57:2d:12:90:54:95: 40:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:DF:1D:30:FC:88:EC:AE:FA:C0:A6:37:0D:64:7B:D7:E4:DC:67:C0 X509v3 Authority Key Identifier: keyid:11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:64:be:79:06:ad:1d:e0:8e:c9:32:99:30:ba:a6:35:29:7a: 31:2f:dc:ca:e2:0c:9f:48:cc:44:be:d3:3a:ef:91:54:16:02: 30:51:f8:e4:96:2e:e8:05:e2:37:e8:5f:15:22:05:01:cb:61: a1:79:03:bf:f3:d6:81:96:c6:b8:ae:83:b9:72:43:a9:3b:36: 81:42:3a:3f:a5:13:bd:f2:a9:1c:d3:31:0e:67:1e:34:29:8c: 26:f0:81:f4:ff:51:33:29:c0:10:fa:d6:d7:19:a5:cf:26:2e: ac:6c:d5:05:3e:42:bb:6b:57:ad:35:ac:4d:81:bc:cb:5e:0b: c1:b6:1c:6c:c5:aa:0a:62:71:6b:dc:06:53:f2:ff:ef:e0:7d: ab:99:99:dc:ac:c7:c9:35:03:b4:05:25:88:c2:e7:13:f6:66: 70:d5:a0:50:de:6d:5d:2a:c8:7a:5d:f9:76:09:6c:a9:30:18: b7:a4:88:c6:61:10:f2:9a:8b:2c:ec:86:93:d7:6e:e7:7c:82: 9e:62:6a:f8:6e:36:c9:f2:5c:a5:ed:bc:0b:c9:02:df:97:a8: e8:16:16:94:91:ea:0e:44:cf:e7:35:dc:f2:eb:8e:a2:d5:d8: 6f:10:71:f5:8e:e2:65:6d:15:18:c7:57:b6:94:62:15:d5:a4: 25:4e:50:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0QTExMTAvBgNVBAUTKDExOTZDRERGREEzRUJEQzVBREE4RkZDNUJDQjM4NDkx MjE0N0Q1NDQwHhcNMjUwNTMxMDIyOTM0WhcNMjUwNjA3MDIyOTM0WjAYMRYwFAYD VQQDEw02ODNhNjk4ZS1iMWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1WBEHPsgZKlM+D3EC3MWilYWlZYDQMa0jzJCzMSVJyA37V9ghGnopeAFd0Z xtuCELscJdsAoEL/xYysq2qxGv1jIqx7wdQkYGy0hNaZOpdavbKCdBUqitbWAkhI DPovPxlUfJN9uJJXAIp8JgwkCN5iSACD9dFeuuVSadGkUZBwoeJVFCw+VnG2XNZs FxxgH6kG2Mjc9oQ151qD3vOnxo0lQxs3d2kdgDGTQYckA+W4MMBgztiAsnQglvH1 EIJh1aYCKOyOscuMr30X4PBZtf8fZGU7cBZBlKxyMkVX3qwZhYn75QaPp+ItC379 pc7YmUKei4jjf1tXLRKQVJVAmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDfHTD8 iOyu+sCmNw1ke9fk3GfAMB8GA1UdIwQYMBaAFBGWzd/aPr3Fraj/xbyzhJEhR9VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDRBMS82MkI0MjNCQTZC MDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZjV3RxUF9GdkxPRWtTRkgx VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VaYk4zOW8tdmNXdHFQX0Z2TE9Fa1NGSDFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDRBMS82MkI0MjNCQTZCMDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZj V3RxUF9GdkxPRWtTRkgxVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNZL55Bq0d4I7JMpkwuqY1KXoxL9zK4gyfSMxEvtM675FUFgIwUfjk li7oBeI36F8VIgUBy2GheQO/89aBlsa4roO5ckOpOzaBQjo/pRO98qkc0zEOZx40 KYwm8IH0/1EzKcAQ+tbXGaXPJi6sbNUFPkK7a1etNaxNgbzLXgvBthxsxaoKYnFr 3AZT8v/v4H2rmZncrMfJNQO0BSWIwucT9mZw1aBQ3m1dKsh6Xfl2CWypMBi3pIjG YRDymoss7IaT127nfIKeYmr4bjbJ8lyl7bwLyQLfl6joFhaUkeoORM/nNdzy646i 1dhvEHH1juJlbRUYx1e2lGIV1aQlTlB0 -----END CERTIFICATE-----Generated at Sat May 31 16:39:55 2025 by rpki-client