$ rpki-client -vvf rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft File: EEz4cGO16r803k4l_s6ata9zbBQ.mft (raw, json) Hash identifier: WKS8IBAYullUQyYvk1/9ZL1fSk3Y6kjJuLfVSIE1Dmg= Subject key identifier: 46:06:32:46:B7:6C:57:69:19:2C:E6:FF:83:D0:6F:67:CF:E5:4B:E1 Authority key identifier: 10:4C:F8:70:63:B5:EA:BF:34:DE:4E:25:FE:CE:9A:B5:AF:73:6C:14 Certificate issuer: /CN=A9111FFD/serialNumber=104CF87063B5EABF34DE4E25FECE9AB5AF736C14 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft Manifest number: 34 Signing time: Fri 25 Apr 2025 06:39:58 +0000 Manifest this update: Fri 25 Apr 2025 06:39:58 +0000 Manifest next update: Fri 02 May 2025 06:39:58 +0000 Files and hashes: 1: EEz4cGO16r803k4l_s6ata9zbBQ.crl (hash: AScezZAw4T+xKQwfDj1O6NgxYaZzfjj6waJk9x5wdn8=) 2: 7BF6BA42E91A11EF804C4B57C4F9AE02.roa (hash: HNlYiglg+bBDY8hf2XbMc61T9NCbbnRV5gfydPimiu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.crl rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111FFD, serialNumber=104CF87063B5EABF34DE4E25FECE9AB5AF736C14 Validity Not Before: Apr 25 06:39:58 2025 GMT Not After : May 2 06:39:58 2025 GMT Subject: CN=680b2e3e-4806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:5e:b5:b8:56:b1:e3:ec:93:00:77:0d:bc:e2: e3:7a:ae:25:3c:dd:35:32:39:28:3e:be:5b:91:c2: e6:81:08:ab:91:c1:e1:0c:e1:69:37:08:1e:c2:81: d9:f8:b2:29:a3:b2:dc:7b:28:29:3c:0a:40:94:24: 1d:3a:20:42:7c:ec:b0:85:5d:32:4a:d2:c9:92:cf: ec:82:66:6e:30:e2:97:53:71:b9:a5:79:7a:11:20: d3:4a:2a:78:7f:c3:5b:8d:34:89:e4:6e:79:64:a5: a4:d6:b8:d1:09:e3:09:06:9c:b3:d5:03:94:02:27: e7:e7:62:09:b9:d6:92:ac:bd:02:fd:70:f7:37:65: 3b:2c:01:e3:c2:30:08:2c:68:85:13:b1:5e:25:73: 02:17:d8:d6:1a:08:bb:43:67:07:35:ba:a5:ad:88: 3f:8e:f6:ef:f8:61:a4:37:fc:e6:4b:e2:be:42:3c: ee:5c:0e:1e:e3:f1:09:b8:36:de:2a:d5:e1:02:5e: 2c:94:1a:9d:cc:66:80:13:59:5b:91:84:aa:97:9d: c6:f6:cb:1a:a1:38:a3:16:99:24:67:26:83:e8:72: 61:80:59:5e:f0:11:6b:de:9b:f2:48:7f:cd:f1:3c: 64:9a:b1:47:c2:08:3f:9e:02:f9:c6:ad:43:1b:e2: 4e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:06:32:46:B7:6C:57:69:19:2C:E6:FF:83:D0:6F:67:CF:E5:4B:E1 X509v3 Authority Key Identifier: keyid:10:4C:F8:70:63:B5:EA:BF:34:DE:4E:25:FE:CE:9A:B5:AF:73:6C:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:2f:7c:49:c8:bc:01:e8:10:66:a0:47:6d:1c:29:82:0d:73: a1:39:83:ec:39:85:d6:73:78:de:df:74:61:15:1b:3b:53:a4: 0e:62:13:8c:22:41:f1:d2:85:55:14:e1:86:51:77:cf:8d:5d: 59:e7:ac:9b:79:4c:71:c8:bf:49:cd:c8:ca:82:2d:14:af:7c: 6c:d3:43:0a:e9:04:1c:41:0d:05:3e:bd:19:86:8e:c6:bc:83: 8b:c1:44:9f:b9:3c:cb:b2:ef:0e:3b:8c:d8:e7:76:70:d4:14: 00:1f:c9:e8:9d:fa:86:82:71:83:2e:6e:b2:c9:6b:0c:d9:cc: 50:57:d6:85:76:87:8a:90:3e:0f:f4:57:0f:14:64:de:0d:17: aa:d2:97:b9:53:68:18:51:1d:4a:62:54:14:af:66:84:2e:1d: 84:45:10:86:4f:6d:78:c6:4f:b8:e2:39:c3:14:d5:80:fc:f7: f3:ac:90:17:e3:88:c4:0f:58:de:5f:3a:a9:91:a3:f1:05:c7: d0:a2:5c:cc:b5:bc:0f:0e:69:4d:aa:9d:d5:3e:1c:12:7c:1f: b9:27:a4:17:d1:5c:6f:c7:73:64:7e:3e:fb:2c:c9:78:d9:4b: 20:7a:6f:2a:20:2e:f7:e9:3a:1f:f1:d1:99:84:f0:9d:96:07: b2:66:15:6d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MUZGRDExMC8GA1UEBRMoMTA0Q0Y4NzA2M0I1RUFCRjM0REU0RTI1RkVDRTlBQjVB RjczNkMxNDAeFw0yNTA0MjUwNjM5NThaFw0yNTA1MDIwNjM5NThaMBgxFjAUBgNV BAMTDTY4MGIyZTNlLTQ4MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD6XrW4VrHj7JMAdw284uN6riU83TUyOSg+vluRwuaBCKuRweEM4Wk3CB7Cgdn4 simjstx7KCk8CkCUJB06IEJ87LCFXTJK0smSz+yCZm4w4pdTcbmleXoRINNKKnh/ w1uNNInkbnlkpaTWuNEJ4wkGnLPVA5QCJ+fnYgm51pKsvQL9cPc3ZTssAePCMAgs aIUTsV4lcwIX2NYaCLtDZwc1uqWtiD+O9u/4YaQ3/OZL4r5CPO5cDh7j8Qm4Nt4q 1eECXiyUGp3MZoATWVuRhKqXncb2yxqhOKMWmSRnJoPocmGAWV7wEWvem/JIf83x PGSasUfCCD+eAvnGrUMb4k63AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURgYyRrds V2kZLOb/g9BvZ8/lS+EwHwYDVR0jBBgwFoAUEEz4cGO16r803k4l/s6ata9zbBQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExRkZELzQyRUIwNTM0REQz ODExRUY5QzM0Njc0NUM0RjlBRTAyL0VFejRjR08xNnI4MDNrNGxfczZhdGE5emJC US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRUV6NGNHTzE2cjgwM2s0bF9zNmF0YTl6YkJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx RkZELzQyRUIwNTM0REQzODExRUY5QzM0Njc0NUM0RjlBRTAyL0VFejRjR08xNnI4 MDNrNGxfczZhdGE5emJCUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEovfEnIvAHoEGagR20cKYINc6E5g+w5hdZzeN7fdGEVGztTpA5iE4wi QfHShVUU4YZRd8+NXVnnrJt5THHIv0nNyMqCLRSvfGzTQwrpBBxBDQU+vRmGjsa8 g4vBRJ+5PMuy7w47jNjndnDUFAAfyeid+oaCcYMubrLJawzZzFBX1oV2h4qQPg/0 Vw8UZN4NF6rSl7lTaBhRHUpiVBSvZoQuHYRFEIZPbXjGT7jiOcMU1YD89/OskBfj iMQPWN5fOqmRo/EFx9CiXMy1vA8OaU2qndU+HBJ8H7knpBfRXG/Hc2R+PvssyXjZ SyB6byogLvfpOh/x0ZmE8J2WB7JmFW0= -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:21 2025 by rpki-client