$ rpki-client -vvf rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft File: eiygmoVxKbGAQoJJIxJDPat15sI.mft (raw, json) Hash identifier: Sv+W9GB99pfVtlBxODktOnDelwY+ru0/Rm9B0nLGXDA= Subject key identifier: 8D:04:E3:77:1D:6C:EF:F0:5F:36:2D:76:C9:50:9E:6F:7F:C9:31:A3 Authority key identifier: 7A:2C:A0:9A:85:71:29:B1:80:42:82:49:23:12:43:3D:AB:75:E6:C2 Certificate issuer: /CN=A9112571/serialNumber=7A2CA09A857129B1804282492312433DAB75E6C2 Certificate serial: 01D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft Manifest number: 01D0 Signing time: Fri 25 Apr 2025 02:03:12 +0000 Manifest this update: Fri 25 Apr 2025 02:03:12 +0000 Manifest next update: Fri 02 May 2025 02:03:12 +0000 Files and hashes: 1: eiygmoVxKbGAQoJJIxJDPat15sI.crl (hash: uFDCfU1JGqM6xH+SeRPsZNFoZw2fIFsPWl6/NXKEm20=) 2: ECDFCD86656711EDBED7F511C4F9AE02.roa (hash: lL1Uo6lKBPims7sIcK6Rx8lWBhL0RLQ4pwqUL45ZkTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.crl rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:03:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112571, serialNumber=7A2CA09A857129B1804282492312433DAB75E6C2 Validity Not Before: Apr 25 02:03:12 2025 GMT Not After : May 2 02:03:12 2025 GMT Subject: CN=680aed60-b185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:77:42:77:bb:d4:fe:73:8d:e0:48:93:4e:8e: d1:f6:f0:83:9d:da:e4:13:75:32:89:f1:58:77:cc: 70:fd:e9:69:69:28:59:55:b3:4e:28:8e:03:36:9d: 27:21:6d:78:66:f5:ef:fc:25:04:ed:48:01:df:d0: ab:9c:f0:7e:e2:8f:d0:2b:5b:16:1e:d8:1d:77:ef: 2d:80:70:e2:a5:24:a4:d6:0e:b9:5a:40:dd:e7:de: a8:50:d2:18:53:13:4f:2d:63:52:da:ea:f4:fb:59: 46:15:0c:3a:6d:46:ce:dc:bb:d4:ae:a4:a2:42:17: 02:f3:17:71:83:96:af:53:18:d8:36:84:f2:65:5b: 6e:b2:84:4a:40:a2:a9:2a:79:37:f0:e8:13:4d:46: a7:c9:10:81:4a:34:0d:67:64:c3:8d:62:5a:1f:0a: 65:73:4e:ce:cf:c3:6f:b8:ad:25:8c:cf:3c:97:5a: 4d:9a:d3:b7:a6:00:83:2a:d0:06:a4:23:4d:8a:8f: 26:ba:cd:12:6b:34:0a:db:4f:fd:88:b8:d0:0d:1c: 2e:82:3b:a2:28:f3:2d:3d:79:e6:b5:5f:07:5b:05: 8b:48:ec:fd:fb:01:77:76:c0:46:a9:10:d5:e3:04: e0:56:e7:ba:80:cd:bf:7a:58:09:9e:4f:80:a0:5f: ac:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:04:E3:77:1D:6C:EF:F0:5F:36:2D:76:C9:50:9E:6F:7F:C9:31:A3 X509v3 Authority Key Identifier: keyid:7A:2C:A0:9A:85:71:29:B1:80:42:82:49:23:12:43:3D:AB:75:E6:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:22:d9:78:6a:98:74:65:be:f9:cd:2f:99:0d:21:86:ea:0d: 42:a9:8c:fe:b3:b6:17:a3:4c:b4:77:28:0e:a0:d4:f1:ba:57: c0:e2:f3:f4:4d:17:d9:84:1a:0c:3c:20:bb:b6:10:9f:ae:27: 6a:f5:8a:6c:73:63:44:f2:65:f4:13:df:09:b8:cf:a7:a1:1e: 87:77:c7:fc:0f:8a:b2:6c:6a:bc:71:52:b9:a9:2d:9b:be:79: 9b:f7:42:be:37:32:e0:1b:d3:0e:42:7e:03:f7:cc:11:62:4f: cd:71:90:b5:c9:47:1c:94:cf:2d:3c:2e:74:a8:01:09:1f:ef: af:7b:9a:0b:a2:4d:86:5a:c5:95:80:2f:d3:da:91:1c:2d:65: 20:5e:a7:56:86:c1:da:f5:6d:d8:63:8d:f5:c0:57:24:c9:d5: 54:4b:fc:89:56:93:60:33:b5:e2:bd:20:58:ca:0a:13:9e:86: c5:ec:e4:ae:6f:71:8f:b6:70:25:1e:57:8e:98:f8:e1:de:d1: 31:16:d6:ca:6f:dd:82:2e:2e:ea:3c:96:fe:ab:b3:c7:27:5b: 5f:a6:8c:7b:14:80:43:e7:06:5e:6e:78:9b:07:9e:59:a9:fa: 23:ef:3b:ed:55:81:d6:51:77:74:5c:2b:cd:a6:1f:68:35:82: e9:5a:b2:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI1NzExMTAvBgNVBAUTKDdBMkNBMDlBODU3MTI5QjE4MDQyODI0OTIzMTI0MzNE QUI3NUU2QzIwHhcNMjUwNDI1MDIwMzEyWhcNMjUwNTAyMDIwMzEyWjAYMRYwFAYD VQQDEw02ODBhZWQ2MC1iMTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXdCd7vU/nON4EiTTo7R9vCDndrkE3UyifFYd8xw/elpaShZVbNOKI4DNp0n IW14ZvXv/CUE7UgB39CrnPB+4o/QK1sWHtgdd+8tgHDipSSk1g65WkDd596oUNIY UxNPLWNS2ur0+1lGFQw6bUbO3LvUrqSiQhcC8xdxg5avUxjYNoTyZVtusoRKQKKp Knk38OgTTUanyRCBSjQNZ2TDjWJaHwplc07Oz8NvuK0ljM88l1pNmtO3pgCDKtAG pCNNio8mus0SazQK20/9iLjQDRwugjuiKPMtPXnmtV8HWwWLSOz9+wF3dsBGqRDV 4wTgVue6gM2/elgJnk+AoF+smwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0E43cd bO/wXzYtdslQnm9/yTGjMB8GA1UdIwQYMBaAFHosoJqFcSmxgEKCSSMSQz2rdebC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjU3MS8yMDk5NDlFNDYx RUYxMUVEQTc2OEE5NjdDNEY5QUUwMi9laXlnbW9WeEtiR0FRb0pKSXhKRFBhdDE1 c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VpeWdtb1Z4S2JHQVFvSkpJeEpEUGF0MTVzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjU3MS8yMDk5NDlFNDYxRUYxMUVEQTc2OEE5NjdDNEY5QUUwMi9laXlnbW9WeEti R0FRb0pKSXhKRFBhdDE1c0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRItl4aph0Zb75zS+ZDSGG6g1CqYz+s7YXo0y0dygOoNTxulfA4vP0 TRfZhBoMPCC7thCfridq9Ypsc2NE8mX0E98JuM+noR6Hd8f8D4qybGq8cVK5qS2b vnmb90K+NzLgG9MOQn4D98wRYk/NcZC1yUcclM8tPC50qAEJH++ve5oLok2GWsWV gC/T2pEcLWUgXqdWhsHa9W3YY431wFckydVUS/yJVpNgM7XivSBYygoTnobF7OSu b3GPtnAlHleOmPjh3tExFtbKb92CLi7qPJb+q7PHJ1tfpox7FIBD5wZebnibB55Z qfoj7zvtVYHWUXd0XCvNph9oNYLpWrLM -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:23 2025 by rpki-client