$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft File: EPYca742dARRL7yDzdqFqZx_PHU.mft (raw, json) Hash identifier: A6yF3lHOq//dbzGpZ0AbsPuEJ7mYmEobGoxkXINIdI8= Subject key identifier: 81:21:2B:44:98:28:EA:51:11:0D:B1:9F:99:61:2F:29:82:4D:DF:6A Authority key identifier: 10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75 Certificate issuer: /CN=A9120974/serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75 Certificate serial: 105E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft Manifest number: 1054 Signing time: Thu 24 Apr 2025 17:24:22 +0000 Manifest this update: Thu 24 Apr 2025 17:24:21 +0000 Manifest next update: Thu 01 May 2025 17:24:21 +0000 Files and hashes: 1: EPYca742dARRL7yDzdqFqZx_PHU.crl (hash: FyHNy5EnieD8yFL4iv5upjqxv5ZY5TG9ND1HQdaPszQ=) 2: EAE5FA0068F111EC8890FA3FC4F9AE02.roa (hash: EjWAvqG0p06YrvyVbdxSE0MmSKbTzSV0pAzJygZ+3+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4190 (0x105e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75 Validity Not Before: Apr 24 17:24:21 2025 GMT Not After : May 1 17:24:21 2025 GMT Subject: CN=680a73c5-cc26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6d:4c:f5:b2:a3:99:1e:e7:ee:dd:df:9e:2c: 1b:af:a2:d1:82:ec:e5:3e:eb:3f:92:c1:85:02:03: 98:58:7d:43:01:cf:b4:9c:92:d2:e4:ee:57:a0:37: c7:49:51:66:93:5c:f8:a9:3c:4b:7d:04:43:db:c7: 81:07:94:11:b8:95:94:6d:5c:2b:60:34:c9:46:e1: d2:22:76:49:df:f0:34:46:01:9d:f5:86:8f:17:1f: 8f:37:7d:03:5d:b3:83:f7:87:4d:5f:9d:52:b9:f9: 3f:94:50:07:b6:66:16:c6:e0:b9:67:1e:d3:de:55: 39:10:d3:9e:24:bb:a8:b2:ba:84:e2:64:61:5b:c4: 1a:30:7b:36:a7:e2:d1:e3:c2:c1:d8:af:8d:71:da: 97:77:20:8a:74:31:fd:0e:c4:0d:fa:16:24:36:e2: c4:15:5c:44:7c:bf:b7:25:e0:5b:b3:65:a8:ef:de: 8a:5b:9b:e6:ce:5f:f2:b8:b1:7a:b9:db:76:b8:11: f3:42:89:e4:fc:66:b7:a3:1c:cf:ce:d5:e3:13:81: 71:50:54:d9:f0:dc:a5:e6:91:0d:2f:07:4b:c5:4b: b6:29:62:e5:fa:be:17:d7:c5:a1:8a:bc:34:03:2b: b9:bf:a2:5b:d7:63:6e:0d:58:26:f8:62:14:9e:2e: 24:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:21:2B:44:98:28:EA:51:11:0D:B1:9F:99:61:2F:29:82:4D:DF:6A X509v3 Authority Key Identifier: keyid:10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:84:71:94:a4:f2:60:09:02:68:96:64:32:a5:1b:36:0a:4d: 23:bf:c5:a5:39:f2:71:73:99:2d:a2:ea:20:81:88:65:95:65: 0d:c3:0e:85:ee:d1:cb:c7:75:d8:7f:82:4c:b1:c3:de:50:99: 81:86:f4:f7:c9:ce:f7:ad:93:ca:5c:84:b2:8c:f1:02:b8:41: f1:8a:9f:2a:28:c7:d8:ae:bf:38:3b:42:4e:9b:8b:e4:02:8c: 2c:d0:9c:d5:b6:6e:b8:61:ce:b8:da:a4:a2:0d:85:fa:d8:3c: 92:48:c7:a5:45:da:c2:c3:bb:bc:02:04:b9:14:3b:ad:1e:24: ed:90:a4:6c:e9:18:f3:5b:6e:bc:cb:cc:84:87:e0:01:21:92: c2:74:ef:8e:57:66:e9:0e:55:1f:87:44:b0:b0:84:42:c7:ba: bc:97:a3:6b:14:2b:f1:04:58:78:75:86:28:9c:c4:b8:f6:b1: 55:b5:22:eb:c2:43:89:74:b9:e2:57:f0:18:f9:b7:22:ac:c1: 4d:9b:b3:8c:95:78:98:4c:c3:05:4b:51:96:de:f0:90:64:5b: 3d:a4:23:fc:d1:13:ad:48:2c:0c:21:07:fa:60:56:c6:b9:39: b9:61:90:3d:94:11:67:49:b0:00:49:fc:9c:ca:c2:ca:d6:5c: 96:8e:2b:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKDEwRjYxQzZCQkUzNjc0MDQ1MTJGQkM4M0NEREE4NUE5 OUM3RjNDNzUwHhcNMjUwNDI0MTcyNDIxWhcNMjUwNTAxMTcyNDIxWjAYMRYwFAYD VQQDEw02ODBhNzNjNS1jYzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0W1M9bKjmR7n7t3fniwbr6LRguzlPus/ksGFAgOYWH1DAc+0nJLS5O5XoDfH SVFmk1z4qTxLfQRD28eBB5QRuJWUbVwrYDTJRuHSInZJ3/A0RgGd9YaPFx+PN30D XbOD94dNX51Sufk/lFAHtmYWxuC5Zx7T3lU5ENOeJLuosrqE4mRhW8QaMHs2p+LR 48LB2K+NcdqXdyCKdDH9DsQN+hYkNuLEFVxEfL+3JeBbs2Wo796KW5vmzl/yuLF6 udt2uBHzQonk/Ga3oxzPztXjE4FxUFTZ8Nyl5pENLwdLxUu2KWLl+r4X18Whirw0 Ayu5v6Jb12NuDVgm+GIUni4kDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIEhK0SY KOpREQ2xn5lhLymCTd9qMB8GA1UdIwQYMBaAFBD2HGu+NnQEUS+8g83ahamcfzx1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9FQzgyMzBFMjNB NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9FUFljYTc0MmRBUlJMN3lEemRxRnFaeF9Q SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VQWWNhNzQyZEFSUkw3eUR6ZHFGcVp4X1BIVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC9FQzgyMzBFMjNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9FUFljYTc0MmRB UlJMN3lEemRxRnFaeF9QSFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBShHGUpPJgCQJolmQypRs2Ck0jv8WlOfJxc5ktouoggYhllWUNww6F 7tHLx3XYf4JMscPeUJmBhvT3yc73rZPKXISyjPECuEHxip8qKMfYrr84O0JOm4vk Aows0JzVtm64Yc642qSiDYX62DySSMelRdrCw7u8AgS5FDutHiTtkKRs6RjzW268 y8yEh+ABIZLCdO+OV2bpDlUfh0SwsIRCx7q8l6NrFCvxBFh4dYYonMS49rFVtSLr wkOJdLniV/AY+bcirMFNm7OMlXiYTMMFS1GW3vCQZFs9pCP80ROtSCwMIQf6YFbG uTm5YZA9lBFnSbAASfycysLK1lyWjivx -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:59 2025 by rpki-client