$ rpki-client -vvf rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft File: EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft (raw, json) Hash identifier: L24uU33pTAjgzePsNqiLg1gbhGujgAXXKaXKWhmGPmU= Subject key identifier: 16:51:C4:73:9F:81:0A:E9:43:94:52:E5:99:D4:ED:10:41:C1:5D:AA Authority key identifier: 12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13 Certificate issuer: /CN=A91250FA/serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813 Certificate serial: 0B40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft Manifest number: 0B32 Signing time: Thu 24 Apr 2025 19:04:45 +0000 Manifest this update: Thu 24 Apr 2025 19:04:44 +0000 Manifest next update: Thu 01 May 2025 19:04:44 +0000 Files and hashes: 1: EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl (hash: 45MWRJsPUHRUd7W8CoOL1OzVrPov0AM2IB47ZpF4uFU=) 2: 2A08F1A4369211EAA64E320BC4F9AE02.roa (hash: I91qaFQgep6EuuEEdqbhO4Prklw7ndmFH38wo16kLVk=) 3: 5D822954368F11EAB3D4CE7FC4F9AE02.roa (hash: /cS7IVALMe9B/AtpjJXVY/jO3FykqwmgPTZQLz+GjqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:04:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2880 (0xb40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91250FA, serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813 Validity Not Before: Apr 24 19:04:44 2025 GMT Not After : May 1 19:04:44 2025 GMT Subject: CN=680a8b4d-8d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:20:a6:5c:54:af:61:b9:f4:99:ec:a3:6b:24: 0b:24:44:65:86:59:73:0d:95:78:89:d3:82:3a:55: e2:58:3c:e5:b7:c1:94:67:83:74:c7:c1:6e:97:f7: 7a:10:2b:a2:28:56:df:7c:b2:24:90:bc:90:9f:22: 4c:6f:94:c7:b6:cc:1f:07:f6:a2:74:60:ed:7e:13: be:31:63:4b:07:74:fa:90:4e:e3:18:82:75:1f:b5: 8d:5e:4c:09:90:f4:05:1a:04:a5:86:5f:d4:3a:c7: 76:fc:55:67:71:52:f7:39:91:b5:bd:46:0d:60:63: e6:31:a2:71:a7:34:05:0d:b7:b0:c8:b6:42:55:6e: 6d:4a:db:60:69:36:b3:3a:ef:fa:cd:67:c9:0e:53: ef:0e:c9:17:b0:e9:39:38:b8:c5:a6:48:2d:9a:28: cd:fb:a8:a1:39:32:1c:62:c8:f0:0f:7b:fb:fb:d9: 1e:96:cf:8c:02:bc:81:10:de:e9:d7:4a:92:7d:23: ba:92:96:fd:de:53:21:f5:ec:0e:6b:82:66:3a:14: 86:fd:42:e8:f9:9b:6a:34:9a:11:fb:6f:ab:7c:44: 9a:bd:ff:25:f2:85:ac:3f:29:9e:ad:eb:de:eb:dd: 05:c3:dd:d8:31:a2:90:66:ca:a3:e9:32:bb:d2:9e: 79:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:51:C4:73:9F:81:0A:E9:43:94:52:E5:99:D4:ED:10:41:C1:5D:AA X509v3 Authority Key Identifier: keyid:12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:f1:17:35:23:72:25:fe:09:a4:44:67:f9:a3:6b:fc:05:4f: e7:a5:b6:8b:ff:69:6a:c8:a9:83:e9:03:ca:9b:07:0c:3b:8f: 71:4d:81:cc:ff:2c:48:e0:a8:94:de:c8:11:37:b6:63:6e:44: 2f:e1:f3:6e:90:0d:9c:ca:b9:54:00:be:74:31:78:a0:61:6c: 66:72:cf:f3:60:50:cf:68:1b:d0:8c:f3:e6:70:85:f8:b5:24: cb:1e:1d:44:fe:15:14:94:66:2a:b7:73:86:76:10:01:2a:2c: 30:91:ed:37:13:75:74:8f:e1:3f:e3:46:4e:22:5d:1c:83:2d: 19:8c:a0:64:94:6b:c7:ab:b3:b1:1d:1c:88:d4:f7:62:bf:02: 2b:0a:bb:ec:c8:36:36:a5:a7:8d:b1:73:51:a9:8c:84:5a:e1: 2c:5b:ee:92:88:bb:cb:c3:34:66:43:49:3b:f9:91:b3:11:89: c7:c8:71:25:cf:d5:08:55:ca:43:66:da:4e:0b:e7:b9:bc:1c: 3b:d9:9c:e3:ef:2f:96:56:e3:3c:51:3b:2b:67:ff:6f:f1:74: 6d:7a:3e:80:b3:fc:30:26:5f:3e:10:26:25:73:12:bc:9a:f5: 56:df:7b:ad:6c:54:4b:30:53:a9:c2:0b:7e:32:2f:a0:14:e3: eb:c5:c3:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUwRkExMTAvBgNVBAUTKDEyODNBMkY0QzdCQTExNzA2QzY2RTE3QkYxQkQzRTk5 NjI3QTE4MTMwHhcNMjUwNDI0MTkwNDQ0WhcNMjUwNTAxMTkwNDQ0WjAYMRYwFAYD VQQDEw02ODBhOGI0ZC04ZDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1CCmXFSvYbn0meyjayQLJERlhllzDZV4idOCOlXiWDzlt8GUZ4N0x8Ful/d6 ECuiKFbffLIkkLyQnyJMb5THtswfB/aidGDtfhO+MWNLB3T6kE7jGIJ1H7WNXkwJ kPQFGgSlhl/UOsd2/FVncVL3OZG1vUYNYGPmMaJxpzQFDbewyLZCVW5tSttgaTaz Ou/6zWfJDlPvDskXsOk5OLjFpkgtmijN+6ihOTIcYsjwD3v7+9kels+MAryBEN7p 10qSfSO6kpb93lMh9ewOa4JmOhSG/ULo+ZtqNJoR+2+rfESavf8l8oWsPymereve 690Fw93YMaKQZsqj6TK70p55wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZRxHOf gQrpQ5RS5ZnU7RBBwV2qMB8GA1UdIwQYMBaAFBKDovTHuhFwbGbhe/G9PpliehgT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTBGQS9BQUEwRUJFMDM2 OEUxMUVBQTc2OEZDN0VDNEY5QUUwMi9Fb09pOU1lNkVYQnNadUY3OGIwLW1XSjZH Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VvT2k5TWU2RVhCc1p1Rjc4YjAtbVdKNkdCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTBGQS9BQUEwRUJFMDM2OEUxMUVBQTc2OEZDN0VDNEY5QUUwMi9Fb09pOU1lNkVY QnNadUY3OGIwLW1XSjZHQk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv8Rc1I3Il/gmkRGf5o2v8BU/npbaL/2lqyKmD6QPKmwcMO49xTYHM /yxI4KiU3sgRN7ZjbkQv4fNukA2cyrlUAL50MXigYWxmcs/zYFDPaBvQjPPmcIX4 tSTLHh1E/hUUlGYqt3OGdhABKiwwke03E3V0j+E/40ZOIl0cgy0ZjKBklGvHq7Ox HRyI1PdivwIrCrvsyDY2paeNsXNRqYyEWuEsW+6SiLvLwzRmQ0k7+ZGzEYnHyHEl z9UIVcpDZtpOC+e5vBw72Zzj7y+WVuM8UTsrZ/9v8XRtej6As/wwJl8+ECYlcxK8 mvVW33utbFRLMFOpwgt+Mi+gFOPrxcMZ -----END CERTIFICATE-----Generated at Sat Apr 26 05:28:34 2025 by rpki-client