$ rpki-client -vvf rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.mft File: EEETzo9eAXUa9NDySWjYOSSmyAc.mft (raw, json) Hash identifier: 3f88YlLY8Jo+SdZI0M0Jzo1okdbfmzMLxnpewRqHBm0= Subject key identifier: 74:F2:61:B1:80:F3:3D:8D:73:AB:7B:B4:2C:5B:62:C8:26:B9:EF:B3 Authority key identifier: 10:41:13:CE:8F:5E:01:75:1A:F4:D0:F2:49:68:D8:39:24:A6:C8:07 Certificate issuer: /CN=A912A517/serialNumber=104113CE8F5E01751AF4D0F24968D83924A6C807 Certificate serial: 11D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEETzo9eAXUa9NDySWjYOSSmyAc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.mft Manifest number: 11BD Signing time: Thu 24 Apr 2025 17:13:20 +0000 Manifest this update: Thu 24 Apr 2025 17:13:19 +0000 Manifest next update: Thu 01 May 2025 17:13:19 +0000 Files and hashes: 1: EEETzo9eAXUa9NDySWjYOSSmyAc.crl (hash: u6dpxFug6gp1y8BGLgO5Qua9sPp+ehSHcQSM5sWm0SI=) 2: 414227D6F03711EBB93D0345C4F9AE02.roa (hash: zcse+3V6ypo9qMai/JVipYWLsvmfpHazMGh7GCulYY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.crl rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEETzo9eAXUa9NDySWjYOSSmyAc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:13:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4566 (0x11d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A517, serialNumber=104113CE8F5E01751AF4D0F24968D83924A6C807 Validity Not Before: Apr 24 17:13:19 2025 GMT Not After : May 1 17:13:19 2025 GMT Subject: CN=680a712f-4348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:50:bc:8c:58:15:cc:fc:26:18:cf:6f:e8:74: a0:da:78:7f:7d:9d:b1:44:b5:56:fc:0e:11:6b:05: e0:aa:8d:22:dd:a7:2c:13:0b:23:a3:d4:33:1d:39: c1:c3:1c:e6:4f:99:fa:c3:54:83:6d:c5:68:85:c5: 5a:25:58:46:0f:b7:34:c7:28:23:fc:81:91:ec:df: 9e:6f:e7:a9:6e:70:8a:24:68:d3:a1:29:aa:2a:fc: 24:4e:40:1d:c9:97:bc:d0:34:a7:96:0a:cf:f2:54: c5:ed:ff:64:d5:16:33:f3:36:d2:b9:5e:e4:5d:a6: 09:bb:e6:d6:11:61:da:7e:1f:60:90:9a:af:11:ba: 7c:d9:bd:10:86:f5:ce:0d:d5:1b:9b:d2:41:5b:5a: 88:d7:6c:9b:c4:8f:d8:5b:2b:7d:e7:cc:27:a3:bc: b6:7b:65:68:1e:1f:5c:a5:de:a8:9e:32:8c:02:45: 11:ea:8b:3c:28:17:5f:c1:87:57:13:57:83:f3:64: fd:2e:93:02:33:e3:24:ba:bd:b9:ab:79:b9:f1:42: 3d:6d:cc:fc:36:99:f8:8e:e2:ca:b4:09:aa:b6:d9: c8:68:6b:73:f6:bb:ed:a5:2e:1d:e3:23:63:3c:70: d9:a6:d8:00:f1:75:7d:da:15:d5:93:1c:b7:8d:42: 82:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F2:61:B1:80:F3:3D:8D:73:AB:7B:B4:2C:5B:62:C8:26:B9:EF:B3 X509v3 Authority Key Identifier: keyid:10:41:13:CE:8F:5E:01:75:1A:F4:D0:F2:49:68:D8:39:24:A6:C8:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEETzo9eAXUa9NDySWjYOSSmyAc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:31:5d:64:0f:04:71:01:5f:4d:db:ce:a0:b3:28:b0:74:c3: 73:45:dd:83:84:f2:3a:96:1a:61:7a:00:62:83:27:11:4d:ba: 4c:a3:75:4e:c6:79:c1:c2:ae:f8:61:09:60:61:26:a3:fa:89: af:c2:51:44:12:81:46:21:c9:5f:63:e6:ac:f0:40:7b:77:37: de:cd:f2:7a:e9:aa:84:ba:0d:08:ef:e6:7b:71:78:82:87:7e: 30:72:0d:13:31:c0:1e:64:df:4e:a4:cb:50:12:61:db:ab:41: 61:23:59:db:86:b4:0f:64:aa:d0:64:de:b3:7d:be:a9:f4:d2: a9:2d:fa:95:7f:a3:a5:da:a1:91:a5:18:7f:91:70:d8:9d:9c: 7f:60:cd:bb:af:93:c7:99:3d:8e:b4:99:e7:54:62:44:8e:f0: a4:b6:9e:79:1c:5b:49:ac:de:09:86:9c:20:0f:e3:9b:22:f3: 16:98:6f:37:05:df:99:d1:76:0f:86:a4:94:88:b2:11:16:c6: cb:64:ff:a2:28:d3:aa:c3:94:1f:5c:06:ea:cb:aa:57:fd:93: 80:44:12:35:92:d1:fb:c6:af:ca:b8:fd:fb:1a:8d:a5:f3:ef: a5:ef:f7:8e:01:70:e0:fa:2c:2a:c9:71:b6:b6:86:11:13:25: 42:8d:de:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE1MTcxMTAvBgNVBAUTKDEwNDExM0NFOEY1RTAxNzUxQUY0RDBGMjQ5NjhEODM5 MjRBNkM4MDcwHhcNMjUwNDI0MTcxMzE5WhcNMjUwNTAxMTcxMzE5WjAYMRYwFAYD VQQDEw02ODBhNzEyZi00MzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA11C8jFgVzPwmGM9v6HSg2nh/fZ2xRLVW/A4RawXgqo0i3acsEwsjo9QzHTnB wxzmT5n6w1SDbcVohcVaJVhGD7c0xygj/IGR7N+eb+epbnCKJGjToSmqKvwkTkAd yZe80DSnlgrP8lTF7f9k1RYz8zbSuV7kXaYJu+bWEWHafh9gkJqvEbp82b0QhvXO DdUbm9JBW1qI12ybxI/YWyt958wno7y2e2VoHh9cpd6onjKMAkUR6os8KBdfwYdX E1eD82T9LpMCM+Mkur25q3m58UI9bcz8Npn4juLKtAmqttnIaGtz9rvtpS4d4yNj PHDZptgA8XV92hXVkxy3jUKCHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTyYbGA 8z2Nc6t7tCxbYsgmue+zMB8GA1UdIwQYMBaAFBBBE86PXgF1GvTQ8klo2DkkpsgH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTUxNy8yQjE5RkZCOEY1 MDAxMUU4QTkzQThFNjNDNEY5QUUwMi9FRUVUem85ZUFYVWE5TkR5U1dqWU9TU215 QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VFRVR6bzllQVhVYTlORHlTV2pZT1NTbXlBYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTUxNy8yQjE5RkZCOEY1MDAxMUU4QTkzQThFNjNDNEY5QUUwMi9FRUVUem85ZUFY VWE5TkR5U1dqWU9TU215QWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjMV1kDwRxAV9N286gsyiwdMNzRd2DhPI6lhphegBigycRTbpMo3VO xnnBwq74YQlgYSaj+omvwlFEEoFGIclfY+as8EB7dzfezfJ66aqEug0I7+Z7cXiC h34wcg0TMcAeZN9OpMtQEmHbq0FhI1nbhrQPZKrQZN6zfb6p9NKpLfqVf6Ol2qGR pRh/kXDYnZx/YM27r5PHmT2OtJnnVGJEjvCktp55HFtJrN4JhpwgD+ObIvMWmG83 Bd+Z0XYPhqSUiLIRFsbLZP+iKNOqw5QfXAbqy6pX/ZOARBI1ktH7xq/KuP37Go2l 8++l7/eOAXDg+iwqyXG2toYREyVCjd6t -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:44 2025 by rpki-client