$ rpki-client -vvf rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft File: eHZtYCpA71cBQmhKcj6KNAxv84I.mft (raw, json) Hash identifier: y2j6QALvYLmFE1x0Opx0jUxYD6vUzRlHJ+4Dx+1haqk= Subject key identifier: 23:17:A0:5D:08:22:05:A9:CE:2E:0D:A5:18:4A:E2:07:1C:3B:FB:00 Authority key identifier: 78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82 Certificate issuer: /CN=A912A70D/serialNumber=78766D602A40EF570142684A723E8A340C6FF382 Certificate serial: 0436 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft Manifest number: 0432 Signing time: Fri 25 Apr 2025 00:05:52 +0000 Manifest this update: Fri 25 Apr 2025 00:05:52 +0000 Manifest next update: Fri 02 May 2025 00:05:52 +0000 Files and hashes: 1: eHZtYCpA71cBQmhKcj6KNAxv84I.crl (hash: gpocQqhL6hiSMN9ERUa0yZ+TRxqqPpfCsg1RLIEEkq4=) 2: 90AE61AC595711EC8761C361C4F9AE02.roa (hash: xHB6klxUWxKIW0ZETWDrSBAoOokIy/M1aOS9u4crx4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.crl rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1078 (0x436) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A70D, serialNumber=78766D602A40EF570142684A723E8A340C6FF382 Validity Not Before: Apr 25 00:05:52 2025 GMT Not After : May 2 00:05:52 2025 GMT Subject: CN=680ad1e0-ed24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5b:14:69:8f:26:4c:40:1c:6c:4d:e7:c7:07: ba:e0:61:fc:00:b1:f6:00:7f:af:54:0b:ae:9e:c7: 87:6b:ef:e7:4a:fb:48:92:fc:f8:47:c9:8c:f8:4b: b9:21:b1:b3:c1:5a:69:c4:bf:e4:b9:7c:1c:f1:2f: 32:a4:37:f6:dc:f9:75:97:1b:b4:b3:b8:5d:32:1c: f1:25:0d:16:42:8e:ed:04:d3:49:f5:db:34:c9:34: 7b:8c:47:0f:fc:e3:b0:d2:8b:41:36:d0:95:ff:89: 6a:c0:4e:7e:7c:a0:b4:c2:1e:25:58:91:7f:4c:d8: 1d:19:7f:77:c7:11:80:32:11:7e:be:24:d6:a6:f7: d9:33:97:a3:c1:8d:e5:85:81:bf:ab:6d:1e:42:fe: 0e:43:b8:4d:b8:88:f2:65:dc:a3:e6:9c:2b:e4:67: 15:7b:52:0e:bf:a1:de:57:c0:63:7b:88:a6:c9:64: a5:da:ce:17:6c:31:55:77:af:69:18:89:b1:c0:80: 04:a5:ca:81:45:21:9f:34:52:d8:be:a2:a2:7d:7b: 19:ba:c8:d9:10:b5:c1:81:3f:50:39:e7:0d:35:9d: bb:85:14:87:d4:49:56:0d:e6:f5:7e:ed:44:c0:00: cc:da:5d:b0:1e:17:bf:b9:40:2f:b3:33:1a:68:22: 3e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:17:A0:5D:08:22:05:A9:CE:2E:0D:A5:18:4A:E2:07:1C:3B:FB:00 X509v3 Authority Key Identifier: keyid:78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:b6:bc:56:aa:6d:b3:6c:7a:8d:b3:52:8e:e3:23:7c:b8:cc: 71:47:d2:07:1c:46:03:d9:00:65:ac:61:94:80:2f:b1:24:03: e7:dd:73:b0:9d:45:33:6b:d1:0b:be:06:df:0c:f8:40:21:09: 14:ea:31:29:8d:70:64:3b:fc:a8:a8:94:da:8f:0e:63:4c:8d: 9b:f5:94:ef:93:0c:24:f5:b7:29:cb:37:1b:22:69:22:59:e2: 7d:1b:65:5d:35:fa:6b:3d:f4:52:55:76:5f:d4:54:64:9e:ee: 83:b9:c6:a8:da:34:c5:67:df:0b:65:07:17:97:33:be:a0:d6: 21:7a:cc:fe:99:ff:93:a6:e2:dd:4a:ea:a1:f7:95:75:71:8d: 53:d6:c3:92:52:6d:e1:d9:86:63:dc:56:19:17:95:c7:3e:51: ce:30:db:d3:c9:b6:08:8b:1b:40:9c:6a:66:b7:4d:a7:0f:83: f9:2f:64:14:2e:fa:91:ed:14:29:1c:22:a9:5a:7b:76:6d:4b: 8e:e6:e9:4e:50:0f:f4:d4:fb:c9:cb:ef:ab:a1:0b:52:5b:ad: 3c:db:13:d3:c8:6b:1c:24:1b:b6:4f:71:ea:06:9e:54:fc:00: 46:8a:87:7a:36:dd:79:ca:d0:38:64:b7:fb:71:9b:0e:52:4f: be:11:3f:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE3MEQxMTAvBgNVBAUTKDc4NzY2RDYwMkE0MEVGNTcwMTQyNjg0QTcyM0U4QTM0 MEM2RkYzODIwHhcNMjUwNDI1MDAwNTUyWhcNMjUwNTAyMDAwNTUyWjAYMRYwFAYD VQQDEw02ODBhZDFlMC1lZDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFsUaY8mTEAcbE3nxwe64GH8ALH2AH+vVAuunseHa+/nSvtIkvz4R8mM+Eu5 IbGzwVppxL/kuXwc8S8ypDf23Pl1lxu0s7hdMhzxJQ0WQo7tBNNJ9ds0yTR7jEcP /OOw0otBNtCV/4lqwE5+fKC0wh4lWJF/TNgdGX93xxGAMhF+viTWpvfZM5ejwY3l hYG/q20eQv4OQ7hNuIjyZdyj5pwr5GcVe1IOv6HeV8Bje4imyWSl2s4XbDFVd69p GImxwIAEpcqBRSGfNFLYvqKifXsZusjZELXBgT9QOecNNZ27hRSH1ElWDeb1fu1E wADM2l2wHhe/uUAvszMaaCI+4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMXoF0I IgWpzi4NpRhK4gccO/sAMB8GA1UdIwQYMBaAFHh2bWAqQO9XAUJoSnI+ijQMb/OC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTcwRC8xMTE0QzlCQTU5 NTAxMUVDQUUwOTMyODJDNEY5QUUwMi9lSFp0WUNwQTcxY0JRbWhLY2o2S05BeHY4 NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VIWnRZQ3BBNzFjQlFtaEtjajZLTkF4djg0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTcwRC8xMTE0QzlCQTU5NTAxMUVDQUUwOTMyODJDNEY5QUUwMi9lSFp0WUNwQTcx Y0JRbWhLY2o2S05BeHY4NEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVtrxWqm2zbHqNs1KO4yN8uMxxR9IHHEYD2QBlrGGUgC+xJAPn3XOw nUUza9ELvgbfDPhAIQkU6jEpjXBkO/yoqJTajw5jTI2b9ZTvkwwk9bcpyzcbImki WeJ9G2VdNfprPfRSVXZf1FRknu6Ducao2jTFZ98LZQcXlzO+oNYhesz+mf+TpuLd Suqh95V1cY1T1sOSUm3h2YZj3FYZF5XHPlHOMNvTybYIixtAnGpmt02nD4P5L2QU LvqR7RQpHCKpWnt2bUuO5ulOUA/01PvJy++roQtSW6082xPTyGscJBu2T3HqBp5U /ABGiod6Nt15ytA4ZLf7cZsOUk++ET/d -----END CERTIFICATE-----Generated at Sat Apr 26 04:34:54 2025 by rpki-client