$ rpki-client -vvf rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.mft File: eQckJnCjuJ00jVqEHayNGC62YH4.mft (raw, json) Hash identifier: eD0AkO3nNUi6OUoObI+5iffbbKJ6F4YTA45W7Ih3YVM= Subject key identifier: 86:6A:7A:D9:7C:BB:B9:FD:0B:5C:0E:46:19:2F:BB:26:52:E8:E7:78 Authority key identifier: 79:07:24:26:70:A3:B8:9D:34:8D:5A:84:1D:AC:8D:18:2E:B6:60:7E Certificate issuer: /CN=A913DC32/serialNumber=7907242670A3B89D348D5A841DAC8D182EB6607E Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eQckJnCjuJ00jVqEHayNGC62YH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.mft Manifest number: 1E Signing time: Fri 25 Apr 2025 06:56:12 +0000 Manifest this update: Fri 25 Apr 2025 06:56:12 +0000 Manifest next update: Fri 02 May 2025 06:56:12 +0000 Files and hashes: 1: eQckJnCjuJ00jVqEHayNGC62YH4.crl (hash: M3C76FKPg6zOu6WeIsmZvjShD/EIN93LOTGurozBsDE=) 2: 22E5730815AC11F0BA789D40C4F9AE02.roa (hash: iWmeds3ikQddJ0zOLOMR2/nAx9kIXx/domN/vEqWgPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.crl rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eQckJnCjuJ00jVqEHayNGC62YH4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:56:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DC32, serialNumber=7907242670A3B89D348D5A841DAC8D182EB6607E Validity Not Before: Apr 25 06:56:12 2025 GMT Not After : May 2 06:56:12 2025 GMT Subject: CN=680b320c-993f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a6:84:00:9e:70:e1:5b:ea:98:90:e5:b4:5e: a2:8c:a2:44:fb:d7:b4:ce:c4:ed:f7:79:fb:08:d8: 33:88:7b:0b:88:75:61:c0:05:3a:05:ef:a6:ae:d6: d6:0b:6c:a0:80:32:98:39:6d:2a:55:ee:c2:2c:5e: c8:66:b4:92:ed:1e:2a:45:1b:8b:88:03:12:d0:a0: bc:87:cb:fe:95:5b:15:c8:f9:79:ff:31:98:f2:9e: 8c:2c:2c:58:72:37:cb:23:ed:59:96:1d:e9:ab:64: 3a:d4:b5:25:4e:62:8e:1c:93:10:bd:fc:8f:74:27: 3e:ce:d6:6a:36:ec:f9:b0:77:48:f1:84:6f:87:b9: 19:81:0b:2a:36:a0:6f:51:a6:d0:37:74:ba:c0:8f: f2:e7:74:5a:81:8f:db:9e:92:55:4b:6f:1c:d8:e0: 78:29:65:a3:6f:fd:8f:46:d5:6f:2a:77:ff:85:94: 2e:54:e4:91:e4:d3:bf:29:ea:62:f2:22:79:1b:38: c4:f9:ca:75:7c:da:04:74:a8:71:0d:1f:d4:b9:f1: 4a:ac:da:a0:5d:41:b3:17:10:21:f8:f7:0a:c0:2c: a4:5e:9a:07:7e:ea:b4:b8:cc:a0:cb:37:42:fa:8e: ed:87:86:31:92:eb:e0:1e:13:8e:6a:7c:d8:7f:9d: b2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:6A:7A:D9:7C:BB:B9:FD:0B:5C:0E:46:19:2F:BB:26:52:E8:E7:78 X509v3 Authority Key Identifier: keyid:79:07:24:26:70:A3:B8:9D:34:8D:5A:84:1D:AC:8D:18:2E:B6:60:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eQckJnCjuJ00jVqEHayNGC62YH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:dd:25:d0:58:29:2e:9e:3a:d9:69:ba:f6:08:13:f4:8b:86: 09:96:2f:d1:25:ee:43:cd:d8:cc:a9:fb:93:c1:07:dd:2e:ec: ff:ce:0f:4f:84:af:9a:b9:fb:5e:eb:fb:7f:4a:1e:a7:bd:b3: 07:ee:64:de:d3:86:56:ca:62:fb:06:21:62:f4:20:3e:1f:4c: b7:97:e7:f1:e2:15:49:2d:2c:17:bd:4c:bf:bf:d5:1c:8b:c7: d9:d0:a2:f1:03:9a:1f:a6:0e:88:4e:f1:24:35:2a:71:22:93: b8:b4:87:13:00:5c:74:8e:15:9a:ba:6f:98:93:60:c6:98:38: 4d:96:9f:f8:cc:48:7d:5e:2b:34:e8:ed:35:95:07:b5:12:ab: 44:8b:a9:30:df:93:b3:81:1a:fb:55:94:c1:b5:e8:08:30:d0: 6b:55:bd:cc:ab:db:d1:ad:96:18:7b:25:25:51:c5:a1:78:4a: 4b:2a:2e:ff:6f:1c:54:1a:fc:27:79:de:e4:e5:d6:d3:69:62: c5:44:1c:5b:c3:3d:ee:28:db:29:0b:30:76:8d:82:e2:31:03: e7:28:e7:8c:67:1d:05:86:7e:13:d1:ae:05:54:4b:0b:68:08: 68:e5:61:0d:44:22:07:ec:e6:62:0a:7f:71:10:68:16:cc:39: a8:bf:19:e3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz REMzMjExMC8GA1UEBRMoNzkwNzI0MjY3MEEzQjg5RDM0OEQ1QTg0MURBQzhEMTgy RUI2NjA3RTAeFw0yNTA0MjUwNjU2MTJaFw0yNTA1MDIwNjU2MTJaMBgxFjAUBgNV BAMTDTY4MGIzMjBjLTk5M2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqpoQAnnDhW+qYkOW0XqKMokT717TOxO33efsI2DOIewuIdWHABToF76au1tYL bKCAMpg5bSpV7sIsXshmtJLtHipFG4uIAxLQoLyHy/6VWxXI+Xn/MZjynowsLFhy N8sj7VmWHemrZDrUtSVOYo4ckxC9/I90Jz7O1mo27Pmwd0jxhG+HuRmBCyo2oG9R ptA3dLrAj/LndFqBj9ueklVLbxzY4HgpZaNv/Y9G1W8qd/+FlC5U5JHk078p6mLy InkbOMT5ynV82gR0qHENH9S58Uqs2qBdQbMXECH49wrALKRemgd+6rS4zKDLN0L6 ju2HhjGS6+AeE45qfNh/nbJxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhmp62Xy7 uf0LXA5GGS+7JlLo53gwHwYDVR0jBBgwFoAUeQckJnCjuJ00jVqEHayNGC62YH4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNEQzMyLzdCNzUwQkZFRkNG RDExRUZBREI4NjExNUM0RjlBRTAyL2VRY2tKbkNqdUowMGpWcUVIYXlOR0M2MllI NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZVFja0puQ2p1SjAwalZxRUhheU5HQzYyWUg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE QzMyLzdCNzUwQkZFRkNGRDExRUZBREI4NjExNUM0RjlBRTAyL2VRY2tKbkNqdUow MGpWcUVIYXlOR0M2MllINC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKLdJdBYKS6eOtlpuvYIE/SLhgmWL9El7kPN2Myp+5PBB90u7P/OD0+E r5q5+17r+39KHqe9swfuZN7ThlbKYvsGIWL0ID4fTLeX5/HiFUktLBe9TL+/1RyL x9nQovEDmh+mDohO8SQ1KnEik7i0hxMAXHSOFZq6b5iTYMaYOE2Wn/jMSH1eKzTo 7TWVB7USq0SLqTDfk7OBGvtVlMG16Agw0GtVvcyr29Gtlhh7JSVRxaF4SksqLv9v HFQa/Cd53uTl1tNpYsVEHFvDPe4o2ykLMHaNguIxA+co54xnHQWGfhPRrgVUSwto CGjlYQ1EIgfs5mIKf3EQaBbMOai/GeM= -----END CERTIFICATE-----Generated at Sat Apr 26 15:06:53 2025 by rpki-client