$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft File: ED-ovf_7nwVXByxHMyuBqegO3TU.mft (raw, json) Hash identifier: vXe+fBYX8StdEJqtXtY3ASvbYbHxezluG+W2CaTlrg0= Subject key identifier: D5:B8:2E:F3:DC:5A:B3:0A:7B:BC:03:66:5F:05:E9:34:C8:42:61:FA Authority key identifier: 10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35 Certificate issuer: /CN=A9140D69/serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35 Certificate serial: 02C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft Manifest number: 029D Signing time: Fri 25 Apr 2025 01:24:53 +0000 Manifest this update: Fri 25 Apr 2025 01:24:52 +0000 Manifest next update: Fri 02 May 2025 01:24:52 +0000 Files and hashes: 1: ED-ovf_7nwVXByxHMyuBqegO3TU.crl (hash: nZ2D0U9nB0DE0Edu5fGnJIcYX/4VVx8IWQbAubJIGNM=) 2: C7C081641C2411F0AAC7CA1EC4F9AE02.roa (hash: XydeZPWKtG1etOuPzQDEhVL2WYamD3gJgaFCyMqQRnA=) 3: E4C4FBB8200811F0AB28851DC4F9AE02.roa (hash: pVHrgOFKFC07D4oFMxsUE21iWBEjMFIznwU/76ruSbU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:24:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 711 (0x2c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D69, serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35 Validity Not Before: Apr 25 01:24:52 2025 GMT Not After : May 2 01:24:52 2025 GMT Subject: CN=680ae465-a86f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:10:39:86:41:24:3f:f0:7b:3b:87:d0:43:fc: 41:2e:b9:ea:bb:9c:08:0f:09:10:8e:ee:94:f4:e9: 23:67:e2:0b:1e:70:ae:8c:37:3e:ae:dd:75:0a:db: 18:d3:55:94:a2:df:7e:29:be:fa:ff:94:01:5e:b9: de:f4:6f:cc:c0:56:88:66:a6:c8:a8:53:ea:42:db: 18:95:e2:0d:f6:3a:be:c1:0c:81:e6:9b:52:a9:20: cf:f7:51:2a:fa:92:f4:c6:73:12:de:c7:6b:24:33: be:31:ca:70:b2:b5:d0:a6:9c:f3:03:cc:d6:1b:f0: 42:20:26:a8:18:bc:90:55:1e:65:1e:f2:50:8b:81: 19:2c:15:18:26:be:2e:dd:60:4b:e2:63:55:be:61: 98:7e:f1:97:71:1e:4d:82:aa:ab:c0:5b:52:27:f1: 42:1b:47:25:2f:15:eb:5c:2c:0e:97:45:50:91:ca: 71:73:cf:17:60:dc:a5:84:36:91:d7:90:d8:ba:e6: d4:df:7d:1c:c4:ae:6d:c5:dc:1e:b1:23:a0:92:20: 0d:49:61:14:51:bb:6e:c4:54:7e:d9:b5:f8:81:36: ec:4f:72:5a:fe:c2:bc:9e:1f:96:88:c3:11:09:fd: 61:57:ea:3f:d2:68:2a:9b:61:a8:98:db:19:0c:c7: fb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B8:2E:F3:DC:5A:B3:0A:7B:BC:03:66:5F:05:E9:34:C8:42:61:FA X509v3 Authority Key Identifier: keyid:10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:35:59:69:42:ed:43:47:fd:24:91:13:a2:30:7b:2f:62:98: 16:cf:2d:1d:b0:20:9f:e6:1f:02:04:8f:1b:3f:b5:ba:77:e0: 1e:2e:82:6a:39:f4:22:81:b7:07:26:e1:d2:47:92:52:41:47: 62:a5:64:1c:b2:e4:ae:84:af:22:6c:16:65:54:ad:0e:a1:47: dd:7c:6b:fb:8a:c4:f8:7e:41:28:19:ca:93:e9:29:03:75:fa: dc:10:de:49:fa:20:f3:49:ba:cb:36:c8:d9:49:06:ad:8a:11: 5e:52:1b:8e:a7:3c:14:37:50:30:e8:51:ba:63:b6:38:0a:28: c8:35:cc:08:48:49:99:ef:be:47:3e:42:a5:b8:33:17:3c:44: d4:40:8b:69:63:06:f4:34:f5:4d:6a:29:da:3e:4f:68:2f:72: 45:91:6a:83:9e:96:7d:7b:44:9b:b0:5a:dc:0c:6b:12:f1:8c: 3a:eb:f3:6d:c4:a1:60:f3:7c:f9:57:d3:4b:8b:ae:a7:ee:9a: 27:c1:69:54:6a:61:90:e5:d1:85:1c:00:c8:fc:e2:07:54:b1: 42:e3:19:c1:b0:f7:21:67:4e:94:72:81:4c:e4:35:02:a1:ce: 3f:79:21:37:9d:bc:32:6d:07:b5:ba:8c:81:ad:6a:af:5b:69: c5:ff:d6:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBENjkxMTAvBgNVBAUTKDEwM0ZBOEJERkZGQjlGMDU1NzA3MkM0NzMzMkI4MUE5 RTgwRUREMzUwHhcNMjUwNDI1MDEyNDUyWhcNMjUwNTAyMDEyNDUyWjAYMRYwFAYD VQQDEw02ODBhZTQ2NS1hODZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0BA5hkEkP/B7O4fQQ/xBLrnqu5wIDwkQju6U9OkjZ+ILHnCujDc+rt11CtsY 01WUot9+Kb76/5QBXrne9G/MwFaIZqbIqFPqQtsYleIN9jq+wQyB5ptSqSDP91Eq +pL0xnMS3sdrJDO+McpwsrXQppzzA8zWG/BCICaoGLyQVR5lHvJQi4EZLBUYJr4u 3WBL4mNVvmGYfvGXcR5NgqqrwFtSJ/FCG0clLxXrXCwOl0VQkcpxc88XYNylhDaR 15DYuubU330cxK5txdwesSOgkiANSWEUUbtuxFR+2bX4gTbsT3Ja/sK8nh+WiMMR Cf1hV+o/0mgqm2GomNsZDMf7FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNW4LvPc WrMKe7wDZl8F6TTIQmH6MB8GA1UdIwQYMBaAFBA/qL3/+58FVwcsRzMrganoDt01 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQ2OS8wRTE3N0Q1QTA1 OEMxMUVEQURENjYwMTFDNEY5QUUwMi9FRC1vdmZfN253VlhCeXhITXl1QnFlZ08z VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VELW92Zl83bndWWEJ5eEhNeXVCcWVnTzNUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQ2OS8wRTE3N0Q1QTA1OEMxMUVEQURENjYwMTFDNEY5QUUwMi9FRC1vdmZfN253 VlhCeXhITXl1QnFlZ08zVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnNVlpQu1DR/0kkROiMHsvYpgWzy0dsCCf5h8CBI8bP7W6d+AeLoJq OfQigbcHJuHSR5JSQUdipWQcsuSuhK8ibBZlVK0OoUfdfGv7isT4fkEoGcqT6SkD dfrcEN5J+iDzSbrLNsjZSQatihFeUhuOpzwUN1Aw6FG6Y7Y4CijINcwISEmZ775H PkKluDMXPETUQItpYwb0NPVNainaPk9oL3JFkWqDnpZ9e0SbsFrcDGsS8Yw66/Nt xKFg83z5V9NLi66n7ponwWlUamGQ5dGFHADI/OIHVLFC4xnBsPchZ06UcoFM5DUC oc4/eSE3nbwybQe1uoyBrWqvW2nF/9bS -----END CERTIFICATE-----Generated at Sat Apr 26 04:37:39 2025 by rpki-client