$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft File: eup3fGsZFRNTOw4u3w8NhMtwuhE.mft (raw, json) Hash identifier: Ezp51MQ8dSqZVn79BIjfTemBNpIKM98O49SA3QhgP/M= Subject key identifier: EF:25:4D:E6:17:E3:92:2C:D4:5E:73:D7:A0:24:86:B1:E9:8E:81:3D Authority key identifier: 7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11 Certificate issuer: /CN=A9142489/serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft Manifest number: 5B Signing time: Fri 25 Apr 2025 06:07:51 +0000 Manifest this update: Fri 25 Apr 2025 06:07:50 +0000 Manifest next update: Fri 02 May 2025 06:07:50 +0000 Files and hashes: 1: eup3fGsZFRNTOw4u3w8NhMtwuhE.crl (hash: 00seo5PzBIO56fNI8tT0uBg6Oe+/3wnNhTze98Kx8R4=) 2: FCE2ACFA9BFA11EFABCDB96FC4F9AE02.roa (hash: OlXBby3DJZy8rl/8+NH1zeLmOWVMUXLA2k9gi34qwsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142489, serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11 Validity Not Before: Apr 25 06:07:50 2025 GMT Not After : May 2 06:07:50 2025 GMT Subject: CN=680b26b6-a083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:16:d0:ce:20:fc:e9:c5:02:4b:ff:b4:a4:f2: 03:26:1e:d9:dd:20:33:93:3c:29:1a:b8:10:fd:a0: b0:6a:30:80:68:b1:00:d5:39:0b:98:d7:29:04:b2: 56:fa:5b:fb:d5:dc:df:a0:81:e7:83:32:17:d0:76: 7d:a4:b5:ec:76:89:0c:64:6e:d6:f3:37:ed:44:06: f3:9a:19:61:bb:a4:9e:97:af:1c:21:49:35:b5:27: c2:ad:80:0e:05:24:c8:2e:6b:0f:c3:22:47:c9:5a: ab:55:ca:80:1a:17:88:70:47:e2:5d:12:6b:7d:5a: 08:75:71:dc:e8:99:1a:78:da:92:63:c5:c6:72:a3: 98:85:c2:e9:82:76:a9:34:a8:7a:7a:a1:22:7d:5c: df:29:f4:ce:da:4b:c1:99:94:aa:47:d6:8c:1c:22: c4:d7:f8:e8:b7:b1:2b:70:06:a4:d2:33:f2:f5:a0: 76:f2:57:5c:46:86:0d:80:db:4d:9d:73:2d:32:28: 9d:16:4f:6e:0f:cb:62:59:31:de:df:9d:ac:2d:44: b3:a1:28:51:71:db:1e:72:c4:f1:a2:74:1c:d8:c6: 1c:55:ba:39:36:b8:61:e6:c0:d5:2c:dc:48:df:0a: ec:27:88:33:94:6a:26:6e:53:eb:a7:25:67:1b:a6: 59:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:25:4D:E6:17:E3:92:2C:D4:5E:73:D7:A0:24:86:B1:E9:8E:81:3D X509v3 Authority Key Identifier: keyid:7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:ba:81:92:3a:48:a9:d4:5c:3e:96:65:c5:72:f2:8e:99:0f: 5e:0f:5f:52:7b:c6:90:ee:a8:61:0b:9b:6f:be:f3:ce:7e:2f: ae:c1:9b:cc:4f:dc:d3:f5:48:4b:d4:c6:10:08:de:d5:f6:e4: 99:81:8e:4a:a0:fb:7f:19:18:98:42:23:6f:f3:7a:82:af:31: ce:06:ef:80:7b:7c:04:a2:2c:2a:b8:df:5a:76:ca:1b:f7:5b: b3:ad:26:e6:a6:6a:c2:12:dc:46:50:5d:89:07:7f:cb:6c:c0: 62:6c:77:a0:31:3c:13:0a:e3:82:c4:f2:9c:b1:e9:6d:7a:ed: b7:ce:14:49:46:24:03:f0:5c:a8:4f:6f:3e:24:d1:64:7c:53: 33:6f:61:58:55:bc:fa:4a:c5:4f:30:9a:35:bd:a4:29:ac:36: 30:7b:72:f4:0d:2b:5b:45:1d:05:06:8c:6e:1a:27:ad:bb:bb: 00:08:72:da:f0:67:e0:98:ee:57:39:40:59:d9:d5:f9:1b:b1: a3:48:b6:7d:fd:30:a4:2a:bf:45:4e:d9:07:a9:28:f9:b7:22: 53:07:56:95:71:48:3b:5f:01:fb:3d:fc:e5:08:e1:a1:3e:60: 98:b1:ad:98:ad:6e:c0:f1:47:5b:af:a3:5d:80:88:76:53:b3: 36:71:86:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjQ4OTExMC8GA1UEBRMoN0FFQTc3N0M2QjE5MTUxMzUzM0IwRTJFREYwRjBEODRD QjcwQkExMTAeFw0yNTA0MjUwNjA3NTBaFw0yNTA1MDIwNjA3NTBaMBgxFjAUBgNV BAMTDTY4MGIyNmI2LWEwODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSFtDOIPzpxQJL/7Sk8gMmHtndIDOTPCkauBD9oLBqMIBosQDVOQuY1ykEslb6 W/vV3N+ggeeDMhfQdn2ktex2iQxkbtbzN+1EBvOaGWG7pJ6XrxwhSTW1J8KtgA4F JMguaw/DIkfJWqtVyoAaF4hwR+JdEmt9Wgh1cdzomRp42pJjxcZyo5iFwumCdqk0 qHp6oSJ9XN8p9M7aS8GZlKpH1owcIsTX+Oi3sStwBqTSM/L1oHbyV1xGhg2A202d cy0yKJ0WT24Py2JZMd7fnawtRLOhKFFx2x5yxPGidBzYxhxVujk2uGHmwNUs3Ejf CuwniDOUaiZuU+unJWcbplnnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7yVN5hfj kizUXnPXoCSGsemOgT0wHwYDVR0jBBgwFoAUeup3fGsZFRNTOw4u3w8NhMtwuhEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNDg5LzMyODlBOTBFOUJG QTExRUZCRUI5ODQ2RUM0RjlBRTAyL2V1cDNmR3NaRlJOVE93NHUzdzhOaE10d3Vo RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZXVwM2ZHc1pGUk5UT3c0dTN3OE5oTXR3dWhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy NDg5LzMyODlBOTBFOUJGQTExRUZCRUI5ODQ2RUM0RjlBRTAyL2V1cDNmR3NaRlJO VE93NHUzdzhOaE10d3VoRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGO6gZI6SKnUXD6WZcVy8o6ZD14PX1J7xpDuqGELm2++885+L67Bm8xP 3NP1SEvUxhAI3tX25JmBjkqg+38ZGJhCI2/zeoKvMc4G74B7fASiLCq431p2yhv3 W7OtJuamasIS3EZQXYkHf8tswGJsd6AxPBMK44LE8pyx6W167bfOFElGJAPwXKhP bz4k0WR8UzNvYVhVvPpKxU8wmjW9pCmsNjB7cvQNK1tFHQUGjG4aJ627uwAIctrw Z+CY7lc5QFnZ1fkbsaNItn39MKQqv0VO2QepKPm3IlMHVpVxSDtfAfs9/OUI4aE+ YJixrZitbsDxR1uvo12AiHZTszZxhks= -----END CERTIFICATE-----Generated at Sun Apr 27 05:57:43 2025 by rpki-client