$ rpki-client -vvf rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft File: ez9g2bGigAKgeHXKtYohRXBz4X8.mft (raw, json) Hash identifier: maWrN4M7+/2GSIu+eA1xYwFaM7b0fBT8JjaJX2di6RA= Subject key identifier: 3D:2B:95:BB:AA:30:14:34:86:87:33:09:45:05:C8:25:D0:03:AA:13 Authority key identifier: 7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F Certificate issuer: /CN=A914254C/serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F Certificate serial: 1676 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft Manifest number: 1635 Signing time: Thu 24 Apr 2025 16:46:58 +0000 Manifest this update: Thu 24 Apr 2025 16:46:58 +0000 Manifest next update: Thu 01 May 2025 16:46:58 +0000 Files and hashes: 1: ez9g2bGigAKgeHXKtYohRXBz4X8.crl (hash: W2lzgTN+qDZ+7Z9CSaNnoq29n8oKF3J38uWppeewZ+s=) 2: EE2F10889B4911EFBBAB9381C4F9AE02.roa (hash: YS8WNuWxStKa74t2bwPuweXXnEIkc2Ue/phDde2b0sM=) 3: 2CF180F0809511EFB8A82822C4F9AE02.roa (hash: CYhh4XyVeRLyav6pYm+YkGRqLbzQ4uo88iItY+mTMJ0=) 4: 774A232A718011EEA0E7EF5EC4F9AE02.roa (hash: 1JlLBdqPS0kEz6exVXOEg49WHo0dcXSRPxzHNWzm2DQ=) 5: 1DCB662A3DF211EB81F4CE73C4F9AE02.roa (hash: 4XthOzAgW9UsDg6fNNOwnO8eVqVTNxUxGbGHX+Su5Ds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5750 (0x1676) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914254C, serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F Validity Not Before: Apr 24 16:46:58 2025 GMT Not After : May 1 16:46:58 2025 GMT Subject: CN=680a6b02-e3eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c6:64:a4:bd:39:a4:ad:1e:95:ce:54:e3:02: eb:9f:6a:2e:ee:03:a6:80:7f:5f:a8:b7:c4:49:46: 1f:dd:ae:07:99:c4:00:36:5b:c2:6c:85:d8:fd:ec: 41:d5:94:6e:36:40:bb:c7:01:a7:5e:6c:f9:45:9c: ec:68:1b:8f:1a:75:01:e8:5e:fb:a3:fc:1c:7f:5c: f3:87:91:3c:02:de:bf:db:34:9e:1a:b3:a2:6f:b2: b8:75:34:c6:8e:17:9d:53:92:3c:3d:d3:98:72:15: 6a:c1:63:d6:10:1f:f1:bd:44:0d:1a:56:de:24:b4: 34:8b:49:af:9a:b1:c5:4a:dc:75:24:f3:86:3d:27: 62:31:78:b2:ff:01:5d:cd:30:80:99:97:c2:79:cb: c4:8a:d9:13:d1:dd:ef:77:0d:33:1a:89:ec:72:e5: 58:ca:81:e2:2e:e4:03:39:7c:55:23:04:f2:9d:3f: cf:4e:2b:72:c6:fc:a7:a9:03:f6:8e:47:9e:6c:e9: df:2c:0a:e8:0c:c9:ce:3c:db:7c:35:37:2f:51:33: 37:85:81:e5:3d:a8:53:a5:75:82:02:6f:21:74:f2: cc:1e:42:7e:51:f0:00:7f:c2:e3:cb:78:2a:4e:e2: 16:63:a1:9e:a5:a3:22:e5:8e:ff:4c:51:8a:75:72: 88:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2B:95:BB:AA:30:14:34:86:87:33:09:45:05:C8:25:D0:03:AA:13 X509v3 Authority Key Identifier: keyid:7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:34:22:07:54:b8:d5:7b:38:8c:ca:e8:c9:25:3b:ed:f6:6e: af:be:fd:92:38:8e:84:2f:41:00:3d:10:67:15:59:f3:ed:19: 98:3a:a5:03:8f:d4:76:48:97:db:49:62:32:da:d1:2a:69:b7: ee:0a:80:db:36:92:36:21:2c:96:17:8a:ed:3d:df:c1:6c:ff: 1a:8e:fc:5f:e4:39:b1:36:0f:93:a1:d2:54:d6:88:70:3e:b0: 1b:30:6b:27:a6:75:70:18:4d:27:67:e9:56:62:01:c8:e9:78: 4d:6b:cf:88:a2:de:d7:15:4e:2f:97:9b:f8:f6:4f:f4:e3:fa: af:c9:10:53:fb:3a:9f:6f:c9:b0:3b:de:16:f9:dc:6c:4d:a6: 25:db:ef:b8:a8:87:5e:3c:46:ca:15:31:f8:a2:0c:cc:07:6f: c5:bb:04:17:b5:91:6e:c9:49:a2:f2:17:ee:2c:bd:17:7d:1d: f2:bd:22:cf:af:94:c1:21:ad:47:cb:95:5c:04:fa:56:ef:a2: 9f:8a:07:46:32:2e:7c:e9:58:cc:94:17:a2:3d:40:28:c6:76: 4c:8d:30:59:9e:fa:a2:6f:20:09:70:e1:77:55:5f:d0:a3:da: c8:87:8d:ca:88:b0:65:27:27:45:77:89:95:7c:61:82:15:0b: 93:b0:9e:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI1NEMxMTAvBgNVBAUTKDdCM0Y2MEQ5QjFBMjgwMDJBMDc4NzVDQUI1OEEyMTQ1 NzA3M0UxN0YwHhcNMjUwNDI0MTY0NjU4WhcNMjUwNTAxMTY0NjU4WjAYMRYwFAYD VQQDEw02ODBhNmIwMi1lM2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2cZkpL05pK0elc5U4wLrn2ou7gOmgH9fqLfESUYf3a4HmcQANlvCbIXY/exB 1ZRuNkC7xwGnXmz5RZzsaBuPGnUB6F77o/wcf1zzh5E8At6/2zSeGrOib7K4dTTG jhedU5I8PdOYchVqwWPWEB/xvUQNGlbeJLQ0i0mvmrHFStx1JPOGPSdiMXiy/wFd zTCAmZfCecvEitkT0d3vdw0zGonscuVYyoHiLuQDOXxVIwTynT/PTityxvynqQP2 jkeebOnfLAroDMnOPNt8NTcvUTM3hYHlPahTpXWCAm8hdPLMHkJ+UfAAf8Ljy3gq TuIWY6GepaMi5Y7/TFGKdXKIMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0rlbuq MBQ0hoczCUUFyCXQA6oTMB8GA1UdIwQYMBaAFHs/YNmxooACoHh1yrWKIUVwc+F/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjU0Qy81QTU2NEQ0ODE5 RTgxMUU4Qjk2NTBDN0VDNEY5QUUwMi9lejlnMmJHaWdBS2dlSFhLdFlvaFJYQno0 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V6OWcyYkdpZ0FLZ2VIWEt0WW9oUlhCejRYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjU0Qy81QTU2NEQ0ODE5RTgxMUU4Qjk2NTBDN0VDNEY5QUUwMi9lejlnMmJHaWdB S2dlSFhLdFlvaFJYQno0WDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDANCIHVLjVeziMyujJJTvt9m6vvv2SOI6EL0EAPRBnFVnz7RmYOqUD j9R2SJfbSWIy2tEqabfuCoDbNpI2ISyWF4rtPd/BbP8ajvxf5DmxNg+TodJU1ohw PrAbMGsnpnVwGE0nZ+lWYgHI6XhNa8+Iot7XFU4vl5v49k/04/qvyRBT+zqfb8mw O94W+dxsTaYl2++4qIdePEbKFTH4ogzMB2/FuwQXtZFuyUmi8hfuLL0XfR3yvSLP r5TBIa1Hy5VcBPpW76KfigdGMi586VjMlBeiPUAoxnZMjTBZnvqibyAJcOF3VV/Q o9rIh43KiLBlJydFd4mVfGGCFQuTsJ6h -----END CERTIFICATE-----Generated at Sat Apr 26 04:02:33 2025 by rpki-client