$ rpki-client -vvf rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/euliL4NM9MbPWtGpivB9UBVFpL8.mft File: euliL4NM9MbPWtGpivB9UBVFpL8.mft (raw, json) Hash identifier: m/6oZvrMOHHEF6XTXt99BsOdTo4QTukdxUolstuE7FE= Subject key identifier: 96:42:58:DE:06:1B:EC:C2:51:43:A1:3F:DF:E0:19:E2:4D:A1:01:60 Authority key identifier: 7A:E9:62:2F:83:4C:F4:C6:CF:5A:D1:A9:8A:F0:7D:50:15:45:A4:BF Certificate issuer: /CN=A9142661/serialNumber=7AE9622F834CF4C6CF5AD1A98AF07D501545A4BF Certificate serial: 0A37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/euliL4NM9MbPWtGpivB9UBVFpL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/euliL4NM9MbPWtGpivB9UBVFpL8.mft Manifest number: 0A2E Signing time: Thu 24 Apr 2025 19:40:32 +0000 Manifest this update: Thu 24 Apr 2025 19:40:31 +0000 Manifest next update: Thu 01 May 2025 19:40:31 +0000 Files and hashes: 1: euliL4NM9MbPWtGpivB9UBVFpL8.crl (hash: XX1QBUCNlMFJXKXaHkKgwGc643LPmmH5tf5PAvEGP/0=) 2: 61096B522DB111EDA42EBE42C4F9AE02.roa (hash: MLOp/VyTI9zALKbWjaowS/AQ+yDzGywTskit04hrMIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/euliL4NM9MbPWtGpivB9UBVFpL8.crl rsync://rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/euliL4NM9MbPWtGpivB9UBVFpL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/euliL4NM9MbPWtGpivB9UBVFpL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2615 (0xa37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142661, serialNumber=7AE9622F834CF4C6CF5AD1A98AF07D501545A4BF Validity Not Before: Apr 24 19:40:31 2025 GMT Not After : May 1 19:40:31 2025 GMT Subject: CN=680a93af-7759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c8:82:d4:df:50:c2:2c:fd:84:2f:fa:41:10: b4:d1:d4:7f:5a:3a:29:cc:42:d0:6b:40:15:46:8f: ca:6e:85:59:e1:a4:fc:36:01:c9:3c:10:f5:e0:29: 1e:d3:7b:1e:95:95:af:c2:f3:3d:60:0b:9a:8d:4e: de:b4:fc:f3:fd:a6:ea:df:0b:71:84:3b:34:6e:cd: 4c:f5:20:23:e2:07:53:a0:61:51:16:c7:68:9d:d0: 5e:c2:31:3a:67:b8:09:d6:fc:f9:59:77:34:42:ed: 08:11:83:ff:eb:0e:66:7a:d9:cb:bd:2f:20:11:4e: 9a:cb:06:50:73:b1:1a:84:b8:06:c2:21:ae:d8:39: 53:e8:4d:9d:23:29:16:50:bf:ae:6b:9b:49:bf:de: 8d:4b:89:81:4f:e4:bd:25:f6:46:3e:0d:ea:47:6a: 89:6b:54:a5:89:53:ce:b9:1a:bf:40:67:41:64:22: 10:4c:f6:71:74:fc:66:b7:49:87:a7:28:ae:09:2e: 0c:e8:90:ba:d8:5c:a5:86:3d:92:3a:28:f1:bf:d1: 66:02:28:83:22:90:8e:ba:64:e4:df:51:b9:d3:fd: 87:14:99:d5:6f:82:0a:03:1d:62:ee:13:17:b8:84: b8:27:5b:c0:17:f6:f6:61:77:4b:dd:81:ec:8c:28: 97:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:42:58:DE:06:1B:EC:C2:51:43:A1:3F:DF:E0:19:E2:4D:A1:01:60 X509v3 Authority Key Identifier: keyid:7A:E9:62:2F:83:4C:F4:C6:CF:5A:D1:A9:8A:F0:7D:50:15:45:A4:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/euliL4NM9MbPWtGpivB9UBVFpL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/euliL4NM9MbPWtGpivB9UBVFpL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/euliL4NM9MbPWtGpivB9UBVFpL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:f1:83:0d:f1:49:a1:db:8f:a6:12:46:a6:d5:d0:10:83:ea: 38:a7:8f:18:52:91:bf:16:23:2a:68:a6:cb:22:bb:45:50:76: ca:03:ac:4b:29:bf:28:ca:d2:e7:57:10:c9:8c:21:0d:15:be: 8c:63:e7:cf:04:0d:a3:d4:bf:b3:c8:6c:b9:7b:d0:2c:fe:86: 50:a7:ae:52:8c:f6:e1:81:44:4a:42:81:a6:a8:07:1c:39:f1: 59:69:dc:fe:fd:8f:c1:41:ae:07:27:c3:b7:e7:78:76:c1:d9: 50:47:72:d0:70:09:47:69:9e:bc:e8:47:75:0f:5c:5c:e1:55: 2a:e0:8b:e6:4b:d0:40:75:6e:8b:d2:56:30:e4:50:6c:23:9b: 1b:7c:c0:85:0f:9a:f6:91:0c:16:ab:d6:2e:57:d7:88:e1:c1: a2:a6:9c:ac:2f:40:ae:86:af:1a:6a:fc:e3:54:dc:fa:78:88: 04:c5:54:74:91:c8:34:f8:4c:ff:8f:bb:38:15:78:9f:29:4b: ad:55:4f:ce:1b:f7:ad:25:a9:ca:11:ca:8c:c1:c4:04:a9:bd: 66:88:d1:9a:c7:b4:8b:32:b0:66:9c:86:c1:d8:76:eb:ae:c8: 7b:17:dd:08:6e:ad:a9:b0:28:08:b8:9d:15:00:c2:84:2f:f5: 45:96:35:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI2NjExMTAvBgNVBAUTKDdBRTk2MjJGODM0Q0Y0QzZDRjVBRDFBOThBRjA3RDUw MTU0NUE0QkYwHhcNMjUwNDI0MTk0MDMxWhcNMjUwNTAxMTk0MDMxWjAYMRYwFAYD VQQDEw02ODBhOTNhZi03NzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqciC1N9Qwiz9hC/6QRC00dR/WjopzELQa0AVRo/KboVZ4aT8NgHJPBD14Cke 03selZWvwvM9YAuajU7etPzz/abq3wtxhDs0bs1M9SAj4gdToGFRFsdondBewjE6 Z7gJ1vz5WXc0Qu0IEYP/6w5metnLvS8gEU6aywZQc7EahLgGwiGu2DlT6E2dIykW UL+ua5tJv96NS4mBT+S9JfZGPg3qR2qJa1SliVPOuRq/QGdBZCIQTPZxdPxmt0mH pyiuCS4M6JC62Fylhj2SOijxv9FmAiiDIpCOumTk31G50/2HFJnVb4IKAx1i7hMX uIS4J1vAF/b2YXdL3YHsjCiXKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZCWN4G G+zCUUOhP9/gGeJNoQFgMB8GA1UdIwQYMBaAFHrpYi+DTPTGz1rRqYrwfVAVRaS/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjY2MS80Q0M3NzI3NjY5 QkMxMUVBQUYxQjlGNjlDNEY5QUUwMi9ldWxpTDROTTlNYlBXdEdwaXZCOVVCVkZw TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V1bGlMNE5NOU1iUFd0R3BpdkI5VUJWRnBMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjY2MS80Q0M3NzI3NjY5QkMxMUVBQUYxQjlGNjlDNEY5QUUwMi9ldWxpTDROTTlN YlBXdEdwaXZCOVVCVkZwTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY8YMN8Umh24+mEkam1dAQg+o4p48YUpG/FiMqaKbLIrtFUHbKA6xL Kb8oytLnVxDJjCENFb6MY+fPBA2j1L+zyGy5e9As/oZQp65SjPbhgURKQoGmqAcc OfFZadz+/Y/BQa4HJ8O353h2wdlQR3LQcAlHaZ686Ed1D1xc4VUq4IvmS9BAdW6L 0lYw5FBsI5sbfMCFD5r2kQwWq9YuV9eI4cGippysL0Cuhq8aavzjVNz6eIgExVR0 kcg0+Ez/j7s4FXifKUutVU/OG/etJanKEcqMwcQEqb1miNGax7SLMrBmnIbB2Hbr rsh7F90Ibq2psCgIuJ0VAMKEL/VFljWK -----END CERTIFICATE-----Generated at Sat Apr 26 14:18:56 2025 by rpki-client