$ rpki-client -vvf rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.mft File: J7eqjlEecNijC7NtAsrwhXkMmcM.mft (raw, json) Hash identifier: Z+Kr0FYD6BJW57xUnWuPoD8HocqI1/n20Of+/tru0Do= Subject key identifier: 47:9F:DD:51:C6:53:2B:9B:05:6A:EB:4A:B7:68:A5:2B:69:A9:48:78 Authority key identifier: 27:B7:AA:8E:51:1E:70:D8:A3:0B:B3:6D:02:CA:F0:85:79:0C:99:C3 Certificate issuer: /CN=A914284F/serialNumber=27B7AA8E511E70D8A30BB36D02CAF085790C99C3 Certificate serial: 0595 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J7eqjlEecNijC7NtAsrwhXkMmcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.mft Manifest number: 0586 Signing time: Thu 24 Apr 2025 23:04:33 +0000 Manifest this update: Thu 24 Apr 2025 23:04:33 +0000 Manifest next update: Thu 01 May 2025 23:04:33 +0000 Files and hashes: 1: J7eqjlEecNijC7NtAsrwhXkMmcM.crl (hash: JAkf/zw8zuIshV8dKDMlbtecTukZkzlGX1GRT70a6oU=) 2: C6E2CBD4558011EDA4773D7FC4F9AE02.roa (hash: ZEf3tktj8tsQa/GPBkU/T2j5p4mzyySZpNdpL6R/nPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.crl rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J7eqjlEecNijC7NtAsrwhXkMmcM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:04:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1429 (0x595) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914284F, serialNumber=27B7AA8E511E70D8A30BB36D02CAF085790C99C3 Validity Not Before: Apr 24 23:04:33 2025 GMT Not After : May 1 23:04:33 2025 GMT Subject: CN=680ac381-b536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ba:e0:64:3d:8f:fa:6e:1e:5a:9c:87:29:f0: f7:f2:b4:65:17:f3:bb:c6:c4:7c:04:2d:05:54:79: e4:bd:4b:95:93:9b:23:f6:ca:eb:28:9c:df:64:2c: a3:43:4e:0d:58:d5:ce:99:96:ba:22:f5:07:81:75: e7:98:2a:6a:1b:d5:a0:2e:f7:34:b0:a3:54:97:d6: 0b:ef:61:54:56:d1:d5:a6:ea:9e:bf:68:88:ff:c4: 75:26:1c:cf:db:21:7b:16:dc:7c:05:5a:9b:30:a8: cf:28:da:23:a4:5d:ea:bc:09:79:29:eb:a0:c4:61: fa:2e:34:73:74:7f:15:41:d4:cc:35:2c:cb:c7:bf: 3d:fb:9d:99:e2:d6:64:06:3e:63:36:76:02:92:f1: c3:d1:8b:d8:1a:cc:7c:85:de:78:13:f9:8d:71:e2: b0:39:32:e3:d3:22:5a:d2:3a:00:57:f9:71:c9:ac: 18:91:ff:ca:6c:04:67:a1:1d:b4:4a:ed:20:e6:97: 7c:7a:22:0f:2e:65:79:68:c9:84:39:3d:a3:ce:d3: f2:25:d1:ca:91:9b:8b:10:75:b7:ee:d2:3b:3b:3e: 60:3b:1d:3d:36:d3:dc:76:0e:67:22:3a:31:fd:19: 33:ca:85:f1:93:93:ea:d3:a3:4d:0f:37:05:af:2a: a9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:9F:DD:51:C6:53:2B:9B:05:6A:EB:4A:B7:68:A5:2B:69:A9:48:78 X509v3 Authority Key Identifier: keyid:27:B7:AA:8E:51:1E:70:D8:A3:0B:B3:6D:02:CA:F0:85:79:0C:99:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J7eqjlEecNijC7NtAsrwhXkMmcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:6e:66:f6:a2:1c:20:8e:73:6e:8f:67:36:2f:45:77:d0:c9: eb:a6:25:c9:a8:0f:70:36:ad:70:5c:ef:ea:0a:35:7d:8a:27: 45:6a:db:c7:6e:a3:db:1c:85:71:73:11:41:99:7e:3f:70:e7: f7:9e:06:94:09:7a:8d:a3:10:a2:8f:d9:52:e9:28:6e:17:16: 7d:70:69:0d:f2:4e:c1:4b:80:69:e7:49:93:1b:ad:cb:f7:d0: 0c:5a:64:0e:af:e8:90:e7:39:2c:f7:be:59:91:6a:79:25:93: f3:a5:6a:bf:6e:70:f6:2c:e5:22:e3:5a:b9:b0:e2:8f:21:2f: a8:32:c7:ad:75:e6:55:69:86:f3:66:c3:6a:6e:f0:64:a0:82: bb:b0:04:16:48:db:e9:73:8f:ba:32:ad:c6:b6:c3:0c:14:af: 0c:04:05:2d:f4:e6:a4:c9:0c:d0:cb:29:61:40:95:cb:45:aa: c3:b9:d2:de:30:63:1a:50:2f:2d:34:7e:33:b9:c1:09:45:ce: 7c:dd:7a:f9:27:2c:67:9e:a4:8a:37:3e:b0:eb:4a:31:13:d4: df:cc:41:e0:78:87:22:39:b3:2c:3d:63:76:b1:21:9e:29:d9: ce:e0:da:30:ab:20:fa:38:56:47:f4:aa:d7:d8:0f:7d:e9:a6: c7:62:a8:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI4NEYxMTAvBgNVBAUTKDI3QjdBQThFNTExRTcwRDhBMzBCQjM2RDAyQ0FGMDg1 NzkwQzk5QzMwHhcNMjUwNDI0MjMwNDMzWhcNMjUwNTAxMjMwNDMzWjAYMRYwFAYD VQQDEw02ODBhYzM4MS1iNTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4brgZD2P+m4eWpyHKfD38rRlF/O7xsR8BC0FVHnkvUuVk5sj9srrKJzfZCyj Q04NWNXOmZa6IvUHgXXnmCpqG9WgLvc0sKNUl9YL72FUVtHVpuqev2iI/8R1JhzP 2yF7Ftx8BVqbMKjPKNojpF3qvAl5KeugxGH6LjRzdH8VQdTMNSzLx789+52Z4tZk Bj5jNnYCkvHD0YvYGsx8hd54E/mNceKwOTLj0yJa0joAV/lxyawYkf/KbARnoR20 Su0g5pd8eiIPLmV5aMmEOT2jztPyJdHKkZuLEHW37tI7Oz5gOx09NtPcdg5nIjox /RkzyoXxk5Pq06NNDzcFryqpqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEef3VHG UyubBWrrSrdopStpqUh4MB8GA1UdIwQYMBaAFCe3qo5RHnDYowuzbQLK8IV5DJnD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mjg0Ri85MzA4NUM4MEQ3 QUUxMUVCQTVFQjMxNkNDNEY5QUUwMi9KN2VxamxFZWNOaWpDN050QXNyd2hYa01t Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0o3ZXFqbEVlY05pakM3TnRBc3J3aFhrTW1jTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mjg0Ri85MzA4NUM4MEQ3QUUxMUVCQTVFQjMxNkNDNEY5QUUwMi9KN2VxamxFZWNO aWpDN050QXNyd2hYa01tY00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqbmb2ohwgjnNuj2c2L0V30MnrpiXJqA9wNq1wXO/qCjV9iidFatvH bqPbHIVxcxFBmX4/cOf3ngaUCXqNoxCij9lS6ShuFxZ9cGkN8k7BS4Bp50mTG63L 99AMWmQOr+iQ5zks975ZkWp5JZPzpWq/bnD2LOUi41q5sOKPIS+oMsetdeZVaYbz ZsNqbvBkoIK7sAQWSNvpc4+6Mq3GtsMMFK8MBAUt9OakyQzQyylhQJXLRarDudLe MGMaUC8tNH4zucEJRc583Xr5JyxnnqSKNz6w60oxE9TfzEHgeIciObMsPWN2sSGe KdnO4NowqyD6OFZH9KrX2A996abHYqgu -----END CERTIFICATE-----Generated at Sat Apr 26 14:05:51 2025 by rpki-client