$ rpki-client -vvf rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft File: eERZpLZsg1_PXW5aVoctkkfUZYo.mft (raw, json) Hash identifier: M4kDplttKsuZdbs1CBRox0LrHUxfEO1LKr24ufqmEe4= Subject key identifier: 10:D7:8E:CD:B7:B4:69:6F:0F:A9:C6:DA:5A:B9:F6:FD:4E:F4:C7:CE Authority key identifier: 78:44:59:A4:B6:6C:83:5F:CF:5D:6E:5A:56:87:2D:92:47:D4:65:8A Certificate issuer: /CN=A9145258/serialNumber=784459A4B66C835FCF5D6E5A56872D9247D4658A Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eERZpLZsg1_PXW5aVoctkkfUZYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft Manifest number: 32 Signing time: Fri 25 Apr 2025 06:42:13 +0000 Manifest this update: Fri 25 Apr 2025 06:42:13 +0000 Manifest next update: Fri 02 May 2025 06:42:13 +0000 Files and hashes: 1: eERZpLZsg1_PXW5aVoctkkfUZYo.crl (hash: bHTI+xtYQCkT028Q9XmLlakYOSuBPrEQUAAeU9SHONY=) 2: 2C7AE786042711F0BCEB4A75C4F9AE02.roa (hash: TfwuteF4CSmQI9K6dXSTpQXiyzOgk2P0dxR5uxSFtEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.crl rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eERZpLZsg1_PXW5aVoctkkfUZYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145258, serialNumber=784459A4B66C835FCF5D6E5A56872D9247D4658A Validity Not Before: Apr 25 06:42:13 2025 GMT Not After : May 2 06:42:13 2025 GMT Subject: CN=680b2ec5-6c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0b:6f:e5:9a:29:bf:d3:fc:f0:8a:70:5a:d2: 75:d5:a1:0b:51:04:44:e8:e0:b6:9a:6f:0e:9b:f5: 63:a1:ee:64:29:e1:39:9b:b6:a0:57:8a:e4:4a:37: 81:b8:1d:4a:a6:df:36:23:e0:1a:92:b3:dd:9c:7f: a2:fe:ac:47:02:61:80:b1:e0:c7:7c:7e:20:c3:6e: ba:71:cd:04:3f:5f:25:ea:c4:32:3f:fc:6c:f6:96: d1:3c:b2:bd:de:99:06:c5:a6:94:9b:94:88:4f:5a: 4d:06:ab:d7:ee:40:65:c1:6b:49:a1:94:2c:df:7e: f7:9a:98:44:f2:be:52:d7:16:3f:32:13:b8:7e:b6: 3b:5e:f9:b9:47:d6:2e:07:6f:02:f2:46:25:0c:d7: 62:a8:1f:2f:f3:28:b7:90:b8:87:da:36:98:46:f2: 53:cd:29:22:f9:de:f3:9e:59:da:13:68:93:7d:2d: 0a:2a:c2:4a:ae:de:bc:4e:bb:20:f7:a2:b7:cb:ab: 47:1d:9c:1d:91:b7:ae:ee:ff:19:d8:87:bb:75:8b: 91:7c:dc:fe:61:0b:26:8b:b5:de:c4:12:f5:ce:7c: 64:2f:9e:6a:11:b7:e1:79:b6:e9:4d:59:b7:6f:89: b7:08:57:86:4e:fd:c5:2b:bb:7a:cd:1f:e2:5d:1d: 2b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D7:8E:CD:B7:B4:69:6F:0F:A9:C6:DA:5A:B9:F6:FD:4E:F4:C7:CE X509v3 Authority Key Identifier: keyid:78:44:59:A4:B6:6C:83:5F:CF:5D:6E:5A:56:87:2D:92:47:D4:65:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eERZpLZsg1_PXW5aVoctkkfUZYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:9a:41:77:a2:b9:73:e7:19:a9:a5:57:f2:08:c1:04:af:cf: 4c:65:fa:6e:27:7a:01:df:bd:13:4b:4c:59:0b:ff:7e:dc:69: fa:1e:75:64:19:33:fd:5a:f3:5f:97:b9:e0:56:8f:32:f5:dc: 90:08:ff:fc:9e:04:56:d9:67:dc:4f:33:75:97:25:82:94:25: 19:7a:7f:7d:63:bf:89:3c:11:1b:ba:c4:58:12:b1:e2:a1:93: df:84:bc:11:ae:4a:50:9d:19:f4:d8:e8:db:dc:aa:eb:9d:c1: 58:b1:ef:1f:08:9c:7f:a5:eb:5b:7f:58:17:d7:10:ad:1a:b0: 5e:e4:7b:e2:58:4a:3e:55:0e:d6:de:00:63:9f:d4:e8:1d:b2: 16:3b:43:6e:e9:31:11:b9:90:c2:42:0c:7a:36:39:6d:b4:6e: db:28:5c:4c:da:bf:df:79:34:fb:25:2e:ee:6d:f1:84:02:db: e5:20:8e:c7:55:1e:b8:0c:7e:c3:02:3a:7a:97:04:94:aa:48: b2:9a:da:98:1e:51:1f:75:ab:27:88:2d:3c:f5:55:97:63:6c: 10:61:65:4c:53:b6:07:be:90:2d:77:33:ef:df:27:dd:88:61: 8b:f4:7f:10:2e:12:a2:27:ac:24:1d:95:02:2b:4e:90:69:7d: be:bb:c0:fc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NTI1ODExMC8GA1UEBRMoNzg0NDU5QTRCNjZDODM1RkNGNUQ2RTVBNTY4NzJEOTI0 N0Q0NjU4QTAeFw0yNTA0MjUwNjQyMTNaFw0yNTA1MDIwNjQyMTNaMBgxFjAUBgNV BAMTDTY4MGIyZWM1LTZjMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPC2/lmim/0/zwinBa0nXVoQtRBETo4Laabw6b9WOh7mQp4TmbtqBXiuRKN4G4 HUqm3zYj4BqSs92cf6L+rEcCYYCx4Md8fiDDbrpxzQQ/XyXqxDI//Gz2ltE8sr3e mQbFppSblIhPWk0Gq9fuQGXBa0mhlCzffveamETyvlLXFj8yE7h+tjte+blH1i4H bwLyRiUM12KoHy/zKLeQuIfaNphG8lPNKSL53vOeWdoTaJN9LQoqwkqu3rxOuyD3 orfLq0cdnB2Rt67u/xnYh7t1i5F83P5hCyaLtd7EEvXOfGQvnmoRt+F5tulNWbdv ibcIV4ZO/cUru3rNH+JdHSvZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUENeOzbe0 aW8PqcbaWrn2/U70x84wHwYDVR0jBBgwFoAUeERZpLZsg1/PXW5aVoctkkfUZYow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1MjU4L0FDMDlDNkVFRTMw NjExRUZBODA3QjA1M0M0RjlBRTAyL2VFUlpwTFpzZzFfUFhXNWFWb2N0a2tmVVpZ by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZUVSWnBMWnNnMV9QWFc1YVZvY3Rra2ZVWllvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 MjU4L0FDMDlDNkVFRTMwNjExRUZBODA3QjA1M0M0RjlBRTAyL2VFUlpwTFpzZzFf UFhXNWFWb2N0a2tmVVpZby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADKaQXeiuXPnGamlV/IIwQSvz0xl+m4negHfvRNLTFkL/37cafoedWQZ M/1a81+XueBWjzL13JAI//yeBFbZZ9xPM3WXJYKUJRl6f31jv4k8ERu6xFgSseKh k9+EvBGuSlCdGfTY6NvcquudwVix7x8InH+l61t/WBfXEK0asF7ke+JYSj5VDtbe AGOf1OgdshY7Q27pMRG5kMJCDHo2OW20btsoXEzav995NPslLu5t8YQC2+UgjsdV HrgMfsMCOnqXBJSqSLKa2pgeUR91qyeILTz1VZdjbBBhZUxTtge+kC13M+/fJ92I YYv0fxAuEqInrCQdlQIrTpBpfb67wPw= -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:47 2025 by rpki-client