$ rpki-client -vvf rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft File: eSD4yoTskTxpqY1UNxIJtDTDMZE.mft (raw, json) Hash identifier: FXKQeokbHJrIENZkWszddNWUCI/S/kUwzxu3sqeqr5E= Subject key identifier: 04:7F:53:D4:19:7E:6A:CD:24:89:43:4D:43:6D:98:8F:3B:8B:46:7E Authority key identifier: 79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91 Certificate issuer: /CN=A914A554/serialNumber=7920F8CA84EC913C69A98D54371209B434C33191 Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft Manifest number: 63 Signing time: Fri 25 Apr 2025 06:05:09 +0000 Manifest this update: Fri 25 Apr 2025 06:05:08 +0000 Manifest next update: Fri 02 May 2025 06:05:08 +0000 Files and hashes: 1: eSD4yoTskTxpqY1UNxIJtDTDMZE.crl (hash: wGeqw23Xpcy+mxZSJcRf/vybpHMGXZCcwqiIcxL1i4s=) 2: E188EE7A935711EFBE98944CC4F9AE02.roa (hash: X4btbpCoiYoIXbuMOSmCOyUWCj9oTbrBupewiVqB8lU=) 3: F561A3BE935811EF97E1194EC4F9AE02.roa (hash: aPfjmDHXujlDq60sfxkeUX3+9b02nUsv2TYNf5bZEBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A554, serialNumber=7920F8CA84EC913C69A98D54371209B434C33191 Validity Not Before: Apr 25 06:05:08 2025 GMT Not After : May 2 06:05:08 2025 GMT Subject: CN=680b2614-39e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b7:f4:1b:47:72:14:7e:4c:2a:a0:ff:a9:56: b8:e8:f3:dd:d2:c0:92:55:42:20:d9:60:a9:49:c3: 52:84:38:6c:3d:9a:9f:02:3b:44:ff:ec:18:b3:01: 9b:4c:06:fa:fa:9e:e4:53:9c:a4:88:7b:f9:3e:6a: 88:0b:e9:56:a2:bc:21:7f:0b:81:66:d1:e3:11:ac: 11:7b:36:c0:b4:7e:f5:2a:37:85:e3:de:13:87:6a: f7:de:80:e8:dc:c5:af:56:93:93:d5:57:b8:15:77: 46:8c:ba:cd:c3:e2:5d:6a:54:3d:cd:f7:19:11:7c: 63:82:72:5a:5a:ad:95:dd:5a:21:1e:bb:61:b2:94: c1:13:c9:da:88:79:68:bd:8e:bd:f0:cc:cb:ed:93: 35:c2:b0:8e:d2:05:4d:04:56:09:99:0e:05:30:d4: 71:f6:71:53:a1:e3:c4:17:cf:23:68:98:55:33:c4: 60:46:ac:0f:79:55:15:ab:07:3c:1f:a1:2c:ba:6d: ee:bc:ab:d5:69:19:e3:02:58:f4:3b:21:34:02:5a: ed:39:4f:b9:8f:d1:1a:6d:91:95:fb:57:a6:d7:a6: 76:b5:40:9e:7d:40:50:57:4d:45:ce:0e:55:69:e2: 3e:aa:3d:fb:19:b4:fb:1a:79:87:70:5f:af:6c:3b: c4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:7F:53:D4:19:7E:6A:CD:24:89:43:4D:43:6D:98:8F:3B:8B:46:7E X509v3 Authority Key Identifier: keyid:79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:6d:b2:22:bf:04:23:06:e5:fc:3c:75:1a:ac:0e:a4:f5:e2: fc:0e:9f:c6:c5:45:9f:33:9d:78:b8:3c:d9:c2:f4:fc:d2:b6: 50:13:f1:34:e7:22:d3:16:21:2d:94:b2:55:bd:fb:6d:48:aa: 6a:49:ab:a0:1b:88:45:1a:22:f1:63:88:35:07:c5:a1:60:92: 56:14:cd:9a:1d:84:51:17:e5:fb:21:6f:54:a1:6f:bf:0b:ef: 9c:b1:0c:c5:a2:a8:40:43:db:b0:b5:94:dd:f2:59:d6:5a:14: b3:ca:0d:dd:8e:35:60:c3:c8:28:0e:ea:1b:b2:a7:e9:dd:46: 5b:07:ab:e4:2f:f6:34:fe:d0:c5:aa:78:69:54:49:15:de:13: f3:81:3c:e6:a4:70:4e:42:91:1e:66:b3:03:38:34:c6:91:93: 86:c6:1e:27:66:a9:fe:e6:d0:78:f4:ff:6b:ef:27:13:9c:38: 73:4f:67:07:6b:91:29:4e:53:c0:58:1f:6d:cc:4b:89:16:69: 57:29:99:fb:f7:fd:4f:1a:63:dd:0a:d6:38:39:c5:dc:37:f5: 6f:48:ce:ad:d6:8f:3a:3d:76:d8:f6:7c:ee:fe:ab:89:de:1c: d4:6c:17:e7:a9:d0:74:e4:a1:05:b9:0a:04:b8:e6:52:0b:fa: 5a:7c:66:21 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QTU1NDExMC8GA1UEBRMoNzkyMEY4Q0E4NEVDOTEzQzY5QTk4RDU0MzcxMjA5QjQz NEMzMzE5MTAeFw0yNTA0MjUwNjA1MDhaFw0yNTA1MDIwNjA1MDhaMBgxFjAUBgNV BAMTDTY4MGIyNjE0LTM5ZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCVt/QbR3IUfkwqoP+pVrjo893SwJJVQiDZYKlJw1KEOGw9mp8CO0T/7BizAZtM Bvr6nuRTnKSIe/k+aogL6VaivCF/C4Fm0eMRrBF7NsC0fvUqN4Xj3hOHavfegOjc xa9Wk5PVV7gVd0aMus3D4l1qVD3N9xkRfGOCclparZXdWiEeu2GylMETydqIeWi9 jr3wzMvtkzXCsI7SBU0EVgmZDgUw1HH2cVOh48QXzyNomFUzxGBGrA95VRWrBzwf oSy6be68q9VpGeMCWPQ7ITQCWu05T7mP0RptkZX7V6bXpna1QJ59QFBXTUXODlVp 4j6qPfsZtPsaeYdwX69sO8S9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBH9T1Bl+ as0kiUNNQ22YjzuLRn4wHwYDVR0jBBgwFoAUeSD4yoTskTxpqY1UNxIJtDTDMZEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRBNTU0Lzc5Rjg5OTgyOTM1 NjExRUZBOEVERUIzM0M0RjlBRTAyL2VTRDR5b1Rza1R4cHFZMVVOeElKdERURE1a RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZVNENHlvVHNrVHhwcVkxVU54SUp0RFRETVpFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRB NTU0Lzc5Rjg5OTgyOTM1NjExRUZBOEVERUIzM0M0RjlBRTAyL2VTRDR5b1Rza1R4 cHFZMVVOeElKdERURE1aRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAINtsiK/BCMG5fw8dRqsDqT14vwOn8bFRZ8znXi4PNnC9PzStlAT8TTn ItMWIS2UslW9+21IqmpJq6AbiEUaIvFjiDUHxaFgklYUzZodhFEX5fshb1Shb78L 75yxDMWiqEBD27C1lN3yWdZaFLPKDd2ONWDDyCgO6huyp+ndRlsHq+Qv9jT+0MWq eGlUSRXeE/OBPOakcE5CkR5mswM4NMaRk4bGHidmqf7m0Hj0/2vvJxOcOHNPZwdr kSlOU8BYH23MS4kWaVcpmfv3/U8aY90K1jg5xdw39W9Izq3Wjzo9dtj2fO7+q4ne HNRsF+ep0HTkoQW5CgS45lIL+lp8ZiE= -----END CERTIFICATE-----Generated at Sat Apr 26 17:19:48 2025 by rpki-client