$ rpki-client -vvf rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft File: eOQpC8zJmRWAsnbcDCyXv7CGINg.mft (raw, json) Hash identifier: hSChjq+cIobW2IaKfp3d4KCqODhHjXAMndKTFYIgehM= Subject key identifier: DF:71:AE:F0:E0:FD:14:90:A9:2B:A8:4C:54:F8:ED:3F:D3:F5:E4:6F Authority key identifier: 78:E4:29:0B:CC:C9:99:15:80:B2:76:DC:0C:2C:97:BF:B0:86:20:D8 Certificate issuer: /CN=A914B79F/serialNumber=78E4290BCCC9991580B276DC0C2C97BFB08620D8 Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft Manifest number: 0137 Signing time: Fri 25 Apr 2025 03:35:36 +0000 Manifest this update: Fri 25 Apr 2025 03:35:36 +0000 Manifest next update: Fri 02 May 2025 03:35:36 +0000 Files and hashes: 1: eOQpC8zJmRWAsnbcDCyXv7CGINg.crl (hash: PO/m94yNywM1rHqwoRED7ksc3CIYqpMHqCkQAHBwXIo=) 2: 071BCFF849D011EF9F8A8969C4F9AE02.roa (hash: ta+wizYmG5Li1UNdnV+RjnG6RQDSQFnDtjBK6l15sJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.crl rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B79F, serialNumber=78E4290BCCC9991580B276DC0C2C97BFB08620D8 Validity Not Before: Apr 25 03:35:36 2025 GMT Not After : May 2 03:35:36 2025 GMT Subject: CN=680b0308-ef1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a0:7e:cc:54:bf:b3:7b:ea:8e:ec:89:3b:b8: 15:12:89:fb:09:da:be:b3:cc:f7:6f:e5:15:af:4b: 08:72:5f:c8:24:bf:98:5c:02:d8:17:45:b6:7b:ac: da:87:56:46:71:00:ab:3d:46:1d:23:b1:0a:4f:09: 53:f6:ac:57:da:90:25:5f:2b:b6:46:df:20:24:37: a1:a4:de:15:80:e9:3a:ae:e0:45:84:94:c9:f5:63: e4:82:50:8f:d4:5c:59:01:bd:3f:b7:60:1d:7c:be: 27:c4:f6:a5:d7:37:90:6d:7e:93:28:c8:a1:f6:f6: c5:34:cc:9f:10:ea:3d:53:0f:2e:38:5c:1a:c0:b6: 52:65:ac:70:9e:0a:0b:e9:de:0e:1a:6e:57:4e:35: 68:7f:46:f9:8f:e4:4b:14:4e:b2:b9:f5:ce:28:d7: a4:aa:65:6d:88:7b:e1:f7:b2:05:70:95:a1:0e:33: ff:cd:ed:12:a1:c3:43:b6:9b:da:b3:69:b6:b6:d8: 04:74:93:02:10:40:f9:45:a1:cf:59:76:d4:84:c6: f3:c3:b7:d5:17:35:64:68:1b:f3:ff:1b:9c:9d:72: 6b:92:fa:de:f4:5b:c5:bf:75:91:c2:4d:37:6d:4b: 30:36:42:42:cc:02:be:64:bb:43:34:d3:72:dd:87: 82:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:71:AE:F0:E0:FD:14:90:A9:2B:A8:4C:54:F8:ED:3F:D3:F5:E4:6F X509v3 Authority Key Identifier: keyid:78:E4:29:0B:CC:C9:99:15:80:B2:76:DC:0C:2C:97:BF:B0:86:20:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:3c:c8:ea:d3:a3:43:79:71:bc:70:83:0b:ce:d5:61:92:57: 1c:0c:58:38:de:6a:86:2e:30:86:7e:cd:c8:e2:53:7c:ae:46: b0:f6:63:8e:04:2a:13:c5:75:8c:5e:f6:80:18:57:b1:6d:c3: 4f:f1:ad:39:ce:ee:8b:ae:6f:49:f1:66:c7:26:51:f6:9d:b0: 41:e9:40:28:4d:10:e6:c9:10:0f:5d:fe:1d:fd:13:b9:23:3f: 50:6d:f7:ce:eb:d1:0a:31:ff:28:5b:2e:36:49:58:50:43:b1: 27:68:52:42:03:fa:f7:ae:65:80:95:32:a0:4c:8d:aa:3a:17: 6d:1a:2e:c0:91:6c:6c:22:8c:76:67:e0:45:7e:ca:50:f8:1a: 48:61:5a:9a:1a:2f:c0:53:9f:6e:68:65:85:3e:f3:be:93:02: 40:22:be:95:d9:28:c8:1f:96:1a:aa:08:54:64:d5:15:18:54: a5:82:31:62:3f:c0:dc:7c:f0:55:ad:0d:20:f0:53:5e:e6:88: 85:bb:b4:e2:ea:25:d7:18:33:7f:e8:6c:c8:f7:51:a5:05:2b: f1:26:7d:a5:1f:db:c3:85:89:1f:ab:7b:3c:49:6d:1d:b0:c0: 58:f1:35:b6:85:9d:d5:bc:c1:2d:5d:3e:87:a7:15:ca:1c:28: 43:e3:fa:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI3OUYxMTAvBgNVBAUTKDc4RTQyOTBCQ0NDOTk5MTU4MEIyNzZEQzBDMkM5N0JG QjA4NjIwRDgwHhcNMjUwNDI1MDMzNTM2WhcNMjUwNTAyMDMzNTM2WjAYMRYwFAYD VQQDEw02ODBiMDMwOC1lZjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKB+zFS/s3vqjuyJO7gVEon7Cdq+s8z3b+UVr0sIcl/IJL+YXALYF0W2e6za h1ZGcQCrPUYdI7EKTwlT9qxX2pAlXyu2Rt8gJDehpN4VgOk6ruBFhJTJ9WPkglCP 1FxZAb0/t2AdfL4nxPal1zeQbX6TKMih9vbFNMyfEOo9Uw8uOFwawLZSZaxwngoL 6d4OGm5XTjVof0b5j+RLFE6yufXOKNekqmVtiHvh97IFcJWhDjP/ze0SocNDtpva s2m2ttgEdJMCEED5RaHPWXbUhMbzw7fVFzVkaBvz/xucnXJrkvre9FvFv3WRwk03 bUswNkJCzAK+ZLtDNNNy3YeCGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN9xrvDg /RSQqSuoTFT47T/T9eRvMB8GA1UdIwQYMBaAFHjkKQvMyZkVgLJ23Awsl7+whiDY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Qjc5Ri9EQTY4MzdGMDRF MjkxMUVFOTQ1QzM5NEZDNEY5QUUwMi9lT1FwQzh6Sm1SV0FzbmJjREN5WHY3Q0dJ TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VPUXBDOHpKbVJXQXNuYmNEQ3lYdjdDR0lOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Qjc5Ri9EQTY4MzdGMDRFMjkxMUVFOTQ1QzM5NEZDNEY5QUUwMi9lT1FwQzh6Sm1S V0FzbmJjREN5WHY3Q0dJTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+PMjq06NDeXG8cIMLztVhklccDFg43mqGLjCGfs3I4lN8rkaw9mOO BCoTxXWMXvaAGFexbcNP8a05zu6Lrm9J8WbHJlH2nbBB6UAoTRDmyRAPXf4d/RO5 Iz9QbffO69EKMf8oWy42SVhQQ7EnaFJCA/r3rmWAlTKgTI2qOhdtGi7AkWxsIox2 Z+BFfspQ+BpIYVqaGi/AU59uaGWFPvO+kwJAIr6V2SjIH5YaqghUZNUVGFSlgjFi P8DcfPBVrQ0g8FNe5oiFu7Ti6iXXGDN/6GzI91GlBSvxJn2lH9vDhYkfq3s8SW0d sMBY8TW2hZ3VvMEtXT6HpxXKHChD4/oM -----END CERTIFICATE-----Generated at Sat Apr 26 13:43:38 2025 by rpki-client