$ rpki-client -vvf rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft File: eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft (raw, json) Hash identifier: L0WNZZSPHVutfihbrv9mTn9bV+2MDDE21pIbnGo89FU= Subject key identifier: 58:7B:2E:C0:33:C8:69:8C:35:A3:33:9E:1D:AE:80:61:AC:B6:E2:B0 Authority key identifier: 78:9F:8B:78:7E:D3:DD:35:20:33:32:CE:B3:B5:32:E1:FA:F0:B6:C6 Certificate issuer: /CN=A914CF73/serialNumber=789F8B787ED3DD35203332CEB3B532E1FAF0B6C6 Certificate serial: 3444 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft Manifest number: 343C Signing time: Thu 24 Apr 2025 15:20:29 +0000 Manifest this update: Thu 24 Apr 2025 15:20:29 +0000 Manifest next update: Thu 01 May 2025 15:20:29 +0000 Files and hashes: 1: eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl (hash: E8pIFjPG9c/6uwYxTAz7pEp0Ir37MCWryd1qXH/jMU4=) 2: 5007D8DECAB411E889484D32C4F9AE02.roa (hash: d/14FJHyt97NnvQezwZgszS2h7OqJIW+bhi4rgk0UNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13380 (0x3444) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CF73, serialNumber=789F8B787ED3DD35203332CEB3B532E1FAF0B6C6 Validity Not Before: Apr 24 15:20:29 2025 GMT Not After : May 1 15:20:29 2025 GMT Subject: CN=680a56bd-7dae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9c:f1:83:d6:b0:ec:84:b1:b0:58:ae:c1:ba: 4d:ae:4b:3d:0a:36:e0:b0:c6:df:7c:40:6d:fa:70: cf:15:44:c4:49:1c:3d:75:be:32:13:64:c4:f8:d0: 64:36:89:37:b2:00:fb:87:a3:d9:99:6c:9c:5f:6b: a0:3e:19:8a:c8:ac:3f:7e:58:40:35:f8:3d:52:33: 08:ad:53:5a:ad:d7:53:76:8c:c7:92:f0:ac:25:e9: 09:1e:e3:c1:50:c8:2a:8e:97:bc:4f:62:54:3c:55: 8c:22:f6:cc:bc:6a:d4:73:0a:92:fd:1a:93:97:a1: 5c:6b:57:4b:cb:a0:76:28:87:20:cd:ea:b2:9f:43: e0:23:b7:51:fd:f7:13:85:a6:db:e2:3f:47:63:e8: 34:ac:cb:6b:2c:59:5a:ce:25:52:aa:94:91:3c:af: 6f:86:25:b0:b0:0f:e5:2e:99:f7:cd:0a:ab:e1:2e: 4a:a9:8c:27:6a:f0:5e:2f:b1:8f:87:c4:61:d8:78: 1b:e1:09:ef:c6:42:84:b5:ea:10:36:c3:b7:9b:88: 65:fb:81:46:90:55:cc:f3:fc:29:37:5a:f2:a7:da: bb:8b:89:96:87:23:99:89:4f:b5:7a:98:62:9b:69: af:5f:3a:e8:36:d5:54:3f:f2:d6:40:86:0f:ff:20: ef:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7B:2E:C0:33:C8:69:8C:35:A3:33:9E:1D:AE:80:61:AC:B6:E2:B0 X509v3 Authority Key Identifier: keyid:78:9F:8B:78:7E:D3:DD:35:20:33:32:CE:B3:B5:32:E1:FA:F0:B6:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:5b:fb:2d:30:f2:d5:5f:d8:e6:9b:3b:7a:c6:10:48:38:3f: 1e:e7:dd:f0:fe:0e:13:db:01:28:9d:ef:88:a2:8c:2b:15:ea: 32:cf:ca:d1:99:8b:8a:18:7f:8d:9e:dc:aa:92:0a:3b:78:e4: 20:25:21:a6:9b:47:90:7f:e9:77:41:15:56:16:9e:c5:0c:20: 71:ae:f7:8e:98:59:60:39:9a:e3:0b:45:71:b7:27:2b:5b:c7: 49:06:8b:7e:bb:0c:a9:da:68:1c:16:fe:0f:62:2c:b8:16:55: b6:72:df:7f:05:53:9e:ce:5d:02:46:9a:ef:f2:14:68:28:96: d3:5c:12:0f:64:6d:05:34:09:02:54:a1:f3:c6:77:aa:15:95: 88:e9:17:01:a7:25:ad:a1:b6:7a:df:26:b5:c0:a9:34:52:01: 3a:6c:e1:e0:53:b0:89:36:24:82:bc:cc:c7:94:3d:15:d1:21: 6b:92:4f:ac:ba:28:53:e2:d2:b4:eb:86:93:69:a9:2b:4d:01: 63:f2:b8:9f:00:a2:68:1a:40:d8:36:f6:6e:3e:f3:3d:9e:e2: 90:d5:c8:04:ed:68:34:05:b7:6d:2c:e5:d4:87:79:82:b2:ba: c0:a0:77:75:1b:8e:6b:85:d8:53:87:3b:9f:08:91:36:d7:a4: e7:98:76:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENGNzMxMTAvBgNVBAUTKDc4OUY4Qjc4N0VEM0REMzUyMDMzMzJDRUIzQjUzMkUx RkFGMEI2QzYwHhcNMjUwNDI0MTUyMDI5WhcNMjUwNTAxMTUyMDI5WjAYMRYwFAYD VQQDEw02ODBhNTZiZC03ZGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZzxg9aw7ISxsFiuwbpNrks9CjbgsMbffEBt+nDPFUTESRw9db4yE2TE+NBk Nok3sgD7h6PZmWycX2ugPhmKyKw/flhANfg9UjMIrVNarddTdozHkvCsJekJHuPB UMgqjpe8T2JUPFWMIvbMvGrUcwqS/RqTl6Fca1dLy6B2KIcgzeqyn0PgI7dR/fcT habb4j9HY+g0rMtrLFlaziVSqpSRPK9vhiWwsA/lLpn3zQqr4S5KqYwnavBeL7GP h8Rh2Hgb4QnvxkKEteoQNsO3m4hl+4FGkFXM8/wpN1ryp9q7i4mWhyOZiU+1ephi m2mvXzroNtVUP/LWQIYP/yDvxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFh7LsAz yGmMNaMznh2ugGGstuKwMB8GA1UdIwQYMBaAFHifi3h+0901IDMyzrO1MuH68LbG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0Y3My9BNjg0NzU1MDJB MDExMUUyODE3MjNDQTYwOEIwMkNEMi9lSi1MZUg3VDNUVWdNekxPczdVeTRmcnd0 c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VKLUxlSDdUM1RVZ016TE9zN1V5NGZyd3RzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0Y3My9BNjg0NzU1MDJBMDExMUUyODE3MjNDQTYwOEIwMkNEMi9lSi1MZUg3VDNU VWdNekxPczdVeTRmcnd0c1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtW/stMPLVX9jmmzt6xhBIOD8e593w/g4T2wEone+IoowrFeoyz8rR mYuKGH+Nntyqkgo7eOQgJSGmm0eQf+l3QRVWFp7FDCBxrveOmFlgOZrjC0Vxtycr W8dJBot+uwyp2mgcFv4PYiy4FlW2ct9/BVOezl0CRprv8hRoKJbTXBIPZG0FNAkC VKHzxneqFZWI6RcBpyWtobZ63ya1wKk0UgE6bOHgU7CJNiSCvMzHlD0V0SFrkk+s uihT4tK064aTaakrTQFj8rifAKJoGkDYNvZuPvM9nuKQ1cgE7Wg0BbdtLOXUh3mC srrAoHd1G45rhdhThzufCJE216TnmHbl -----END CERTIFICATE-----Generated at Sat Apr 26 04:01:30 2025 by rpki-client