$ rpki-client -vvf rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.mft File: evqYcujQ_5IpleWJO1nDIUdnsfw.mft (raw, json) Hash identifier: BkX+t5Stn13fuJJ79TbU0DuzPZnRIb7JyUxJou0UHdI= Subject key identifier: A7:F0:DA:0E:EE:7F:34:4A:3A:7C:AA:8C:8F:84:F7:50:6C:AB:14:A5 Authority key identifier: 7A:FA:98:72:E8:D0:FF:92:29:95:E5:89:3B:59:C3:21:47:67:B1:FC Certificate issuer: /CN=A9154AA5/serialNumber=7AFA9872E8D0FF922995E5893B59C3214767B1FC Certificate serial: 091A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evqYcujQ_5IpleWJO1nDIUdnsfw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.mft Manifest number: 0913 Signing time: Thu 24 Apr 2025 20:11:52 +0000 Manifest this update: Thu 24 Apr 2025 20:11:51 +0000 Manifest next update: Thu 01 May 2025 20:11:51 +0000 Files and hashes: 1: evqYcujQ_5IpleWJO1nDIUdnsfw.crl (hash: NnpQeIt3z/WeceznBOYMgldKL8gkxOxTZuOb/7krNDE=) 2: 8F1FBA54B0AA11EA9603E729C4F9AE02.roa (hash: HE0g4qbaerNpZYgQWXYLHZHHXWJ2DGWdgE2xVoh1wXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.crl rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evqYcujQ_5IpleWJO1nDIUdnsfw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2330 (0x91a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154AA5, serialNumber=7AFA9872E8D0FF922995E5893B59C3214767B1FC Validity Not Before: Apr 24 20:11:51 2025 GMT Not After : May 1 20:11:51 2025 GMT Subject: CN=680a9b08-d0f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a8:aa:92:e7:a7:23:77:6b:65:44:4c:78:18: 68:28:6f:4e:ce:bc:26:f5:f9:12:35:f7:eb:0b:0d: e4:e6:bf:fb:c9:3c:f7:4e:ff:b9:c7:d5:57:0a:66: 42:f1:66:de:d1:a4:02:5d:48:45:6e:a6:91:4f:b3: 3a:bc:7d:8e:09:95:68:c1:20:1d:5d:23:da:6d:65: 7d:80:47:ca:b4:c8:51:5d:1a:48:be:35:03:cc:d2: a5:60:01:6d:97:6e:90:2f:bb:51:32:35:5f:a4:61: 43:4e:76:e2:7f:8e:03:cb:bc:5f:bc:db:4f:8b:fc: 5e:ed:9b:bf:f5:ec:d2:9a:e7:8c:b0:8c:3a:19:95: c9:2b:36:75:34:62:2f:a4:14:97:d0:0d:5d:bd:3e: 43:e9:53:25:04:7a:4c:0a:85:ac:0b:a4:55:01:ab: ab:f2:20:91:6d:0f:dd:a1:c0:e0:a2:ef:4e:0d:0f: 71:d2:31:94:5f:8d:22:72:cd:e8:be:fa:27:d0:80: 15:a1:4d:f6:dc:2d:6d:12:f3:a5:56:13:36:15:ef: 43:38:bc:ef:30:b7:1c:0e:88:99:5f:ea:49:9b:a9: 79:bc:22:7c:b5:c1:5c:cf:73:f6:37:50:41:00:97: 5d:04:11:6a:69:21:a4:9a:92:bc:53:f6:5f:25:da: 92:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F0:DA:0E:EE:7F:34:4A:3A:7C:AA:8C:8F:84:F7:50:6C:AB:14:A5 X509v3 Authority Key Identifier: keyid:7A:FA:98:72:E8:D0:FF:92:29:95:E5:89:3B:59:C3:21:47:67:B1:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evqYcujQ_5IpleWJO1nDIUdnsfw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:43:f3:61:59:57:ee:70:55:0c:53:b1:5f:d6:7c:29:b0:4d: f6:36:a5:ed:92:f4:16:3b:0c:29:ea:72:5e:a2:d8:cd:bf:98: df:c7:b3:26:1f:63:1b:31:84:ea:46:64:04:2d:22:ab:b8:b0: 59:f7:d9:30:b0:5a:ca:39:00:1d:fb:c6:8d:5e:5d:82:09:ad: 56:0f:73:6c:24:bd:5f:3c:db:4d:4f:19:a3:ce:c5:69:2b:95: f6:a0:54:0f:3a:4d:b0:48:0a:a8:35:a3:fd:b1:d6:58:7b:c3: fa:7c:cd:73:31:ca:df:34:7d:24:be:0d:91:6a:bc:b4:fe:b3: 8c:96:95:dc:5d:9e:13:16:53:1f:85:17:54:8b:c6:a5:5b:82: 29:1c:81:5b:e9:5f:d1:68:f3:ef:67:8f:73:6f:fb:51:df:b7: 7b:57:14:92:e0:99:6f:71:a1:91:a4:0e:99:37:be:dd:16:85: d6:d6:c6:c4:be:03:56:ac:09:78:e7:fe:7d:b9:48:49:78:1e: ee:9c:03:9d:a4:f5:cb:38:bb:fa:32:13:79:20:fa:71:10:87: 25:ad:b4:ff:12:d6:b0:54:4f:2f:cd:f4:ed:79:6a:33:09:53: 86:1e:39:dd:c6:86:e6:ad:fa:1a:ab:3e:ba:45:63:1f:76:89: 5e:d9:6c:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRBQTUxMTAvBgNVBAUTKDdBRkE5ODcyRThEMEZGOTIyOTk1RTU4OTNCNTlDMzIx NDc2N0IxRkMwHhcNMjUwNDI0MjAxMTUxWhcNMjUwNTAxMjAxMTUxWjAYMRYwFAYD VQQDEw02ODBhOWIwOC1kMGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKiqkuenI3drZURMeBhoKG9Ozrwm9fkSNffrCw3k5r/7yTz3Tv+5x9VXCmZC 8Wbe0aQCXUhFbqaRT7M6vH2OCZVowSAdXSPabWV9gEfKtMhRXRpIvjUDzNKlYAFt l26QL7tRMjVfpGFDTnbif44Dy7xfvNtPi/xe7Zu/9ezSmueMsIw6GZXJKzZ1NGIv pBSX0A1dvT5D6VMlBHpMCoWsC6RVAaur8iCRbQ/docDgou9ODQ9x0jGUX40ics3o vvon0IAVoU323C1tEvOlVhM2Fe9DOLzvMLccDoiZX+pJm6l5vCJ8tcFcz3P2N1BB AJddBBFqaSGkmpK8U/ZfJdqSOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfw2g7u fzRKOnyqjI+E91BsqxSlMB8GA1UdIwQYMBaAFHr6mHLo0P+SKZXliTtZwyFHZ7H8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEFBNS84MzBFMjY5NEEw QTkxMUVBQUYyRUYyMTFDNEY5QUUwMi9ldnFZY3VqUV81SXBsZVdKTzFuRElVZG5z ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V2cVljdWpRXzVJcGxlV0pPMW5ESVVkbnNmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEFBNS84MzBFMjY5NEEwQTkxMUVBQUYyRUYyMTFDNEY5QUUwMi9ldnFZY3VqUV81 SXBsZVdKTzFuRElVZG5zZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJQ/NhWVfucFUMU7Ff1nwpsE32NqXtkvQWOwwp6nJeotjNv5jfx7Mm H2MbMYTqRmQELSKruLBZ99kwsFrKOQAd+8aNXl2CCa1WD3NsJL1fPNtNTxmjzsVp K5X2oFQPOk2wSAqoNaP9sdZYe8P6fM1zMcrfNH0kvg2Rary0/rOMlpXcXZ4TFlMf hRdUi8alW4IpHIFb6V/RaPPvZ49zb/tR37d7VxSS4JlvcaGRpA6ZN77dFoXW1sbE vgNWrAl45/59uUhJeB7unAOdpPXLOLv6MhN5IPpxEIclrbT/EtawVE8vzfTteWoz CVOGHjndxobmrfoaqz66RWMfdole2Ww4 -----END CERTIFICATE-----Generated at Sat Apr 26 04:38:37 2025 by rpki-client