$ rpki-client -vvf rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft File: EiOAOGQwr9Y_NklEdk4bNBhj0No.mft (raw, json) Hash identifier: 0Y1iY7JsuqgLf6w6svHQ0GJdSZXTCwhGqG2LwBeIwck= Subject key identifier: 54:62:63:82:DB:6D:35:E3:79:FD:20:AF:36:92:72:89:8A:A0:E6:81 Authority key identifier: 12:23:80:38:64:30:AF:D6:3F:36:49:44:76:4E:1B:34:18:63:D0:DA Certificate issuer: /CN=A9156AFF/serialNumber=122380386430AFD63F364944764E1B341863D0DA Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EiOAOGQwr9Y_NklEdk4bNBhj0No.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft Manifest number: 0A Signing time: Fri 25 Apr 2025 07:07:45 +0000 Manifest this update: Fri 25 Apr 2025 07:07:44 +0000 Manifest next update: Fri 02 May 2025 07:07:44 +0000 Files and hashes: 1: EiOAOGQwr9Y_NklEdk4bNBhj0No.crl (hash: B6uQ673OI5SIcuu+lKAjRvI28VqvPEeAb0KuyDEww5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.crl rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EiOAOGQwr9Y_NklEdk4bNBhj0No.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156AFF, serialNumber=122380386430AFD63F364944764E1B341863D0DA Validity Not Before: Apr 25 07:07:44 2025 GMT Not After : May 2 07:07:44 2025 GMT Subject: CN=680b34c0-0154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:18:97:be:de:48:e9:f1:3f:13:5c:78:69:b7: b8:80:2a:0a:8d:2d:14:50:1d:98:d6:a3:26:3a:4d: 52:45:fb:6f:aa:fa:0e:b3:16:1d:5f:79:88:ce:ca: 2b:16:99:94:c3:77:06:78:1b:bf:10:31:40:ca:d5: 03:e9:c8:67:c3:df:ed:2f:cc:36:23:d2:a8:53:08: 9b:27:fa:ba:ac:be:9c:ec:0f:8d:5a:a2:21:1a:66: 35:c7:9c:fa:18:51:b8:54:db:93:9e:49:1f:29:b9: 0d:51:e8:66:7b:5d:b1:4e:2e:3c:1c:4d:63:ab:60: 85:5f:d7:75:4a:28:1a:dd:ed:03:d4:55:6d:92:ff: bf:dd:47:f8:43:e7:42:68:db:43:2b:f8:71:05:00: 28:21:fd:b8:89:bc:17:f3:ad:1f:d7:52:92:04:82: df:76:c6:2d:eb:34:54:95:b4:de:c5:68:2d:7a:dd: b3:3e:4c:0d:dd:a4:c6:9a:b7:07:67:10:11:38:a8: 33:d9:d2:9f:7e:4b:b9:fe:09:e4:59:c5:65:6f:89: d9:22:78:ea:0d:7a:cc:e5:04:f1:a2:82:a6:1c:93: d4:9b:da:d5:e2:84:bb:b7:66:f3:d7:96:01:2d:0e: ac:05:32:d1:25:79:c5:2a:50:4c:25:c6:3c:b0:da: 39:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:62:63:82:DB:6D:35:E3:79:FD:20:AF:36:92:72:89:8A:A0:E6:81 X509v3 Authority Key Identifier: keyid:12:23:80:38:64:30:AF:D6:3F:36:49:44:76:4E:1B:34:18:63:D0:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EiOAOGQwr9Y_NklEdk4bNBhj0No.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:d8:0f:82:7a:7b:68:ea:31:a6:9e:9c:a3:0a:96:8c:10:17: b6:02:a1:c3:b7:ee:57:c0:42:62:ba:29:3c:ac:d4:6f:5c:6b: 06:2c:c1:21:3a:93:9f:e1:72:a6:e1:13:7e:cf:13:58:3d:50: cc:06:7b:01:f0:58:0b:4b:40:36:ba:87:b3:3f:38:2f:bf:61: 68:bc:40:4e:bd:04:d2:53:0d:c0:56:c1:92:45:6b:55:72:fe: ea:86:f3:c1:17:42:40:69:89:d8:be:5b:1c:92:62:58:a2:07: a6:07:09:c2:99:5a:7d:75:0e:c2:c8:fb:3f:dd:eb:20:d3:43: ca:f7:1b:b4:f1:8b:36:da:cd:7a:f1:9f:dc:56:ef:a4:86:f2: 18:44:1e:14:37:76:a0:45:07:56:c7:fe:9e:ed:e9:42:12:13: a1:c6:b3:c9:d1:d9:1e:1c:a2:6c:3e:94:33:d3:93:aa:06:27: db:65:0a:3a:58:1b:45:3e:26:56:cc:50:c9:4f:7d:ea:ed:c6: 18:4b:a9:81:3c:b2:1a:d1:d1:35:4b:58:8e:ce:10:17:0f:28: e8:ce:39:09:2a:fa:bf:f8:58:18:62:c9:c5:3f:12:0e:f2:6c: 12:26:46:42:18:c9:e5:10:73:f0:e3:8d:19:3f:2b:fe:d4:27: 3c:5c:98:ab -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NkFGRjExMC8GA1UEBRMoMTIyMzgwMzg2NDMwQUZENjNGMzY0OTQ0NzY0RTFCMzQx ODYzRDBEQTAeFw0yNTA0MjUwNzA3NDRaFw0yNTA1MDIwNzA3NDRaMBgxFjAUBgNV BAMTDTY4MGIzNGMwLTAxNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOGJe+3kjp8T8TXHhpt7iAKgqNLRRQHZjWoyY6TVJF+2+q+g6zFh1feYjOyisW mZTDdwZ4G78QMUDK1QPpyGfD3+0vzDYj0qhTCJsn+rqsvpzsD41aoiEaZjXHnPoY UbhU25OeSR8puQ1R6GZ7XbFOLjwcTWOrYIVf13VKKBrd7QPUVW2S/7/dR/hD50Jo 20Mr+HEFACgh/biJvBfzrR/XUpIEgt92xi3rNFSVtN7FaC163bM+TA3dpMaatwdn EBE4qDPZ0p9+S7n+CeRZxWVvidkieOoNeszlBPGigqYck9Sb2tXihLu3ZvPXlgEt DqwFMtElecUqUEwlxjyw2jnNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVGJjgttt NeN5/SCvNpJyiYqg5oEwHwYDVR0jBBgwFoAUEiOAOGQwr9Y/NklEdk4bNBhj0Now DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2QUZGLzNCN0IzMUI2MTRE ODExRjBBMzdFQzA0RUM0RjlBRTAyL0VpT0FPR1F3cjlZX05rbEVkazRiTkJoajBO by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRWlPQU9HUXdyOVlfTmtsRWRrNGJOQmhqME5vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 QUZGLzNCN0IzMUI2MTREODExRjBBMzdFQzA0RUM0RjlBRTAyL0VpT0FPR1F3cjlZ X05rbEVkazRiTkJoajBOby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACfYD4J6e2jqMaaenKMKlowQF7YCocO37lfAQmK6KTys1G9cawYswSE6 k5/hcqbhE37PE1g9UMwGewHwWAtLQDa6h7M/OC+/YWi8QE69BNJTDcBWwZJFa1Vy /uqG88EXQkBpidi+WxySYliiB6YHCcKZWn11DsLI+z/d6yDTQ8r3G7TxizbazXrx n9xW76SG8hhEHhQ3dqBFB1bH/p7t6UISE6HGs8nR2R4comw+lDPTk6oGJ9tlCjpY G0U+JlbMUMlPfertxhhLqYE8shrR0TVLWI7OEBcPKOjOOQkq+r/4WBhiycU/Eg7y bBImRkIYyeUQc/DjjRk/K/7UJzxcmKs= -----END CERTIFICATE-----Generated at Sat Apr 26 16:52:35 2025 by rpki-client