$ rpki-client -vvf rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft File: 7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft (raw, json) Hash identifier: SAFpR1ekIFC4cqVVOw9u8cgm7DYIssx6rzAhBG/qp8U= Subject key identifier: 51:E2:B3:A9:9F:52:A7:98:40:18:6B:3F:19:81:D1:D2:B2:72:A3:09 Authority key identifier: EC:46:19:A3:47:8A:D3:BD:16:AB:56:68:DD:D3:31:1E:4D:2D:B2:2F Certificate issuer: /CN=A915E2CC/serialNumber=EC4619A3478AD3BD16AB5668DDD3311E4D2DB22F Certificate serial: 02F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft Manifest number: 02E2 Signing time: Fri 25 Apr 2025 01:27:08 +0000 Manifest this update: Fri 25 Apr 2025 01:27:08 +0000 Manifest next update: Fri 02 May 2025 01:27:08 +0000 Files and hashes: 1: 7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl (hash: kPPEXzIi0dvOYotMSNit1JJuKSmj1QE81LtuRxxKc4E=) 2: 4D6093C2EAD711ECBF99921CC4F9AE02.roa (hash: gjKSDC6B7qsbe2sBo9HUqRMdIYdfTfIQbIhpB1zkpkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:27:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 754 (0x2f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E2CC, serialNumber=EC4619A3478AD3BD16AB5668DDD3311E4D2DB22F Validity Not Before: Apr 25 01:27:08 2025 GMT Not After : May 2 01:27:08 2025 GMT Subject: CN=680ae4ec-f945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:2e:93:7d:8e:ce:2e:a3:46:3b:43:f9:3d:62: ff:f7:cc:a6:cf:ec:9e:f7:cd:01:cd:c1:71:33:1c: 61:f6:80:a4:09:6a:a7:bd:37:cb:c6:1f:6a:e3:92: 1a:4f:17:f7:8c:fa:76:57:d3:d9:1e:7a:3b:28:1b: 78:c8:2e:51:f3:eb:7f:7e:7d:73:ae:f4:60:6d:0e: fa:f2:e3:03:e9:59:33:7a:38:b3:38:86:61:37:20: 21:0d:59:7f:b7:81:a9:d3:1e:b7:47:3b:e0:97:08: 5d:64:79:26:85:51:19:f2:08:6e:c2:99:cc:db:75: 75:2a:3c:b4:3e:70:8d:29:d7:66:35:c6:35:eb:4b: 14:9a:b7:8d:4b:2c:e0:68:56:41:b7:6a:62:02:76: fe:34:01:e3:d9:ef:28:c8:3c:46:b9:eb:19:b3:ae: 4d:28:e5:a4:78:0c:79:a9:60:2d:33:ab:5f:25:fc: b5:bf:75:a5:ef:18:d6:07:97:b2:df:5e:9f:e2:4e: c4:dd:8e:ee:b8:d8:ca:a5:10:45:1f:b0:98:2c:63: f9:09:48:ba:5d:03:0a:4e:66:bb:eb:fd:75:96:6b: 97:d9:44:47:89:ab:9c:70:fa:3b:d2:9c:b0:29:63: 35:b6:7c:bb:09:bd:c6:be:a9:ff:71:f0:e1:a2:b8: 9d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E2:B3:A9:9F:52:A7:98:40:18:6B:3F:19:81:D1:D2:B2:72:A3:09 X509v3 Authority Key Identifier: keyid:EC:46:19:A3:47:8A:D3:BD:16:AB:56:68:DD:D3:31:1E:4D:2D:B2:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d1:5a:ec:33:01:49:3d:8a:73:2c:4d:f5:8e:ad:ce:87:9c: d7:0b:fa:6b:75:e7:ab:a8:23:39:e8:50:25:8a:db:34:40:23: 0f:ea:5f:14:18:96:db:6b:20:3c:61:b4:19:34:7b:76:4c:4c: 8b:e4:54:8c:9f:a8:d7:5b:fe:66:08:70:73:83:5b:0b:9b:84: 67:de:6c:44:0b:7c:1c:0c:af:11:cf:73:24:75:9f:71:27:b6: 10:01:77:a9:0b:e2:6e:98:be:7d:48:98:a5:ef:5f:32:85:23: ed:bb:47:45:46:83:46:4d:a9:49:d0:34:af:35:eb:80:3b:f1: 21:d8:d5:cf:42:61:8b:d2:e3:5d:50:d0:d1:9c:19:64:9d:1c: 3c:5c:ae:38:8d:8d:f2:23:94:5c:43:54:37:a9:5f:e8:8a:da: ed:e8:f2:a8:ef:dc:a7:60:ca:b1:e3:a1:2b:20:3a:2f:ba:98: 89:3b:52:ea:3e:2e:ab:1f:37:f0:d8:0f:69:a9:a1:10:da:71: 1c:30:e0:fd:96:18:36:4b:91:a7:e7:d2:f9:e3:5d:c3:63:ee: 29:cd:38:ba:19:20:e6:53:bb:41:4b:f4:b0:0a:27:a2:0e:0d: 5b:76:84:fb:26:9e:31:54:9a:ff:83:53:d9:5d:80:e5:f4:ca: 19:41:a8:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUUyQ0MxMTAvBgNVBAUTKEVDNDYxOUEzNDc4QUQzQkQxNkFCNTY2OERERDMzMTFF NEQyREIyMkYwHhcNMjUwNDI1MDEyNzA4WhcNMjUwNTAyMDEyNzA4WjAYMRYwFAYD VQQDEw02ODBhZTRlYy1mOTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+C6TfY7OLqNGO0P5PWL/98ymz+ye980BzcFxMxxh9oCkCWqnvTfLxh9q45Ia Txf3jPp2V9PZHno7KBt4yC5R8+t/fn1zrvRgbQ768uMD6VkzejizOIZhNyAhDVl/ t4Gp0x63RzvglwhdZHkmhVEZ8ghuwpnM23V1Kjy0PnCNKddmNcY160sUmreNSyzg aFZBt2piAnb+NAHj2e8oyDxGuesZs65NKOWkeAx5qWAtM6tfJfy1v3Wl7xjWB5ey 316f4k7E3Y7uuNjKpRBFH7CYLGP5CUi6XQMKTma76/11lmuX2URHiauccPo70pyw KWM1tny7Cb3Gvqn/cfDhoridXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHis6mf UqeYQBhrPxmB0dKycqMJMB8GA1UdIwQYMBaAFOxGGaNHitO9FqtWaN3TMR5NLbIv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTJDQy9BRjY3NjVGQ0U1 ODAxMUVDOUI5RDJCNjJDNEY5QUUwMi83RVlabzBlSzA3MFdxMVpvM2RNeEhrMHRz aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFWVpvMGVLMDcwV3ExWm8zZE14SGswdHNpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTJDQy9BRjY3NjVGQ0U1ODAxMUVDOUI5RDJCNjJDNEY5QUUwMi83RVlabzBlSzA3 MFdxMVpvM2RNeEhrMHRzaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa0VrsMwFJPYpzLE31jq3Oh5zXC/prdeerqCM56FAlits0QCMP6l8U GJbbayA8YbQZNHt2TEyL5FSMn6jXW/5mCHBzg1sLm4Rn3mxEC3wcDK8Rz3MkdZ9x J7YQAXepC+JumL59SJil718yhSPtu0dFRoNGTalJ0DSvNeuAO/Eh2NXPQmGL0uNd UNDRnBlknRw8XK44jY3yI5RcQ1Q3qV/oitrt6PKo79ynYMqx46ErIDovupiJO1Lq Pi6rHzfw2A9pqaEQ2nEcMOD9lhg2S5Gn59L5413DY+4pzTi6GSDmU7tBS/SwCiei Dg1bdoT7Jp4xVJr/g1PZXYDl9MoZQahG -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:03 2025 by rpki-client