$ rpki-client -vvf rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft File: eo-Oag5Y9XX8feHNg4R51_c_4nk.mft (raw, json) Hash identifier: xX6plMB/GDvD9sjSK1GueNK0AMyBGkplRW5NJUWrb0o= Subject key identifier: CD:1D:7D:97:C1:32:AA:61:EB:66:96:3B:64:08:8E:C9:B7:9B:66:73 Authority key identifier: 7A:8F:8E:6A:0E:58:F5:75:FC:7D:E1:CD:83:84:79:D7:F7:3F:E2:79 Certificate issuer: /CN=A91775B7/serialNumber=7A8F8E6A0E58F575FC7DE1CD838479D7F73FE279 Certificate serial: 3492 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eo-Oag5Y9XX8feHNg4R51_c_4nk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft Manifest number: 3485 Signing time: Fri 02 May 2025 15:08:35 +0000 Manifest this update: Fri 02 May 2025 15:08:35 +0000 Manifest next update: Fri 09 May 2025 15:08:35 +0000 Files and hashes: 1: eo-Oag5Y9XX8feHNg4R51_c_4nk.crl (hash: ajaCeblCNHfduTbHgz3cvlnTuHjgMu65QfRfmyiA7rk=) 2: 92210D6AB66711EC86445C11C4F9AE02.roa (hash: d5k3YRL/FAKw8Wd7VKIcrrwAMtmamoxhcmJJDByEkkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.crl rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eo-Oag5Y9XX8feHNg4R51_c_4nk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 15:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13458 (0x3492) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91775B7, serialNumber=7A8F8E6A0E58F575FC7DE1CD838479D7F73FE279 Validity Not Before: May 2 15:08:35 2025 GMT Not After : May 9 15:08:35 2025 GMT Subject: CN=6814dff3-ffb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8c:5a:15:6c:06:c2:40:77:a0:87:f9:be:f1: a8:80:ad:c0:60:90:f1:0f:b2:0b:02:ac:f6:35:8b: 5c:ae:11:dd:c6:33:3d:89:0f:49:f8:57:cc:9f:31: 84:b6:a1:e2:8b:bb:f3:f7:c2:3b:eb:60:6b:ff:c7: 29:cd:b9:ac:d5:af:c9:2c:70:01:60:33:2e:79:2e: a0:a1:23:9f:6e:06:30:27:98:03:1f:b6:3a:79:5c: 09:d8:47:47:4b:fb:29:7c:80:86:ca:d3:91:5f:54: 9b:45:7a:da:19:a2:2a:82:d7:ac:b5:e8:2a:08:a3: b1:e2:ff:cd:ed:54:e9:6d:35:e7:b1:2d:97:ac:1e: 90:49:ca:dd:9c:e1:bf:6b:5e:0c:08:f4:b9:90:05: 8b:00:16:62:26:c8:31:b8:60:b4:8a:8d:63:ca:2b: b7:a7:38:02:dc:84:93:6f:67:81:ca:01:20:9a:31: 58:46:d2:69:9c:38:4f:64:4d:cb:fb:0b:fb:d2:4b: d8:d3:a8:11:3c:9a:9e:d7:8b:b2:c5:d4:f6:d0:55: e5:0e:44:ac:0f:9a:8f:d5:f9:3e:46:0f:fc:4e:3b: 0c:57:24:08:4a:07:03:dd:ff:7a:e8:02:c5:69:e4: a1:85:43:60:38:89:0a:09:ab:74:ef:3d:10:92:87: 5c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:1D:7D:97:C1:32:AA:61:EB:66:96:3B:64:08:8E:C9:B7:9B:66:73 X509v3 Authority Key Identifier: keyid:7A:8F:8E:6A:0E:58:F5:75:FC:7D:E1:CD:83:84:79:D7:F7:3F:E2:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eo-Oag5Y9XX8feHNg4R51_c_4nk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:a7:8a:be:fc:aa:a4:c0:27:cb:a1:d2:15:8f:71:b0:4c:1e: 02:43:33:ab:d6:17:fd:5b:48:4f:8b:47:38:cd:60:ac:fa:f1: f1:cf:a8:ed:13:1b:39:42:4c:ac:73:a2:38:29:12:e5:c3:a9: a0:84:c5:1a:54:07:d8:87:95:57:1b:d7:3a:00:ab:34:be:c8: 20:61:1b:6a:63:00:b6:15:8a:66:6a:9b:04:6f:27:4e:15:5e: 8e:7e:83:0b:3f:0e:1a:22:33:20:d9:ea:89:17:7f:1d:b7:44: 25:d1:b6:1a:e7:eb:62:6f:d6:f5:c1:cb:a0:87:d2:e9:96:7a: 37:01:29:af:3b:0e:ce:45:2c:2d:20:54:e3:c0:98:25:65:85: 88:31:83:d3:c4:9d:08:b9:d8:2e:87:ec:d2:d6:a9:32:de:9d: 87:48:2d:ca:e3:56:b8:f8:6f:5e:c2:e5:9f:bd:ae:eb:59:5e: 7c:d3:ca:db:45:25:8a:d3:8d:54:6d:6f:19:b1:98:ea:9a:a7: 2d:e6:76:ff:0c:78:34:81:f5:09:2c:be:3f:c3:92:13:3a:93: 5b:dd:b4:3a:1a:b9:62:11:af:f4:d0:c4:fc:50:8e:eb:21:2c: da:7a:66:8c:2f:24:b6:1e:35:f6:e7:ac:08:0f:ea:74:99:c6: 60:e2:c7:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc1QjcxMTAvBgNVBAUTKDdBOEY4RTZBMEU1OEY1NzVGQzdERTFDRDgzODQ3OUQ3 RjczRkUyNzkwHhcNMjUwNTAyMTUwODM1WhcNMjUwNTA5MTUwODM1WjAYMRYwFAYD VQQDEw02ODE0ZGZmMy1mZmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIxaFWwGwkB3oIf5vvGogK3AYJDxD7ILAqz2NYtcrhHdxjM9iQ9J+FfMnzGE tqHii7vz98I762Br/8cpzbms1a/JLHABYDMueS6goSOfbgYwJ5gDH7Y6eVwJ2EdH S/spfICGytORX1SbRXraGaIqgtestegqCKOx4v/N7VTpbTXnsS2XrB6QScrdnOG/ a14MCPS5kAWLABZiJsgxuGC0io1jyiu3pzgC3ISTb2eBygEgmjFYRtJpnDhPZE3L +wv70kvY06gRPJqe14uyxdT20FXlDkSsD5qP1fk+Rg/8TjsMVyQISgcD3f966ALF aeShhUNgOIkKCat07z0QkodcywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM0dfZfB Mqph62aWO2QIjsm3m2ZzMB8GA1UdIwQYMBaAFHqPjmoOWPV1/H3hzYOEedf3P+J5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzVCNy8wOEE0OUJEMjFE QTIxMUUyOTM2NDk1OTQwOEIwMkNEMi9lby1PYWc1WTlYWDhmZUhOZzRSNTFfY180 bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VvLU9hZzVZOVhYOGZlSE5nNFI1MV9jXzRuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzVCNy8wOEE0OUJEMjFEQTIxMUUyOTM2NDk1OTQwOEIwMkNEMi9lby1PYWc1WTlY WDhmZUhOZzRSNTFfY180bmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQp4q+/KqkwCfLodIVj3GwTB4CQzOr1hf9W0hPi0c4zWCs+vHxz6jt Exs5Qkysc6I4KRLlw6mghMUaVAfYh5VXG9c6AKs0vsggYRtqYwC2FYpmapsEbydO FV6OfoMLPw4aIjMg2eqJF38dt0Ql0bYa5+tib9b1wcugh9Lplno3ASmvOw7ORSwt IFTjwJglZYWIMYPTxJ0Iudguh+zS1qky3p2HSC3K41a4+G9ewuWfva7rWV5808rb RSWK041UbW8ZsZjqmqct5nb/DHg0gfUJLL4/w5ITOpNb3bQ6GrliEa/00MT8UI7r ISzaemaMLyS2HjX256wID+p0mcZg4se7 -----END CERTIFICATE-----Generated at Sat May 3 02:22:11 2025 by rpki-client