$ rpki-client -vvf rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft File: 0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft (raw, json) Hash identifier: JfSOLDpMdUcavt4Q7Q8OnzSOyB+smpQpQbEXjYrYZEA= Subject key identifier: 2A:96:3D:52:C6:4B:E6:D7:0A:B7:88:11:F1:7C:EF:D8:42:F8:F5:F6 Authority key identifier: D0:48:0F:F1:07:50:52:FE:FE:E6:C0:8E:1D:BF:8E:83:E0:01:27:88 Certificate issuer: /CN=A919874A/serialNumber=D0480FF1075052FEFEE6C08E1DBF8E83E0012788 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft Manifest number: 2B Signing time: Sat 03 May 2025 07:03:43 +0000 Manifest this update: Sat 03 May 2025 07:03:43 +0000 Manifest next update: Sat 10 May 2025 07:03:43 +0000 Files and hashes: 1: 0EgP8QdQUv7-5sCOHb-Og-ABJ4g.crl (hash: 8AFJzgq929a4ttfFT2srt4foRY4DQXq8Dxz7sio/HSA=) 2: 7223D638EAD411EFBA2AB40EC4F9AE02.roa (hash: YkOEpYLdm6BW8Hk0zKrvSza04bgoNTs0voQjpsLjr2k=) 3: 7151B356EAD411EFBA2AB40EC4F9AE02.roa (hash: VSF4aaLno+UR3o6W3Jl8Y30MNxvgZ99sJu4IeD9pONk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.crl rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 07:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919874A, serialNumber=D0480FF1075052FEFEE6C08E1DBF8E83E0012788 Validity Not Before: May 3 07:03:43 2025 GMT Not After : May 10 07:03:43 2025 GMT Subject: CN=6815bfcf-4a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fc:58:ba:7f:6a:26:2d:71:bf:f8:5e:32:b9: 50:f3:89:28:e8:c1:04:7f:32:2c:f7:60:da:3e:14: 61:5d:61:a7:b9:d0:26:7a:9b:60:e8:89:76:09:2d: e5:a1:09:6e:5a:6d:2b:7b:57:96:fd:0f:be:5d:21: 97:47:06:f0:9b:a9:b7:2d:11:a6:e0:04:14:49:d1: af:84:17:01:e7:e9:ec:ac:50:d0:1d:94:56:fe:9e: 2f:78:96:b3:58:9b:7e:2f:6e:9f:f7:44:a1:db:b3: 1c:92:b9:86:f3:46:ef:3d:c9:1b:88:b0:69:8f:0a: fb:b1:a3:c6:f1:cc:83:21:48:7d:1d:2b:7b:9a:ba: 85:f3:c1:c5:af:fa:20:e8:68:07:6a:2b:74:98:4c: f0:f6:4c:f9:50:23:37:d0:48:00:47:79:97:79:2a: 92:46:a2:98:8d:1c:b6:26:ab:8e:e6:cb:04:c2:d8: 97:2a:b5:40:3b:63:84:90:e7:98:1c:7b:61:73:94: ea:cf:d6:71:38:e5:0d:4f:82:cd:89:79:f8:96:bd: 65:33:f8:6e:7d:b5:fc:d4:57:15:63:e6:48:c5:ab: 44:10:ed:5f:36:3a:42:14:b3:e2:ec:1a:10:3e:79: dc:87:ba:f7:63:39:28:a6:b9:f6:7a:55:0d:7f:fc: 04:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:96:3D:52:C6:4B:E6:D7:0A:B7:88:11:F1:7C:EF:D8:42:F8:F5:F6 X509v3 Authority Key Identifier: keyid:D0:48:0F:F1:07:50:52:FE:FE:E6:C0:8E:1D:BF:8E:83:E0:01:27:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:46:56:10:d2:1b:15:47:80:1f:55:8d:a4:f8:eb:03:f1:1c: 15:fe:6a:77:a5:b5:b4:34:51:10:42:1b:5e:eb:e0:90:17:47: e2:01:10:3c:d0:9f:98:2a:50:94:3d:79:dc:b3:37:c4:0a:07: c2:b6:4a:20:2e:49:1c:bc:12:e5:16:cb:de:8f:81:8c:e7:0e: 9a:19:7b:74:ca:c4:f3:86:41:54:ee:4b:20:b3:55:8e:90:50: 62:30:16:29:8f:57:54:b4:d0:89:7c:58:b7:17:82:d9:ac:ab: 55:1b:da:b7:cf:09:f4:f3:85:ca:0f:ff:58:e1:a2:2d:bf:e2: 07:f9:3f:bb:29:c2:bb:4b:ae:da:2d:0d:72:d7:fe:09:23:4d: 77:8d:5e:c7:63:11:bb:c4:f9:2a:79:ef:85:fb:ce:90:67:28: 8d:6b:9c:9a:2b:c6:ad:7b:fd:92:65:42:39:af:61:e1:bf:ab: de:1e:4d:7f:e5:b2:13:8f:1a:09:dd:5e:c1:fe:82:bc:d3:27: 2e:b2:7b:ae:59:06:51:08:36:73:0e:e1:8d:17:29:41:1d:20: 0a:3e:b8:3b:c8:8c:10:51:a3:16:4a:0b:1b:39:d0:a7:62:98: 23:09:a8:aa:b8:4d:03:83:74:03:ab:ee:e4:6e:69:82:c8:d5: db:cb:59:75 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 ODc0QTExMC8GA1UEBRMoRDA0ODBGRjEwNzUwNTJGRUZFRTZDMDhFMURCRjhFODNF MDAxMjc4ODAeFw0yNTA1MDMwNzAzNDNaFw0yNTA1MTAwNzAzNDNaMBgxFjAUBgNV BAMTDTY4MTViZmNmLTRhOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCt/Fi6f2omLXG/+F4yuVDziSjowQR/Miz3YNo+FGFdYae50CZ6m2DoiXYJLeWh CW5abSt7V5b9D75dIZdHBvCbqbctEabgBBRJ0a+EFwHn6eysUNAdlFb+ni94lrNY m34vbp/3RKHbsxySuYbzRu89yRuIsGmPCvuxo8bxzIMhSH0dK3uauoXzwcWv+iDo aAdqK3SYTPD2TPlQIzfQSABHeZd5KpJGopiNHLYmq47mywTC2JcqtUA7Y4SQ55gc e2FzlOrP1nE45Q1Pgs2JefiWvWUz+G59tfzUVxVj5kjFq0QQ7V82OkIUs+LsGhA+ edyHuvdjOSimufZ6VQ1//AS1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKpY9UsZL 5tcKt4gR8Xzv2EL49fYwHwYDVR0jBBgwFoAU0EgP8QdQUv7+5sCOHb+Og+ABJ4gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4NzRBL0VDRTE2NkQ0RUFE MzExRUZCMUM0Q0M1NUM0RjlBRTAyLzBFZ1A4UWRRVXY3LTVzQ09IYi1PZy1BQko0 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMEVnUDhRZFFVdjctNXNDT0hiLU9nLUFCSjRnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 NzRBL0VDRTE2NkQ0RUFEMzExRUZCMUM0Q0M1NUM0RjlBRTAyLzBFZ1A4UWRRVXY3 LTVzQ09IYi1PZy1BQko0Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACVGVhDSGxVHgB9VjaT46wPxHBX+aneltbQ0URBCG17r4JAXR+IBEDzQ n5gqUJQ9edyzN8QKB8K2SiAuSRy8EuUWy96PgYznDpoZe3TKxPOGQVTuSyCzVY6Q UGIwFimPV1S00Il8WLcXgtmsq1Ub2rfPCfTzhcoP/1jhoi2/4gf5P7spwrtLrtot DXLX/gkjTXeNXsdjEbvE+Sp574X7zpBnKI1rnJorxq17/ZJlQjmvYeG/q94eTX/l shOPGgndXsH+grzTJy6ye65ZBlEINnMO4Y0XKUEdIAo+uDvIjBBRoxZKCxs50Kdi mCMJqKq4TQODdAOr7uRuaYLI1dvLWXU= -----END CERTIFICATE-----Generated at Sat May 3 20:36:41 2025 by rpki-client