$ rpki-client -vvf rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft File: ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft (raw, json) Hash identifier: qQnrogsXofKq2QEAgKPNu0kULLUnqBE7YoXXSKdtOBg= Subject key identifier: 65:2E:4C:8B:C4:79:22:87:62:E2:2D:17:2D:5A:F6:D5:6D:09:C2:65 Authority key identifier: 7A:31:D5:73:97:98:B0:64:A6:00:71:33:AA:3E:5B:9C:D0:EE:D4:5F Certificate issuer: /CN=A919A285/serialNumber=7A31D5739798B064A6007133AA3E5B9CD0EED45F Certificate serial: 085C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejHVc5eYsGSmAHEzqj5bnNDu1F8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft Manifest number: 0855 Signing time: Thu 24 Apr 2025 20:35:08 +0000 Manifest this update: Thu 24 Apr 2025 20:35:08 +0000 Manifest next update: Thu 01 May 2025 20:35:08 +0000 Files and hashes: 1: ejHVc5eYsGSmAHEzqj5bnNDu1F8.crl (hash: +klvDPYiqlCX7Nwavq9gR+0zzd9lp9KyG1HCvCeyFEw=) 2: 1DCABC72C57811EA950A8643C4F9AE02.roa (hash: 3y+P8Wjw2NbNvaqBtjPXBVu0eGWr6eeBTOCTDHgw4uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.crl rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejHVc5eYsGSmAHEzqj5bnNDu1F8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2140 (0x85c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A285, serialNumber=7A31D5739798B064A6007133AA3E5B9CD0EED45F Validity Not Before: Apr 24 20:35:08 2025 GMT Not After : May 1 20:35:08 2025 GMT Subject: CN=680aa07c-9fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:54:6e:2a:8f:2c:f4:69:49:3f:bf:39:b4:f8: 32:4e:77:0f:b9:92:7e:8d:d9:60:0b:3d:5f:76:38: 4c:fb:8f:e5:00:e5:f9:8d:6b:a2:cd:d1:b8:c2:cd: ce:64:bd:22:fb:2a:67:5a:14:21:ea:56:d8:00:64: df:9b:cd:81:cb:ed:2c:ad:e5:31:e4:28:9c:54:a0: 60:da:25:20:69:51:c5:46:f2:fd:9f:71:13:f7:49: f7:43:00:38:73:f8:bb:b1:5a:a9:ce:9c:f3:a4:c2: c4:b3:e5:09:fb:3e:0a:40:10:2b:ca:79:73:9f:86: ab:2f:d8:9d:f8:66:a2:9b:4b:0b:dd:36:a1:df:93: 94:54:98:c3:3d:91:66:14:3d:42:8f:33:de:8d:34: c5:45:81:ba:d4:ae:a8:d3:92:64:af:a2:25:d4:4d: 69:9f:0c:a5:c3:bc:81:9b:9a:cc:14:e1:7a:9f:cb: 78:76:77:e8:11:2a:02:39:99:7e:e2:8c:1d:20:e3: 43:23:01:c3:a7:26:b4:75:f1:fd:04:45:b1:f1:c7: 13:53:1b:2b:08:82:75:33:69:64:80:f4:68:6b:b0: e2:76:d9:e1:2d:39:3d:41:9a:f5:d8:79:07:4b:9e: 96:cf:1c:b3:12:4a:47:77:61:21:63:03:1f:ca:da: fa:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2E:4C:8B:C4:79:22:87:62:E2:2D:17:2D:5A:F6:D5:6D:09:C2:65 X509v3 Authority Key Identifier: keyid:7A:31:D5:73:97:98:B0:64:A6:00:71:33:AA:3E:5B:9C:D0:EE:D4:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejHVc5eYsGSmAHEzqj5bnNDu1F8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:3c:e0:90:1c:b9:49:29:4e:2e:bb:7a:0a:50:31:0d:1f:cf: b4:af:d5:73:89:35:62:40:e8:80:3d:8a:b4:20:ac:86:b4:c2: 15:c6:e1:05:1c:ce:27:82:d7:d0:1e:ec:92:ec:59:5b:a3:7d: cd:e6:f9:74:6c:8f:40:ff:f9:5a:01:12:b1:8e:31:aa:8b:4d: e2:cc:95:b7:73:27:76:4f:5e:d3:25:1b:dc:f5:89:6f:31:18: 12:ee:7c:17:0b:96:92:aa:82:a7:ba:b8:94:6d:7e:0e:07:5c: 68:b7:ce:57:70:ab:85:3e:29:ac:69:bf:16:e5:97:03:ba:6b: 8d:67:d0:a6:8a:48:ef:68:09:85:c2:87:42:59:0d:01:45:13: 3a:cc:cc:cb:78:74:61:77:a3:14:79:ca:7e:ba:6b:67:1a:a9: 8e:b9:eb:e3:48:b6:b5:3a:8a:1a:c4:16:cc:f5:7e:87:3d:3f: e1:2d:20:ba:8f:6a:40:85:4a:7c:ad:8b:17:5b:dc:5b:ef:8e: 11:fa:3d:95:61:29:79:fd:ea:70:1f:81:2b:37:9f:ca:ab:ca: 6e:c7:39:28:56:6e:89:1e:f9:ad:d9:63:d2:0c:c3:46:45:4e: e7:81:b8:4c:82:ac:cc:8e:2d:e8:f4:4c:5c:b5:3a:26:53:37: c9:63:b7:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUEyODUxMTAvBgNVBAUTKDdBMzFENTczOTc5OEIwNjRBNjAwNzEzM0FBM0U1QjlD RDBFRUQ0NUYwHhcNMjUwNDI0MjAzNTA4WhcNMjUwNTAxMjAzNTA4WjAYMRYwFAYD VQQDEw02ODBhYTA3Yy05ZmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFRuKo8s9GlJP785tPgyTncPuZJ+jdlgCz1fdjhM+4/lAOX5jWuizdG4ws3O ZL0i+ypnWhQh6lbYAGTfm82By+0sreUx5CicVKBg2iUgaVHFRvL9n3ET90n3QwA4 c/i7sVqpzpzzpMLEs+UJ+z4KQBArynlzn4arL9id+Gaim0sL3Tah35OUVJjDPZFm FD1CjzPejTTFRYG61K6o05Jkr6Il1E1pnwylw7yBm5rMFOF6n8t4dnfoESoCOZl+ 4owdIONDIwHDpya0dfH9BEWx8ccTUxsrCIJ1M2lkgPRoa7DidtnhLTk9QZr12HkH S56WzxyzEkpHd2EhYwMfytr6EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUuTIvE eSKHYuItFy1a9tVtCcJlMB8GA1UdIwQYMBaAFHox1XOXmLBkpgBxM6o+W5zQ7tRf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTI4NS9ERDYyODlBQUM1 NzUxMUVBQTU1ODFDNDBDNEY5QUUwMi9lakhWYzVlWXNHU21BSEV6cWo1Ym5ORHUx RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VqSFZjNWVZc0dTbUFIRXpxajVibk5EdTFGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTI4NS9ERDYyODlBQUM1NzUxMUVBQTU1ODFDNDBDNEY5QUUwMi9lakhWYzVlWXNH U21BSEV6cWo1Ym5ORHUxRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHPOCQHLlJKU4uu3oKUDENH8+0r9VziTViQOiAPYq0IKyGtMIVxuEF HM4ngtfQHuyS7Flbo33N5vl0bI9A//laARKxjjGqi03izJW3cyd2T17TJRvc9Ylv MRgS7nwXC5aSqoKnuriUbX4OB1xot85XcKuFPimsab8W5ZcDumuNZ9CmikjvaAmF wodCWQ0BRRM6zMzLeHRhd6MUecp+umtnGqmOuevjSLa1OooaxBbM9X6HPT/hLSC6 j2pAhUp8rYsXW9xb744R+j2VYSl5/epwH4ErN5/Kq8puxzkoVm6JHvmt2WPSDMNG RU7ngbhMgqzMji3o9ExctTomUzfJY7dA -----END CERTIFICATE-----Generated at Sat Apr 26 04:02:31 2025 by rpki-client