$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft File: EOplMmUQJQKUQ84SQ1fTPSisJMA.mft (raw, json) Hash identifier: jhzQFlAcK8Iga3Vi/gd9Htn+LBYQhq1eRx6Yns8yckk= Subject key identifier: E1:8E:C0:00:8E:FE:E1:D8:DF:F3:DD:F7:7C:CC:1E:A9:E0:FA:46:56 Authority key identifier: 10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0 Certificate issuer: /CN=A91B7C90/serialNumber=10EA6532651025029443CE124357D33D28AC24C0 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft Manifest number: 8C Signing time: Fri 25 Apr 2025 05:29:15 +0000 Manifest this update: Fri 25 Apr 2025 05:29:15 +0000 Manifest next update: Fri 02 May 2025 05:29:15 +0000 Files and hashes: 1: EOplMmUQJQKUQ84SQ1fTPSisJMA.crl (hash: 3dqlUvziN1kFXnktJ0fd3PxARTUOCkmRJb1ajOBOFL8=) 2: 55EA7D9E4EEB11EF902A7B84C4F9AE02.roa (hash: hYGISbkx0iOPIWsemxA5+ThrUTq4VIEQEwarwfGguJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:29:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7C90, serialNumber=10EA6532651025029443CE124357D33D28AC24C0 Validity Not Before: Apr 25 05:29:15 2025 GMT Not After : May 2 05:29:15 2025 GMT Subject: CN=680b1dab-5f5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:3a:e9:bd:24:c1:f1:e0:08:e8:cd:f3:3e:68: 46:e3:54:91:04:de:f6:d2:52:ef:6e:05:d7:fd:11: 40:e7:12:43:26:a4:44:fe:d8:4e:b7:c6:2c:80:4d: f3:c4:11:7a:1e:fb:48:94:05:b6:b8:8c:1f:de:78: eb:02:2d:2a:56:c0:d9:3c:03:36:b4:4b:6c:79:e6: f4:78:f7:d9:cd:35:af:f2:12:f6:21:8c:39:49:b7: 00:5f:73:7d:d0:70:25:dc:07:28:d5:f5:f9:27:66: 83:46:ed:51:71:bd:b0:dd:a9:9c:1b:b0:e1:38:95: a2:9c:5d:64:cb:97:81:d2:dd:ad:59:c7:f5:ab:2c: e2:90:1c:ce:4a:2a:82:23:7e:bc:61:72:2e:7e:58: 9e:8c:4a:50:7a:47:00:76:4f:a3:f2:2e:5e:24:d5: da:cc:3c:4a:b8:bf:8c:88:c1:0a:aa:13:88:d9:2c: a8:af:b0:17:ab:5b:71:71:c4:f9:42:f3:8d:9f:b9: 75:ea:9a:83:59:a2:19:a0:15:27:33:7c:d3:bf:c7: f8:29:f8:ce:51:5c:02:a4:53:3c:fd:56:85:75:e2: d7:1a:f7:8d:4e:32:ee:de:56:98:d6:38:6c:a7:70: ca:c6:55:b7:25:59:fd:a2:79:c1:60:53:a3:c2:40: fa:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8E:C0:00:8E:FE:E1:D8:DF:F3:DD:F7:7C:CC:1E:A9:E0:FA:46:56 X509v3 Authority Key Identifier: keyid:10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:42:bc:6b:d1:08:da:da:29:02:4a:6c:8d:8c:18:0b:08:ed: 45:a0:6a:57:fa:07:a1:02:b9:ef:cf:9f:42:20:e3:9f:d6:88: 7e:5a:3b:13:ff:32:68:4a:76:80:d9:68:77:3e:29:1b:62:70: ab:e7:d6:7f:6e:d3:58:e8:26:4c:67:c0:b4:92:15:a8:d8:ea: 09:ba:6f:91:62:15:b4:2e:11:84:98:aa:94:60:e4:69:91:d6: 4a:16:44:84:72:de:40:49:29:37:58:35:b9:2b:76:c2:ac:5f: c0:41:4d:bc:32:46:e2:87:49:ae:1b:0c:f6:ad:ff:a9:d9:b1: 73:3d:5f:4d:31:18:7d:d4:4f:f7:85:95:c9:72:78:b1:1f:b4: a0:42:dc:b0:87:51:16:0d:ff:d0:ac:43:a2:ea:7c:9e:cc:04: 0c:64:77:ac:d3:73:09:3d:67:7b:78:e5:57:8f:35:75:94:6b: f4:b9:1f:d8:3b:b1:78:12:b6:25:7c:ff:da:0f:a0:65:c1:07: e5:5f:07:91:4a:9f:b7:2f:d0:f6:e2:b3:a3:b4:bc:cb:50:3b: 36:a8:b5:8a:10:cf:56:c8:71:ea:9a:06:89:29:a3:1f:ff:9f: d5:ed:10:95:f8:b0:75:15:f8:e6:1d:16:92:f3:58:cc:9b:a7: 57:8f:1d:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdDOTAxMTAvBgNVBAUTKDEwRUE2NTMyNjUxMDI1MDI5NDQzQ0UxMjQzNTdEMzNE MjhBQzI0QzAwHhcNMjUwNDI1MDUyOTE1WhcNMjUwNTAyMDUyOTE1WjAYMRYwFAYD VQQDEw02ODBiMWRhYi01ZjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6TrpvSTB8eAI6M3zPmhG41SRBN720lLvbgXX/RFA5xJDJqRE/thOt8YsgE3z xBF6HvtIlAW2uIwf3njrAi0qVsDZPAM2tEtseeb0ePfZzTWv8hL2IYw5SbcAX3N9 0HAl3Aco1fX5J2aDRu1Rcb2w3amcG7DhOJWinF1ky5eB0t2tWcf1qyzikBzOSiqC I368YXIufliejEpQekcAdk+j8i5eJNXazDxKuL+MiMEKqhOI2Syor7AXq1txccT5 QvONn7l16pqDWaIZoBUnM3zTv8f4KfjOUVwCpFM8/VaFdeLXGveNTjLu3laY1jhs p3DKxlW3JVn9onnBYFOjwkD6RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGOwACO /uHY3/Pd93zMHqng+kZWMB8GA1UdIwQYMBaAFBDqZTJlECUClEPOEkNX0z0orCTA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0M5MC8wMEQ3QjA0RTRF RTkxMUVGQkFEQkJGNkRDNEY5QUUwMi9FT3BsTW1VUUpRS1VRODRTUTFmVFBTaXNK TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VPcGxNbVVRSlFLVVE4NFNRMWZUUFNpc0pNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0M5MC8wMEQ3QjA0RTRFRTkxMUVGQkFEQkJGNkRDNEY5QUUwMi9FT3BsTW1VUUpR S1VRODRTUTFmVFBTaXNKTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzQrxr0Qja2ikCSmyNjBgLCO1FoGpX+gehArnvz59CIOOf1oh+WjsT /zJoSnaA2Wh3PikbYnCr59Z/btNY6CZMZ8C0khWo2OoJum+RYhW0LhGEmKqUYORp kdZKFkSEct5ASSk3WDW5K3bCrF/AQU28Mkbih0muGwz2rf+p2bFzPV9NMRh91E/3 hZXJcnixH7SgQtywh1EWDf/QrEOi6nyezAQMZHes03MJPWd7eOVXjzV1lGv0uR/Y O7F4ErYlfP/aD6BlwQflXweRSp+3L9D24rOjtLzLUDs2qLWKEM9WyHHqmgaJKaMf /5/V7RCV+LB1FfjmHRaS81jMm6dXjx3m -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:02 2025 by rpki-client