$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft File: ejg10bvhsbJcMWkZLSvc1xk6i8I.mft (raw, json) Hash identifier: DTm9Q+Pfe0ouQoFn6/v37CJCxRAbkpBpt6427bdX6k8= Subject key identifier: 1B:1E:A8:18:8E:FE:F8:DC:6B:87:3B:42:35:EF:FD:5A:DB:9B:12:15 Authority key identifier: 7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2 Certificate issuer: /CN=A91D03EE/serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2 Certificate serial: 0AE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft Manifest number: 0AD8 Signing time: Thu 24 Apr 2025 19:20:45 +0000 Manifest this update: Thu 24 Apr 2025 19:20:44 +0000 Manifest next update: Thu 01 May 2025 19:20:44 +0000 Files and hashes: 1: ejg10bvhsbJcMWkZLSvc1xk6i8I.crl (hash: qKtqYzMsk78/O0DOjstGT4bmidy7u5TiWxmBhfkmEck=) 2: 186A84C83A1811EBAF24B12EC4F9AE02.roa (hash: x6v+AqgjPFRVX68ne0JC+xRgXtO5WMJX4uQIZ5czHsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2791 (0xae7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D03EE, serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2 Validity Not Before: Apr 24 19:20:44 2025 GMT Not After : May 1 19:20:44 2025 GMT Subject: CN=680a8f0c-84e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:df:22:4f:62:59:0b:1e:89:c7:4a:d0:2f:f4: ec:08:d8:84:a6:44:64:b3:5d:c2:19:36:60:81:46: d2:fd:af:e8:a3:b5:71:8d:76:d1:b5:8c:83:68:3b: 2a:cb:cc:ee:0f:11:9c:9d:40:59:38:15:6a:28:39: a3:59:cb:18:f2:86:d6:2f:d3:c7:1d:52:a9:88:1a: fa:71:44:84:7d:7a:07:2c:74:b2:54:30:96:68:4c: c0:28:73:e5:9c:e3:3d:70:13:35:cd:a2:f3:4f:ea: b0:7f:1a:85:4f:04:cf:c8:ee:07:2e:30:10:8d:ab: e1:9d:d8:45:18:8a:f5:cc:1d:37:da:a0:9a:78:b0: a3:6b:b0:d3:c4:b4:a1:36:2d:f2:80:90:71:3e:ef: b7:bc:f3:ec:84:56:bb:fe:6e:47:c5:66:a0:b6:62: 80:30:f1:b3:41:4b:97:1f:76:a9:00:aa:82:b0:bd: 25:86:f7:90:9a:f3:ba:79:1f:0a:62:f8:90:be:5c: 54:73:8e:77:1a:33:93:6c:4e:93:41:c2:71:c4:10: c4:9f:c0:6b:28:c9:68:f9:c5:5d:e3:1a:e7:90:38: 93:2c:ad:9c:9e:fa:a7:90:bd:10:cc:1b:65:e7:43: bf:91:be:ca:00:ca:24:b3:c5:87:d6:87:d2:51:cd: b0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:1E:A8:18:8E:FE:F8:DC:6B:87:3B:42:35:EF:FD:5A:DB:9B:12:15 X509v3 Authority Key Identifier: keyid:7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:7e:1f:77:63:fa:59:bb:0a:d5:d7:63:b2:da:8b:69:0a:ca: 4b:12:13:da:cf:2f:79:1f:3f:d2:24:d4:9d:65:f4:60:6d:17: 43:eb:9d:90:a1:48:85:23:79:89:1f:29:2f:f6:cb:6a:7e:5a: 37:47:24:e3:07:88:3d:87:ff:a6:f9:8f:eb:eb:2f:ce:92:16: 40:06:a2:67:4c:ac:62:27:8a:24:c6:7a:5a:45:a0:03:eb:d7: ab:00:9d:c2:0e:d2:9c:e5:e4:33:18:d7:53:89:7b:58:86:d9: b7:93:78:e0:e4:c5:dc:7b:3c:a5:4c:49:c2:d1:49:af:50:6d: a1:c7:b6:d0:ee:a8:7c:ca:1b:2d:be:7b:06:72:3d:fd:08:84: 99:60:82:09:42:a2:90:76:31:ab:bf:a7:83:5a:bf:f4:2f:51: a5:a1:99:90:f0:bb:ab:bf:ba:f6:b4:53:9f:77:1b:cd:9c:8c: 77:fd:30:15:c7:f4:c7:6f:4a:78:3f:56:7c:47:29:50:3c:bf: fa:26:7a:f6:5c:f7:b4:46:05:c4:f9:5a:68:c4:37:5b:fa:8c: 5c:69:df:6a:91:35:3f:31:45:db:a8:42:f2:5b:49:5a:3f:14: de:06:4a:cf:95:ba:1a:33:a9:93:d6:cd:09:f9:20:36:59:c2: 0d:ae:1b:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAzRUUxMTAvBgNVBAUTKDdBMzgzNUQxQkJFMUIxQjI1QzMxNjkxOTJEMkJEQ0Q3 MTkzQThCQzIwHhcNMjUwNDI0MTkyMDQ0WhcNMjUwNTAxMTkyMDQ0WjAYMRYwFAYD VQQDEw02ODBhOGYwYy04NGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4d8iT2JZCx6Jx0rQL/TsCNiEpkRks13CGTZggUbS/a/oo7VxjXbRtYyDaDsq y8zuDxGcnUBZOBVqKDmjWcsY8obWL9PHHVKpiBr6cUSEfXoHLHSyVDCWaEzAKHPl nOM9cBM1zaLzT+qwfxqFTwTPyO4HLjAQjavhndhFGIr1zB032qCaeLCja7DTxLSh Ni3ygJBxPu+3vPPshFa7/m5HxWagtmKAMPGzQUuXH3apAKqCsL0lhveQmvO6eR8K YviQvlxUc453GjOTbE6TQcJxxBDEn8BrKMlo+cVd4xrnkDiTLK2cnvqnkL0QzBtl 50O/kb7KAMoks8WH1ofSUc2wdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBseqBiO /vjca4c7QjXv/VrbmxIVMB8GA1UdIwQYMBaAFHo4NdG74bGyXDFpGS0r3NcZOovC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDNFRS82NzI4MUNGNDQ5 N0YxMUVBOTY3QTJFMEJDNEY5QUUwMi9lamcxMGJ2aHNiSmNNV2taTFN2YzF4azZp OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VqZzEwYnZoc2JKY01Xa1pMU3ZjMXhrNmk4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDNFRS82NzI4MUNGNDQ5N0YxMUVBOTY3QTJFMEJDNEY5QUUwMi9lamcxMGJ2aHNi SmNNV2taTFN2YzF4azZpOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZfh93Y/pZuwrV12Oy2otpCspLEhPazy95Hz/SJNSdZfRgbRdD652Q oUiFI3mJHykv9stqflo3RyTjB4g9h/+m+Y/r6y/OkhZABqJnTKxiJ4okxnpaRaAD 69erAJ3CDtKc5eQzGNdTiXtYhtm3k3jg5MXcezylTEnC0UmvUG2hx7bQ7qh8yhst vnsGcj39CISZYIIJQqKQdjGrv6eDWr/0L1GloZmQ8Lurv7r2tFOfdxvNnIx3/TAV x/THb0p4P1Z8RylQPL/6Jnr2XPe0RgXE+VpoxDdb+oxcad9qkTU/MUXbqELyW0la PxTeBkrPlboaM6mT1s0J+SA2WcINrhu6 -----END CERTIFICATE-----Generated at Sat Apr 26 14:18:25 2025 by rpki-client