$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft File: eEGgmdwU4pNx5MwYVIn_riEyI0k.mft (raw, json) Hash identifier: Aj3Ty6YNFCxxArkvxSEjopnNzJvgW4yW1XD04vOXHuo= Subject key identifier: A4:A8:02:9A:74:8E:00:64:A8:B3:A0:B5:C5:45:E4:01:20:7B:4B:AA Authority key identifier: 78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49 Certificate issuer: /CN=A91F8966/serialNumber=7841A099DC14E29371E4CC185489FFAE21322349 Certificate serial: 094C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft Manifest number: 0945 Signing time: Thu 24 Apr 2025 20:07:27 +0000 Manifest this update: Thu 24 Apr 2025 20:07:27 +0000 Manifest next update: Thu 01 May 2025 20:07:27 +0000 Files and hashes: 1: eEGgmdwU4pNx5MwYVIn_riEyI0k.crl (hash: dVu+EzpkIlSWf462DX3TfBhMl8fN29Wupzm6WySNwrU=) 2: CA4C06CA976711EAA651F944C4F9AE02.roa (hash: IM9yFzmqS+Is/NhhSreqHJdhDGFnp0WA0QJtpqV2ULo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2380 (0x94c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8966, serialNumber=7841A099DC14E29371E4CC185489FFAE21322349 Validity Not Before: Apr 24 20:07:27 2025 GMT Not After : May 1 20:07:27 2025 GMT Subject: CN=680a99ff-b030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:23:19:81:e7:f5:f3:36:bb:13:c1:c8:e9:71: 59:30:11:e9:ff:0c:b8:94:9b:8a:69:20:0e:fa:ce: a5:5d:08:cc:5d:3c:51:52:c2:10:45:38:12:a4:cd: 2d:e4:86:d9:e3:9f:30:78:0b:1a:81:72:1c:ad:69: 5f:fa:01:ca:99:0f:ca:ef:89:55:70:00:cd:e6:c1: 54:f5:54:d5:11:f4:36:70:3c:70:31:94:d3:f8:4f: a6:5b:7d:76:f1:11:e2:3a:8b:48:dc:1c:f9:50:9a: 47:df:1b:bd:05:cd:aa:07:74:7b:26:a1:f8:00:6c: ee:c4:fc:06:8d:f3:10:7a:6f:51:cb:a2:60:6b:8d: af:e0:17:df:2a:37:52:93:d6:a1:d6:66:8a:f8:0c: 45:a0:ac:f4:5f:7a:45:6e:5c:4d:14:3b:d6:47:71: df:a3:ee:7b:41:2b:cc:bc:96:17:3d:82:1a:ea:9a: 8c:a7:f9:0a:f1:78:b5:e7:c7:77:3f:6b:9a:00:9f: a7:0d:95:44:47:28:ac:87:07:60:f9:30:7d:5f:56: 3e:cb:e8:d8:f0:0f:fe:d8:a4:fd:db:bb:8f:f8:a4: 77:b3:fa:ef:b2:0e:aa:33:2b:e8:ca:9a:b7:46:6c: 50:62:91:b1:37:03:ef:7c:d7:65:1d:09:d1:6f:97: de:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A8:02:9A:74:8E:00:64:A8:B3:A0:B5:C5:45:E4:01:20:7B:4B:AA X509v3 Authority Key Identifier: keyid:78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:d8:f1:93:a8:32:a8:20:e3:e6:a3:b1:72:59:64:0e:9b:dc: 9b:1e:fa:1a:2d:88:05:ad:93:91:79:c5:1b:18:c4:7e:53:1c: ae:e6:95:42:44:24:a9:d5:0f:7c:99:98:4e:b0:20:b2:87:22: 7b:03:81:c8:0a:51:f5:09:4c:4c:07:77:32:95:68:5c:b7:72: 4a:98:c8:f9:b7:dc:1a:b9:88:35:c6:3a:83:a8:9f:f1:5e:0e: 37:bb:39:cb:67:fe:81:0d:41:be:42:51:75:55:dc:ec:d6:ce: 0f:4d:fa:8f:f8:85:8e:2e:3b:a6:4d:66:ca:6e:d1:31:ad:62: b6:17:1b:f0:dd:c8:4b:34:59:e9:a0:d7:12:74:a5:4f:14:a1: 3a:86:cf:ca:3b:cc:d8:4f:4b:92:91:5f:15:20:83:16:dc:29: f8:6b:84:76:98:a7:b1:0b:44:d4:ff:f0:48:be:bb:ba:b9:fa: 47:21:27:58:c0:c9:fc:f1:a4:ce:eb:68:58:70:0e:62:f5:ae: 1c:1a:e9:71:e5:e6:03:09:f1:84:63:ba:7c:0e:00:f6:42:22: eb:73:f0:9d:5e:35:39:03:a7:d5:b2:9d:4e:03:1a:46:36:d8: dd:18:37:a2:dc:b7:69:a1:0d:ae:9d:ce:2c:31:88:5a:44:26: d3:7d:de:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5NjYxMTAvBgNVBAUTKDc4NDFBMDk5REMxNEUyOTM3MUU0Q0MxODU0ODlGRkFF MjEzMjIzNDkwHhcNMjUwNDI0MjAwNzI3WhcNMjUwNTAxMjAwNzI3WjAYMRYwFAYD VQQDEw02ODBhOTlmZi1iMDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySMZgef18za7E8HI6XFZMBHp/wy4lJuKaSAO+s6lXQjMXTxRUsIQRTgSpM0t 5IbZ458weAsagXIcrWlf+gHKmQ/K74lVcADN5sFU9VTVEfQ2cDxwMZTT+E+mW312 8RHiOotI3Bz5UJpH3xu9Bc2qB3R7JqH4AGzuxPwGjfMQem9Ry6Jga42v4BffKjdS k9ah1maK+AxFoKz0X3pFblxNFDvWR3Hfo+57QSvMvJYXPYIa6pqMp/kK8Xi158d3 P2uaAJ+nDZVERyishwdg+TB9X1Y+y+jY8A/+2KT927uP+KR3s/rvsg6qMyvoypq3 RmxQYpGxNwPvfNdlHQnRb5fe1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKSoApp0 jgBkqLOgtcVF5AEge0uqMB8GA1UdIwQYMBaAFHhBoJncFOKTceTMGFSJ/64hMiNJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk2Ni8zRUYyMjQwMjk3 NjYxMUVBOUVCNDk1NDJDNEY5QUUwMi9lRUdnbWR3VTRwTng1TXdZVkluX3JpRXlJ MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VFR2dtZHdVNHBOeDVNd1lWSW5fcmlFeUkway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODk2Ni8zRUYyMjQwMjk3NjYxMUVBOUVCNDk1NDJDNEY5QUUwMi9lRUdnbWR3VTRw Tng1TXdZVkluX3JpRXlJMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg2PGTqDKoIOPmo7FyWWQOm9ybHvoaLYgFrZORecUbGMR+Uxyu5pVC RCSp1Q98mZhOsCCyhyJ7A4HIClH1CUxMB3cylWhct3JKmMj5t9wauYg1xjqDqJ/x Xg43uznLZ/6BDUG+QlF1Vdzs1s4PTfqP+IWOLjumTWbKbtExrWK2Fxvw3chLNFnp oNcSdKVPFKE6hs/KO8zYT0uSkV8VIIMW3Cn4a4R2mKexC0TU//BIvru6ufpHISdY wMn88aTO62hYcA5i9a4cGulx5eYDCfGEY7p8DgD2QiLrc/CdXjU5A6fVsp1OAxpG NtjdGDei3LdpoQ2unc4sMYhaRCbTfd5h -----END CERTIFICATE-----Generated at Sat Apr 26 17:13:16 2025 by rpki-client