$ rpki-client -vvf rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft File: eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft (raw, json) Hash identifier: 8+MaIodt2Q8QaUHKxnL9Ib4uxn8RGgccXIBiRc4+RjU= Subject key identifier: B2:3B:F8:E7:B8:91:30:51:4C:D6:9C:A8:A2:CE:75:35:DB:5B:3D:6C Authority key identifier: 78:7D:29:54:0E:58:82:37:E8:5D:16:07:96:00:08:29:11:89:FA:22 Certificate issuer: /CN=A9110009/serialNumber=787D29540E588237E85D1607960008291189FA22 Certificate serial: 05E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft Manifest number: 05DC Signing time: Sun 06 Apr 2025 22:37:05 +0000 Manifest this update: Sun 06 Apr 2025 22:37:04 +0000 Manifest next update: Sun 13 Apr 2025 22:37:04 +0000 Files and hashes: 1: eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl (hash: u41jy8EeDUOmQgBVVvl/EbIM2zM/OPlI/nCK/2jmZv0=) 2: DDEF7534AC6C11EBB6B1E17DC4F9AE02.roa (hash: 6T0bGam9Fz3MuC3/hi4HGnadBCMddUZ6zt+H3AVBHfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 22:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1505 (0x5e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110009 Validity Not Before: Apr 6 22:37:04 2025 GMT Not After : Apr 13 22:37:04 2025 GMT Subject: CN=67f30211-0bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:34:9c:4c:ad:f8:64:fb:73:ca:0c:ac:e7:27: 55:5d:18:56:10:ad:61:17:26:66:31:f3:fd:89:f0: 57:f6:d4:5c:2f:b3:23:ca:f0:a1:84:c2:07:1f:4b: 5a:ec:c3:42:bc:ab:67:64:72:db:07:d5:3f:d9:a2: 31:42:ad:c3:61:1b:20:17:7f:ba:95:1b:65:08:4a: 7e:0a:22:c4:b4:3a:37:2a:1b:37:43:52:e0:6d:f0: fe:fa:5c:bb:ba:e7:4b:2e:2e:32:6f:a1:17:d0:4e: 56:60:93:70:12:e3:c9:e8:e1:d3:f4:5c:a0:95:de: 77:9b:94:26:7f:c7:4a:8e:9e:9a:5b:58:56:fa:e0: 29:ed:f3:a4:bb:a8:08:b4:23:f1:5e:ad:a5:48:ba: 4d:ce:c2:cf:1c:03:49:d6:bf:b0:64:2e:f5:ef:e7: 8b:55:d8:2d:ab:62:12:db:bc:59:fe:11:08:d8:ba: a1:72:52:a0:d3:18:e3:67:de:3a:e8:d7:1a:49:91: d9:51:f8:fc:da:95:fd:3c:b3:1d:08:1c:8a:9f:dc: a7:cc:eb:24:54:00:b1:6a:03:75:fb:2e:a8:00:3f: 0e:0c:98:18:01:98:9e:14:76:a5:2c:62:ac:c5:61: 9f:a4:0a:33:b6:8c:d7:4a:ea:e2:c7:83:92:b4:79: 5d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:3B:F8:E7:B8:91:30:51:4C:D6:9C:A8:A2:CE:75:35:DB:5B:3D:6C X509v3 Authority Key Identifier: keyid:78:7D:29:54:0E:58:82:37:E8:5D:16:07:96:00:08:29:11:89:FA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:a4:61:92:60:e6:73:b3:a3:94:9c:ec:01:40:45:7d:66:ba: 79:79:e5:cf:3c:7c:ed:88:a3:85:f4:1e:40:fb:25:dc:d7:4c: 73:0c:e0:0f:2c:cb:f2:9c:2c:70:c4:08:4b:cb:e4:47:fd:52: c3:ac:48:28:d1:26:55:0e:1f:d1:04:aa:6c:c7:8d:a2:0e:78: f5:eb:79:db:08:f4:b3:48:55:45:83:75:ba:8e:24:56:75:c1: aa:96:4d:36:de:d8:a2:c2:6b:7d:16:fa:73:b4:dc:7d:10:19: 79:99:ff:99:d6:0b:00:4a:4e:72:d8:b3:33:66:30:6c:28:80: 3d:ea:0f:40:22:ea:86:e1:02:f7:8a:3c:a1:06:dc:c7:f5:74: 25:fb:11:ac:12:c5:7c:a4:2a:e4:ed:f5:ec:7b:1f:12:16:5b: 5e:43:e2:2d:92:f1:f4:ea:ee:de:5d:65:41:70:39:f5:cd:ab: 49:74:9a:a5:b7:98:cd:17:61:42:70:b8:80:8e:f7:d8:c8:08: b8:01:e3:18:f8:a8:2e:35:09:b4:26:88:d0:95:92:a5:b4:6d: 56:9f:d0:9a:4b:b0:7d:da:ab:47:9d:c6:99:db:42:66:e0:89: 5d:27:0c:e5:71:b3:d5:c6:95:0e:7f:79:51:f3:b3:bd:be:93: b9:a9:2c:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAwMDkxMTAvBgNVBAUTKDc4N0QyOTU0MEU1ODgyMzdFODVEMTYwNzk2MDAwODI5 MTE4OUZBMjIwHhcNMjUwNDA2MjIzNzA0WhcNMjUwNDEzMjIzNzA0WjAYMRYwFAYD VQQDEw02N2YzMDIxMS0wYmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTScTK34ZPtzygys5ydVXRhWEK1hFyZmMfP9ifBX9tRcL7MjyvChhMIHH0ta 7MNCvKtnZHLbB9U/2aIxQq3DYRsgF3+6lRtlCEp+CiLEtDo3Khs3Q1LgbfD++ly7 uudLLi4yb6EX0E5WYJNwEuPJ6OHT9Fygld53m5Qmf8dKjp6aW1hW+uAp7fOku6gI tCPxXq2lSLpNzsLPHANJ1r+wZC717+eLVdgtq2IS27xZ/hEI2LqhclKg0xjjZ946 6NcaSZHZUfj82pX9PLMdCByKn9ynzOskVACxagN1+y6oAD8ODJgYAZieFHalLGKs xWGfpAoztozXSurix4OStHld4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLI7+Oe4 kTBRTNacqKLOdTXbWz1sMB8GA1UdIwQYMBaAFHh9KVQOWII36F0WB5YACCkRifoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDAwOS9DQzgxMDEyMEFD NkExMUVCQTU0QUY4N0FDNEY5QUUwMi9lSDBwVkE1WWdqZm9YUllIbGdBSUtSR0ot aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VIMHBWQTVZZ2pmb1hSWUhsZ0FJS1JHSi1pSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDAwOS9DQzgxMDEyMEFDNkExMUVCQTU0QUY4N0FDNEY5QUUwMi9lSDBwVkE1WWdq Zm9YUllIbGdBSUtSR0otaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjpGGSYOZzs6OUnOwBQEV9Zrp5eeXPPHztiKOF9B5A+yXc10xzDOAP LMvynCxwxAhLy+RH/VLDrEgo0SZVDh/RBKpsx42iDnj163nbCPSzSFVFg3W6jiRW dcGqlk023tiiwmt9FvpztNx9EBl5mf+Z1gsASk5y2LMzZjBsKIA96g9AIuqG4QL3 ijyhBtzH9XQl+xGsEsV8pCrk7fXsex8SFlteQ+ItkvH06u7eXWVBcDn1zatJdJql t5jNF2FCcLiAjvfYyAi4AeMY+KguNQm0JojQlZKltG1Wn9CaS7B92qtHncaZ20Jm 4IldJwzlcbPVxpUOf3lR87O9vpO5qSy5 -----END CERTIFICATE-----Generated at Mon Apr 7 03:10:28 2025 by rpki-client