$ rpki-client -vvf rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.mft File: Eb6TUALwKMF878tfClhoOZJbU0o.mft (raw, json) Hash identifier: jVtVc82/icNYNwm02w1QDJ8GANOXyfAIGOtf1VBgWVM= Subject key identifier: 24:E8:AE:87:DF:C4:67:F4:F5:C9:C3:AF:72:F7:56:40:5D:72:7B:2A Authority key identifier: 11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A Certificate issuer: /CN=A9113066/serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A Certificate serial: 0470 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.mft Manifest number: 0458 Signing time: Sat 29 Mar 2025 00:30:15 +0000 Manifest this update: Sat 29 Mar 2025 00:30:14 +0000 Manifest next update: Sat 05 Apr 2025 00:30:14 +0000 Files and hashes: 1: Eb6TUALwKMF878tfClhoOZJbU0o.crl (hash: 9MJLwKrZJSg4uTcHhjr2nnH/N3t/rV7MmN4HtL4FMLM=) 2: DD6C545E09C811EE8591800EC4F9AE02.roa (hash: XHEj0/VOcaEAp8kGdqYnSsA9MJOujRUQRX0ZVKAE4yE=) 3: 852E78402E4211EFB4253281C4F9AE02.roa (hash: I2hyfqU3G8a+y3+JjdQ1B7WLws1eFTMcUmH7Y2uupec=) 4: D510745CEDB011EF8DFB1285C4F9AE02.roa (hash: mkdcNiRN7WmsqgoxZDJMLaSm19QMGSaPtxWNLxau8CI=) 5: D4811B86EDB011EF8DFB1285C4F9AE02.roa (hash: UANLL/DIhHAE6oC8FAukWCm16igdFVnOAgYy/cB4YuA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.crl rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:30:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1136 (0x470) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113066 Validity Not Before: Mar 29 00:30:14 2025 GMT Not After : Apr 5 00:30:14 2025 GMT Subject: CN=67e73f16-ebb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:01:64:ef:11:ed:b6:75:bb:fc:36:cf:fb:4b: 48:09:47:a4:82:e7:e9:75:2a:1d:d9:8f:03:84:83: 98:ce:f1:c9:1b:87:f2:01:a0:98:d5:f1:93:da:27: fc:db:0d:e3:1f:3a:5f:a3:7b:5b:bd:9a:c4:2d:ce: 3a:a3:1e:ff:a0:e7:09:cc:62:7f:de:58:02:62:b4: 8d:35:55:50:d0:4f:1a:da:a4:d4:dc:28:38:43:09: 06:8e:79:66:54:b0:91:59:3c:85:e6:d8:2a:b9:18: f4:67:23:e6:97:72:4f:29:d2:e4:0d:04:99:dc:1d: ba:48:23:af:f4:46:69:18:32:20:d2:19:a2:ed:27: b8:16:f3:cc:c9:21:59:cb:00:58:8a:80:33:3f:67: 9c:57:77:1d:31:e6:fd:47:d5:93:88:04:cd:6f:8f: fb:dd:f8:21:a6:4d:b5:8e:7d:12:83:f9:51:45:36: 89:85:85:ec:80:24:06:29:cc:01:97:95:1a:c3:7c: 9e:42:62:62:9f:20:68:72:91:9f:85:2d:eb:1e:01: eb:af:fa:e2:e6:75:fa:06:05:7b:fc:d1:a7:e4:8f: ad:69:04:e5:de:51:80:56:2a:38:ad:c1:e2:f7:2b: a8:50:bc:46:30:29:72:32:11:6f:55:1f:3a:c9:44: 6c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E8:AE:87:DF:C4:67:F4:F5:C9:C3:AF:72:F7:56:40:5D:72:7B:2A X509v3 Authority Key Identifier: keyid:11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:36:d1:17:5f:98:93:57:4f:bf:ab:48:d9:27:4a:17:61:4e: 64:e5:43:62:b1:32:6b:bb:4e:c8:3e:68:94:ac:cf:df:3f:78: 4e:59:5d:31:2d:94:ef:c9:0a:06:0b:33:48:9a:47:8a:10:de: e5:10:04:f4:7e:08:5f:78:e0:70:e1:df:0d:9f:2b:1c:ce:cf: 69:36:30:1a:3f:fc:ff:a7:88:ee:bd:ad:13:54:e6:b2:36:da: 7a:bb:23:d1:f8:38:36:7e:69:2b:dc:70:80:77:9d:25:68:75: b4:78:c3:63:47:75:e9:d8:4a:39:34:02:33:e7:db:54:d3:db: 8a:3c:6e:ca:8e:99:5f:af:4f:b1:ae:d1:4e:3d:2f:2c:10:53: e1:a6:a8:e9:70:cb:58:f9:a8:8b:ec:19:ff:2f:be:59:88:a7: 2d:33:e5:ee:e5:b4:99:b5:6b:8e:4a:b8:95:53:6d:09:be:c7: cd:b1:b1:44:f0:8b:ff:78:e8:fd:93:3a:53:5e:04:04:7e:f7: b5:24:25:b5:e3:be:d0:21:c9:6f:76:e6:70:b4:fa:59:15:2b: e8:d5:bd:f6:ee:27:75:2c:d1:53:6c:36:c5:f3:4c:57:13:7b: 22:4b:68:1f:99:d3:4c:43:4e:5d:ef:c7:c2:10:e2:53:9a:aa: 90:ab:d4:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTMwNjYxMTAvBgNVBAUTKDExQkU5MzUwMDJGMDI4QzE3Q0VGQ0I1RjBBNTg2ODM5 OTI1QjUzNEEwHhcNMjUwMzI5MDAzMDE0WhcNMjUwNDA1MDAzMDE0WjAYMRYwFAYD VQQDEw02N2U3M2YxNi1lYmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugFk7xHttnW7/DbP+0tICUekgufpdSod2Y8DhIOYzvHJG4fyAaCY1fGT2if8 2w3jHzpfo3tbvZrELc46ox7/oOcJzGJ/3lgCYrSNNVVQ0E8a2qTU3Cg4QwkGjnlm VLCRWTyF5tgquRj0ZyPml3JPKdLkDQSZ3B26SCOv9EZpGDIg0hmi7Se4FvPMySFZ ywBYioAzP2ecV3cdMeb9R9WTiATNb4/73fghpk21jn0Sg/lRRTaJhYXsgCQGKcwB l5Uaw3yeQmJinyBocpGfhS3rHgHrr/ri5nX6BgV7/NGn5I+taQTl3lGAVio4rcHi 9yuoULxGMClyMhFvVR86yURsgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCToroff xGf09cnDr3L3VkBdcnsqMB8GA1UdIwQYMBaAFBG+k1AC8CjBfO/LXwpYaDmSW1NK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzA2Ni82NzgyRTJEQTRF M0YxMUVDQTJCNTJCMzFDNEY5QUUwMi9FYjZUVUFMd0tNRjg3OHRmQ2xob09aSmJV MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ViNlRVQUx3S01GODc4dGZDbGhvT1pKYlUwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzA2Ni82NzgyRTJEQTRFM0YxMUVDQTJCNTJCMzFDNEY5QUUwMi9FYjZUVUFMd0tN Rjg3OHRmQ2xob09aSmJVMG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+NtEXX5iTV0+/q0jZJ0oXYU5k5UNisTJru07IPmiUrM/fP3hOWV0x LZTvyQoGCzNImkeKEN7lEAT0fghfeOBw4d8Nnysczs9pNjAaP/z/p4juva0TVOay Ntp6uyPR+Dg2fmkr3HCAd50laHW0eMNjR3Xp2Eo5NAIz59tU09uKPG7Kjplfr0+x rtFOPS8sEFPhpqjpcMtY+aiL7Bn/L75ZiKctM+Xu5bSZtWuOSriVU20JvsfNsbFE 8Iv/eOj9kzpTXgQEfve1JCW1477QIclvduZwtPpZFSvo1b327id1LNFTbDbF80xX E3siS2gfmdNMQ05d78fCEOJTmqqQq9Sn -----END CERTIFICATE-----Generated at Fri Apr 4 22:04:13 2025 by rpki-client