$ rpki-client -vvf rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft File: epYXaVSeCq0Km_mSVoO673M6Lxo.mft (raw, json) Hash identifier: fHlUqyp0J+8RjqGE38XpBx1BJiZ6rqqV6JfYzjz/+bU= Subject key identifier: A8:D3:9D:F8:89:77:78:72:DA:86:22:E6:36:71:96:EE:A1:E3:1E:06 Authority key identifier: 7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A Certificate issuer: /CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A Certificate serial: 34CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft Manifest number: 349B Signing time: Sun 06 Apr 2025 14:22:13 +0000 Manifest this update: Sun 06 Apr 2025 14:22:12 +0000 Manifest next update: Sun 13 Apr 2025 14:22:12 +0000 Files and hashes: 1: epYXaVSeCq0Km_mSVoO673M6Lxo.crl (hash: PIOiDg/voYulC6pjHenTtBeyvOg2guCQQ8Jdevje+tw=) 2: A9B6556E064311F0BA61C549C4F9AE02.roa (hash: mrU8KGa9vRKneCJ+qshobXiYhxcrHfbX93WdWbCVAW8=) 3: 1F5CD892C35111EE9D744F36C4F9AE02.roa (hash: jIXmhGTsHnOLM/8Oki3QEi8c2FlMLFZ5ltRb0SYd+ig=) 4: 1A83389CC35211EE8CE04C38C4F9AE02.roa (hash: qt+b79qUZeUfV9aMLkK2Vf0knDB1FC/92rGPVNLCE5Y=) 5: DA202262C34F11EE93BC8317C4F9AE02.roa (hash: MRIxoftDwmp6WRJIoO9F8Xfh6zfeqVoYT85Plhiizjg=) 6: 61A65BF2C35011EE95366E18C4F9AE02.roa (hash: lJX0Rj0D2pXCWqSqPGBLqRXobNJsOmj1xve2tbokkqo=) 7: 1EEE3E0AC35111EE9D744F36C4F9AE02.roa (hash: ucV0kVixfHpuy12BVYVN62sGm8utgsjQ/0NVbfikRis=) 8: A50EE218C34D11EEBC95A913C4F9AE02.roa (hash: 1HeD3vEPTet+037gaAO1k2WACoSTrjT1BrLUthDQvck=) 9: 8C9959CE060A11F08CBBE511C4F9AE02.roa (hash: Y12eqR4kENble50Bxruc9jwO/MdOCmjFkivTDaJk12E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 14:22:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13514 (0x34ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C5B0 Validity Not Before: Apr 6 14:22:12 2025 GMT Not After : Apr 13 14:22:12 2025 GMT Subject: CN=67f28e15-4ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:40:12:ca:7a:bf:60:44:6d:d0:cc:f4:26:c5: 6a:56:34:14:81:31:6f:27:aa:2d:d6:6f:f9:55:9d: d7:80:6f:98:e0:c3:fa:3b:35:6e:8e:f4:6a:72:66: f4:e0:60:c2:c0:65:3b:d0:c5:bf:e7:da:6e:71:02: 90:b1:c3:53:9f:02:88:e6:e3:4b:d0:c9:41:2d:ed: 24:8d:57:7f:30:34:93:19:ad:0f:bf:cd:30:e8:0c: a0:9f:63:6c:b1:50:7e:fb:70:93:6e:f7:44:4d:f3: d9:d0:b3:b7:e2:eb:2e:0f:a1:01:36:43:99:05:4b: a2:9c:b6:20:33:91:20:4d:5c:83:d6:ff:88:f4:07: 8e:4f:7f:71:33:68:36:e9:a1:33:33:82:4c:32:e7: e7:ff:27:36:d7:f4:71:33:83:80:75:aa:50:cf:7c: 4b:89:54:e2:24:1e:98:a5:dd:6f:e7:55:08:41:9a: 09:b6:95:cd:ab:50:81:d8:7f:14:86:88:c3:c7:5b: 11:13:2b:ff:18:4b:1b:38:6e:17:55:48:50:12:2b: 1b:c0:d5:c5:3b:b3:aa:3a:23:b2:4c:ad:d5:91:d1: 55:12:2d:46:1b:69:eb:75:0d:b5:1a:dd:e6:8f:52: 51:36:35:1c:26:2a:e6:e3:3d:b0:5c:9a:d8:e7:50: cf:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D3:9D:F8:89:77:78:72:DA:86:22:E6:36:71:96:EE:A1:E3:1E:06 X509v3 Authority Key Identifier: keyid:7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:f7:bb:df:b1:f3:5e:24:68:4f:c3:25:4e:26:0a:76:b9:38: e7:c6:a4:82:cd:44:1e:44:61:05:f4:f6:f4:2c:77:4d:65:00: ae:73:52:55:4d:57:22:1f:1e:d4:a1:3a:a5:56:42:3b:4d:03: ea:63:b9:76:89:76:57:0f:9d:da:22:f3:b0:ce:5b:be:fd:89: 7f:da:77:d6:f4:fe:19:c7:58:b8:2e:67:50:fa:30:fa:f3:2c: de:f1:42:03:26:49:e9:27:13:60:04:f6:78:3c:27:56:49:5f: 1c:52:30:4f:03:97:52:08:b1:15:62:2e:15:f5:ee:08:b0:2b: e1:d1:21:37:e8:5f:70:40:bc:ca:93:f5:81:c9:23:30:4f:df: 7d:08:02:ba:a5:f9:fc:fd:2f:9d:06:54:92:3b:ec:b3:ba:61: 19:d2:99:96:35:0b:38:8e:5c:f3:a8:a4:98:74:1c:5d:ce:e5: fa:29:9e:a1:18:16:c6:23:f3:16:71:6b:67:cc:42:42:e8:b7: 3d:17:a0:19:91:8b:3b:99:5c:2b:a8:9e:97:97:cc:fa:dd:b6: b9:d0:85:6c:76:dc:4b:6e:a2:f3:fa:5e:12:07:4b:13:c4:a4: 60:38:c2:f8:93:b0:82:fc:e3:55:65:0a:19:7a:c7:c5:a5:d4: 06:4a:37:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM1QjAxMTAvBgNVBAUTKDdBOTYxNzY5NTQ5RTBBQUQwQTlCRjk5MjU2ODNCQUVG NzMzQTJGMUEwHhcNMjUwNDA2MTQyMjEyWhcNMjUwNDEzMTQyMjEyWjAYMRYwFAYD VQQDEw02N2YyOGUxNS00YWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3EASynq/YERt0Mz0JsVqVjQUgTFvJ6ot1m/5VZ3XgG+Y4MP6OzVujvRqcmb0 4GDCwGU70MW/59pucQKQscNTnwKI5uNL0MlBLe0kjVd/MDSTGa0Pv80w6Aygn2Ns sVB++3CTbvdETfPZ0LO34usuD6EBNkOZBUuinLYgM5EgTVyD1v+I9AeOT39xM2g2 6aEzM4JMMufn/yc21/RxM4OAdapQz3xLiVTiJB6Ypd1v51UIQZoJtpXNq1CB2H8U hojDx1sREyv/GEsbOG4XVUhQEisbwNXFO7OqOiOyTK3VkdFVEi1GG2nrdQ21Gt3m j1JRNjUcJirm4z2wXJrY51DP/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjTnfiJ d3hy2oYi5jZxlu6h4x4GMB8GA1UdIwQYMBaAFHqWF2lUngqtCpv5klaDuu9zOi8a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzVCMC80MEM4RDVBNjFE ODMxMUUyODIzQTVGRDgwOEIwMkNEMi9lcFlYYVZTZUNxMEttX21TVm9PNjczTTZM eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwWVhhVlNlQ3EwS21fbVNWb082NzNNNkx4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzVCMC80MEM4RDVBNjFEODMxMUUyODIzQTVGRDgwOEIwMkNEMi9lcFlYYVZTZUNx MEttX21TVm9PNjczTTZMeG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAP97vfsfNeJGhPwyVOJgp2uTjnxqSCzUQeRGEF9Pb0LHdNZQCuc1JV TVciHx7UoTqlVkI7TQPqY7l2iXZXD53aIvOwzlu+/Yl/2nfW9P4Zx1i4LmdQ+jD6 8yze8UIDJknpJxNgBPZ4PCdWSV8cUjBPA5dSCLEVYi4V9e4IsCvh0SE36F9wQLzK k/WBySMwT999CAK6pfn8/S+dBlSSO+yzumEZ0pmWNQs4jlzzqKSYdBxdzuX6KZ6h GBbGI/MWcWtnzEJC6Lc9F6AZkYs7mVwrqJ6Xl8z63ba50IVsdtxLbqLz+l4SB0sT xKRgOML4k7CC/ONVZQoZesfFpdQGSjdw -----END CERTIFICATE-----Generated at Mon Apr 7 13:11:40 2025 by rpki-client