$ rpki-client -vvf rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.mft File: eoryTXjXdw3DOcL_KP18FNE8X7E.mft (raw, json) Hash identifier: 4ObVvvxqbu1G2LrqZjzWKg+EEqNHMQkU2hElsHFqAJk= Subject key identifier: 82:27:02:78:40:1C:45:8F:DA:57:B1:2E:33:94:FB:71:10:AA:5C:F9 Authority key identifier: 7A:8A:F2:4D:78:D7:77:0D:C3:39:C2:FF:28:FD:7C:14:D1:3C:5F:B1 Certificate issuer: /CN=A911EB2D/serialNumber=7A8AF24D78D7770DC339C2FF28FD7C14D13C5FB1 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eoryTXjXdw3DOcL_KP18FNE8X7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.mft Manifest number: 08F3 Signing time: Wed 16 Apr 2025 20:24:54 +0000 Manifest this update: Wed 16 Apr 2025 20:24:54 +0000 Manifest next update: Wed 23 Apr 2025 20:24:54 +0000 Files and hashes: 1: eoryTXjXdw3DOcL_KP18FNE8X7E.crl (hash: muUcrUCPdNX6HdVXPiuCxQmZ3Hn9FRqQUG+Qit0chG4=) 2: 47C98CE6860911EFBACC1172C4F9AE02.roa (hash: nC6NqtjLvjSa52nDj73bH8RUpZX8azUWf89xNeW+H2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.crl rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eoryTXjXdw3DOcL_KP18FNE8X7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 20:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EB2D, serialNumber=7A8AF24D78D7770DC339C2FF28FD7C14D13C5FB1 Validity Not Before: Apr 16 20:24:54 2025 GMT Not After : Apr 23 20:24:54 2025 GMT Subject: CN=68001216-4613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:98:ad:ae:a7:8a:79:e8:4a:3b:f7:b4:39:96: 7b:9b:45:15:8d:4b:89:cf:c7:a9:7a:a7:ed:47:85: a0:f0:cf:87:6f:38:c6:c6:a1:5b:e8:9b:a4:9d:7e: 55:13:c4:80:4f:51:56:29:09:f8:ee:bf:3a:b1:9b: b4:9c:ab:9d:3f:de:dc:17:35:e3:52:c8:03:74:83: 9e:8b:33:c1:9f:38:ad:17:35:fb:9b:e8:15:dc:18: b5:db:cd:59:ba:7a:88:13:bc:b5:b3:76:33:03:88: 1d:18:3d:f8:7c:e7:9d:32:91:2a:66:3f:d5:b2:75: 56:87:13:55:16:df:d3:f2:f6:43:24:e3:df:47:29: ff:66:61:7f:99:57:66:fe:66:69:50:38:fd:ce:50: 3b:9f:07:a5:1d:4b:9f:28:05:13:8f:cc:fb:f4:d5: 4e:57:28:94:f2:d4:98:bd:58:eb:ec:c0:95:58:0e: 1e:f4:27:3b:22:e5:1a:e7:43:8e:e7:70:03:53:84: 57:0f:15:94:34:11:5e:75:63:81:ae:18:f5:bb:16: 07:c7:fb:b7:27:88:78:fd:1c:7e:4f:7b:03:15:1c: fa:a3:78:91:6d:5d:59:3a:31:62:59:85:52:44:2a: ae:f4:d6:43:03:26:e9:2e:86:18:ba:6f:94:ca:da: fb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:27:02:78:40:1C:45:8F:DA:57:B1:2E:33:94:FB:71:10:AA:5C:F9 X509v3 Authority Key Identifier: keyid:7A:8A:F2:4D:78:D7:77:0D:C3:39:C2:FF:28:FD:7C:14:D1:3C:5F:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eoryTXjXdw3DOcL_KP18FNE8X7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:c9:42:7e:6d:a9:c2:7f:c4:0a:4b:21:79:b7:f2:8c:72:ec: 6a:41:c4:d9:3a:46:c4:f0:65:9f:ac:06:b6:53:75:5e:fc:86: ac:06:af:4e:48:eb:12:a8:dd:a2:92:6f:44:f5:1a:1c:13:dc: da:3f:a5:83:51:24:71:e6:5c:1e:ad:39:be:8a:95:d8:53:eb: 20:7a:38:eb:bb:73:f9:d6:e0:0e:0d:97:e0:26:39:af:94:94: fb:c1:03:70:57:85:27:8b:5b:b6:f7:fa:11:43:52:4c:72:5f: 26:ad:ff:84:06:bf:bd:01:10:a3:c0:2d:bf:a6:33:3b:e3:e2: d6:c1:de:60:4a:be:c9:9f:fd:e7:81:63:b9:c3:3b:dd:9c:96: 32:52:36:f3:4d:c9:da:16:92:de:04:55:d3:e8:bb:68:f7:8f: 19:60:cb:91:39:43:4f:03:18:ad:de:6e:d2:b0:32:04:3f:bf: b0:24:ce:48:61:de:76:07:2a:1a:db:44:6f:f3:9f:cd:32:56: 17:54:53:47:24:0e:ac:35:fa:9b:1b:5c:1a:1e:4b:42:b1:14: 2c:25:d6:dc:03:de:b9:31:a2:2f:3e:a9:6e:e0:cd:8e:76:3c: 33:77:db:d6:e0:65:f4:df:2c:84:46:b9:a2:cb:8b:ff:44:54: 36:88:ec:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RUIyRDExMC8GA1UEBRMoN0E4QUYyNEQ3OEQ3NzcwREMzMzlDMkZGMjhGRDdDMTRE MTNDNUZCMTAeFw0yNTA0MTYyMDI0NTRaFw0yNTA0MjMyMDI0NTRaMBgxFjAUBgNV BAMTDTY4MDAxMjE2LTQ2MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrmK2up4p56Eo797Q5lnubRRWNS4nPx6l6p+1HhaDwz4dvOMbGoVvom6SdflUT xIBPUVYpCfjuvzqxm7Scq50/3twXNeNSyAN0g56LM8GfOK0XNfub6BXcGLXbzVm6 eogTvLWzdjMDiB0YPfh8550ykSpmP9WydVaHE1UW39Py9kMk499HKf9mYX+ZV2b+ ZmlQOP3OUDufB6UdS58oBROPzPv01U5XKJTy1Ji9WOvswJVYDh70Jzsi5RrnQ47n cANThFcPFZQ0EV51Y4GuGPW7FgfH+7cniHj9HH5PewMVHPqjeJFtXVk6MWJZhVJE Kq701kMDJukuhhi6b5TK2vv/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgicCeEAc RY/aV7EuM5T7cRCqXPkwHwYDVR0jBBgwFoAUeoryTXjXdw3DOcL/KP18FNE8X7Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFQjJELzRBNkNFREFDQkVC MzExRUE4MjY4NzY0M0M0RjlBRTAyL2VvcnlUWGpYZHczRE9jTF9LUDE4Rk5FOFg3 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZW9yeVRYalhkdzNET2NMX0tQMThGTkU4WDdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF QjJELzRBNkNFREFDQkVCMzExRUE4MjY4NzY0M0M0RjlBRTAyL2VvcnlUWGpYZHcz RE9jTF9LUDE4Rk5FOFg3RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAN3JQn5tqcJ/xApLIXm38oxy7GpBxNk6RsTwZZ+sBrZTdV78hqwGr05I 6xKo3aKSb0T1GhwT3No/pYNRJHHmXB6tOb6KldhT6yB6OOu7c/nW4A4Nl+AmOa+U lPvBA3BXhSeLW7b3+hFDUkxyXyat/4QGv70BEKPALb+mMzvj4tbB3mBKvsmf/eeB Y7nDO92cljJSNvNNydoWkt4EVdPou2j3jxlgy5E5Q08DGK3ebtKwMgQ/v7Akzkhh 3nYHKhrbRG/zn80yVhdUU0ckDqw1+psbXBoeS0KxFCwl1twD3rkxoi8+qW7gzY52 PDN329bgZfTfLIRGuaLLi/9EVDaI7PU= -----END CERTIFICATE-----Generated at Fri Apr 18 17:04:59 2025 by rpki-client