$ rpki-client -vvf rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft File: EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft (raw, json) Hash identifier: 6gP2xxRiLkzc+ji/Mgm9Q45OKjM+Hnpe8UZrr2VktuE= Subject key identifier: 1F:2B:EF:49:BA:9E:08:2B:0D:00:CC:EB:61:5A:F1:D8:A2:05:3A:3C Authority key identifier: 12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13 Certificate issuer: /CN=A91250FA/serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813 Certificate serial: 0B36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft Manifest number: 0B28 Signing time: Fri 04 Apr 2025 19:19:11 +0000 Manifest this update: Fri 04 Apr 2025 19:19:10 +0000 Manifest next update: Fri 11 Apr 2025 19:19:10 +0000 Files and hashes: 1: EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl (hash: Ay2C5POGzCLtnlODI/szEU4DmGLjyDdz+GQkhYlGVto=) 2: 2A08F1A4369211EAA64E320BC4F9AE02.roa (hash: I91qaFQgep6EuuEEdqbhO4Prklw7ndmFH38wo16kLVk=) 3: 5D822954368F11EAB3D4CE7FC4F9AE02.roa (hash: /cS7IVALMe9B/AtpjJXVY/jO3FykqwmgPTZQLz+GjqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:19:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2870 (0xb36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91250FA Validity Not Before: Apr 4 19:19:10 2025 GMT Not After : Apr 11 19:19:10 2025 GMT Subject: CN=67f030ae-706f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:68:11:67:7e:49:b0:e9:b9:fc:ec:86:d1:aa: 6d:33:9e:79:a6:72:ec:68:63:c7:87:8e:90:0c:ea: d6:29:f7:cd:d6:54:43:ab:39:12:9d:71:d0:9c:5d: f5:e9:31:91:5b:8b:f7:07:03:2f:b3:ca:c9:13:1e: 28:79:93:89:9f:00:26:8e:2f:b2:d5:3d:db:c9:40: a1:68:5a:b9:37:a9:e8:a7:02:96:ea:0f:c9:49:86: 9e:88:ca:55:9d:b6:ee:6b:13:c0:ab:c3:99:46:05: f9:66:96:b5:0c:10:3f:92:8a:c8:5d:60:91:71:5b: 5c:be:aa:f4:67:20:55:99:8a:23:1c:9e:81:3f:83: d3:39:c5:b0:91:c0:f6:3e:41:a0:8a:b2:79:be:6e: 63:1d:31:ef:e1:e8:12:67:38:f3:57:f6:11:d6:79: a7:9d:cc:4a:14:b5:6c:47:59:5c:69:1f:84:1b:3b: 3d:ba:9c:a5:1a:76:c5:96:2d:67:cb:85:b9:50:b5: 0b:de:9c:ed:6e:63:52:10:72:53:4b:b8:c6:aa:fc: ed:57:3c:5b:8b:61:cc:55:a8:61:14:4d:f1:75:f3: b6:da:6f:87:10:74:58:1b:8a:54:64:12:52:ad:11: fe:b5:df:67:ad:23:66:99:49:ec:ee:59:86:dd:b2: 1c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:2B:EF:49:BA:9E:08:2B:0D:00:CC:EB:61:5A:F1:D8:A2:05:3A:3C X509v3 Authority Key Identifier: keyid:12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:95:7c:d6:18:a8:37:e6:15:03:67:a3:92:ff:8a:bc:0f:7d: 95:33:84:a0:5d:fd:86:26:96:80:db:68:09:8d:aa:f6:ed:5a: 14:a5:4d:18:c9:21:a3:8e:e7:51:f2:82:be:da:3b:3a:0c:d2: 76:37:c5:a8:3a:94:bf:8d:44:8c:02:13:f9:4f:f9:75:ff:ef: fa:45:19:b6:a7:71:5c:74:f6:3c:75:35:06:cf:21:55:60:92: 32:73:e9:e5:b5:e6:f1:33:18:18:11:8e:1d:7b:ea:6a:5f:13: 25:d1:ed:25:ef:41:f0:05:ab:45:06:34:ea:0b:3c:ae:89:f3: fe:2e:69:cc:1e:6b:76:b7:f2:ec:18:38:2d:e3:23:23:0c:05: 79:6b:6e:49:5d:d5:ee:fc:3f:1d:bd:8d:7a:6c:3c:11:0b:42: 5d:be:ef:f1:1f:f0:4b:aa:dd:7a:5d:2c:f3:54:5d:3a:3f:21: 57:05:cc:b3:f4:27:d7:a5:c0:3a:42:50:f0:6a:a3:8a:dd:24: 30:37:77:9d:38:17:36:39:fe:a9:e6:ae:b0:86:bb:41:37:82: 13:10:a8:b6:86:47:d2:86:36:f0:c0:a0:71:ce:48:a2:eb:d5: 15:00:ba:6c:7c:a8:4c:4c:69:f8:34:50:34:b4:db:c7:fe:b5: 6c:10:55:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUwRkExMTAvBgNVBAUTKDEyODNBMkY0QzdCQTExNzA2QzY2RTE3QkYxQkQzRTk5 NjI3QTE4MTMwHhcNMjUwNDA0MTkxOTEwWhcNMjUwNDExMTkxOTEwWjAYMRYwFAYD VQQDEw02N2YwMzBhZS03MDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGgRZ35JsOm5/OyG0aptM555pnLsaGPHh46QDOrWKffN1lRDqzkSnXHQnF31 6TGRW4v3BwMvs8rJEx4oeZOJnwAmji+y1T3byUChaFq5N6nopwKW6g/JSYaeiMpV nbbuaxPAq8OZRgX5Zpa1DBA/korIXWCRcVtcvqr0ZyBVmYojHJ6BP4PTOcWwkcD2 PkGgirJ5vm5jHTHv4egSZzjzV/YR1nmnncxKFLVsR1lcaR+EGzs9upylGnbFli1n y4W5ULUL3pztbmNSEHJTS7jGqvztVzxbi2HMVahhFE3xdfO22m+HEHRYG4pUZBJS rRH+td9nrSNmmUns7lmG3bIcEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8r70m6 nggrDQDM62Fa8diiBTo8MB8GA1UdIwQYMBaAFBKDovTHuhFwbGbhe/G9PpliehgT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTBGQS9BQUEwRUJFMDM2 OEUxMUVBQTc2OEZDN0VDNEY5QUUwMi9Fb09pOU1lNkVYQnNadUY3OGIwLW1XSjZH Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VvT2k5TWU2RVhCc1p1Rjc4YjAtbVdKNkdCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTBGQS9BQUEwRUJFMDM2OEUxMUVBQTc2OEZDN0VDNEY5QUUwMi9Fb09pOU1lNkVY QnNadUY3OGIwLW1XSjZHQk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNlXzWGKg35hUDZ6OS/4q8D32VM4SgXf2GJpaA22gJjar27VoUpU0Y ySGjjudR8oK+2js6DNJ2N8WoOpS/jUSMAhP5T/l1/+/6RRm2p3FcdPY8dTUGzyFV YJIyc+nltebxMxgYEY4de+pqXxMl0e0l70HwBatFBjTqCzyuifP+LmnMHmt2t/Ls GDgt4yMjDAV5a25JXdXu/D8dvY16bDwRC0Jdvu/xH/BLqt16XSzzVF06PyFXBcyz 9CfXpcA6QlDwaqOK3SQwN3edOBc2Of6p5q6whrtBN4ITEKi2hkfShjbwwKBxzkii 69UVALpsfKhMTGn4NFA0tNvH/rVsEFV2 -----END CERTIFICATE-----Generated at Fri Apr 4 22:26:56 2025 by rpki-client