$ rpki-client -vvf rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.mft File: EEETzo9eAXUa9NDySWjYOSSmyAc.mft (raw, json) Hash identifier: 4a2atudjR7yL5rdZTAXHkoFbFsDLET5fB/q41ShSCOo= Subject key identifier: F8:D3:D0:E6:A1:D4:DA:65:6D:69:41:D9:E1:1C:2F:6F:10:9E:00:0C Authority key identifier: 10:41:13:CE:8F:5E:01:75:1A:F4:D0:F2:49:68:D8:39:24:A6:C8:07 Certificate issuer: /CN=A912A517/serialNumber=104113CE8F5E01751AF4D0F24968D83924A6C807 Certificate serial: 11CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEETzo9eAXUa9NDySWjYOSSmyAc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.mft Manifest number: 11B3 Signing time: Fri 04 Apr 2025 17:18:16 +0000 Manifest this update: Fri 04 Apr 2025 17:18:15 +0000 Manifest next update: Fri 11 Apr 2025 17:18:15 +0000 Files and hashes: 1: EEETzo9eAXUa9NDySWjYOSSmyAc.crl (hash: 04fQhx+rNvFRXkbRfP/U/V0VoGp7ObyNpouG+sqepAA=) 2: 414227D6F03711EBB93D0345C4F9AE02.roa (hash: zcse+3V6ypo9qMai/JVipYWLsvmfpHazMGh7GCulYY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.crl rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEETzo9eAXUa9NDySWjYOSSmyAc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4556 (0x11cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A517 Validity Not Before: Apr 4 17:18:15 2025 GMT Not After : Apr 11 17:18:15 2025 GMT Subject: CN=67f01457-58a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a3:f6:ec:12:15:6e:30:d5:df:7d:14:56:fa: d3:52:e3:39:79:c7:69:cf:11:a8:41:c2:df:3d:c0: f9:ae:39:f4:07:ef:2a:18:10:f4:98:bc:8a:b3:55: d1:03:a0:ad:b5:69:69:fe:d3:68:fc:db:8f:00:47: f7:ce:0e:65:86:b3:52:08:11:7a:69:a4:34:c2:6a: 1e:71:f7:17:a3:e5:d4:3d:7d:24:5e:9f:d1:5b:e9: 80:e7:19:6f:96:98:97:ee:95:7d:0f:38:7f:7f:cc: 40:69:87:f3:b5:fb:b8:78:ec:8e:64:b0:b5:72:ce: 5d:50:8a:85:85:d7:b9:7f:a9:93:eb:76:2f:6e:f3: bd:bc:ac:b5:0b:d5:c4:77:ce:18:63:80:3d:5a:a5: a0:9b:f7:6b:f5:7d:31:6f:50:1e:2d:7c:05:65:a7: a8:2a:cf:a5:f6:31:5f:31:d4:ee:dc:72:b9:38:da: c6:94:72:f7:62:7a:46:bf:e3:a2:5f:80:ff:ad:05: 90:d6:82:27:e3:85:5a:b7:d6:00:6a:ab:df:9e:08: ab:9c:29:25:ed:99:4c:72:60:cd:f9:f9:da:9e:18: ca:e7:35:5b:4a:51:06:59:2a:2c:80:7e:ef:f2:20: 9a:b4:80:b4:13:09:99:0f:d9:41:05:12:28:ac:b3: a5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D3:D0:E6:A1:D4:DA:65:6D:69:41:D9:E1:1C:2F:6F:10:9E:00:0C X509v3 Authority Key Identifier: keyid:10:41:13:CE:8F:5E:01:75:1A:F4:D0:F2:49:68:D8:39:24:A6:C8:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEETzo9eAXUa9NDySWjYOSSmyAc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A517/2B19FFB8F50011E8A93A8E63C4F9AE02/EEETzo9eAXUa9NDySWjYOSSmyAc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:88:eb:7e:48:6e:a4:3d:2a:f4:a6:62:41:69:7c:29:ad:53: 06:97:92:05:f7:f8:7d:34:2b:fa:26:04:01:85:49:6c:60:85: 44:2b:0b:15:71:5d:c4:a3:14:0a:c4:b5:6a:d7:ca:ea:bf:80: 20:ee:1e:30:39:a6:5b:50:4c:b6:29:1f:cd:f1:18:28:20:36: b6:15:99:54:56:45:64:1f:9e:66:25:30:d4:0b:8f:8a:bd:14: 74:ce:7f:5d:2b:e8:9c:82:e7:81:e0:51:7f:f0:ab:3d:20:2c: e7:85:e5:68:83:7e:85:4d:fc:f5:d5:72:d4:25:82:63:ab:15: e2:c9:18:24:43:13:18:b4:32:5b:a8:bf:d2:30:d9:f9:81:f0: 59:94:a2:56:56:da:d1:bc:dc:86:78:d8:57:05:3e:5d:ae:08: d2:ed:e9:ed:ec:f4:87:3d:a9:42:47:a2:b0:ab:82:1b:df:22: 5c:83:6d:16:1b:d9:74:e1:18:63:dc:7e:78:78:77:9e:6c:ea: 25:55:c2:4d:ea:b7:41:b3:c0:e7:3e:42:bc:c9:99:f5:8d:c5: 42:f0:01:2a:e3:e4:26:c6:3c:dc:1c:d6:70:d5:f5:b9:c1:d4: a8:22:a0:1a:e9:b4:bb:27:53:e5:d9:56:2d:a2:8a:a5:db:cb: 67:4b:77:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE1MTcxMTAvBgNVBAUTKDEwNDExM0NFOEY1RTAxNzUxQUY0RDBGMjQ5NjhEODM5 MjRBNkM4MDcwHhcNMjUwNDA0MTcxODE1WhcNMjUwNDExMTcxODE1WjAYMRYwFAYD VQQDEw02N2YwMTQ1Ny01OGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqP27BIVbjDV330UVvrTUuM5ecdpzxGoQcLfPcD5rjn0B+8qGBD0mLyKs1XR A6CttWlp/tNo/NuPAEf3zg5lhrNSCBF6aaQ0wmoecfcXo+XUPX0kXp/RW+mA5xlv lpiX7pV9Dzh/f8xAaYfztfu4eOyOZLC1cs5dUIqFhde5f6mT63YvbvO9vKy1C9XE d84YY4A9WqWgm/dr9X0xb1AeLXwFZaeoKs+l9jFfMdTu3HK5ONrGlHL3YnpGv+Oi X4D/rQWQ1oIn44Vat9YAaqvfngirnCkl7ZlMcmDN+fnanhjK5zVbSlEGWSosgH7v 8iCatIC0EwmZD9lBBRIorLOlEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjT0Oah 1NplbWlB2eEcL28QngAMMB8GA1UdIwQYMBaAFBBBE86PXgF1GvTQ8klo2DkkpsgH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTUxNy8yQjE5RkZCOEY1 MDAxMUU4QTkzQThFNjNDNEY5QUUwMi9FRUVUem85ZUFYVWE5TkR5U1dqWU9TU215 QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VFRVR6bzllQVhVYTlORHlTV2pZT1NTbXlBYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTUxNy8yQjE5RkZCOEY1MDAxMUU4QTkzQThFNjNDNEY5QUUwMi9FRUVUem85ZUFY VWE5TkR5U1dqWU9TU215QWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTiOt+SG6kPSr0pmJBaXwprVMGl5IF9/h9NCv6JgQBhUlsYIVEKwsV cV3EoxQKxLVq18rqv4Ag7h4wOaZbUEy2KR/N8RgoIDa2FZlUVkVkH55mJTDUC4+K vRR0zn9dK+icgueB4FF/8Ks9ICznheVog36FTfz11XLUJYJjqxXiyRgkQxMYtDJb qL/SMNn5gfBZlKJWVtrRvNyGeNhXBT5drgjS7ent7PSHPalCR6Kwq4Ib3yJcg20W G9l04Rhj3H54eHeebOolVcJN6rdBs8DnPkK8yZn1jcVC8AEq4+QmxjzcHNZw1fW5 wdSoIqAa6bS7J1Pl2VYtooql28tnS3cU -----END CERTIFICATE-----Generated at Sun Apr 6 12:47:34 2025 by rpki-client