$ rpki-client -vvf rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.mft File: EYuDYeRNUFJcthNQslJrWfbeLc0.mft (raw, json) Hash identifier: Maz0KdebX/UzvfDT9JubmyYxQyL2f2C7fqa6o8RlSBo= Subject key identifier: 03:2F:7B:D9:42:CB:5B:D2:D3:7D:E9:74:30:DD:AA:37:6D:BB:39:B2 Authority key identifier: 11:8B:83:61:E4:4D:50:52:5C:B6:13:50:B2:52:6B:59:F6:DE:2D:CD Certificate issuer: /CN=A912F76A/serialNumber=118B8361E44D50525CB61350B2526B59F6DE2DCD Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EYuDYeRNUFJcthNQslJrWfbeLc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.mft Manifest number: 014C Signing time: Thu 03 Apr 2025 03:29:51 +0000 Manifest this update: Thu 03 Apr 2025 03:29:50 +0000 Manifest next update: Thu 10 Apr 2025 03:29:50 +0000 Files and hashes: 1: EYuDYeRNUFJcthNQslJrWfbeLc0.crl (hash: Qxo7klyZmPQkXk+D2sEqJdCBcWOMa7mMXxlHmlWpYxA=) 2: 6A13CBAC04D711F0BC472C19C4F9AE02.roa (hash: NpaEZC+frVowfr+OkTk62XtMeb2kHhDxkhfc9nCsgm0=) 3: 62752E9404D811F0BE92A51DC4F9AE02.roa (hash: ZKVR1lrcdLxvriA1prCteQU1sWugc5ZdRQWr2+79yO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.crl rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EYuDYeRNUFJcthNQslJrWfbeLc0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:29:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F76A Validity Not Before: Apr 3 03:29:50 2025 GMT Not After : Apr 10 03:29:50 2025 GMT Subject: CN=67ee00af-7ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8b:ea:db:b9:f2:0b:5c:40:45:da:28:7e:c1: 85:b9:d3:7d:5e:b7:86:50:60:b5:f6:1d:f0:3e:48: 83:e0:1a:2a:c8:97:64:a6:75:0d:c7:ba:57:ee:9b: 77:22:b0:40:c1:e7:48:8a:58:45:f5:d0:19:1a:04: 5d:ba:94:73:42:8c:72:34:7b:d6:10:18:65:3c:64: df:ab:4f:60:26:3f:95:2e:bc:25:54:00:b9:ba:e0: c1:e4:66:88:91:ae:8e:42:f0:b8:ea:18:45:03:c8: a7:ea:48:c7:e0:d9:50:79:bb:27:4d:65:51:a9:19: c7:40:90:ad:77:d3:5f:66:d9:81:d0:e4:e1:5e:c8: 0c:f1:de:9b:dc:ef:1e:30:f7:5f:8e:86:f4:0e:5a: c9:ec:47:53:94:07:a2:80:c0:db:f4:fb:7a:26:e7: 7e:01:1a:90:f7:0b:69:66:25:47:42:f2:26:55:41: 72:38:b7:97:49:1a:90:74:c8:1c:c6:65:10:47:09: c2:ce:53:13:c4:1d:2a:c9:fb:e2:43:76:c7:29:79: 60:0f:d0:20:1a:06:1d:23:c4:cf:4e:4c:f5:68:53: c6:e6:d1:82:5d:63:30:92:84:b2:47:aa:6d:86:75: 00:67:62:e2:51:d0:4b:1b:43:44:6d:57:27:1f:83: 3e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:2F:7B:D9:42:CB:5B:D2:D3:7D:E9:74:30:DD:AA:37:6D:BB:39:B2 X509v3 Authority Key Identifier: keyid:11:8B:83:61:E4:4D:50:52:5C:B6:13:50:B2:52:6B:59:F6:DE:2D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EYuDYeRNUFJcthNQslJrWfbeLc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:5b:cb:17:cc:06:01:9c:65:00:0f:5e:8b:c2:3e:7b:1a:ab: 1c:f2:10:14:54:46:8f:41:0c:72:78:92:10:8f:a0:6c:db:e0: b1:cc:ab:8a:a1:8f:d6:79:43:63:ab:20:b1:9d:65:10:41:3d: a6:89:5e:08:2b:a2:28:a3:32:9f:75:e2:39:b5:4e:1e:6f:37: 71:6a:d1:ab:60:66:10:e5:a1:41:e9:10:b6:af:45:0a:e0:5d: 51:a0:c1:93:87:e9:28:73:0a:11:61:96:5a:92:3f:cf:c6:d3: 66:d5:ea:c9:21:f2:6b:f7:38:73:6d:13:f5:3a:7b:83:f2:7f: 1d:72:38:fb:c7:99:12:a9:16:dc:40:a3:ea:4c:32:6a:f7:c8: 31:f2:f1:0d:2e:59:c6:43:da:c5:8f:9a:b8:a5:81:a8:94:25: ee:a2:0d:aa:53:d9:6a:bb:5b:c4:59:3a:47:62:fe:76:8e:99: 60:fb:79:60:17:ac:b5:52:72:0d:39:71:98:39:5a:db:52:36: 33:eb:33:c5:46:e9:13:ed:5e:b1:74:45:bb:17:a2:f0:4c:ac: 2c:02:dd:13:b4:8d:8e:78:be:c0:88:f6:50:2b:8b:0d:ec:d6: 3b:a7:b5:c4:86:28:81:de:2c:e4:ff:0e:73:e9:35:bb:21:05: fb:5a:5d:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY3NkExMTAvBgNVBAUTKDExOEI4MzYxRTQ0RDUwNTI1Q0I2MTM1MEIyNTI2QjU5 RjZERTJEQ0QwHhcNMjUwNDAzMDMyOTUwWhcNMjUwNDEwMDMyOTUwWjAYMRYwFAYD VQQDEw02N2VlMDBhZi03ZGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYvq27nyC1xARdoofsGFudN9XreGUGC19h3wPkiD4BoqyJdkpnUNx7pX7pt3 IrBAwedIilhF9dAZGgRdupRzQoxyNHvWEBhlPGTfq09gJj+VLrwlVAC5uuDB5GaI ka6OQvC46hhFA8in6kjH4NlQebsnTWVRqRnHQJCtd9NfZtmB0OThXsgM8d6b3O8e MPdfjob0DlrJ7EdTlAeigMDb9Pt6Jud+ARqQ9wtpZiVHQvImVUFyOLeXSRqQdMgc xmUQRwnCzlMTxB0qyfviQ3bHKXlgD9AgGgYdI8TPTkz1aFPG5tGCXWMwkoSyR6pt hnUAZ2LiUdBLG0NEbVcnH4M+lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMve9lC y1vS033pdDDdqjdtuzmyMB8GA1UdIwQYMBaAFBGLg2HkTVBSXLYTULJSa1n23i3N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjc2QS8yRkJBOEJGRTE5 NkUxMUVFQUI0NURCNTRDNEY5QUUwMi9FWXVEWWVSTlVGSmN0aE5Rc2xKcldmYmVM YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VZdURZZVJOVUZKY3RoTlFzbEpyV2ZiZUxjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Rjc2QS8yRkJBOEJGRTE5NkUxMUVFQUI0NURCNTRDNEY5QUUwMi9FWXVEWWVSTlVG SmN0aE5Rc2xKcldmYmVMYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPW8sXzAYBnGUAD16Lwj57Gqsc8hAUVEaPQQxyeJIQj6Bs2+CxzKuK oY/WeUNjqyCxnWUQQT2miV4IK6IoozKfdeI5tU4ebzdxatGrYGYQ5aFB6RC2r0UK 4F1RoMGTh+kocwoRYZZakj/PxtNm1erJIfJr9zhzbRP1OnuD8n8dcjj7x5kSqRbc QKPqTDJq98gx8vENLlnGQ9rFj5q4pYGolCXuog2qU9lqu1vEWTpHYv52jplg+3lg F6y1UnINOXGYOVrbUjYz6zPFRukT7V6xdEW7F6LwTKwsAt0TtI2OeL7AiPZQK4sN 7NY7p7XEhiiB3izk/w5z6TW7IQX7Wl1Z -----END CERTIFICATE-----Generated at Fri Apr 4 21:58:14 2025 by rpki-client