$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft File: ED-ovf_7nwVXByxHMyuBqegO3TU.mft (raw, json) Hash identifier: w6spK3TF2wdRpXOLq1IKU9TTM7DycgM5Yzsvc4SIYI0= Subject key identifier: 11:30:96:46:5B:54:25:0E:74:FB:7A:99:F5:D9:41:5A:F0:23:B5:E0 Authority key identifier: 10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35 Certificate issuer: /CN=A9140D69/serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35 Certificate serial: 0299 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft Manifest number: 027D Signing time: Thu 03 Apr 2025 01:40:47 +0000 Manifest this update: Thu 03 Apr 2025 01:40:46 +0000 Manifest next update: Thu 10 Apr 2025 01:40:46 +0000 Files and hashes: 1: ED-ovf_7nwVXByxHMyuBqegO3TU.crl (hash: 45XL3eW+6peRKMv5I1cjhcMvVfWoThfG5ZkFENmCO4w=) 2: 80C1D8C25A1311EF9C290A0FC4F9AE02.roa (hash: YNHU5lYg+9a3NTugfNq/GHOOta7DEvwWWMRZFSxilZE=) 3: BAF6068003FF11F0A4ED2A0FC4F9AE02.roa (hash: NKQmAYZ+qv5DU6J3CM90FVD1uxEn0gkkV4zaOpjr+Ac=) 4: 5F6D13A803FF11F0AB18630EC4F9AE02.roa (hash: uz5cJKJAqQJKme5dsqGOi1ncOhl7KhQPnpqmMp/6nt8=) 5: 5EAC0AC803FF11F0AB18630EC4F9AE02.roa (hash: L9lmjsVx3rh0Td2kPzak0SKAKQ4EbIg6NL2nntC4+T0=) 6: 5F82DFE431D711EFB80F3F45C4F9AE02.roa (hash: CCZd9BDvv1EdFMJxlcSks5CgyUeUuqkMC0ecI3coMJg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 665 (0x299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D69 Validity Not Before: Apr 3 01:40:46 2025 GMT Not After : Apr 10 01:40:46 2025 GMT Subject: CN=67ede71f-895d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:31:26:fc:bc:70:41:ec:bd:cb:90:a0:56:74: a7:4d:24:2f:a3:54:2e:12:10:e5:82:9a:6a:52:ed: fe:31:82:75:d6:1c:fb:91:8b:b2:b3:54:ca:ff:80: 65:fc:68:8f:6e:60:05:05:a5:5e:57:b7:35:de:9e: 61:12:af:f9:7b:ad:b2:fa:ae:ec:7f:00:c4:7d:ba: 5a:f1:aa:b5:7f:18:fd:56:17:28:90:13:e9:c2:b8: 1d:d5:e2:fb:24:fa:c0:52:5f:48:b4:ff:36:15:42: a0:0b:08:8b:17:56:10:db:bd:9e:19:f7:db:aa:af: 51:bd:0f:c4:21:23:d5:94:b6:18:da:2c:dd:30:5f: 1b:18:93:63:0b:3d:14:31:c0:59:c7:de:53:3e:90: a8:1c:01:c9:a7:fa:08:6f:a4:ac:22:32:ee:b2:07: c7:b6:6e:22:6e:8c:5e:04:9a:01:97:48:64:89:12: 3c:64:e5:94:2c:43:75:ce:15:08:6c:13:40:3d:82: d9:0d:a6:ca:6f:9b:1a:0f:5f:c3:1e:19:be:59:e8: 26:14:7d:b0:89:35:05:f7:81:58:aa:66:22:11:00: 0b:ee:04:65:b2:db:1b:da:0e:2e:c4:21:bb:97:64: 8f:6c:a3:78:93:bb:fd:e8:2c:ca:8f:fe:cf:85:31: 78:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:30:96:46:5B:54:25:0E:74:FB:7A:99:F5:D9:41:5A:F0:23:B5:E0 X509v3 Authority Key Identifier: keyid:10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:d4:b8:b0:20:e7:88:7f:da:56:9a:00:46:42:8d:14:c2:b6: ef:ab:9a:e6:3f:00:5e:63:5e:8c:55:c4:76:a1:69:54:e5:52: 0d:24:ac:48:1b:29:b0:7d:60:0a:76:08:d3:8f:26:d6:6d:98: fb:7a:70:33:3e:6e:c9:a6:4f:58:5a:a7:dd:85:f1:d7:3f:1b: f3:be:aa:47:df:a6:74:2a:35:44:32:7a:5a:de:19:2c:c2:d4: 43:62:fa:5a:25:e2:cc:ce:4b:09:df:2f:6c:0d:1e:63:49:a0: 70:fd:1e:3a:97:4f:df:66:41:a2:b7:9a:0d:5b:f9:d8:62:c3: 33:f4:d3:c8:39:29:c9:97:b4:bf:a1:5f:8d:18:b6:5f:be:75: d8:54:ba:49:0a:e8:a3:e2:2c:f8:42:3a:6a:23:b6:12:c8:1b: 4a:4e:ca:09:fb:48:f0:ed:a3:da:70:b6:66:64:41:d7:e9:03: dd:6b:20:3e:81:c8:c1:eb:1a:6e:c6:d5:89:8d:de:a5:00:87: a3:d6:96:b1:18:bb:10:5e:9b:c0:89:e0:d3:31:b7:c9:b6:5f: b4:e0:9a:6b:01:d7:49:1d:a2:39:99:cb:77:97:9d:a6:93:14: 3d:dd:92:96:c4:4b:b9:10:cc:48:08:f2:03:4d:db:8a:c9:59: 36:14:e2:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBENjkxMTAvBgNVBAUTKDEwM0ZBOEJERkZGQjlGMDU1NzA3MkM0NzMzMkI4MUE5 RTgwRUREMzUwHhcNMjUwNDAzMDE0MDQ2WhcNMjUwNDEwMDE0MDQ2WjAYMRYwFAYD VQQDEw02N2VkZTcxZi04OTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTEm/LxwQey9y5CgVnSnTSQvo1QuEhDlgppqUu3+MYJ11hz7kYuys1TK/4Bl /GiPbmAFBaVeV7c13p5hEq/5e62y+q7sfwDEfbpa8aq1fxj9VhcokBPpwrgd1eL7 JPrAUl9ItP82FUKgCwiLF1YQ272eGffbqq9RvQ/EISPVlLYY2izdMF8bGJNjCz0U McBZx95TPpCoHAHJp/oIb6SsIjLusgfHtm4iboxeBJoBl0hkiRI8ZOWULEN1zhUI bBNAPYLZDabKb5saD1/DHhm+WegmFH2wiTUF94FYqmYiEQAL7gRlstsb2g4uxCG7 l2SPbKN4k7v96CzKj/7PhTF4nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBEwlkZb VCUOdPt6mfXZQVrwI7XgMB8GA1UdIwQYMBaAFBA/qL3/+58FVwcsRzMrganoDt01 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQ2OS8wRTE3N0Q1QTA1 OEMxMUVEQURENjYwMTFDNEY5QUUwMi9FRC1vdmZfN253VlhCeXhITXl1QnFlZ08z VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VELW92Zl83bndWWEJ5eEhNeXVCcWVnTzNUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQ2OS8wRTE3N0Q1QTA1OEMxMUVEQURENjYwMTFDNEY5QUUwMi9FRC1vdmZfN253 VlhCeXhITXl1QnFlZ08zVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj1LiwIOeIf9pWmgBGQo0Uwrbvq5rmPwBeY16MVcR2oWlU5VINJKxI GymwfWAKdgjTjybWbZj7enAzPm7Jpk9YWqfdhfHXPxvzvqpH36Z0KjVEMnpa3hks wtRDYvpaJeLMzksJ3y9sDR5jSaBw/R46l0/fZkGit5oNW/nYYsMz9NPIOSnJl7S/ oV+NGLZfvnXYVLpJCuij4iz4QjpqI7YSyBtKTsoJ+0jw7aPacLZmZEHX6QPdayA+ gcjB6xpuxtWJjd6lAIej1paxGLsQXpvAieDTMbfJtl+04JprAddJHaI5mct3l52m kxQ93ZKWxEu5EMxICPIDTduKyVk2FOIg -----END CERTIFICATE-----Generated at Fri Apr 4 22:37:02 2025 by rpki-client