$ rpki-client -vvf rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.mft File: EU2YjjFR6VKba6150-lUNuU34SM.mft (raw, json) Hash identifier: MpX4XMcAOhiCfcDXo48fqQBBgb0lsaWSABezqF7CkHc= Subject key identifier: 8F:B9:CE:5C:CD:FB:A4:E2:4B:2B:62:95:51:2F:78:3A:D8:AB:5D:D1 Authority key identifier: 11:4D:98:8E:31:51:E9:52:9B:6B:AD:79:D3:E9:54:36:E5:37:E1:23 Certificate issuer: /CN=A9144633/serialNumber=114D988E3151E9529B6BAD79D3E95436E537E123 Certificate serial: 07E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU2YjjFR6VKba6150-lUNuU34SM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.mft Manifest number: 07D1 Signing time: Sun 20 Apr 2025 20:49:59 +0000 Manifest this update: Sun 20 Apr 2025 20:49:58 +0000 Manifest next update: Sun 27 Apr 2025 20:49:58 +0000 Files and hashes: 1: EU2YjjFR6VKba6150-lUNuU34SM.crl (hash: 46Umz78mvfawF6nnQviWtrcmtLkIimv1TtvJbRp2nbU=) 2: 3AA3E4AE018111ECB7DFB21CC4F9AE02.roa (hash: 5oc6Qp38wRPdhyK0UkEA8kQt2rT5qpKXkGxy5uDj59c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.crl rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU2YjjFR6VKba6150-lUNuU34SM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2022 (0x7e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144633, serialNumber=114D988E3151E9529B6BAD79D3E95436E537E123 Validity Not Before: Apr 20 20:49:58 2025 GMT Not After : Apr 27 20:49:58 2025 GMT Subject: CN=68055df6-9c8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:47:da:0b:2d:df:7d:eb:ba:f9:f9:ab:96:be: a0:72:81:44:ed:df:83:41:52:8e:a6:b4:ff:29:8d: 3e:cc:f2:f3:fb:ce:a7:12:4b:88:2e:33:44:1b:e1: 5c:6b:63:28:af:28:a9:7e:4a:20:b2:cd:99:dd:4d: 2b:55:92:15:73:15:1a:31:b3:47:bf:0b:ef:6d:40: ba:b0:7f:4f:30:ac:b0:26:70:cd:1f:7b:f4:c1:5b: ee:81:95:cd:5f:55:02:9e:91:f7:a3:96:63:7c:be: 55:86:b3:05:40:08:7d:25:5a:15:02:74:93:c6:5a: b6:d6:6d:68:c5:e0:db:06:be:0f:0e:83:62:a8:c5: a6:7a:20:ef:8b:ba:81:a5:3e:42:54:46:1c:39:13: 2e:59:90:c4:fd:01:88:6d:e6:0b:55:16:73:d4:dd: cb:cf:e7:32:e7:01:1a:e6:6b:95:60:ee:dd:4c:44: b1:2b:f3:88:91:97:38:79:1b:71:61:31:8c:7c:bc: 73:87:a5:a6:a1:c3:ee:e0:f6:61:65:38:9f:db:f6: 53:2c:66:30:e1:6c:91:23:88:03:40:4d:94:1c:b7: 06:3a:97:61:62:ff:c7:c4:21:33:99:ca:73:da:be: db:55:01:10:4d:68:11:42:06:00:2c:7e:2f:57:60: df:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B9:CE:5C:CD:FB:A4:E2:4B:2B:62:95:51:2F:78:3A:D8:AB:5D:D1 X509v3 Authority Key Identifier: keyid:11:4D:98:8E:31:51:E9:52:9B:6B:AD:79:D3:E9:54:36:E5:37:E1:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU2YjjFR6VKba6150-lUNuU34SM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:03:ed:a9:25:c5:8d:5b:91:e0:73:8c:8f:ca:5a:ad:7e:f2: ec:47:0d:c7:b7:a5:b1:13:b3:b5:05:be:57:5f:0e:65:2d:09: cb:ec:e2:5f:4a:31:fd:7c:38:9a:f1:8e:a6:de:d7:9e:47:56: fb:48:39:3b:72:03:88:57:78:02:04:40:16:42:b8:97:cc:15: 27:a1:f3:23:76:1f:d8:7d:49:6f:b5:9a:5a:84:64:c4:c5:ca: 02:d6:27:97:5f:f0:33:73:24:7c:38:03:ac:61:a5:ac:71:9b: f7:83:b6:f5:5d:78:d4:b5:e7:3d:65:e1:a0:67:ef:3b:b6:a5: 20:04:b8:de:4f:0c:81:5d:d8:fa:9a:a6:38:31:42:4e:79:ff: 04:b0:66:32:82:73:53:11:a3:23:eb:98:e6:e1:80:82:da:75: 3a:31:7d:19:46:29:5a:65:46:a4:31:78:44:eb:cd:30:b2:59: a7:b3:0c:22:4c:6a:cc:8c:76:6f:09:03:98:26:f4:f2:bb:f6: 77:48:8f:a1:cf:37:d2:e5:60:79:fa:71:82:3d:c9:f0:6a:95: 73:1a:af:e0:6c:0b:95:97:31:3f:63:91:4b:b3:a6:a7:a5:0c: a3:0a:19:a6:65:99:d0:cc:ef:6b:7d:40:ea:bc:50:49:51:3a: de:3d:8d:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ2MzMxMTAvBgNVBAUTKDExNEQ5ODhFMzE1MUU5NTI5QjZCQUQ3OUQzRTk1NDM2 RTUzN0UxMjMwHhcNMjUwNDIwMjA0OTU4WhcNMjUwNDI3MjA0OTU4WjAYMRYwFAYD VQQDEw02ODA1NWRmNi05YzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEfaCy3ffeu6+fmrlr6gcoFE7d+DQVKOprT/KY0+zPLz+86nEkuILjNEG+Fc a2Moryipfkogss2Z3U0rVZIVcxUaMbNHvwvvbUC6sH9PMKywJnDNH3v0wVvugZXN X1UCnpH3o5ZjfL5VhrMFQAh9JVoVAnSTxlq21m1oxeDbBr4PDoNiqMWmeiDvi7qB pT5CVEYcORMuWZDE/QGIbeYLVRZz1N3Lz+cy5wEa5muVYO7dTESxK/OIkZc4eRtx YTGMfLxzh6WmocPu4PZhZTif2/ZTLGYw4WyRI4gDQE2UHLcGOpdhYv/HxCEzmcpz 2r7bVQEQTWgRQgYALH4vV2Df4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+5zlzN +6TiSytilVEveDrYq13RMB8GA1UdIwQYMBaAFBFNmI4xUelSm2utedPpVDblN+Ej MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDYzMy9BMDE5RTlDQUY0 MDExMUVBQjA2MTk2M0ZDNEY5QUUwMi9FVTJZampGUjZWS2JhNjE1MC1sVU51VTM0 U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VVMllqakZSNlZLYmE2MTUwLWxVTnVVMzRTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDYzMy9BMDE5RTlDQUY0MDExMUVBQjA2MTk2M0ZDNEY5QUUwMi9FVTJZampGUjZW S2JhNjE1MC1sVU51VTM0U00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRA+2pJcWNW5Hgc4yPylqtfvLsRw3Ht6WxE7O1Bb5XXw5lLQnL7OJf SjH9fDia8Y6m3teeR1b7SDk7cgOIV3gCBEAWQriXzBUnofMjdh/YfUlvtZpahGTE xcoC1ieXX/AzcyR8OAOsYaWscZv3g7b1XXjUtec9ZeGgZ+87tqUgBLjeTwyBXdj6 mqY4MUJOef8EsGYygnNTEaMj65jm4YCC2nU6MX0ZRilaZUakMXhE680wslmnswwi TGrMjHZvCQOYJvTyu/Z3SI+hzzfS5WB5+nGCPcnwapVzGq/gbAuVlzE/Y5FLs6an pQyjChmmZZnQzO9rfUDqvFBJUTrePY3j -----END CERTIFICATE-----Generated at Tue Apr 22 03:05:27 2025 by rpki-client