$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft File: mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft (raw, json) Hash identifier: KjI4nu6XnPoUdqKwo/9Cob3jl5nHYlbRcO9s65DcMXg= Subject key identifier: 95:91:82:4E:A9:04:7E:E8:0E:0A:7A:D6:B5:A0:4D:E2:CC:FB:E9:01 Authority key identifier: 98:43:C8:92:77:A8:12:AB:D7:FA:DA:B5:2D:1D:61:D2:78:BA:2B:19 Certificate issuer: /CN=A9145E67/serialNumber=9843C89277A812ABD7FADAB52D1D61D278BA2B19 Certificate serial: 0197 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft Manifest number: 0193 Signing time: Sat 05 Apr 2025 02:56:15 +0000 Manifest this update: Sat 05 Apr 2025 02:56:15 +0000 Manifest next update: Sat 12 Apr 2025 02:56:15 +0000 Files and hashes: 1: mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl (hash: qZQQgW3qfxGhhhmL1Ed0YzF9XNLfoxZeerpyGW1YZ3k=) 2: EE4D73F2AE5611EDA021E516C4F9AE02.roa (hash: rHhV9X+494LZVhsBFnMPP35cu2Qc4CF3Pf3vW78mDqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145E67 Validity Not Before: Apr 5 02:56:15 2025 GMT Not After : Apr 12 02:56:15 2025 GMT Subject: CN=67f09bcf-1d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f6:de:2c:7a:7d:a7:82:e2:03:4d:ee:bd:74: 5b:e2:b0:19:02:fc:81:a0:ad:39:2a:24:88:73:7e: e1:f4:bd:c2:51:73:1c:1b:43:fc:51:b5:00:34:e5: f4:e6:1b:1c:ca:6e:0c:0b:50:24:72:af:2b:85:f9: be:25:5c:cb:e4:9c:6d:0f:fe:c3:53:7a:c7:dc:c8: 26:c4:f4:d8:15:a3:dd:8e:ec:ff:8a:59:f9:dd:bc: b3:56:fe:d1:fa:1a:81:9f:25:7b:17:a3:24:51:c7: 2d:13:de:39:ce:06:59:3c:dd:14:a9:8b:fb:72:f2: 12:3b:6c:cf:4e:23:97:10:70:aa:25:9c:60:88:ee: ff:ca:c6:d4:44:d6:5b:9d:94:9b:91:16:45:8b:1c: 78:39:68:89:61:51:42:e4:91:2d:f9:9b:b8:cf:65: 53:4b:4f:be:7b:61:4f:86:59:f2:ac:90:99:65:98: 45:9f:27:54:58:7d:0e:18:95:9a:e8:e2:49:ef:20: 20:8c:24:e8:d7:21:e3:54:ba:07:e3:76:76:1e:04: 63:99:47:d4:d5:b5:40:79:7c:18:cc:00:e7:9d:58: ac:2e:35:34:12:d8:20:82:8d:69:df:36:00:c8:9d: 0b:85:72:db:e0:c2:23:62:fd:e9:e0:4d:90:f8:4f: 79:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:91:82:4E:A9:04:7E:E8:0E:0A:7A:D6:B5:A0:4D:E2:CC:FB:E9:01 X509v3 Authority Key Identifier: keyid:98:43:C8:92:77:A8:12:AB:D7:FA:DA:B5:2D:1D:61:D2:78:BA:2B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b9:ef:96:82:e2:cc:ff:ac:29:21:d9:ca:5b:77:11:1c:67: 1b:78:eb:8f:65:4b:40:9d:53:06:ed:40:90:9b:12:c3:20:01: b2:8b:90:32:cc:a8:fd:4c:50:2e:bc:b0:5a:fc:ea:d9:c7:78: 9e:86:fb:a2:e6:d1:a1:e8:6b:90:c5:93:dc:4b:ad:f4:3b:da: 35:bb:4e:96:17:8c:82:1e:6e:4c:c7:e2:d9:2c:59:22:bd:a0: 6d:f8:ea:53:18:49:a3:03:44:d0:46:8b:bf:39:51:f5:34:c2: 5f:c4:3e:6d:bd:24:e1:e2:45:71:33:dd:2f:9a:c7:5a:13:30: e0:82:42:17:5b:09:df:64:eb:17:60:c5:e1:64:02:d0:1a:17: f6:af:2a:d0:52:71:9e:39:03:62:a0:d2:26:47:82:2b:67:28: 48:ff:2b:f3:ce:f6:5d:0c:f3:24:6c:38:43:91:79:dd:78:a8: 73:29:5b:96:68:bc:a2:02:bc:34:b6:59:da:8e:86:8f:1a:e3: 45:3d:3f:f7:0c:af:f0:55:fa:d9:dc:3c:5c:56:e5:52:02:4d: 79:8e:b5:75:5b:38:91:07:44:e2:0c:c3:93:83:ff:14:4c:c2: 93:47:55:aa:af:4b:8d:13:67:57:0a:74:d0:3b:76:5d:fd:36: c4:a9:18:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVFNjcxMTAvBgNVBAUTKDk4NDNDODkyNzdBODEyQUJEN0ZBREFCNTJEMUQ2MUQy NzhCQTJCMTkwHhcNMjUwNDA1MDI1NjE1WhcNMjUwNDEyMDI1NjE1WjAYMRYwFAYD VQQDEw02N2YwOWJjZi0xZDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmPbeLHp9p4LiA03uvXRb4rAZAvyBoK05KiSIc37h9L3CUXMcG0P8UbUANOX0 5hscym4MC1Akcq8rhfm+JVzL5JxtD/7DU3rH3MgmxPTYFaPdjuz/iln53byzVv7R +hqBnyV7F6MkUcctE945zgZZPN0UqYv7cvISO2zPTiOXEHCqJZxgiO7/ysbURNZb nZSbkRZFixx4OWiJYVFC5JEt+Zu4z2VTS0++e2FPhlnyrJCZZZhFnydUWH0OGJWa 6OJJ7yAgjCTo1yHjVLoH43Z2HgRjmUfU1bVAeXwYzADnnVisLjU0Etgggo1p3zYA yJ0LhXLb4MIjYv3p4E2Q+E95LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWRgk6p BH7oDgp61rWgTeLM++kBMB8GA1UdIwQYMBaAFJhDyJJ3qBKr1/ratS0dYdJ4uisZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUU2Ny8yMkMxNDUyOEFF NTIxMUVEOUM1REEzMTBDNEY5QUUwMi9tRVBJa25lb0VxdlgtdHExTFIxaDBuaTZL eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21FUElrbmVvRXF2WC10cTFMUjFoMG5pNkt4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUU2Ny8yMkMxNDUyOEFFNTIxMUVEOUM1REEzMTBDNEY5QUUwMi9tRVBJa25lb0Vx dlgtdHExTFIxaDBuaTZLeGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMue+WguLM/6wpIdnKW3cRHGcbeOuPZUtAnVMG7UCQmxLDIAGyi5Ay zKj9TFAuvLBa/OrZx3iehvui5tGh6GuQxZPcS630O9o1u06WF4yCHm5Mx+LZLFki vaBt+OpTGEmjA0TQRou/OVH1NMJfxD5tvSTh4kVxM90vmsdaEzDggkIXWwnfZOsX YMXhZALQGhf2ryrQUnGeOQNioNImR4IrZyhI/yvzzvZdDPMkbDhDkXndeKhzKVuW aLyiArw0tlnajoaPGuNFPT/3DK/wVfrZ3DxcVuVSAk15jrV1WziRB0TiDMOTg/8U TMKTR1Wqr0uNE2dXCnTQO3Zd/TbEqRjD -----END CERTIFICATE-----Generated at Sat Apr 5 13:45:23 2025 by rpki-client