$ rpki-client -vvf rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft File: eOQpC8zJmRWAsnbcDCyXv7CGINg.mft (raw, json) Hash identifier: 7h203EjbRpVFBgaibxLSdvk0uikldIWNi+FcdXZt/JQ= Subject key identifier: F0:38:6E:2F:47:80:9A:10:19:CE:FD:2C:E0:AF:89:B5:72:D6:9F:FF Authority key identifier: 78:E4:29:0B:CC:C9:99:15:80:B2:76:DC:0C:2C:97:BF:B0:86:20:D8 Certificate issuer: /CN=A914B79F/serialNumber=78E4290BCCC9991580B276DC0C2C97BFB08620D8 Certificate serial: 012F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft Manifest number: 0129 Signing time: Sat 29 Mar 2025 04:04:52 +0000 Manifest this update: Sat 29 Mar 2025 04:04:51 +0000 Manifest next update: Sat 05 Apr 2025 04:04:51 +0000 Files and hashes: 1: eOQpC8zJmRWAsnbcDCyXv7CGINg.crl (hash: Wf0jNkidbinUWEWAE1Umi8ykGQlDmfp3QdTJQ5xwgiw=) 2: 071BCFF849D011EF9F8A8969C4F9AE02.roa (hash: ta+wizYmG5Li1UNdnV+RjnG6RQDSQFnDtjBK6l15sJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.crl rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B79F Validity Not Before: Mar 29 04:04:51 2025 GMT Not After : Apr 5 04:04:51 2025 GMT Subject: CN=67e77163-6c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:48:13:dd:c1:f4:53:8b:c9:37:28:9c:70:f6: 3c:ef:84:41:5b:45:6f:47:60:43:b2:2c:58:f5:8a: a6:8f:6e:c1:ce:bd:6c:54:7a:4b:bd:6a:25:f1:05: a5:15:c7:46:51:9e:63:fb:94:b5:40:5e:1c:53:a6: b5:28:99:f8:7d:ac:54:65:96:6d:b6:9c:d6:11:56: 72:14:e3:ff:e5:d9:0c:d2:d5:71:b1:b3:d0:f8:bf: 67:fd:93:bf:85:4f:fb:44:60:cf:bf:b6:4b:6a:98: c7:39:e6:ea:57:c8:92:7e:8d:04:d7:95:9c:26:55: 89:f8:eb:2a:bb:c2:77:9d:a0:5d:cf:fa:00:98:e1: ea:4a:8a:47:2c:1f:52:c3:d1:1b:45:ca:26:7e:88: b7:3a:c4:ab:98:e9:71:2a:08:c2:60:73:a8:da:00: 4b:2b:8d:42:ec:08:bb:b1:51:5f:4a:57:78:18:02: 27:d0:6c:96:18:a3:d3:90:e5:7d:d1:e4:35:25:67: a0:e5:df:ad:04:f9:18:50:09:15:2d:13:56:a9:54: 1f:83:aa:34:18:b3:65:11:e8:75:3d:46:bf:cc:9d: ba:32:03:48:4c:b2:6b:1a:59:3b:20:0e:89:bd:6d: 6a:29:64:39:1a:08:58:ce:ac:9a:d5:64:c0:d4:11: 75:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:38:6E:2F:47:80:9A:10:19:CE:FD:2C:E0:AF:89:B5:72:D6:9F:FF X509v3 Authority Key Identifier: keyid:78:E4:29:0B:CC:C9:99:15:80:B2:76:DC:0C:2C:97:BF:B0:86:20:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d5:db:58:bd:e0:6e:b3:ed:8f:05:f6:4f:ac:28:ea:73:7a: 62:fa:31:9a:4a:cf:f1:6b:35:a4:65:a6:9a:e8:ce:e6:6d:55: 8d:6e:5a:a2:09:5e:88:2d:70:88:90:b8:ac:c6:ec:52:87:69: 86:77:17:51:12:08:79:52:ff:75:a1:5b:97:86:24:8d:d1:5c: 0a:d2:69:40:74:9f:ee:c3:5a:5d:6a:62:8c:95:af:aa:66:c9: a1:8e:93:66:9c:d1:90:bc:f6:47:ab:cd:00:82:5b:26:a2:37: c6:1e:45:18:10:c1:d5:94:e8:f9:f5:14:da:88:d2:11:cc:00: 04:1b:1a:d8:12:e8:04:fd:1d:ea:d4:07:50:cb:d6:8e:34:f6: 51:a8:64:28:77:25:d5:e7:1d:10:c1:84:b2:78:dc:e6:45:3e: 5f:9f:80:4d:fe:25:e0:b7:46:9b:02:29:6c:07:9a:38:7f:09: 42:bd:69:ce:2a:dc:d3:09:87:b2:b1:c3:01:d0:2f:18:62:25: b0:ad:f6:93:89:22:45:08:3e:34:e6:4a:e5:7d:04:86:86:d1: 61:5c:c8:1c:e9:10:e7:3c:94:25:dd:b0:f2:46:0f:5b:73:25: 7c:0f:39:66:15:07:a5:8e:65:21:e1:95:16:05:3c:dc:52:e9: 2c:13:a8:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI3OUYxMTAvBgNVBAUTKDc4RTQyOTBCQ0NDOTk5MTU4MEIyNzZEQzBDMkM5N0JG QjA4NjIwRDgwHhcNMjUwMzI5MDQwNDUxWhcNMjUwNDA1MDQwNDUxWjAYMRYwFAYD VQQDEw02N2U3NzE2My02YzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA20gT3cH0U4vJNyiccPY874RBW0VvR2BDsixY9Yqmj27Bzr1sVHpLvWol8QWl FcdGUZ5j+5S1QF4cU6a1KJn4faxUZZZttpzWEVZyFOP/5dkM0tVxsbPQ+L9n/ZO/ hU/7RGDPv7ZLapjHOebqV8iSfo0E15WcJlWJ+Osqu8J3naBdz/oAmOHqSopHLB9S w9EbRcomfoi3OsSrmOlxKgjCYHOo2gBLK41C7Ai7sVFfSld4GAIn0GyWGKPTkOV9 0eQ1JWeg5d+tBPkYUAkVLRNWqVQfg6o0GLNlEeh1PUa/zJ26MgNITLJrGlk7IA6J vW1qKWQ5GghYzqya1WTA1BF1SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPA4bi9H gJoQGc79LOCvibVy1p//MB8GA1UdIwQYMBaAFHjkKQvMyZkVgLJ23Awsl7+whiDY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Qjc5Ri9EQTY4MzdGMDRF MjkxMUVFOTQ1QzM5NEZDNEY5QUUwMi9lT1FwQzh6Sm1SV0FzbmJjREN5WHY3Q0dJ TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VPUXBDOHpKbVJXQXNuYmNEQ3lYdjdDR0lOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Qjc5Ri9EQTY4MzdGMDRFMjkxMUVFOTQ1QzM5NEZDNEY5QUUwMi9lT1FwQzh6Sm1S V0FzbmJjREN5WHY3Q0dJTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc1dtYveBus+2PBfZPrCjqc3pi+jGaSs/xazWkZaaa6M7mbVWNblqi CV6ILXCIkLisxuxSh2mGdxdREgh5Uv91oVuXhiSN0VwK0mlAdJ/uw1pdamKMla+q ZsmhjpNmnNGQvPZHq80AglsmojfGHkUYEMHVlOj59RTaiNIRzAAEGxrYEugE/R3q 1AdQy9aONPZRqGQodyXV5x0QwYSyeNzmRT5fn4BN/iXgt0abAilsB5o4fwlCvWnO KtzTCYeyscMB0C8YYiWwrfaTiSJFCD405krlfQSGhtFhXMgc6RDnPJQl3bDyRg9b cyV8DzlmFQeljmUh4ZUWBTzcUuksE6hk -----END CERTIFICATE-----Generated at Fri Apr 4 22:00:30 2025 by rpki-client