$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft File: EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft (raw, json) Hash identifier: 2nHEIW6nHnc+3mgSynd4pdYmHVYILtMsJM4S7IGtli0= Subject key identifier: BA:D1:F3:59:E3:AA:AA:D1:B4:1C:D5:07:DB:23:BF:01:78:33:CC:E4 Authority key identifier: 10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98 Certificate issuer: /CN=A914C10B/serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798 Certificate serial: 05DA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft Manifest number: 05D5 Signing time: Fri 04 Apr 2025 23:07:57 +0000 Manifest this update: Fri 04 Apr 2025 23:07:56 +0000 Manifest next update: Fri 11 Apr 2025 23:07:56 +0000 Files and hashes: 1: EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl (hash: hMrew98Iu62Mdr5YIgdalzNYKmRVP5U6SvgXHXM9Bjo=) 2: CFBB0C48B28A11EBB4CE6E70C4F9AE02.roa (hash: KeDjzKypgQHXzMMCw525U76eYPfXZKl/2OFa/SSqsKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1498 (0x5da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C10B Validity Not Before: Apr 4 23:07:56 2025 GMT Not After : Apr 11 23:07:56 2025 GMT Subject: CN=67f0664d-11e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d7:e8:7e:ed:57:22:b9:ca:8d:55:3a:e3:11: 84:ae:26:ca:ac:35:26:57:61:8a:06:f8:2f:2d:37: cf:0d:0b:6b:a1:88:be:d7:35:e4:d5:38:ed:fe:79: 56:01:53:19:be:46:82:a0:80:8a:17:39:82:b5:1d: 3b:8e:23:84:cb:f1:f0:0b:67:9d:8e:6c:4a:01:30: f8:53:df:44:92:37:29:31:f4:e4:db:58:4b:5b:63: 25:1e:e1:70:bd:45:ae:37:7f:b3:78:97:a7:03:98: 5c:16:0d:97:21:0b:0e:a3:04:58:da:7a:9d:44:44: b6:7b:7b:e4:b1:19:c1:40:48:0f:58:4b:9e:05:93: e4:48:dd:cb:2c:50:7f:62:65:86:1b:99:0d:b9:e3: 37:2d:ec:51:a5:18:52:5b:64:13:dd:52:6b:b2:26: d6:52:51:23:5a:2f:41:68:cb:20:9e:94:6a:6c:99: 7d:7a:8d:83:2f:b8:d0:5f:f4:6f:60:bd:1e:44:48: 61:c3:64:9f:7f:5b:60:9e:f2:95:fc:e5:5f:b0:6e: bf:49:b7:c6:d8:15:2d:04:d0:a9:d5:8b:14:95:a1: 26:e4:12:64:93:05:4b:8d:e3:92:4b:63:75:73:61: 96:a6:75:e7:a1:21:db:f1:ff:d4:28:8a:e6:2a:4e: 18:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D1:F3:59:E3:AA:AA:D1:B4:1C:D5:07:DB:23:BF:01:78:33:CC:E4 X509v3 Authority Key Identifier: keyid:10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:ba:56:98:f1:70:14:8c:0e:dd:01:7f:61:8c:5b:84:33:77: 47:43:5d:a5:e9:47:34:f1:7e:f9:fd:0e:32:49:b2:03:b3:19: 7c:a0:83:bf:3a:fe:9b:ff:46:b3:90:e0:a5:b1:34:34:19:ce: 91:f0:a6:f8:fd:90:bf:19:b5:b3:11:f8:68:e8:66:55:7f:70: 2b:26:11:a2:8b:b9:8c:57:7f:7f:58:49:e6:36:31:e3:e4:55: 54:f6:86:c6:e4:30:42:4d:0a:cd:19:25:c5:c0:2f:6f:dd:04: 22:5c:59:9f:33:40:1c:6c:66:60:9e:38:14:76:97:52:bc:b0: ad:50:44:21:1d:ff:4b:cf:78:dd:99:86:c8:f4:99:49:5f:97: ab:c7:af:37:9a:80:00:ca:fd:39:ec:2e:97:c2:c1:aa:2e:a6: 87:23:61:5a:ac:b8:34:63:4f:26:d5:b6:a4:61:f5:4a:04:7e: a2:5f:c1:a7:92:dd:c5:e7:16:59:52:a0:af:cf:db:d7:c4:10: a4:aa:f4:43:f9:77:cb:37:b8:db:a9:79:11:9a:51:41:e0:94: 43:14:c8:13:24:35:7f:77:0f:01:e9:c0:51:d5:b5:0a:df:8f: 37:b2:30:d2:ec:64:02:6d:02:16:0b:0b:bf:f8:80:80:1a:9d: 74:72:07:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMxMEIxMTAvBgNVBAUTKDEwOUNCNzFCNEY2NDE2NkYxRERBNDIyQ0VCNzIxRUUz RUQxOTY3OTgwHhcNMjUwNDA0MjMwNzU2WhcNMjUwNDExMjMwNzU2WjAYMRYwFAYD VQQDEw02N2YwNjY0ZC0xMWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxNfofu1XIrnKjVU64xGEribKrDUmV2GKBvgvLTfPDQtroYi+1zXk1Tjt/nlW AVMZvkaCoICKFzmCtR07jiOEy/HwC2edjmxKATD4U99EkjcpMfTk21hLW2MlHuFw vUWuN3+zeJenA5hcFg2XIQsOowRY2nqdRES2e3vksRnBQEgPWEueBZPkSN3LLFB/ YmWGG5kNueM3LexRpRhSW2QT3VJrsibWUlEjWi9BaMsgnpRqbJl9eo2DL7jQX/Rv YL0eREhhw2Sff1tgnvKV/OVfsG6/SbfG2BUtBNCp1YsUlaEm5BJkkwVLjeOSS2N1 c2GWpnXnoSHb8f/UKIrmKk4Y5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrR81nj qqrRtBzVB9sjvwF4M8zkMB8GA1UdIwQYMBaAFBCctxtPZBZvHdpCLOtyHuPtGWeY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzEwQi83MjMxQzNEQUFG NjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9FSnkzRzA5a0ZtOGQya0lzNjNJZTQtMFpa NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VKeTNHMDlrRm04ZDJrSXM2M0llNC0wWlo1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzEwQi83MjMxQzNEQUFGNjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9FSnkzRzA5a0Zt OGQya0lzNjNJZTQtMFpaNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTulaY8XAUjA7dAX9hjFuEM3dHQ12l6Uc08X75/Q4ySbIDsxl8oIO/ Ov6b/0azkOClsTQ0Gc6R8Kb4/ZC/GbWzEfho6GZVf3ArJhGii7mMV39/WEnmNjHj 5FVU9obG5DBCTQrNGSXFwC9v3QQiXFmfM0AcbGZgnjgUdpdSvLCtUEQhHf9Lz3jd mYbI9JlJX5erx683moAAyv057C6XwsGqLqaHI2FarLg0Y08m1bakYfVKBH6iX8Gn kt3F5xZZUqCvz9vXxBCkqvRD+XfLN7jbqXkRmlFB4JRDFMgTJDV/dw8B6cBR1bUK 3483sjDS7GQCbQIWCwu/+ICAGp10cgeI -----END CERTIFICATE-----Generated at Sat Apr 5 21:29:06 2025 by rpki-client