$ rpki-client -vvf rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/EAiP7ctRWnPwDu3X7GDodfnfCvY.mft File: EAiP7ctRWnPwDu3X7GDodfnfCvY.mft (raw, json) Hash identifier: QRdUAB4gl1M4ETKDRWshAHK1IDcwbu/Yjoad8wPztwo= Subject key identifier: AD:AD:F0:E2:5B:2C:72:91:DF:8A:15:A8:06:7D:E1:E8:ED:E1:EB:36 Authority key identifier: 10:08:8F:ED:CB:51:5A:73:F0:0E:ED:D7:EC:60:E8:75:F9:DF:0A:F6 Certificate issuer: /CN=A9163BFD/serialNumber=10088FEDCB515A73F00EEDD7EC60E875F9DF0AF6 Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAiP7ctRWnPwDu3X7GDodfnfCvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/EAiP7ctRWnPwDu3X7GDodfnfCvY.mft Manifest number: 0116 Signing time: Sat 19 Apr 2025 04:00:46 +0000 Manifest this update: Sat 19 Apr 2025 04:00:46 +0000 Manifest next update: Sat 26 Apr 2025 04:00:46 +0000 Files and hashes: 1: EAiP7ctRWnPwDu3X7GDodfnfCvY.crl (hash: fF7GUv3Ax+ypbIk5XmW7uPANLo7xJpuKKgUrHAzS7YY=) 2: 29D7838672F611EEB309873EC4F9AE02.roa (hash: zu5oTBlWmiRJc0JKeXclVvx/PdtKlnfyN23W6szZl1s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/EAiP7ctRWnPwDu3X7GDodfnfCvY.crl rsync://rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/EAiP7ctRWnPwDu3X7GDodfnfCvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAiP7ctRWnPwDu3X7GDodfnfCvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 04:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163BFD, serialNumber=10088FEDCB515A73F00EEDD7EC60E875F9DF0AF6 Validity Not Before: Apr 19 04:00:46 2025 GMT Not After : Apr 26 04:00:46 2025 GMT Subject: CN=68031fee-0ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c2:56:e1:f3:99:13:5f:7d:e6:c7:55:db:42: 78:69:76:9e:e9:c1:64:61:27:34:d1:4b:87:3d:7d: 03:86:2c:8c:48:1a:bd:dd:b9:a3:56:04:48:5e:de: ca:d2:ef:69:fd:b3:ac:45:74:e3:38:03:73:c5:ce: 7f:57:82:7e:c1:a8:a2:36:c2:13:82:c5:df:bb:e2: c3:9c:a6:63:3d:34:18:f5:98:8e:59:bb:52:ef:9f: 55:ea:81:b8:ec:34:82:79:b2:8f:3d:0f:58:1c:f2: 9c:ff:fb:84:5c:3a:33:fe:71:cf:7c:bb:20:c5:bb: 23:4a:a2:44:43:9d:cf:72:2d:f9:ac:21:4f:86:4c: 19:6f:85:45:1a:07:d1:89:92:76:90:73:5f:5c:f8: f5:5a:b2:46:19:84:8c:a1:4d:da:7d:1c:db:86:d8: 0b:52:67:06:7c:3b:21:fa:91:0d:ce:41:2e:fd:89: 46:77:9a:eb:9c:f1:29:d8:c5:e6:0c:77:0c:34:74: e9:44:59:97:ac:0f:5e:95:d5:f1:53:62:bc:1d:7a: 9d:eb:ff:bf:8f:72:2a:25:b6:07:68:32:02:ad:a5: 42:78:89:cf:08:9e:44:4a:c6:fc:c0:4a:4a:4f:89: fb:68:5d:fb:12:ff:bd:7a:7d:f2:fd:eb:15:57:ef: c0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:AD:F0:E2:5B:2C:72:91:DF:8A:15:A8:06:7D:E1:E8:ED:E1:EB:36 X509v3 Authority Key Identifier: keyid:10:08:8F:ED:CB:51:5A:73:F0:0E:ED:D7:EC:60:E8:75:F9:DF:0A:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/EAiP7ctRWnPwDu3X7GDodfnfCvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAiP7ctRWnPwDu3X7GDodfnfCvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/EAiP7ctRWnPwDu3X7GDodfnfCvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:46:04:36:48:e7:db:c8:c9:df:94:d0:33:01:48:44:7c:6d: 8e:70:b4:7f:24:e1:06:4b:e4:6f:6d:f0:bf:05:8d:01:9f:b6: b9:2b:95:bd:cc:17:19:dd:1b:98:6f:62:10:a8:8e:28:71:f3: 65:1f:0c:e9:25:0a:4d:84:09:5a:07:8a:63:d3:be:b3:54:7c: 07:eb:8e:f0:81:e5:a7:0a:3c:5a:dd:b6:5f:c1:6f:95:b2:12: b2:eb:23:e1:e8:2e:47:b9:57:08:8d:85:cd:a2:fc:f6:65:6b: 72:fc:be:9a:88:8c:e9:bf:3c:fe:31:fe:44:02:bc:f5:cf:df: e7:9f:dd:dc:b8:b1:a2:35:78:ff:07:00:a8:ad:ad:6c:59:3a: 59:20:fb:66:51:9b:91:b3:0f:a7:9b:e6:81:26:0c:24:10:f5: 43:ce:36:68:be:76:22:57:af:53:87:f8:da:84:39:ab:47:ff: e7:0d:16:05:45:4e:51:6d:ad:80:33:5e:d9:fc:a5:c3:43:67: bd:e1:fd:6b:01:64:59:01:b8:60:96:ad:c7:ea:c8:2e:d4:fb: 7f:a1:9b:45:67:81:05:db:99:af:56:f6:c2:5b:96:06:d2:81: eb:80:d1:d5:cf:c8:c6:b5:e8:64:80:b8:a7:58:1b:7c:ab:d8: 60:fc:eb:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNCRkQxMTAvBgNVBAUTKDEwMDg4RkVEQ0I1MTVBNzNGMDBFRUREN0VDNjBFODc1 RjlERjBBRjYwHhcNMjUwNDE5MDQwMDQ2WhcNMjUwNDI2MDQwMDQ2WjAYMRYwFAYD VQQDEw02ODAzMWZlZS0wZWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAncJW4fOZE1995sdV20J4aXae6cFkYSc00UuHPX0DhiyMSBq93bmjVgRIXt7K 0u9p/bOsRXTjOANzxc5/V4J+waiiNsITgsXfu+LDnKZjPTQY9ZiOWbtS759V6oG4 7DSCebKPPQ9YHPKc//uEXDoz/nHPfLsgxbsjSqJEQ53Pci35rCFPhkwZb4VFGgfR iZJ2kHNfXPj1WrJGGYSMoU3afRzbhtgLUmcGfDsh+pENzkEu/YlGd5rrnPEp2MXm DHcMNHTpRFmXrA9eldXxU2K8HXqd6/+/j3IqJbYHaDICraVCeInPCJ5ESsb8wEpK T4n7aF37Ev+9en3y/esVV+/A6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2t8OJb LHKR34oVqAZ94ejt4es2MB8GA1UdIwQYMBaAFBAIj+3LUVpz8A7t1+xg6HX53wr2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0JGRC84NThGOUFBQzcy RjUxMUVFODAxQ0M4M0NDNEY5QUUwMi9FQWlQN2N0UlduUHdEdTNYN0dEb2RmbmZD dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBaVA3Y3RSV25Qd0R1M1g3R0RvZGZuZkN2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0JGRC84NThGOUFBQzcyRjUxMUVFODAxQ0M4M0NDNEY5QUUwMi9FQWlQN2N0Uldu UHdEdTNYN0dEb2RmbmZDdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2RgQ2SOfbyMnflNAzAUhEfG2OcLR/JOEGS+RvbfC/BY0Bn7a5K5W9 zBcZ3RuYb2IQqI4ocfNlHwzpJQpNhAlaB4pj076zVHwH647wgeWnCjxa3bZfwW+V shKy6yPh6C5HuVcIjYXNovz2ZWty/L6aiIzpvzz+Mf5EArz1z9/nn93cuLGiNXj/ BwCora1sWTpZIPtmUZuRsw+nm+aBJgwkEPVDzjZovnYiV69Th/jahDmrR//nDRYF RU5Rba2AM17Z/KXDQ2e94f1rAWRZAbhglq3H6sgu1Pt/oZtFZ4EF25mvVvbCW5YG 0oHrgNHVz8jGtehkgLinWBt8q9hg/OuC -----END CERTIFICATE-----Generated at Sun Apr 20 22:36:09 2025 by rpki-client