$ rpki-client -vvf rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft File: eo-Oag5Y9XX8feHNg4R51_c_4nk.mft (raw, json) Hash identifier: LRqhLwVd56gzElcsb3bWfRtUdZ/XxCbTOx6b7GfAtLk= Subject key identifier: 2C:EB:CA:DC:FE:80:9F:50:3C:63:F5:B7:C2:B2:E4:DF:CC:4E:01:4A Authority key identifier: 7A:8F:8E:6A:0E:58:F5:75:FC:7D:E1:CD:83:84:79:D7:F7:3F:E2:79 Certificate issuer: /CN=A91775B7/serialNumber=7A8F8E6A0E58F575FC7DE1CD838479D7F73FE279 Certificate serial: 3484 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eo-Oag5Y9XX8feHNg4R51_c_4nk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft Manifest number: 3477 Signing time: Fri 04 Apr 2025 15:08:25 +0000 Manifest this update: Fri 04 Apr 2025 15:08:25 +0000 Manifest next update: Fri 11 Apr 2025 15:08:25 +0000 Files and hashes: 1: eo-Oag5Y9XX8feHNg4R51_c_4nk.crl (hash: uQnTYd/H3XsKWqnvu6vjInYmLQ8P7DWMk7rAIxJwYgU=) 2: 92210D6AB66711EC86445C11C4F9AE02.roa (hash: d5k3YRL/FAKw8Wd7VKIcrrwAMtmamoxhcmJJDByEkkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.crl rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eo-Oag5Y9XX8feHNg4R51_c_4nk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13444 (0x3484) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91775B7 Validity Not Before: Apr 4 15:08:25 2025 GMT Not After : Apr 11 15:08:25 2025 GMT Subject: CN=67eff5e9-96d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:61:89:7b:5a:c4:03:1a:2c:f8:15:41:a6:bd: d1:62:85:4b:72:e2:86:55:20:91:46:29:04:e4:bb: a5:ed:a8:0a:5d:f5:47:40:dc:04:46:3b:18:73:2b: 1a:1f:fd:44:e3:c5:3f:34:31:19:34:c8:bb:df:00: 1c:90:94:a3:43:23:2c:e6:f1:97:f8:e7:8d:0a:a1: 58:3f:23:a9:7e:52:18:75:b7:79:4d:66:15:9f:bc: ca:7f:52:93:55:46:3f:89:9d:80:26:b8:6e:49:de: de:fc:7d:5f:0b:85:61:0a:c4:a9:bd:63:94:da:af: 0d:d5:d9:37:3e:a7:85:c6:c1:b4:dd:66:6d:3b:90: 8c:d4:1e:1b:15:05:59:0a:df:7d:d7:d2:b3:01:9a: 17:b9:42:5a:4c:9b:66:e5:e1:b6:db:ae:0c:1e:21: 70:40:c4:09:a3:05:ae:a8:6c:d7:29:ea:a8:7b:0b: 7a:0a:b1:b2:bd:aa:cc:37:30:8a:c5:71:86:ba:a8: dc:19:5d:6a:55:e4:7c:89:0e:b0:9e:52:da:36:eb: c8:e3:6a:01:aa:8c:45:db:6d:48:ef:41:f0:94:49: 18:ca:21:b2:66:18:81:79:9a:ff:f7:85:5b:79:b1: d8:f4:9d:19:8c:09:8f:07:d1:58:1f:22:7d:0f:b3: 25:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:EB:CA:DC:FE:80:9F:50:3C:63:F5:B7:C2:B2:E4:DF:CC:4E:01:4A X509v3 Authority Key Identifier: keyid:7A:8F:8E:6A:0E:58:F5:75:FC:7D:E1:CD:83:84:79:D7:F7:3F:E2:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eo-Oag5Y9XX8feHNg4R51_c_4nk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d1:20:20:c4:ff:48:51:6b:59:19:ab:c4:1e:ba:cf:c5:37: 6d:6f:b2:ac:fa:94:80:33:97:bb:31:3c:c9:f8:59:80:fa:d1: 57:50:5e:88:ab:91:97:8d:8c:f4:84:51:b6:56:45:60:ed:b3: 77:4c:a5:d5:65:6e:9c:db:65:64:31:b8:6a:be:ec:6e:0e:8f: 29:9b:89:bd:1f:df:49:8b:c9:45:f5:17:f4:47:5c:a3:08:45: a1:da:f3:8e:b2:f4:06:27:34:70:cb:f2:70:0f:f4:d9:23:e3: 3d:f7:55:5f:c6:70:52:cc:27:b4:26:a7:42:29:ba:e8:bf:f2: 9e:d6:5c:d0:50:6c:d0:46:a8:21:10:ab:40:aa:23:f1:24:53: 13:e6:77:2e:a4:90:63:a7:40:62:20:66:ad:2b:66:d2:ea:bf: 61:0b:51:f0:60:24:93:45:c6:6c:80:89:c8:ed:51:f4:cb:af: 61:67:46:8c:e8:70:e3:6a:bb:76:2d:16:af:c1:74:5b:df:54: f6:df:d4:9d:87:97:10:2c:f0:8d:2e:6e:48:86:56:a7:a9:b2: e0:bc:dd:77:d3:68:38:27:3d:8b:52:1e:66:a2:bb:00:c3:4b: 15:24:72:99:17:ae:9a:5b:49:d5:cb:33:93:7b:62:91:2f:ec: 8a:59:9c:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc1QjcxMTAvBgNVBAUTKDdBOEY4RTZBMEU1OEY1NzVGQzdERTFDRDgzODQ3OUQ3 RjczRkUyNzkwHhcNMjUwNDA0MTUwODI1WhcNMjUwNDExMTUwODI1WjAYMRYwFAYD VQQDEw02N2VmZjVlOS05NmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2GJe1rEAxos+BVBpr3RYoVLcuKGVSCRRikE5Lul7agKXfVHQNwERjsYcysa H/1E48U/NDEZNMi73wAckJSjQyMs5vGX+OeNCqFYPyOpflIYdbd5TWYVn7zKf1KT VUY/iZ2AJrhuSd7e/H1fC4VhCsSpvWOU2q8N1dk3PqeFxsG03WZtO5CM1B4bFQVZ Ct9919KzAZoXuUJaTJtm5eG2264MHiFwQMQJowWuqGzXKeqoewt6CrGyvarMNzCK xXGGuqjcGV1qVeR8iQ6wnlLaNuvI42oBqoxF221I70HwlEkYyiGyZhiBeZr/94Vb ebHY9J0ZjAmPB9FYHyJ9D7MlIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzrytz+ gJ9QPGP1t8Ky5N/MTgFKMB8GA1UdIwQYMBaAFHqPjmoOWPV1/H3hzYOEedf3P+J5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzVCNy8wOEE0OUJEMjFE QTIxMUUyOTM2NDk1OTQwOEIwMkNEMi9lby1PYWc1WTlYWDhmZUhOZzRSNTFfY180 bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VvLU9hZzVZOVhYOGZlSE5nNFI1MV9jXzRuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzVCNy8wOEE0OUJEMjFEQTIxMUUyOTM2NDk1OTQwOEIwMkNEMi9lby1PYWc1WTlY WDhmZUhOZzRSNTFfY180bmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK0SAgxP9IUWtZGavEHrrPxTdtb7Ks+pSAM5e7MTzJ+FmA+tFXUF6I q5GXjYz0hFG2VkVg7bN3TKXVZW6c22VkMbhqvuxuDo8pm4m9H99Ji8lF9Rf0R1yj CEWh2vOOsvQGJzRwy/JwD/TZI+M991VfxnBSzCe0JqdCKbrov/Ke1lzQUGzQRqgh EKtAqiPxJFMT5ncupJBjp0BiIGatK2bS6r9hC1HwYCSTRcZsgInI7VH0y69hZ0aM 6HDjart2LRavwXRb31T239Sdh5cQLPCNLm5IhlanqbLgvN1302g4Jz2LUh5morsA w0sVJHKZF66aW0nVyzOTe2KRL+yKWZzo -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:08 2025 by rpki-client