$ rpki-client -vvf rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft File: MOCAPeumAKyakmRMlveKjohdfFA.mft (raw, json) Hash identifier: d/TeSt2I25F+sXjeyhuEc9bH1HUifW/3SRdKiacbhMg= Subject key identifier: 46:15:82:89:6D:63:7A:C8:42:3F:52:FB:4C:60:88:B2:CD:36:9B:FA Authority key identifier: 30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50 Certificate issuer: /CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50 Certificate serial: 0526 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft Manifest number: 050C Signing time: Fri 04 Apr 2025 23:47:53 +0000 Manifest this update: Fri 04 Apr 2025 23:47:52 +0000 Manifest next update: Fri 11 Apr 2025 23:47:52 +0000 Files and hashes: 1: MOCAPeumAKyakmRMlveKjohdfFA.crl (hash: HriJogYjmYjbPU99bs3Pr+IGEqC0WdLdBvlPBX1fjp0=) 2: 7A532A308E1D11EE9CC5535CC4F9AE02.roa (hash: /+OweeXh479/cD9G0b5e+2Jv53y0ihaHpeHFAQKxiuY=) 3: 04A930F6629211EE90D5AD6CC4F9AE02.roa (hash: MzCxa5//voyTa1PWfOUraFYhl6MRI6DeuUFpM68sXZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1318 (0x526) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CEE3 Validity Not Before: Apr 4 23:47:52 2025 GMT Not After : Apr 11 23:47:52 2025 GMT Subject: CN=67f06fa8-1bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:96:ca:99:2f:f0:26:4b:17:0c:2d:32:df:a6: 1c:6d:8e:c6:42:20:7b:d2:c5:9d:f3:d8:ca:68:90: fe:86:d5:d3:9b:07:ee:29:05:e0:a5:c1:32:1b:cc: fe:20:d4:df:83:9e:8a:a3:3b:ac:42:a8:9c:eb:12: b5:30:4f:2e:4a:be:cc:37:51:fa:d1:e8:5e:5a:8f: 14:ba:22:2e:cd:bc:6a:29:87:2b:0b:44:5f:5d:0b: d7:06:c4:1d:a7:96:84:81:32:a2:4d:53:da:8d:1d: bb:73:7d:54:56:e0:e6:40:da:98:0f:7f:13:f2:43: 72:a1:da:2a:19:e6:e3:5d:5d:22:3f:66:e1:41:d2: 60:b9:b9:35:35:61:d7:fc:89:9e:57:13:21:de:86: 07:08:a9:86:51:74:ca:9c:e2:67:8e:3e:b1:69:ac: e9:b1:6b:30:b7:9b:10:24:4e:aa:26:bf:6d:74:6d: e3:78:29:6c:73:b7:e4:44:de:64:76:7c:2a:1e:f6: c4:85:7b:13:d0:1b:20:da:97:12:15:d4:e2:f1:9a: 24:66:58:c0:47:21:f6:7e:0d:0f:95:40:6c:53:48: ea:fc:23:f5:e4:eb:8a:ae:80:ad:19:01:c7:8c:bf: be:dc:29:d3:77:77:9d:c5:01:90:d3:16:8c:4c:83: 3b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:15:82:89:6D:63:7A:C8:42:3F:52:FB:4C:60:88:B2:CD:36:9B:FA X509v3 Authority Key Identifier: keyid:30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:aa:23:c5:03:e7:7d:78:b6:19:2a:fa:d2:f6:88:d2:74:71: 54:04:69:5e:e9:72:99:77:a7:c5:9b:99:6a:b4:7e:31:9a:1c: e9:a4:6b:8a:bd:f8:04:80:75:63:39:e3:2a:17:c6:a6:c0:2d: 20:26:d6:4d:d9:bf:be:95:35:47:a1:24:9f:02:77:97:67:b5: 19:d8:c9:12:ad:ea:9e:be:df:4c:62:2a:25:e1:3e:0e:70:6b: 2c:ef:4c:ba:2e:f6:94:09:a1:2c:61:f2:a3:72:97:5b:5d:fd: ff:eb:03:19:9b:05:62:63:62:c7:f2:41:1f:cd:76:50:58:f4: b6:34:eb:d4:da:b2:f6:bd:6c:64:27:c5:b4:02:d6:b6:44:0b: be:cb:df:a3:1a:dc:c3:ba:cc:95:9e:82:e7:34:73:75:b2:fc: 4e:67:01:c1:14:5f:25:1a:f0:11:43:cc:23:2e:9d:1c:b6:c3: b7:7a:0c:b3:59:79:ff:bb:74:d6:59:01:36:a0:50:19:81:4f: e2:65:5c:90:63:37:d2:e6:6c:b9:ad:e8:ae:f0:93:01:f6:77: d3:72:ad:35:7e:d7:92:7f:91:d3:90:17:d7:b0:19:d3:de:2b: a0:a0:95:d3:06:d0:df:69:e8:1c:73:18:49:34:fd:ab:0d:ba: 36:5b:bb:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NFRTMxMTAvBgNVBAUTKDMwRTA4MDNERUJBNjAwQUM5QTkyNjQ0Qzk2Rjc4QThF ODg1RDdDNTAwHhcNMjUwNDA0MjM0NzUyWhcNMjUwNDExMjM0NzUyWjAYMRYwFAYD VQQDEw02N2YwNmZhOC0xYmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspbKmS/wJksXDC0y36YcbY7GQiB70sWd89jKaJD+htXTmwfuKQXgpcEyG8z+ INTfg56KozusQqic6xK1ME8uSr7MN1H60eheWo8UuiIuzbxqKYcrC0RfXQvXBsQd p5aEgTKiTVPajR27c31UVuDmQNqYD38T8kNyodoqGebjXV0iP2bhQdJgubk1NWHX /ImeVxMh3oYHCKmGUXTKnOJnjj6xaazpsWswt5sQJE6qJr9tdG3jeClsc7fkRN5k dnwqHvbEhXsT0Bsg2pcSFdTi8ZokZljARyH2fg0PlUBsU0jq/CP15OuKroCtGQHH jL++3CnTd3edxQGQ0xaMTIM7KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEYVgolt Y3rIQj9S+0xgiLLNNpv6MB8GA1UdIwQYMBaAFDDggD3rpgCsmpJkTJb3io6IXXxQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0VFMy85QTc3QUEyQTA1 OTQxMUVDOUY2NDY4NTRDNEY5QUUwMi9NT0NBUGV1bUFLeWFrbVJNbHZlS2pvaGRm RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PQ0FQZXVtQUt5YWttUk1sdmVLam9oZGZGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0VFMy85QTc3QUEyQTA1OTQxMUVDOUY2NDY4NTRDNEY5QUUwMi9NT0NBUGV1bUFL eWFrbVJNbHZlS2pvaGRmRkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTqiPFA+d9eLYZKvrS9ojSdHFUBGle6XKZd6fFm5lqtH4xmhzppGuK vfgEgHVjOeMqF8amwC0gJtZN2b++lTVHoSSfAneXZ7UZ2MkSreqevt9MYiol4T4O cGss70y6LvaUCaEsYfKjcpdbXf3/6wMZmwViY2LH8kEfzXZQWPS2NOvU2rL2vWxk J8W0Ata2RAu+y9+jGtzDusyVnoLnNHN1svxOZwHBFF8lGvARQ8wjLp0ctsO3egyz WXn/u3TWWQE2oFAZgU/iZVyQYzfS5my5reiu8JMB9nfTcq01fteSf5HTkBfXsBnT 3iugoJXTBtDfaegccxhJNP2rDbo2W7vk -----END CERTIFICATE-----Generated at Sun Apr 6 12:04:43 2025 by rpki-client