$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft File: 7euW8EyNPtzL7rpAxCQpIqgTa1M.mft (raw, json) Hash identifier: jmGBPFSoyL5ZN+D+hAmKF4UjX8kQtX1XLUV2ChrwmAs= Subject key identifier: 70:7E:C3:54:6F:AC:F3:E1:5B:79:3C:78:FB:2C:C5:C7:B2:0A:D0:A2 Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 Certificate issuer: /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Certificate serial: 06EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft Manifest number: 06AD Signing time: Wed 02 Apr 2025 22:18:57 +0000 Manifest this update: Wed 02 Apr 2025 22:18:57 +0000 Manifest next update: Wed 09 Apr 2025 22:18:57 +0000 Files and hashes: 1: 7euW8EyNPtzL7rpAxCQpIqgTa1M.crl (hash: bvWD7kdaNNwnbVF4LZ0ZcXV1M00J1rZrw1EvLh5D3J8=) 2: 065B926242FA11EDA305BE3EC4F9AE02.roa (hash: 2ATW6BMDSVhZS9dAhj+ZOS0wEMyX3D645t1IHArpIR4=) 3: B4A1A1BC82D711EF8AAD827BC4F9AE02.roa (hash: jxX9pWxym62zUE7mpjan3Q8B/cPzXvD6g5Zb95xVXGc=) 4: 4D9E29A8305311EF9CFFF238C4F9AE02.roa (hash: qb3BJ6VPum0N37Y3mFlLsJHFaKFgEm26RoLZ15Rsubo=) 5: 5B096332BFDF11EC89ECF37BC4F9AE02.roa (hash: KwSrdUrsoFTrnFecXKL/1/hTJOcsdGlQTW0JfcT6/k4=) 6: EEBCC3028A7711EFBB6F4557C4F9AE02.roa (hash: wnhXyLSk1dHMmO9DzYtPASbLdH1BIyvsIkNZQJaPGG0=) 7: 4EDC52B27B3B11EFAF3B4433C4F9AE02.roa (hash: OfxHrVeBEOJWK/8VYNhuau5CqqrlskUO+d6ZSMFXMxU=) 8: 501915BA8A7811EF90D24F15C4F9AE02.roa (hash: OA2ko99bBHxJOXM8VQ03Oiibc5MqjzJixcg4DbTwTWk=) 9: 78287A4A8F9311EE9CC9E648C4F9AE02.roa (hash: rST+VyBGVPTMT2nSSTzmEE2Q3+Fy5/2QhXmo+jgtE/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 22:18:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1774 (0x6ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1FE Validity Not Before: Apr 2 22:18:57 2025 GMT Not After : Apr 9 22:18:57 2025 GMT Subject: CN=67edb7d1-d635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:28:46:9c:ad:31:23:37:84:f5:7b:4a:18:e1: e3:7d:f7:1f:99:51:f7:f2:7b:42:38:98:00:53:48: 9b:4f:23:b9:e2:f2:92:24:02:0f:eb:1a:a0:22:8a: 3c:c7:16:c3:24:bc:30:0c:18:e5:f1:d5:35:44:2c: c7:23:12:0c:dd:e5:a5:ce:d2:4b:b0:00:18:bb:95: 85:96:b4:0f:4b:a3:f9:2d:1b:e4:fb:3a:44:a9:b4: 86:f0:af:6b:c6:89:ce:8f:f0:a7:ee:48:a4:64:d5: e5:20:59:69:2f:42:c3:06:50:6d:8d:49:e9:db:9a: 42:57:5e:16:9f:2e:71:4b:54:9f:8d:df:11:41:4f: 97:09:e3:cc:9f:35:d4:1a:7c:65:bc:e0:aa:e3:74: 38:ef:fb:ca:fa:cd:94:19:c3:03:f2:c7:68:bf:4b: 79:91:e8:a2:d1:f5:90:3b:bb:9e:f8:0e:f7:f3:64: d8:ea:22:86:50:ca:7e:d1:05:d6:ce:0f:42:7f:ba: 85:22:0d:7d:a6:7e:de:d8:17:cd:03:31:46:39:1d: bd:bf:f5:ae:e3:36:d3:89:3e:98:61:72:01:23:3b: d2:16:d6:42:27:36:5a:6e:54:22:44:86:44:7d:f0: 57:9d:bd:f9:6c:07:53:d6:04:ee:19:2c:b6:f3:7e: d4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7E:C3:54:6F:AC:F3:E1:5B:79:3C:78:FB:2C:C5:C7:B2:0A:D0:A2 X509v3 Authority Key Identifier: keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:92:db:13:fb:e5:1f:9b:c9:15:74:62:56:67:31:67:75:ca: a3:db:e6:ff:3b:46:ad:49:ed:af:35:d3:37:bc:ac:f6:c6:b5: d1:ea:81:ed:10:dd:ad:64:90:0e:34:11:a7:10:28:f4:8c:91: c7:3f:44:af:32:22:ff:03:22:dd:c8:e2:52:be:6e:4e:39:eb: e0:aa:df:01:34:30:9c:fb:27:2c:e5:5c:0d:1d:44:d3:31:ee: 23:4b:22:48:98:18:ad:e6:fd:9f:8c:56:6d:b6:1b:af:0a:f2: bb:37:9f:b2:39:62:41:6b:5c:db:57:ea:53:7b:da:ae:09:a5: 45:92:c6:e0:38:ae:3a:72:37:9f:77:66:d9:c8:86:64:64:fa: d4:d7:e0:4f:44:a9:bc:76:d6:ff:5a:95:7b:77:d7:94:26:d3: 1b:b9:bf:c7:a6:aa:36:3f:6f:f7:e5:92:03:01:12:a8:cd:09: ed:67:83:f2:0c:c5:a5:43:af:07:9d:1b:c3:3a:51:38:2f:f9: 39:a8:b6:b7:bf:5f:d3:5c:46:d6:60:4a:03:11:36:11:62:99: 7e:0e:0e:4c:f6:b8:31:8c:7f:5d:63:69:1c:3d:dc:19:d7:90: 15:b8:2a:ef:ce:7a:a0:69:e9:8b:d2:b9:cf:44:50:26:be:e3: 55:39:1f:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxRkUxMTAvBgNVBAUTKEVERUI5NkYwNEM4RDNFRENDQkVFQkE0MEM0MjQyOTIy QTgxMzZCNTMwHhcNMjUwNDAyMjIxODU3WhcNMjUwNDA5MjIxODU3WjAYMRYwFAYD VQQDEw02N2VkYjdkMS1kNjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ShGnK0xIzeE9XtKGOHjffcfmVH38ntCOJgAU0ibTyO54vKSJAIP6xqgIoo8 xxbDJLwwDBjl8dU1RCzHIxIM3eWlztJLsAAYu5WFlrQPS6P5LRvk+zpEqbSG8K9r xonOj/Cn7kikZNXlIFlpL0LDBlBtjUnp25pCV14Wny5xS1Sfjd8RQU+XCePMnzXU GnxlvOCq43Q47/vK+s2UGcMD8sdov0t5keii0fWQO7ue+A7382TY6iKGUMp+0QXW zg9Cf7qFIg19pn7e2BfNAzFGOR29v/Wu4zbTiT6YYXIBIzvSFtZCJzZablQiRIZE ffBXnb35bAdT1gTuGSy2837UowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHB+w1Rv rPPhW3k8ePssxceyCtCiMB8GA1UdIwQYMBaAFO3rlvBMjT7cy+66QMQkKSKoE2tT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFGRS8zODYyMzVGMDZG ODgxMUVCQTg2QkY2NEFDNEY5QUUwMi83ZXVXOEV5TlB0ekw3cnBBeENRcElxZ1Rh MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdldVc4RXlOUHR6TDdycEF4Q1FwSXFnVGExTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTFGRS8zODYyMzVGMDZGODgxMUVCQTg2QkY2NEFDNEY5QUUwMi83ZXVXOEV5TlB0 ekw3cnBBeENRcElxZ1RhMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoktsT++Ufm8kVdGJWZzFndcqj2+b/O0atSe2vNdM3vKz2xrXR6oHt EN2tZJAONBGnECj0jJHHP0SvMiL/AyLdyOJSvm5OOevgqt8BNDCc+ycs5VwNHUTT Me4jSyJImBit5v2fjFZtthuvCvK7N5+yOWJBa1zbV+pTe9quCaVFksbgOK46cjef d2bZyIZkZPrU1+BPRKm8dtb/WpV7d9eUJtMbub/Hpqo2P2/35ZIDARKozQntZ4Py DMWlQ68HnRvDOlE4L/k5qLa3v1/TXEbWYEoDETYRYpl+Dg5M9rgxjH9dY2kcPdwZ 15AVuCrvznqgaemL0rnPRFAmvuNVOR9z -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:38 2025 by rpki-client