$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft File: ej19N0jHiYbCxeULUBO-tgq0etw.mft (raw, json) Hash identifier: 574aTk0J/xzzyIKAVza2E4kq3gblACZXylQbe1T1YJg= Subject key identifier: 8C:5C:E8:DD:CC:17:AE:CE:0E:95:AA:6E:8B:8B:6C:7C:61:EF:14:44 Authority key identifier: 7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC Certificate issuer: /CN=A9185D79/serialNumber=7A3D7D3748C78986C2C5E50B5013BEB60AB47ADC Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft Manifest number: 021F Signing time: Thu 03 Apr 2025 01:59:50 +0000 Manifest this update: Thu 03 Apr 2025 01:59:50 +0000 Manifest next update: Thu 10 Apr 2025 01:59:50 +0000 Files and hashes: 1: ej19N0jHiYbCxeULUBO-tgq0etw.crl (hash: Bz5wH4laEnlRNfwpIU8iYR+c1Xej04hHMiDJ7qQlxjE=) 2: 3303481C820B11EFA5FD6818C4F9AE02.roa (hash: qSn7HxYC79SRKokwqOPpvLlZ94GTIrZHr+Y0TqagvLo=) 3: E0B81ED0D56111EE9E1D7E5BC4F9AE02.roa (hash: EmbjI84JzquBQTIr84bkMPcgLgOL5ED40jMLVI24vcA=) 4: 2A1AAEF2CA7711EF9ED1D782C4F9AE02.roa (hash: U22myChDK0J4NLA39gSglrY/Ph9QMALivvjc+F5pl5Y=) 5: 28144924820B11EF8B053D18C4F9AE02.roa (hash: mm04mj/mfrr+HTospMIe7o235EYlDUVjsUVc02GtxUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.crl rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D79 Validity Not Before: Apr 3 01:59:50 2025 GMT Not After : Apr 10 01:59:50 2025 GMT Subject: CN=67edeb96-9891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:be:d7:70:a8:31:42:16:cb:63:06:54:ce:49: a5:0e:24:0e:3d:ed:03:5c:70:34:0a:8a:fd:2e:50: 4c:06:e6:5c:c2:d1:c8:25:e1:a8:1f:eb:12:56:21: 9d:f9:46:0c:6b:73:73:af:67:6b:01:61:7a:9a:a5: 03:93:69:f2:a5:54:86:c9:e9:48:60:d8:e1:c0:40: 84:e2:8e:b8:d5:56:8f:45:cf:a5:7a:71:a7:88:da: c7:cd:a9:fe:03:60:88:2b:fa:61:d6:93:60:9d:60: fe:a6:93:5a:8d:c2:47:1a:1e:61:6d:6a:04:f9:5a: 89:b1:41:51:e0:23:d1:dd:aa:06:69:c6:a8:05:84: 69:20:e6:c8:9d:46:7d:00:3f:20:7b:f8:bc:f0:32: 5d:91:62:12:03:40:5f:bf:59:2c:c6:4c:db:48:85: a4:c8:aa:bf:a2:12:9e:a3:d6:cf:1d:31:91:e8:86: be:71:57:ba:5b:7d:6c:2d:ac:82:42:5d:21:96:4b: aa:8e:05:2a:0d:86:1e:d9:52:bb:1a:00:40:49:2d: 76:c8:36:9f:01:69:e3:23:52:48:33:07:f5:ea:fd: 5f:3d:b6:1d:86:04:5e:0c:c3:28:e5:ce:c5:09:87: 61:c7:a9:5f:13:d0:af:c6:88:4f:28:0e:16:1f:83: 1f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:5C:E8:DD:CC:17:AE:CE:0E:95:AA:6E:8B:8B:6C:7C:61:EF:14:44 X509v3 Authority Key Identifier: keyid:7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:66:7c:74:83:23:d0:de:cf:49:d6:e3:1a:13:85:cf:cc:88: 81:16:52:4a:40:b0:3e:48:24:93:89:be:6a:a9:3c:17:e9:65: d8:cb:4c:91:f4:47:76:c8:52:0b:5b:3e:b0:20:64:13:a4:55: 01:c5:4f:90:f6:71:ea:54:e4:ca:35:f5:65:09:52:ff:ae:ab: e9:16:de:77:08:bb:0b:30:87:ed:ac:93:91:e9:8d:3a:45:48: a6:81:60:d7:88:c8:d5:4b:6c:37:72:5d:aa:01:67:05:80:79: a4:b1:29:4e:af:73:52:18:d0:a6:ea:04:c7:2c:0d:c9:cd:b7: 42:88:05:74:bf:4a:15:0b:31:5e:ed:9f:a5:1a:85:68:25:6f: 81:7b:30:99:87:01:3e:ce:bc:41:e9:f1:62:2a:76:c1:0d:47: 87:f6:65:f0:c8:86:08:aa:c5:d7:ca:fa:7a:38:0b:42:ce:50: 1f:e7:68:23:42:a2:29:21:84:e8:84:93:93:cc:a4:03:b2:a8: 25:db:ae:ec:b7:3a:64:5b:31:72:f2:96:eb:20:ea:51:76:ea: e9:b5:61:1d:df:d8:15:96:4e:5c:b4:71:a2:c5:ce:11:91:0e: b9:f3:38:48:06:f4:13:ef:a9:dd:88:0e:d7:1e:f8:65:2b:57: a1:6a:e8:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENzkxMTAvBgNVBAUTKDdBM0Q3RDM3NDhDNzg5ODZDMkM1RTUwQjUwMTNCRUI2 MEFCNDdBREMwHhcNMjUwNDAzMDE1OTUwWhcNMjUwNDEwMDE1OTUwWjAYMRYwFAYD VQQDEw02N2VkZWI5Ni05ODkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwr7XcKgxQhbLYwZUzkmlDiQOPe0DXHA0Cor9LlBMBuZcwtHIJeGoH+sSViGd +UYMa3Nzr2drAWF6mqUDk2nypVSGyelIYNjhwECE4o641VaPRc+lenGniNrHzan+ A2CIK/ph1pNgnWD+ppNajcJHGh5hbWoE+VqJsUFR4CPR3aoGacaoBYRpIObInUZ9 AD8ge/i88DJdkWISA0Bfv1ksxkzbSIWkyKq/ohKeo9bPHTGR6Ia+cVe6W31sLayC Ql0hlkuqjgUqDYYe2VK7GgBASS12yDafAWnjI1JIMwf16v1fPbYdhgReDMMo5c7F CYdhx6lfE9CvxohPKA4WH4MfQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIxc6N3M F67ODpWqbouLbHxh7xREMB8GA1UdIwQYMBaAFHo9fTdIx4mGwsXlC1ATvrYKtHrc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ3OS9CRjE5NEQ4MDI4 M0QxMUVEQTk0NDczM0RDNEY5QUUwMi9lajE5TjBqSGlZYkN4ZVVMVUJPLXRncTBl dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VqMTlOMGpIaVliQ3hlVUxVQk8tdGdxMGV0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQ3OS9CRjE5NEQ4MDI4M0QxMUVEQTk0NDczM0RDNEY5QUUwMi9lajE5TjBqSGlZ YkN4ZVVMVUJPLXRncTBldHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYZnx0gyPQ3s9J1uMaE4XPzIiBFlJKQLA+SCSTib5qqTwX6WXYy0yR 9Ed2yFILWz6wIGQTpFUBxU+Q9nHqVOTKNfVlCVL/rqvpFt53CLsLMIftrJOR6Y06 RUimgWDXiMjVS2w3cl2qAWcFgHmksSlOr3NSGNCm6gTHLA3JzbdCiAV0v0oVCzFe 7Z+lGoVoJW+BezCZhwE+zrxB6fFiKnbBDUeH9mXwyIYIqsXXyvp6OAtCzlAf52gj QqIpIYTohJOTzKQDsqgl267stzpkWzFy8pbrIOpRdurptWEd39gVlk5ctHGixc4R kQ658zhIBvQT76ndiA7XHvhlK1ehauiH -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:54 2025 by rpki-client