$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft File: E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft (raw, json) Hash identifier: mUOvykIMKXBicFIAv+cj3Rn63C88Z0lZ7vTtcnq5qyc= Subject key identifier: 91:AA:E0:E4:35:7D:3E:C9:75:71:E5:6F:E3:E7:D4:8D:09:58:DE:6A Authority key identifier: 13:E1:89:9C:23:FE:B0:7F:E1:31:62:EB:10:3C:C3:C0:38:D7:08:24 Certificate issuer: /CN=A9192B60/serialNumber=13E1899C23FEB07FE13162EB103CC3C038D70824 Certificate serial: 0273 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft Manifest number: 026D Signing time: Sat 05 Apr 2025 01:51:33 +0000 Manifest this update: Sat 05 Apr 2025 01:51:33 +0000 Manifest next update: Sat 12 Apr 2025 01:51:33 +0000 Files and hashes: 1: E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl (hash: A+PcDKt60Yf5+iWv6vKpcV8pwSowZzLfRfPPo363gnY=) 2: 2475821008E611EDA969EC24C4F9AE02.roa (hash: pHEalHPaBn8YLpxptX62/OxGR+yXDeFh5rO3/NYIRLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:51:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 627 (0x273) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192B60 Validity Not Before: Apr 5 01:51:33 2025 GMT Not After : Apr 12 01:51:33 2025 GMT Subject: CN=67f08ca5-0468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0a:ee:68:1c:5a:82:ee:6c:2b:90:35:ed:6c: 8b:ed:19:0f:fc:c4:a0:03:7b:10:c3:4a:72:3c:fc: ce:87:24:6f:7f:58:17:ea:c4:5c:b7:4d:76:6d:16: 52:a2:c1:ab:27:f1:63:f6:a7:44:7a:95:61:0e:f2: 39:43:81:17:fd:03:59:60:63:9b:00:24:02:ff:f8: 8b:44:a0:99:cb:68:10:5c:b3:2a:cc:48:4c:f6:65: ec:a3:37:46:b8:08:d5:1e:2b:a3:0d:c1:39:26:97: 9a:6e:cf:cc:7e:6a:23:e3:e1:ab:08:e7:d5:9d:cb: fe:c1:99:90:ed:c7:59:c7:85:9d:71:d9:de:6d:f2: 3f:89:ad:bc:5d:5c:a5:c1:1d:b1:db:0e:17:95:38: 89:86:72:52:8b:ff:d4:1c:ad:cc:5b:4f:bc:15:29: 9e:83:db:cb:2a:e7:ac:c4:51:b9:76:a9:cf:70:66: 21:a6:7f:d3:21:3e:f9:8c:73:41:58:6d:ff:2c:7f: 41:87:25:02:0f:2c:5d:7e:df:05:7b:90:a1:67:ae: 0d:8c:08:2b:5b:0c:e5:0a:ae:ba:6e:e1:35:c0:8b: 33:5b:a6:df:5e:27:b6:ae:94:a9:ce:31:80:c7:64: c7:49:55:87:b4:d3:29:c7:58:fc:e7:30:0e:05:d2: 02:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AA:E0:E4:35:7D:3E:C9:75:71:E5:6F:E3:E7:D4:8D:09:58:DE:6A X509v3 Authority Key Identifier: keyid:13:E1:89:9C:23:FE:B0:7F:E1:31:62:EB:10:3C:C3:C0:38:D7:08:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:83:be:8e:f9:a3:cb:62:d7:84:28:d7:72:1c:c3:6c:77:94: 02:a6:bb:83:b1:f5:77:fd:95:c9:56:0e:90:c9:c6:dc:d6:e0: cc:1d:d4:bf:29:3a:bf:93:66:32:aa:13:75:94:e2:0e:6a:d7: a9:99:c4:38:a1:19:aa:3a:c7:b7:46:f1:c0:68:4f:84:3d:25: c5:f0:4a:b2:1c:f1:a7:c0:15:47:ad:ab:3e:12:eb:69:80:b2: 2b:bb:21:e7:5f:ef:0d:67:09:6d:27:c6:44:1e:18:24:be:83: d1:9b:99:37:ff:c5:14:3d:a6:da:af:fe:30:65:96:6d:f2:94: da:b1:47:29:9e:69:7a:a7:34:78:9f:4f:c8:3c:b6:c0:44:3e: 49:4a:51:50:6e:f8:c2:58:95:49:18:b1:bc:6b:53:60:e8:ec: b0:f4:be:d4:41:6f:78:a9:e5:b5:7c:a6:f2:3c:cd:f6:5c:00: 54:19:07:f5:e0:bb:dc:73:61:8a:e8:6e:c1:01:1d:93:81:a8: df:dc:58:c8:1f:9e:13:9e:12:3c:cc:65:d0:68:c6:95:a8:5f: 6a:5f:32:6d:5c:be:83:f8:b3:ad:b6:3b:71:14:6e:51:c0:37: d3:39:58:b5:a9:88:18:e7:fa:e5:d4:d6:22:f5:75:1a:c7:5d: f1:49:77:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJCNjAxMTAvBgNVBAUTKDEzRTE4OTlDMjNGRUIwN0ZFMTMxNjJFQjEwM0NDM0Mw MzhENzA4MjQwHhcNMjUwNDA1MDE1MTMzWhcNMjUwNDEyMDE1MTMzWjAYMRYwFAYD VQQDEw02N2YwOGNhNS0wNDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApAruaBxagu5sK5A17WyL7RkP/MSgA3sQw0pyPPzOhyRvf1gX6sRct012bRZS osGrJ/Fj9qdEepVhDvI5Q4EX/QNZYGObACQC//iLRKCZy2gQXLMqzEhM9mXsozdG uAjVHiujDcE5Jpeabs/Mfmoj4+GrCOfVncv+wZmQ7cdZx4WdcdnebfI/ia28XVyl wR2x2w4XlTiJhnJSi//UHK3MW0+8FSmeg9vLKuesxFG5dqnPcGYhpn/TIT75jHNB WG3/LH9BhyUCDyxdft8Fe5ChZ64NjAgrWwzlCq66buE1wIszW6bfXie2rpSpzjGA x2THSVWHtNMpx1j85zAOBdICSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGq4OQ1 fT7JdXHlb+Pn1I0JWN5qMB8GA1UdIwQYMBaAFBPhiZwj/rB/4TFi6xA8w8A41wgk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkI2MC9CMzJGM0U3MjA4 RTMxMUVEODM2NDBDMjFDNEY5QUUwMi9FLUdKbkNQLXNIX2hNV0xyRUR6RHdEalhD Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UtR0puQ1Atc0hfaE1XTHJFRHpEd0RqWENDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkI2MC9CMzJGM0U3MjA4RTMxMUVEODM2NDBDMjFDNEY5QUUwMi9FLUdKbkNQLXNI X2hNV0xyRUR6RHdEalhDQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUg76O+aPLYteEKNdyHMNsd5QCpruDsfV3/ZXJVg6Qycbc1uDMHdS/ KTq/k2YyqhN1lOIOatepmcQ4oRmqOse3RvHAaE+EPSXF8EqyHPGnwBVHras+Eutp gLIruyHnX+8NZwltJ8ZEHhgkvoPRm5k3/8UUPabar/4wZZZt8pTasUcpnml6pzR4 n0/IPLbARD5JSlFQbvjCWJVJGLG8a1Ng6Oyw9L7UQW94qeW1fKbyPM32XABUGQf1 4Lvcc2GK6G7BAR2Tgajf3FjIH54TnhI8zGXQaMaVqF9qXzJtXL6D+LOttjtxFG5R wDfTOVi1qYgY5/rl1NYi9XUax13xSXe+ -----END CERTIFICATE-----Generated at Sat Apr 5 14:41:18 2025 by rpki-client