$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft File: eqxn28Hrko4pUTYuC8asdnfi3Hs.mft (raw, json) Hash identifier: fHbyIk/WkfQtDogCNsyyaliacIMIWtRKeG4ngQbLMt0= Subject key identifier: 17:EA:2A:15:5F:9A:DF:05:51:68:C1:B4:2C:07:A0:A0:F9:9D:3A:CD Authority key identifier: 7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B Certificate issuer: /CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B Certificate serial: 34C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft Manifest number: 349A Signing time: Sun 06 Apr 2025 14:31:20 +0000 Manifest this update: Sun 06 Apr 2025 14:31:20 +0000 Manifest next update: Sun 13 Apr 2025 14:31:19 +0000 Files and hashes: 1: eqxn28Hrko4pUTYuC8asdnfi3Hs.crl (hash: 7Cs/tPZTehhjE8AUnfV1crZ55fVLnMMPEZHByOLbF5I=) 2: 3BC5B9F8B53311EE9D8D774EC4F9AE02.roa (hash: LI2pTAtj2FrGkxTBu/kHsrcO7e2WbrdhGE8h6n7f+mA=) 3: 9E129FFC5F2611EF8DAAA57FC4F9AE02.roa (hash: EtN9WHkYOoh1Toml+yZQvfO83/c6JcmYJR90QSo2UxE=) 4: D230A150840E11EFB3D1036BC4F9AE02.roa (hash: JS1dP/Z3wRNVnOwepT6cYwjkzee8Wo5X7MrAc7I3mlg=) 5: 7D62DD7E840D11EFB275D662C4F9AE02.roa (hash: oxQvbEvt1VKVOZrQR/1bF13JTfe0jqTt+sjD6nr8S1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 14:31:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13509 (0x34c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E9A5 Validity Not Before: Apr 6 14:31:20 2025 GMT Not After : Apr 13 14:31:19 2025 GMT Subject: CN=67f29038-b7ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a3:aa:af:49:f9:89:a9:c8:08:47:43:36:0b: 4c:00:88:f5:21:da:b0:5f:6d:a7:4c:0e:09:46:97: eb:30:8e:97:38:cf:30:24:fa:e8:d4:52:c1:5d:d6: 6c:a3:03:37:54:89:ae:93:c9:44:bd:ca:ea:2d:ef: f8:3c:c8:d3:5b:e3:fb:45:1b:db:1b:1a:91:69:7d: 28:78:0f:b2:3c:95:0e:33:5e:12:bf:35:1a:56:af: 59:a8:0c:0e:30:2d:1a:c6:39:42:2c:85:b3:54:dd: 70:04:aa:be:99:6e:3c:ed:c9:35:85:c5:5c:4b:11: 63:72:0d:99:05:c9:f5:bc:e0:95:8c:7a:dc:40:7d: b2:eb:b6:36:f9:1f:f8:6b:56:c2:a3:ca:02:f6:dd: a2:e5:62:6a:88:c0:25:b3:3c:26:cb:3b:e8:c4:b6: 1c:b1:2e:bf:2f:ce:67:77:54:2d:a9:7d:35:7a:7a: 93:60:b1:02:dc:26:a1:f1:b1:5a:a7:bf:ad:6d:ed: ab:84:91:ab:0c:b8:af:c0:d9:54:52:27:b4:6a:a1: d7:fa:0a:d5:00:a8:ff:24:23:f1:bc:77:f3:b6:4d: 69:e9:de:d3:60:4d:5d:e9:b0:05:ab:8a:60:4d:49: 7b:58:21:55:45:e8:81:bb:f3:e7:9a:c4:16:29:f7: 59:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:EA:2A:15:5F:9A:DF:05:51:68:C1:B4:2C:07:A0:A0:F9:9D:3A:CD X509v3 Authority Key Identifier: keyid:7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:55:1a:4d:07:15:fb:24:c4:3d:d4:8c:55:8e:0e:c7:4c:fb: 4b:a7:2d:85:35:31:59:c5:2f:b0:5c:1f:0c:f6:c3:44:64:63: af:cc:2a:7d:2d:15:39:0c:d1:c3:ac:c2:54:eb:e8:cd:e1:22: c1:43:08:45:cf:7c:0f:4d:51:ed:7b:0f:a8:0d:3a:33:3a:a7: 6d:81:51:a0:d0:e6:ec:42:67:bf:73:40:f3:69:4f:3c:5a:a8: 53:d6:19:4c:75:dc:6f:44:5d:10:ff:e3:37:37:25:07:da:6a: 7a:9e:b0:dd:14:1b:bf:df:01:fe:3f:e4:3c:6e:85:ff:d0:1d: e9:f3:69:ea:8b:f3:da:dd:ae:d0:04:d8:e4:f0:c6:52:c9:97: 7e:57:43:53:07:51:bf:cf:95:88:73:a4:28:7e:fd:21:3f:e3: d2:8f:bf:f2:d0:52:35:b9:86:02:59:1d:da:fc:f9:ab:24:39: 5b:1b:66:17:37:23:1e:ab:6a:e0:cc:d2:e5:f0:73:33:a6:17: c2:1a:a7:05:62:db:48:37:56:46:e9:2a:d3:b6:d2:43:86:82: ad:2e:fa:47:0c:92:e6:3e:1e:34:92:81:14:18:77:92:31:fb: 7a:5a:e6:a2:9c:4a:32:74:24:64:40:26:2b:0a:e9:db:67:c6: fa:24:b4:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUU5QTUxMTAvBgNVBAUTKDdBQUM2N0RCQzFFQjkyOEUyOTUxMzYyRTBCQzZBQzc2 NzdFMkRDN0IwHhcNMjUwNDA2MTQzMTIwWhcNMjUwNDEzMTQzMTE5WjAYMRYwFAYD VQQDEw02N2YyOTAzOC1iN2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKOqr0n5ianICEdDNgtMAIj1IdqwX22nTA4JRpfrMI6XOM8wJPro1FLBXdZs owM3VImuk8lEvcrqLe/4PMjTW+P7RRvbGxqRaX0oeA+yPJUOM14SvzUaVq9ZqAwO MC0axjlCLIWzVN1wBKq+mW487ck1hcVcSxFjcg2ZBcn1vOCVjHrcQH2y67Y2+R/4 a1bCo8oC9t2i5WJqiMAlszwmyzvoxLYcsS6/L85nd1QtqX01enqTYLEC3Cah8bFa p7+tbe2rhJGrDLivwNlUUie0aqHX+grVAKj/JCPxvHfztk1p6d7TYE1d6bAFq4pg TUl7WCFVReiBu/PnmsQWKfdZ+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBfqKhVf mt8FUWjBtCwHoKD5nTrNMB8GA1UdIwQYMBaAFHqsZ9vB65KOKVE2LgvGrHZ34tx7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTlBNS9BMzJFRkVCODFE ODkxMUUyOTJFNEZERTIwOEIwMkNEMi9lcXhuMjhIcmtvNHBVVFl1Qzhhc2RuZmkz SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VxeG4yOEhya280cFVUWXVDOGFzZG5maTNIcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTlBNS9BMzJFRkVCODFEODkxMUUyOTJFNEZERTIwOEIwMkNEMi9lcXhuMjhIcmtv NHBVVFl1Qzhhc2RuZmkzSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkVRpNBxX7JMQ91IxVjg7HTPtLpy2FNTFZxS+wXB8M9sNEZGOvzCp9 LRU5DNHDrMJU6+jN4SLBQwhFz3wPTVHtew+oDTozOqdtgVGg0ObsQme/c0DzaU88 WqhT1hlMddxvRF0Q/+M3NyUH2mp6nrDdFBu/3wH+P+Q8boX/0B3p82nqi/Pa3a7Q BNjk8MZSyZd+V0NTB1G/z5WIc6Qofv0hP+PSj7/y0FI1uYYCWR3a/PmrJDlbG2YX NyMeq2rgzNLl8HMzphfCGqcFYttIN1ZG6SrTttJDhoKtLvpHDJLmPh40koEUGHeS Mft6WuainEoydCRkQCYrCunbZ8b6JLQe -----END CERTIFICATE-----Generated at Mon Apr 7 17:25:44 2025 by rpki-client