$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft File: EOplMmUQJQKUQ84SQ1fTPSisJMA.mft (raw, json) Hash identifier: 67KOZLaeeKy9iX+SHZOCSpGSBo1X/BMXFhWfO6+t/JI= Subject key identifier: 2E:6C:A0:D1:0F:8D:95:58:CE:58:8D:A1:E3:00:63:62:72:5D:07:8E Authority key identifier: 10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0 Certificate issuer: /CN=A91B7C90/serialNumber=10EA6532651025029443CE124357D33D28AC24C0 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft Manifest number: 89 Signing time: Sat 19 Apr 2025 05:35:39 +0000 Manifest this update: Sat 19 Apr 2025 05:35:39 +0000 Manifest next update: Sat 26 Apr 2025 05:35:39 +0000 Files and hashes: 1: EOplMmUQJQKUQ84SQ1fTPSisJMA.crl (hash: 0faDq1lITo9oyWyM1CZxONVInaLSvjAE/clYzc41cgA=) 2: 55EA7D9E4EEB11EF902A7B84C4F9AE02.roa (hash: hYGISbkx0iOPIWsemxA5+ThrUTq4VIEQEwarwfGguJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7C90, serialNumber=10EA6532651025029443CE124357D33D28AC24C0 Validity Not Before: Apr 19 05:35:39 2025 GMT Not After : Apr 26 05:35:39 2025 GMT Subject: CN=6803362b-298b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e3:61:66:d9:dc:ff:3b:8b:b2:8d:d6:bd:74: 16:4f:f9:e0:68:08:31:85:ae:41:b4:84:57:c9:dd: 6c:7c:37:3b:75:db:45:b5:14:f7:a8:e6:dc:b5:e3: 3c:c9:0f:6e:5c:4f:20:a9:65:8a:8e:df:3d:40:64: f1:6e:31:fa:12:f4:6d:5e:5b:bc:45:46:fe:15:f0: ec:fa:40:25:ee:f5:12:73:05:e9:37:25:b8:7c:ae: 0e:8b:f3:aa:f4:5a:e7:76:e9:da:b6:1d:8c:29:f5: ff:40:6d:02:e8:be:5b:df:f8:c6:b5:6d:d8:30:70: dc:70:c2:f0:f1:f2:c9:e7:f3:fc:a4:3b:65:f8:69: 3a:74:7e:d7:42:e3:24:e7:e0:54:bd:7a:19:62:34: 73:58:f1:1f:7f:06:a0:5f:f3:7e:44:81:e2:a2:08: c6:8d:cb:37:1c:5a:b2:23:1f:74:26:92:ea:ae:5d: d4:95:b7:9f:4b:65:bc:11:d3:ea:d0:7f:a1:8e:8e: 05:0b:a2:1c:89:09:e1:f8:75:8f:51:d1:1f:40:d1: d4:27:fb:8e:34:8e:9c:2a:83:13:6f:9d:72:b7:40: 5f:e1:25:9f:90:b3:00:ac:67:66:cf:4e:21:08:df: 0f:39:34:bc:cb:70:eb:52:27:e7:f3:3d:30:35:ce: 8d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:6C:A0:D1:0F:8D:95:58:CE:58:8D:A1:E3:00:63:62:72:5D:07:8E X509v3 Authority Key Identifier: keyid:10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:cb:95:59:b5:07:ac:12:75:37:a7:9e:bd:03:10:1b:7f:5a: 9a:76:80:80:4f:5a:f9:b1:fe:05:79:d8:c9:48:35:b3:09:b3: fb:2a:14:b1:a9:cf:73:c0:68:d1:86:b3:b1:05:d6:47:39:f5: 6e:2e:2b:da:8d:67:96:33:f2:f1:4f:bb:95:d9:ec:d8:52:36: a7:eb:89:e5:46:91:7b:b4:4f:ca:f0:37:21:be:0b:dd:01:41: 18:37:dd:ed:fa:06:14:51:46:74:45:67:2e:57:36:86:3e:6d: be:b5:15:7e:59:04:3b:4b:64:7d:bb:b3:f0:b8:9c:49:06:20: 6e:26:91:2e:ef:fe:23:03:0e:77:f0:6d:39:88:d2:d4:b2:c0: 7e:7d:6b:87:61:28:cd:a9:a1:d3:6d:c7:f8:f2:00:e6:2c:29: f7:9c:1d:ce:1c:3d:eb:9f:32:44:cc:69:be:37:f3:da:f8:b1: 94:96:f6:ac:01:62:34:31:db:b7:16:a7:7a:e3:85:a2:be:a0: 08:d0:fe:34:7a:89:36:60:f8:54:84:46:9c:f9:3d:15:23:5e: 5e:b0:0a:2a:d2:1b:c9:e7:7d:59:fb:86:5f:23:c6:08:74:ba: b4:05:61:6d:f6:1a:5b:c2:57:e9:6e:12:d8:68:17:47:3b:79: 43:76:ab:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdDOTAxMTAvBgNVBAUTKDEwRUE2NTMyNjUxMDI1MDI5NDQzQ0UxMjQzNTdEMzNE MjhBQzI0QzAwHhcNMjUwNDE5MDUzNTM5WhcNMjUwNDI2MDUzNTM5WjAYMRYwFAYD VQQDEw02ODAzMzYyYi0yOThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqeNhZtnc/zuLso3WvXQWT/ngaAgxha5BtIRXyd1sfDc7ddtFtRT3qObcteM8 yQ9uXE8gqWWKjt89QGTxbjH6EvRtXlu8RUb+FfDs+kAl7vUScwXpNyW4fK4Oi/Oq 9Frndunath2MKfX/QG0C6L5b3/jGtW3YMHDccMLw8fLJ5/P8pDtl+Gk6dH7XQuMk 5+BUvXoZYjRzWPEffwagX/N+RIHiogjGjcs3HFqyIx90JpLqrl3UlbefS2W8EdPq 0H+hjo4FC6IciQnh+HWPUdEfQNHUJ/uONI6cKoMTb51yt0Bf4SWfkLMArGdmz04h CN8POTS8y3DrUifn8z0wNc6N2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5soNEP jZVYzliNoeMAY2JyXQeOMB8GA1UdIwQYMBaAFBDqZTJlECUClEPOEkNX0z0orCTA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0M5MC8wMEQ3QjA0RTRF RTkxMUVGQkFEQkJGNkRDNEY5QUUwMi9FT3BsTW1VUUpRS1VRODRTUTFmVFBTaXNK TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VPcGxNbVVRSlFLVVE4NFNRMWZUUFNpc0pNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0M5MC8wMEQ3QjA0RTRFRTkxMUVGQkFEQkJGNkRDNEY5QUUwMi9FT3BsTW1VUUpR S1VRODRTUTFmVFBTaXNKTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcy5VZtQesEnU3p569AxAbf1qadoCAT1r5sf4FedjJSDWzCbP7KhSx qc9zwGjRhrOxBdZHOfVuLivajWeWM/LxT7uV2ezYUjan64nlRpF7tE/K8Dchvgvd AUEYN93t+gYUUUZ0RWcuVzaGPm2+tRV+WQQ7S2R9u7PwuJxJBiBuJpEu7/4jAw53 8G05iNLUssB+fWuHYSjNqaHTbcf48gDmLCn3nB3OHD3rnzJEzGm+N/Pa+LGUlvas AWI0Mdu3Fqd644WivqAI0P40eok2YPhUhEac+T0VI15esAoq0hvJ531Z+4ZfI8YI dLq0BWFt9hpbwlfpbhLYaBdHO3lDdqs/ -----END CERTIFICATE-----Generated at Sat Apr 19 07:41:58 2025 by rpki-client