$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft File: ejg10bvhsbJcMWkZLSvc1xk6i8I.mft (raw, json) Hash identifier: Mc4U/rmFXmfIIrwKaahQ//ZPJX1AJwF3BhTv4u8s/nk= Subject key identifier: 57:C4:62:EF:EC:39:35:3D:42:91:A0:52:AB:E2:4B:44:68:B4:3E:6B Authority key identifier: 7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2 Certificate issuer: /CN=A91D03EE/serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2 Certificate serial: 0ADD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft Manifest number: 0ACE Signing time: Fri 04 Apr 2025 19:36:18 +0000 Manifest this update: Fri 04 Apr 2025 19:36:17 +0000 Manifest next update: Fri 11 Apr 2025 19:36:17 +0000 Files and hashes: 1: ejg10bvhsbJcMWkZLSvc1xk6i8I.crl (hash: 0MuexEpUR+BGH8swSyh9fkjKxBZyePo/THIOVEZi2QI=) 2: 186A84C83A1811EBAF24B12EC4F9AE02.roa (hash: x6v+AqgjPFRVX68ne0JC+xRgXtO5WMJX4uQIZ5czHsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:36:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2781 (0xadd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D03EE Validity Not Before: Apr 4 19:36:17 2025 GMT Not After : Apr 11 19:36:17 2025 GMT Subject: CN=67f034b1-19b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0a:58:59:41:65:f4:45:19:38:08:79:35:63: 90:a5:5b:be:6c:c5:7d:7e:31:9d:5b:d3:c5:b8:82: 67:7e:33:19:28:0c:18:d8:0d:17:7f:3d:be:e0:28: 98:fd:2b:90:a7:2c:38:59:bb:81:66:52:77:4f:ab: 8a:6c:03:8f:50:73:cd:19:48:a5:f7:69:c3:f5:f7: cc:6d:57:6a:af:16:c8:b9:17:58:b5:97:59:ec:14: 05:40:d6:08:3c:b1:f3:bf:b4:ed:e5:33:ce:ad:e7: 7f:cb:0e:bc:a6:5b:2b:04:30:d6:0b:8c:09:07:5d: d6:31:69:d7:04:61:20:bd:23:8a:53:a7:8f:08:51: a8:01:f0:9c:6a:70:b6:e5:86:52:d7:39:6f:4b:a8: 15:5a:32:d6:eb:28:bb:51:3d:a8:d4:28:a2:36:1e: a6:23:82:ba:2f:d1:ef:f8:eb:ab:3f:13:96:fb:38: 33:fc:16:da:0b:99:8e:04:f7:dd:7a:10:8a:e1:e5: d8:25:78:16:14:0d:e6:f9:ff:f4:40:54:ca:e6:d1: a4:e0:48:84:42:78:24:79:88:ac:e8:ca:63:0e:31: 9c:60:4c:1c:25:62:a0:bf:0e:9d:56:be:f0:55:d2: 9c:97:5a:f1:58:16:f2:0e:fa:1c:73:3b:03:ae:8d: 78:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C4:62:EF:EC:39:35:3D:42:91:A0:52:AB:E2:4B:44:68:B4:3E:6B X509v3 Authority Key Identifier: keyid:7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:80:06:75:f3:79:d3:5c:68:20:a8:26:84:49:fb:95:af:6e: 80:30:c9:b5:91:bf:87:dd:dd:1c:08:21:f4:99:f0:86:24:38: 98:cf:ba:5b:f7:98:a7:23:1a:b8:41:97:ce:bb:7e:43:a3:f8: 83:e2:6f:a2:d2:6e:d6:93:aa:1c:20:70:f2:a9:f4:09:c0:58: cd:14:97:c6:87:d6:31:fc:74:4b:1c:df:02:c9:87:a5:7f:57: 83:01:7f:e4:06:cd:63:2a:d2:a7:c4:26:fc:f6:d6:f1:e2:3f: db:a3:26:3f:63:0b:49:e4:db:66:85:e6:0b:08:77:d5:70:01: 3e:cd:fe:37:89:f7:ca:c4:43:01:5a:99:50:b3:14:f7:c2:f9: 58:e2:73:49:94:54:05:49:07:4b:10:f9:1b:67:a9:99:ff:3c: 11:7d:c4:cf:31:d5:9f:0e:44:2b:e5:67:07:55:ae:e9:ef:ae: 74:2e:ac:41:af:f8:78:ba:6e:02:ee:5d:d6:05:96:6c:11:f9: e2:ba:71:03:07:94:ee:7d:26:12:18:c5:9f:03:d3:00:63:8b: 0c:be:17:c9:64:e9:e2:eb:20:dc:13:48:a0:ad:a5:09:33:1f: 48:7d:af:39:07:6b:12:fc:56:f2:c9:dd:97:d9:f7:31:49:45: 10:df:29:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAzRUUxMTAvBgNVBAUTKDdBMzgzNUQxQkJFMUIxQjI1QzMxNjkxOTJEMkJEQ0Q3 MTkzQThCQzIwHhcNMjUwNDA0MTkzNjE3WhcNMjUwNDExMTkzNjE3WjAYMRYwFAYD VQQDEw02N2YwMzRiMS0xOWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ApYWUFl9EUZOAh5NWOQpVu+bMV9fjGdW9PFuIJnfjMZKAwY2A0Xfz2+4CiY /SuQpyw4WbuBZlJ3T6uKbAOPUHPNGUil92nD9ffMbVdqrxbIuRdYtZdZ7BQFQNYI PLHzv7Tt5TPOred/yw68plsrBDDWC4wJB13WMWnXBGEgvSOKU6ePCFGoAfCcanC2 5YZS1zlvS6gVWjLW6yi7UT2o1CiiNh6mI4K6L9Hv+OurPxOW+zgz/BbaC5mOBPfd ehCK4eXYJXgWFA3m+f/0QFTK5tGk4EiEQngkeYis6MpjDjGcYEwcJWKgvw6dVr7w VdKcl1rxWBbyDvocczsDro14hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFfEYu/s OTU9QpGgUqviS0RotD5rMB8GA1UdIwQYMBaAFHo4NdG74bGyXDFpGS0r3NcZOovC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDNFRS82NzI4MUNGNDQ5 N0YxMUVBOTY3QTJFMEJDNEY5QUUwMi9lamcxMGJ2aHNiSmNNV2taTFN2YzF4azZp OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VqZzEwYnZoc2JKY01Xa1pMU3ZjMXhrNmk4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDNFRS82NzI4MUNGNDQ5N0YxMUVBOTY3QTJFMEJDNEY5QUUwMi9lamcxMGJ2aHNi SmNNV2taTFN2YzF4azZpOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlgAZ183nTXGggqCaESfuVr26AMMm1kb+H3d0cCCH0mfCGJDiYz7pb 95inIxq4QZfOu35Do/iD4m+i0m7Wk6ocIHDyqfQJwFjNFJfGh9Yx/HRLHN8CyYel f1eDAX/kBs1jKtKnxCb89tbx4j/boyY/YwtJ5NtmheYLCHfVcAE+zf43iffKxEMB WplQsxT3wvlY4nNJlFQFSQdLEPkbZ6mZ/zwRfcTPMdWfDkQr5WcHVa7p7650LqxB r/h4um4C7l3WBZZsEfniunEDB5TufSYSGMWfA9MAY4sMvhfJZOni6yDcE0igraUJ Mx9Ifa85B2sS/Fbyyd2X2fcxSUUQ3ynu -----END CERTIFICATE-----Generated at Sun Apr 6 01:26:44 2025 by rpki-client