$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft File: ERAxDg-ARncD2Ed_s-4l8diIjp4.mft (raw, json) Hash identifier: I8k+dPGTa2aJZwpIxxRkVhoiu3Au07puQCY69SbEig4= Subject key identifier: 3C:85:7E:0A:4F:64:CE:1E:A6:C3:46:5C:E2:4D:EB:37:51:7C:AE:8D Authority key identifier: 11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E Certificate issuer: /CN=A91EA958/serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Certificate serial: 2491 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft Manifest number: 2467 Signing time: Tue 08 Apr 2025 15:04:12 +0000 Manifest this update: Tue 08 Apr 2025 15:04:12 +0000 Manifest next update: Tue 15 Apr 2025 15:04:11 +0000 Files and hashes: 1: ERAxDg-ARncD2Ed_s-4l8diIjp4.crl (hash: qf1KsdMiF9ThhBNucFtUEdVB0J4O5zVTKwqXFPzP34k=) 2: D4EB3054E66811ECA007390EC4F9AE02.roa (hash: 3kDcxjoJt+uLwNPAJETs74uGi0S+qOhaB4Kap466oyI=) 3: D27AE4B27E9511ECA9132A0BC4F9AE02.roa (hash: TvzuvljGMYe65nUWCoyGwWoTpT0hk8WJPlKCbHuFU80=) 4: 81E6A038BEBD11EBA1BC8A0FC4F9AE02.roa (hash: nb4ekLYfMcmcZ6P490LxZTkaHaEPmz90vPJhXehdrTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 15:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9361 (0x2491) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA958 Validity Not Before: Apr 8 15:04:12 2025 GMT Not After : Apr 15 15:04:11 2025 GMT Subject: CN=67f53aec-4f06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:dc:81:d5:bf:51:0c:3d:0f:d1:47:af:ef:34: ff:19:8a:52:13:22:ad:99:01:68:33:bd:30:61:00: ae:75:79:cb:8d:6f:39:cc:09:60:5e:33:29:0b:75: d2:67:b5:46:98:f1:96:bc:5a:3f:88:d7:83:60:dc: 03:55:b7:0c:21:f5:c0:c3:7f:96:14:e3:73:a7:09: 10:1d:a7:9c:dc:31:4c:79:3c:4d:d5:d7:c0:eb:e4: 07:f6:a4:75:63:12:ff:2f:ae:22:ca:51:f0:8c:72: 34:f4:cf:c7:41:63:31:1b:af:0b:38:f5:16:95:fd: cc:cf:67:4f:cc:68:16:b3:bf:35:e6:65:b0:cf:78: 7d:43:d1:09:f6:55:f8:ef:cf:da:9c:55:a2:4b:2e: 10:29:5e:64:48:ae:90:31:c7:f0:00:08:3b:8d:2d: 00:3d:47:4d:38:66:89:28:fb:83:8a:3e:ea:2e:b0: 6d:71:2b:ec:22:09:fa:69:a8:ed:27:18:91:e1:ae: 72:09:41:31:93:86:ab:f5:31:76:d7:18:b8:36:23: 9e:d7:63:64:42:aa:32:6c:da:a3:0c:d2:83:67:53: 4a:f9:c6:55:48:33:22:85:99:c9:75:e8:be:6d:c8: 57:95:e2:1a:95:ff:24:c4:9c:c5:1d:70:dd:67:43: 24:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:85:7E:0A:4F:64:CE:1E:A6:C3:46:5C:E2:4D:EB:37:51:7C:AE:8D X509v3 Authority Key Identifier: keyid:11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:6c:93:65:33:2c:8b:ec:92:f6:b4:01:3a:e9:ce:6d:90:48: fc:78:40:96:72:2a:2d:dc:5c:a8:9f:86:83:ca:cc:5a:7e:68: 19:75:bf:eb:31:71:6b:dd:25:71:80:66:a0:15:99:a6:a0:dc: 09:76:7e:49:96:cd:cd:17:10:18:5a:b5:e9:8f:69:60:e2:88: f3:dd:76:78:df:d8:b9:28:c2:73:38:2c:b4:eb:a0:ce:96:b4: 79:fc:a1:a5:54:4c:36:d8:61:87:98:8b:6f:64:de:51:c3:d5: ed:15:20:3d:40:15:c1:e8:d5:a9:4c:cc:be:eb:a1:0f:c1:bd: 01:7a:7d:38:23:57:3a:11:b8:ef:92:a4:94:f0:a0:c0:b8:b5: 36:c5:d4:e9:ae:2e:96:9d:11:5d:84:17:de:20:1b:4b:9d:93: 79:55:55:27:6c:98:85:0a:ab:6c:98:d8:80:76:5a:51:8c:ca: 36:ff:e9:a7:80:db:a9:d8:d4:d2:9b:b4:66:7b:b3:80:27:30: 52:f0:1b:b9:57:ea:96:bb:f5:b5:82:ff:7f:94:11:bd:3e:1f: 95:0d:32:d0:8d:36:d6:21:f0:5b:81:b2:16:9b:04:1a:08:46: 43:ad:38:e9:e4:b6:ca:48:10:d9:8e:73:06:29:23:a7:24:da: 12:f3:14:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NTgxMTAvBgNVBAUTKDExMTAzMTBFMEY4MDQ2NzcwM0Q4NDc3RkIzRUUyNUYx RDg4ODhFOUUwHhcNMjUwNDA4MTUwNDEyWhcNMjUwNDE1MTUwNDExWjAYMRYwFAYD VQQDEw02N2Y1M2FlYy00ZjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNyB1b9RDD0P0Uev7zT/GYpSEyKtmQFoM70wYQCudXnLjW85zAlgXjMpC3XS Z7VGmPGWvFo/iNeDYNwDVbcMIfXAw3+WFONzpwkQHaec3DFMeTxN1dfA6+QH9qR1 YxL/L64iylHwjHI09M/HQWMxG68LOPUWlf3Mz2dPzGgWs7815mWwz3h9Q9EJ9lX4 78/anFWiSy4QKV5kSK6QMcfwAAg7jS0APUdNOGaJKPuDij7qLrBtcSvsIgn6aajt JxiR4a5yCUExk4ar9TF21xi4NiOe12NkQqoybNqjDNKDZ1NK+cZVSDMihZnJdei+ bchXleIalf8kxJzFHXDdZ0MkGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDyFfgpP ZM4epsNGXOJN6zdRfK6NMB8GA1UdIwQYMBaAFBEQMQ4PgEZ3A9hHf7PuJfHYiI6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC9GREVGRDczNjRC RDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJuY0QyRWRfcy00bDhkaUlq cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VSQXhEZy1BUm5jRDJFZF9zLTRsOGRpSWpwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk1OC9GREVGRDczNjRCRDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJu Y0QyRWRfcy00bDhkaUlqcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIbJNlMyyL7JL2tAE66c5tkEj8eECWciot3Fyon4aDysxafmgZdb/r MXFr3SVxgGagFZmmoNwJdn5Jls3NFxAYWrXpj2lg4ojz3XZ439i5KMJzOCy066DO lrR5/KGlVEw22GGHmItvZN5Rw9XtFSA9QBXB6NWpTMy+66EPwb0Ben04I1c6Ebjv kqSU8KDAuLU2xdTpri6WnRFdhBfeIBtLnZN5VVUnbJiFCqtsmNiAdlpRjMo2/+mn gNup2NTSm7Rme7OAJzBS8Bu5V+qWu/W1gv9/lBG9Ph+VDTLQjTbWIfBbgbIWmwQa CEZDrTjp5LbKSBDZjnMGKSOnJNoS8xQP -----END CERTIFICATE-----Generated at Thu Apr 10 22:09:16 2025 by rpki-client