$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft File: eEGgmdwU4pNx5MwYVIn_riEyI0k.mft (raw, json) Hash identifier: nIPrFN3WYbCJ3SPuCOb3/+8S4KXrZnAmuO2ZF0YKLz0= Subject key identifier: 3A:03:52:7D:30:1A:1D:E4:E2:BF:39:C5:EF:88:66:E5:07:2A:FC:CE Authority key identifier: 78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49 Certificate issuer: /CN=A91F8966/serialNumber=7841A099DC14E29371E4CC185489FFAE21322349 Certificate serial: 0940 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft Manifest number: 093A Signing time: Sun 06 Apr 2025 20:00:31 +0000 Manifest this update: Sun 06 Apr 2025 20:00:31 +0000 Manifest next update: Sun 13 Apr 2025 20:00:31 +0000 Files and hashes: 1: eEGgmdwU4pNx5MwYVIn_riEyI0k.crl (hash: uSh3I14P5LUHGGMcfkQn+/olzwx3url7RRgGyV/epKc=) 2: CA4C06CA976711EAA651F944C4F9AE02.roa (hash: bloQYzrAn+4ONkIrVOLLF4mqOoi8QLeVq0prE6sonCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2368 (0x940) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8966 Validity Not Before: Apr 6 20:00:31 2025 GMT Not After : Apr 13 20:00:31 2025 GMT Subject: CN=67f2dd5f-dc0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:96:f3:0a:ad:f3:c6:ba:b0:0d:57:9f:08:d9: 74:92:ff:70:76:43:81:a5:7b:b1:b7:31:07:85:5b: 90:55:f5:85:40:f4:be:39:68:1d:b3:ae:df:a7:39: 0f:59:fc:db:45:89:44:ab:13:98:69:9f:59:50:98: 88:36:e8:39:44:e0:81:dd:1d:9b:97:e8:34:21:6a: 62:c5:a5:30:2e:78:96:36:33:23:2f:3c:f3:d2:e5: 0c:bb:ba:bb:f1:e0:21:f2:be:3a:28:5b:97:88:52: fa:0e:bd:1f:8c:19:a3:f7:a3:81:fd:4a:2e:1d:b6: 78:e2:9d:13:c2:79:ae:f6:56:bd:71:dd:cb:52:92: ea:99:ae:89:ef:34:8b:df:d7:46:30:49:1f:54:9c: 3b:14:af:9a:03:20:d2:ce:92:92:03:77:23:32:4a: 80:7b:60:b0:3b:8f:fc:22:8e:c1:e1:c6:31:1e:28: 14:7d:be:99:e3:1d:db:c2:43:56:ef:d9:09:dd:da: df:11:1f:79:e1:41:fd:a9:58:0c:cc:d6:a7:02:2b: f8:8f:ca:bf:32:7c:e2:62:0f:ba:58:20:a3:93:38: 0f:66:01:69:a4:04:46:c5:84:45:c6:9e:35:9e:a0: ca:03:05:c8:95:7a:5b:75:67:25:06:ba:a8:17:d3: ec:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:03:52:7D:30:1A:1D:E4:E2:BF:39:C5:EF:88:66:E5:07:2A:FC:CE X509v3 Authority Key Identifier: keyid:78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption de:55:27:4f:e3:3c:04:4f:7d:61:8f:4b:f8:c8:fd:5a:ae:5a: fa:c2:76:3f:90:e5:d9:1f:4c:c3:90:94:b7:6d:de:b0:e3:96: 86:25:1a:21:4c:f4:f5:08:e7:b3:b4:64:00:37:7a:5f:d4:1b: 86:38:18:0c:2b:b0:2c:9f:56:46:73:3e:69:1f:92:fe:ed:ab: d9:ac:92:74:8b:8f:81:8e:c4:fc:e0:e0:ec:bf:ce:d6:5a:05: 69:3a:77:02:9c:49:42:93:d2:ed:10:a7:4c:1a:03:dd:d2:9e: 01:d9:cd:4c:3b:5c:29:92:c7:54:03:b0:00:46:52:ff:45:c7: 94:cc:a7:35:d9:16:07:c0:7d:6c:8a:70:37:d7:cb:e5:37:a7: bc:df:af:8b:c6:8d:cd:71:ea:08:4e:46:f2:e0:c5:02:c6:a1: 82:b9:be:07:44:e0:2d:6f:a3:b0:6a:c2:5b:eb:79:53:be:2d: 51:57:b5:08:12:49:8e:df:84:03:2d:51:4c:4a:0d:d3:77:53: 0d:ff:55:35:c4:85:b7:64:af:15:c1:35:cf:a1:3f:01:5c:fd: 32:eb:1a:d4:8c:9d:54:2c:da:2d:1f:39:72:ea:70:7a:7b:c8: 4a:78:8a:22:c4:4a:3d:16:a9:da:8d:a5:2a:60:6d:8e:38:7c: dd:35:fc:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5NjYxMTAvBgNVBAUTKDc4NDFBMDk5REMxNEUyOTM3MUU0Q0MxODU0ODlGRkFF MjEzMjIzNDkwHhcNMjUwNDA2MjAwMDMxWhcNMjUwNDEzMjAwMDMxWjAYMRYwFAYD VQQDEw02N2YyZGQ1Zi1kYzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0pbzCq3zxrqwDVefCNl0kv9wdkOBpXuxtzEHhVuQVfWFQPS+OWgds67fpzkP WfzbRYlEqxOYaZ9ZUJiINug5ROCB3R2bl+g0IWpixaUwLniWNjMjLzzz0uUMu7q7 8eAh8r46KFuXiFL6Dr0fjBmj96OB/UouHbZ44p0Twnmu9la9cd3LUpLqma6J7zSL 39dGMEkfVJw7FK+aAyDSzpKSA3cjMkqAe2CwO4/8Io7B4cYxHigUfb6Z4x3bwkNW 79kJ3drfER954UH9qVgMzNanAiv4j8q/MnziYg+6WCCjkzgPZgFppARGxYRFxp41 nqDKAwXIlXpbdWclBrqoF9PsywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDoDUn0w Gh3k4r85xe+IZuUHKvzOMB8GA1UdIwQYMBaAFHhBoJncFOKTceTMGFSJ/64hMiNJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk2Ni8zRUYyMjQwMjk3 NjYxMUVBOUVCNDk1NDJDNEY5QUUwMi9lRUdnbWR3VTRwTng1TXdZVkluX3JpRXlJ MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VFR2dtZHdVNHBOeDVNd1lWSW5fcmlFeUkway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODk2Ni8zRUYyMjQwMjk3NjYxMUVBOUVCNDk1NDJDNEY5QUUwMi9lRUdnbWR3VTRw Tng1TXdZVkluX3JpRXlJMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDeVSdP4zwET31hj0v4yP1arlr6wnY/kOXZH0zDkJS3bd6w45aGJRoh TPT1COeztGQAN3pf1BuGOBgMK7Asn1ZGcz5pH5L+7avZrJJ0i4+BjsT84ODsv87W WgVpOncCnElCk9LtEKdMGgPd0p4B2c1MO1wpksdUA7AARlL/RceUzKc12RYHwH1s inA318vlN6e836+Lxo3NceoITkby4MUCxqGCub4HROAtb6OwasJb63lTvi1RV7UI EkmO34QDLVFMSg3Td1MN/1U1xIW3ZK8VwTXPoT8BXP0y6xrUjJ1ULNotHzly6nB6 e8hKeIoixEo9FqnajaUqYG2OOHzdNfzh -----END CERTIFICATE-----Generated at Mon Apr 7 00:44:57 2025 by rpki-client