$ rpki-client -vvf rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft File: EgCNureMsx8plOFITqPyQnS50ag.mft (raw, json) Hash identifier: XIjUMCu3MYGxvwsTFjBynRJ4mPgaK5jgRNPBevgTEv8= Subject key identifier: 6C:81:62:65:DC:C9:60:6B:64:85:B0:F6:3A:CC:17:12:E0:C6:2D:76 Authority key identifier: 12:00:8D:BA:B7:8C:B3:1F:29:94:E1:48:4E:A3:F2:42:74:B9:D1:A8 Certificate issuer: /CN=A9112B4C/serialNumber=12008DBAB78CB31F2994E1484EA3F24274B9D1A8 Certificate serial: 0BE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft Manifest number: 0BD6 Signing time: Fri 30 May 2025 19:02:00 +0000 Manifest this update: Fri 30 May 2025 19:01:59 +0000 Manifest next update: Fri 06 Jun 2025 19:01:59 +0000 Files and hashes: 1: EgCNureMsx8plOFITqPyQnS50ag.crl (hash: LREI+3632fWPsiSjNTBB/XdoMQzDMO21n20SB+QQG8M=) 2: A80715221A7711EAA20A077FC4F9AE02.roa (hash: VwYkO4aw10BWT9DeTWUnPuWdaTnoYansb3oXYCyJ7q8=) 3: A7544A6E1A7711EAA20A077FC4F9AE02.roa (hash: 0F+0eba6EEMNLZkH8foyD5Z/QmGl/1jnrtcvnRt8Txg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.crl rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3047 (0xbe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112B4C, serialNumber=12008DBAB78CB31F2994E1484EA3F24274B9D1A8 Validity Not Before: May 30 19:01:59 2025 GMT Not After : Jun 6 19:01:59 2025 GMT Subject: CN=683a00a8-6933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ce:f8:d4:3c:07:1b:51:7c:99:5e:a9:12:d2: 7c:fe:b3:f2:e2:71:c5:db:c1:5c:f0:7f:9f:92:46: 37:b1:23:99:6d:a5:30:9f:af:4b:82:a6:e2:58:e9: 01:d1:b9:b3:9d:45:d9:fb:ec:44:65:92:8a:62:d7: 8d:39:8f:a2:60:29:94:46:28:40:68:df:fd:48:54: 07:1b:01:90:13:cd:4f:c9:8c:4e:52:e5:ab:aa:92: 86:0d:db:26:21:be:32:99:77:f3:d3:27:af:b6:34: a3:c7:35:27:88:05:55:72:d4:17:f4:e8:f1:25:6f: 4e:ef:d5:78:15:0a:03:b8:69:4a:26:bc:c7:02:fa: 61:9d:11:63:a3:5f:f8:15:9b:f3:51:c6:21:92:48: cf:97:d7:56:48:d0:1c:8f:1a:8e:01:68:73:b4:06: f9:6a:b4:d9:ac:a7:d1:5e:09:91:8a:79:11:e7:e2: 07:4f:7e:84:6a:7f:dc:17:65:fd:10:dc:1e:95:c9: 28:fb:29:74:a1:bc:0a:c1:0d:b0:c7:60:14:4c:39: 69:2f:25:76:ea:54:b0:e0:49:86:aa:38:c7:e1:62: 92:4c:93:9a:f0:b1:25:dc:5c:00:e3:3d:7a:6d:59: 95:ab:c2:11:f3:01:f7:c3:04:b3:28:81:ea:64:5d: 8b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:81:62:65:DC:C9:60:6B:64:85:B0:F6:3A:CC:17:12:E0:C6:2D:76 X509v3 Authority Key Identifier: keyid:12:00:8D:BA:B7:8C:B3:1F:29:94:E1:48:4E:A3:F2:42:74:B9:D1:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:8c:41:8c:b1:84:fe:4a:8f:65:c0:63:b8:37:81:34:85:78: e9:8e:33:3a:e6:db:bd:69:44:70:09:bb:e5:26:f8:d5:08:4d: 57:29:2d:bb:7d:d4:ae:56:9b:85:f3:aa:28:4a:fa:e5:8f:51: 58:1a:b0:83:f7:1a:87:77:08:2f:91:37:6f:fc:a9:80:0b:7d: 02:12:0a:83:d6:e6:85:84:73:c1:14:57:88:40:91:3e:27:00: 9f:f0:90:45:22:29:0f:85:bb:f6:76:52:fd:e0:62:a9:2a:8d: 42:4b:8f:3b:86:34:16:a1:f0:d0:ba:c3:10:48:2f:de:90:6b: 26:b9:ec:e9:02:15:2c:49:76:df:e3:5f:14:3c:80:7e:ff:e1: 18:45:b0:d4:b3:b6:a1:08:96:11:97:96:4f:c0:4d:1b:2f:c9: cf:7f:7b:ad:55:8f:cd:42:0c:1d:af:e0:17:1e:4c:ef:73:25: 07:a5:d9:a4:fd:c0:84:03:a5:9b:1f:e0:c8:01:1c:65:52:c6: db:aa:b5:3c:e0:ef:98:77:b9:36:5f:87:a6:59:fb:54:df:c6: 00:dd:3c:e7:78:e3:8d:d4:d0:95:12:8e:3a:6d:ce:36:3d:ff: b7:54:72:99:e1:c8:1c:f8:50:76:24:9a:83:41:80:05:74:f1: 7d:65:3e:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJCNEMxMTAvBgNVBAUTKDEyMDA4REJBQjc4Q0IzMUYyOTk0RTE0ODRFQTNGMjQy NzRCOUQxQTgwHhcNMjUwNTMwMTkwMTU5WhcNMjUwNjA2MTkwMTU5WjAYMRYwFAYD VQQDEw02ODNhMDBhOC02OTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAps741DwHG1F8mV6pEtJ8/rPy4nHF28Fc8H+fkkY3sSOZbaUwn69LgqbiWOkB 0bmznUXZ++xEZZKKYteNOY+iYCmURihAaN/9SFQHGwGQE81PyYxOUuWrqpKGDdsm Ib4ymXfz0yevtjSjxzUniAVVctQX9OjxJW9O79V4FQoDuGlKJrzHAvphnRFjo1/4 FZvzUcYhkkjPl9dWSNAcjxqOAWhztAb5arTZrKfRXgmRinkR5+IHT36Ean/cF2X9 ENwelcko+yl0obwKwQ2wx2AUTDlpLyV26lSw4EmGqjjH4WKSTJOa8LEl3FwA4z16 bVmVq8IR8wH3wwSzKIHqZF2LxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGyBYmXc yWBrZIWw9jrMFxLgxi12MB8GA1UdIwQYMBaAFBIAjbq3jLMfKZThSE6j8kJ0udGo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkI0Qy83QkE1NDI1ODFB NzUxMUVBQUUxOUUzN0FDNEY5QUUwMi9FZ0NOdXJlTXN4OHBsT0ZJVHFQeVFuUzUw YWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VnQ051cmVNc3g4cGxPRklUcVB5UW5TNTBhZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkI0Qy83QkE1NDI1ODFBNzUxMUVBQUUxOUUzN0FDNEY5QUUwMi9FZ0NOdXJlTXN4 OHBsT0ZJVHFQeVFuUzUwYWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzjEGMsYT+So9lwGO4N4E0hXjpjjM65tu9aURwCbvlJvjVCE1XKS27 fdSuVpuF86ooSvrlj1FYGrCD9xqHdwgvkTdv/KmAC30CEgqD1uaFhHPBFFeIQJE+ JwCf8JBFIikPhbv2dlL94GKpKo1CS487hjQWofDQusMQSC/ekGsmuezpAhUsSXbf 418UPIB+/+EYRbDUs7ahCJYRl5ZPwE0bL8nPf3utVY/NQgwdr+AXHkzvcyUHpdmk /cCEA6WbH+DIARxlUsbbqrU84O+Yd7k2X4emWftU38YA3TzneOON1NCVEo46bc42 Pf+3VHKZ4cgc+FB2JJqDQYAFdPF9ZT71 -----END CERTIFICATE-----Generated at Sat May 31 14:59:32 2025 by rpki-client