$ rpki-client -vvf rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft File: EgCNureMsx8plOFITqPyQnS50ag.mft (raw, json) Hash identifier: lDI2S0NhBGBPE5co+Lk6MjNUrsHCZXC1QHp+7wkKzFI= Subject key identifier: 9B:16:E4:03:18:21:22:80:37:D1:B3:40:76:D9:D6:32:E2:DA:09:C2 Authority key identifier: 12:00:8D:BA:B7:8C:B3:1F:29:94:E1:48:4E:A3:F2:42:74:B9:D1:A8 Certificate issuer: /CN=A9112B4C/serialNumber=12008DBAB78CB31F2994E1484EA3F24274B9D1A8 Certificate serial: 0BCC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft Manifest number: 0BBB Signing time: Fri 04 Apr 2025 18:58:54 +0000 Manifest this update: Fri 04 Apr 2025 18:58:53 +0000 Manifest next update: Fri 11 Apr 2025 18:58:53 +0000 Files and hashes: 1: EgCNureMsx8plOFITqPyQnS50ag.crl (hash: q3RJcr3+QyK00GaEvoRCOTWfS0O3hXKdZv9GEjP5dME=) 2: A80715221A7711EAA20A077FC4F9AE02.roa (hash: VwYkO4aw10BWT9DeTWUnPuWdaTnoYansb3oXYCyJ7q8=) 3: A7544A6E1A7711EAA20A077FC4F9AE02.roa (hash: 0F+0eba6EEMNLZkH8foyD5Z/QmGl/1jnrtcvnRt8Txg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.crl rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3020 (0xbcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112B4C Validity Not Before: Apr 4 18:58:53 2025 GMT Not After : Apr 11 18:58:53 2025 GMT Subject: CN=67f02bed-1c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:9c:0a:ea:1b:d8:40:11:0c:43:a8:e2:2a:de: 2c:94:51:e7:3d:b5:c7:c8:a9:83:9c:ae:5a:a1:6a: 2b:c1:a9:81:5b:bf:73:55:39:e0:cf:61:08:df:66: fa:4c:69:62:62:b0:42:37:fa:a6:59:db:7b:7b:fa: 1e:2f:6e:4f:52:46:2a:07:6f:39:f8:58:26:37:95: fa:0f:58:f6:10:10:0a:d4:f2:3e:af:bf:ef:fb:16: 6a:91:0f:31:3e:2e:d6:5e:d6:c3:ac:f4:d2:8f:5e: 18:08:df:df:32:a3:69:0a:9e:0a:6d:ba:69:68:db: b6:01:dc:36:8a:50:1c:2a:62:6b:c6:85:36:80:7d: 1b:bc:4f:d7:60:3b:7e:c6:a9:68:a8:93:70:a3:27: e5:84:85:0d:cb:4e:b1:40:1b:7b:59:e3:30:05:e0: ab:c4:5d:32:82:5d:fe:93:fb:2e:56:a4:a0:37:13: 25:e1:32:c3:c9:98:e6:d2:90:62:ce:32:d0:2c:4f: 33:18:a6:17:44:ee:79:a7:20:d9:1c:3a:ea:22:75: 01:cb:64:12:65:9f:25:a5:fe:cf:68:e5:4f:a0:a2: 9d:fb:9a:d4:e3:ed:03:df:51:f4:39:28:39:c6:fd: d4:96:81:5e:6e:74:bd:e3:17:ce:39:f9:41:a9:c0: e4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:16:E4:03:18:21:22:80:37:D1:B3:40:76:D9:D6:32:E2:DA:09:C2 X509v3 Authority Key Identifier: keyid:12:00:8D:BA:B7:8C:B3:1F:29:94:E1:48:4E:A3:F2:42:74:B9:D1:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:78:e7:d1:68:33:6a:20:67:47:10:57:98:e8:cf:6f:8f:e6: b0:27:bc:57:f9:88:3b:57:1a:37:b5:78:d4:11:a3:02:f9:39: 62:47:83:37:15:60:57:65:a0:4f:de:2a:2d:47:65:26:a4:21: 8a:01:9d:82:74:46:63:69:da:9d:7b:54:61:c4:e5:02:1d:c7: b7:01:65:5c:6c:e2:73:9c:7e:40:87:5f:3a:66:d6:ed:0e:72: bf:f8:0b:29:ec:f8:08:ea:8e:b7:d5:71:f0:08:0b:44:63:36: 79:13:a7:08:c6:6d:52:3f:ce:b6:8d:5a:5e:7a:c6:e5:82:89: df:b6:e5:5b:22:54:a8:98:2a:5e:d2:5f:ae:e3:3f:9f:c5:61: 16:df:78:3e:4c:9b:9e:1c:7c:90:b2:2c:65:b8:14:02:c8:a7: 5d:46:51:ba:bc:e1:b1:80:43:e0:64:e0:55:a0:14:17:f4:91: 25:a1:04:97:72:fd:a5:52:1e:81:51:a6:3b:02:de:d3:1f:08: 2f:2e:fc:c4:85:df:c0:48:84:11:82:c5:46:0b:94:09:91:aa: ee:54:da:e4:59:c1:72:3f:78:d0:cc:75:a5:26:da:c7:01:0f: 28:97:b8:d3:73:3b:63:4a:11:f3:84:6b:2a:c3:33:3a:ad:0a: 1e:49:30:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJCNEMxMTAvBgNVBAUTKDEyMDA4REJBQjc4Q0IzMUYyOTk0RTE0ODRFQTNGMjQy NzRCOUQxQTgwHhcNMjUwNDA0MTg1ODUzWhcNMjUwNDExMTg1ODUzWjAYMRYwFAYD VQQDEw02N2YwMmJlZC0xYzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ZwK6hvYQBEMQ6jiKt4slFHnPbXHyKmDnK5aoWorwamBW79zVTngz2EI32b6 TGliYrBCN/qmWdt7e/oeL25PUkYqB285+FgmN5X6D1j2EBAK1PI+r7/v+xZqkQ8x Pi7WXtbDrPTSj14YCN/fMqNpCp4KbbppaNu2Adw2ilAcKmJrxoU2gH0bvE/XYDt+ xqloqJNwoyflhIUNy06xQBt7WeMwBeCrxF0ygl3+k/suVqSgNxMl4TLDyZjm0pBi zjLQLE8zGKYXRO55pyDZHDrqInUBy2QSZZ8lpf7PaOVPoKKd+5rU4+0D31H0OSg5 xv3UloFebnS94xfOOflBqcDkhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJsW5AMY ISKAN9GzQHbZ1jLi2gnCMB8GA1UdIwQYMBaAFBIAjbq3jLMfKZThSE6j8kJ0udGo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkI0Qy83QkE1NDI1ODFB NzUxMUVBQUUxOUUzN0FDNEY5QUUwMi9FZ0NOdXJlTXN4OHBsT0ZJVHFQeVFuUzUw YWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VnQ051cmVNc3g4cGxPRklUcVB5UW5TNTBhZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkI0Qy83QkE1NDI1ODFBNzUxMUVBQUUxOUUzN0FDNEY5QUUwMi9FZ0NOdXJlTXN4 OHBsT0ZJVHFQeVFuUzUwYWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDeOfRaDNqIGdHEFeY6M9vj+awJ7xX+Yg7Vxo3tXjUEaMC+TliR4M3 FWBXZaBP3iotR2UmpCGKAZ2CdEZjadqde1RhxOUCHce3AWVcbOJznH5Ah186Ztbt DnK/+Asp7PgI6o631XHwCAtEYzZ5E6cIxm1SP862jVpeesblgonftuVbIlSomCpe 0l+u4z+fxWEW33g+TJueHHyQsixluBQCyKddRlG6vOGxgEPgZOBVoBQX9JEloQSX cv2lUh6BUaY7At7THwgvLvzEhd/ASIQRgsVGC5QJkaruVNrkWcFyP3jQzHWlJtrH AQ8ol7jTcztjShHzhGsqwzM6rQoeSTAh -----END CERTIFICATE-----Generated at Sat Apr 5 07:57:12 2025 by rpki-client