$ rpki-client -vvf rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft File: eERZpLZsg1_PXW5aVoctkkfUZYo.mft (raw, json) Hash identifier: bPEcnx83sKIje/7CkWB4mzzFM4+uTRzB4IeUmcbUYZo= Subject key identifier: 4A:B1:2C:FB:B1:B2:68:0C:BB:C6:77:F6:2C:30:31:A6:80:F1:70:88 Authority key identifier: 78:44:59:A4:B6:6C:83:5F:CF:5D:6E:5A:56:87:2D:92:47:D4:65:8A Certificate issuer: /CN=A9145258/serialNumber=784459A4B66C835FCF5D6E5A56872D9247D4658A Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eERZpLZsg1_PXW5aVoctkkfUZYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft Manifest number: 43 Signing time: Sat 31 May 2025 07:04:43 +0000 Manifest this update: Sat 31 May 2025 07:04:43 +0000 Manifest next update: Sat 07 Jun 2025 07:04:43 +0000 Files and hashes: 1: eERZpLZsg1_PXW5aVoctkkfUZYo.crl (hash: nj/99ULBcUCaDVqdSmFYj3zQ3yErN0+ln+SoIEf8Jfg=) 2: 2C7AE786042711F0BCEB4A75C4F9AE02.roa (hash: TfwuteF4CSmQI9K6dXSTpQXiyzOgk2P0dxR5uxSFtEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.crl rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eERZpLZsg1_PXW5aVoctkkfUZYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145258, serialNumber=784459A4B66C835FCF5D6E5A56872D9247D4658A Validity Not Before: May 31 07:04:43 2025 GMT Not After : Jun 7 07:04:43 2025 GMT Subject: CN=683aaa0b-6a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fc:c8:a4:cd:a6:c1:71:6d:ab:d2:90:a4:13: 27:1d:8c:2c:6c:2c:91:4d:e7:30:53:df:d6:c0:e5: f1:60:bf:bf:5e:18:d9:37:9b:b2:c0:a8:9a:00:40: 75:a5:73:91:4b:e2:07:a3:09:46:15:a9:c6:ed:17: ce:d8:08:75:a2:48:66:ac:a9:1b:8f:5f:8d:ec:67: 1f:f7:bc:6e:b3:ca:3d:b3:56:1b:ab:c1:88:aa:d9: 23:e1:d9:41:de:3f:64:a3:40:df:6d:c3:35:9b:92: 75:1b:d9:16:bc:93:1c:e8:3c:db:aa:b6:ef:91:bf: 49:c0:bb:f9:e9:16:93:0a:9a:61:02:83:e3:ea:6c: 43:e7:29:1a:db:69:77:d7:7c:00:cf:f0:5c:7b:2c: 9e:47:7f:95:9d:77:23:63:c0:7e:40:9e:76:ff:fe: 8f:45:4d:fb:1d:88:e9:9a:58:79:8f:4e:a6:44:a0: c6:9e:71:43:e2:5a:38:9c:4b:9d:a5:b1:62:07:18: ac:71:7f:9a:07:d8:9e:58:e6:5d:86:06:63:09:7a: d9:ca:96:2f:46:9e:a4:31:10:6f:a1:25:5f:22:a5: 24:06:cf:73:3e:45:10:f4:ce:80:b2:2e:37:94:09: c1:08:73:27:bd:39:e9:fc:cb:46:d2:ef:11:51:71: 15:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B1:2C:FB:B1:B2:68:0C:BB:C6:77:F6:2C:30:31:A6:80:F1:70:88 X509v3 Authority Key Identifier: keyid:78:44:59:A4:B6:6C:83:5F:CF:5D:6E:5A:56:87:2D:92:47:D4:65:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eERZpLZsg1_PXW5aVoctkkfUZYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:38:48:02:a4:f7:0a:e8:39:68:34:8c:c4:cb:e6:a4:52:84: b0:6e:ee:ac:c2:80:d6:84:56:c3:86:de:26:f7:36:22:e5:ce: 9d:26:bb:6f:b6:0f:82:27:f9:31:e7:70:58:3c:91:97:73:d0: 01:bc:27:6c:fe:fd:0b:b7:3e:db:a1:af:0f:84:6c:31:3d:31: 72:b9:7e:71:c3:7d:c1:52:82:85:94:48:8c:8c:a7:9b:78:f7: 8a:5a:ea:43:57:ba:87:6a:45:80:74:d3:80:0c:55:1b:22:89: e0:88:ca:30:85:38:80:43:48:ba:2a:b8:32:cf:ae:07:76:e9: c4:9f:16:d7:e9:95:fc:8c:3e:db:b7:30:b5:36:f2:58:2d:bd: 4c:66:2a:5e:9e:27:0c:89:ac:a9:34:02:b1:bd:8e:e6:54:88: 3e:76:a8:21:79:69:53:0c:9f:18:7a:4e:cc:d2:c2:07:60:a7: d5:58:d1:1a:9c:ca:d4:61:91:a5:3e:38:c9:ba:23:ed:a3:79: 4d:8a:34:bd:75:9f:ae:bf:fd:85:bb:42:db:50:6a:de:d5:e3: ed:2d:52:ca:16:ba:ea:52:b2:c6:33:3a:dc:3a:3d:d0:8a:e9: 31:5d:65:b5:85:85:29:da:ce:09:62:04:ca:fc:e5:d4:05:64: 0a:8b:14:ab -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NTI1ODExMC8GA1UEBRMoNzg0NDU5QTRCNjZDODM1RkNGNUQ2RTVBNTY4NzJEOTI0 N0Q0NjU4QTAeFw0yNTA1MzEwNzA0NDNaFw0yNTA2MDcwNzA0NDNaMBgxFjAUBgNV BAMTDTY4M2FhYTBiLTZhODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDU/MikzabBcW2r0pCkEycdjCxsLJFN5zBT39bA5fFgv79eGNk3m7LAqJoAQHWl c5FL4gejCUYVqcbtF87YCHWiSGasqRuPX43sZx/3vG6zyj2zVhurwYiq2SPh2UHe P2SjQN9twzWbknUb2Ra8kxzoPNuqtu+Rv0nAu/npFpMKmmECg+PqbEPnKRrbaXfX fADP8Fx7LJ5Hf5WddyNjwH5Annb//o9FTfsdiOmaWHmPTqZEoMaecUPiWjicS52l sWIHGKxxf5oH2J5Y5l2GBmMJetnKli9GnqQxEG+hJV8ipSQGz3M+RRD0zoCyLjeU CcEIcye9Oen8y0bS7xFRcRUFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSrEs+7Gy aAy7xnf2LDAxpoDxcIgwHwYDVR0jBBgwFoAUeERZpLZsg1/PXW5aVoctkkfUZYow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1MjU4L0FDMDlDNkVFRTMw NjExRUZBODA3QjA1M0M0RjlBRTAyL2VFUlpwTFpzZzFfUFhXNWFWb2N0a2tmVVpZ by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZUVSWnBMWnNnMV9QWFc1YVZvY3Rra2ZVWllvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 MjU4L0FDMDlDNkVFRTMwNjExRUZBODA3QjA1M0M0RjlBRTAyL2VFUlpwTFpzZzFf UFhXNWFWb2N0a2tmVVpZby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABM4SAKk9wroOWg0jMTL5qRShLBu7qzCgNaEVsOG3ib3NiLlzp0mu2+2 D4In+THncFg8kZdz0AG8J2z+/Qu3Ptuhrw+EbDE9MXK5fnHDfcFSgoWUSIyMp5t4 94pa6kNXuodqRYB004AMVRsiieCIyjCFOIBDSLoquDLPrgd26cSfFtfplfyMPtu3 MLU28lgtvUxmKl6eJwyJrKk0ArG9juZUiD52qCF5aVMMnxh6TszSwgdgp9VY0Rqc ytRhkaU+OMm6I+2jeU2KNL11n66//YW7QttQat7V4+0tUsoWuupSssYzOtw6PdCK 6TFdZbWFhSnazgliBMr85dQFZAqLFKs= -----END CERTIFICATE-----Generated at Sat May 31 16:40:43 2025 by rpki-client