$ rpki-client -vvf rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft File: eOQpC8zJmRWAsnbcDCyXv7CGINg.mft (raw, json) Hash identifier: i25B9g7N6a1OfDyYECFxxIt8BV2A2tZPylB/6BCNEDc= Subject key identifier: A1:12:BE:C2:CA:8D:AB:3D:40:6F:9A:6F:85:A1:5A:E5:AA:A0:22:03 Authority key identifier: 78:E4:29:0B:CC:C9:99:15:80:B2:76:DC:0C:2C:97:BF:B0:86:20:D8 Certificate issuer: /CN=A914B79F/serialNumber=78E4290BCCC9991580B276DC0C2C97BFB08620D8 Certificate serial: 014E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft Manifest number: 0148 Signing time: Sat 31 May 2025 03:57:14 +0000 Manifest this update: Sat 31 May 2025 03:57:14 +0000 Manifest next update: Sat 07 Jun 2025 03:57:14 +0000 Files and hashes: 1: eOQpC8zJmRWAsnbcDCyXv7CGINg.crl (hash: RgkglDS+nqyRyZZkpzVcXn42iqo3AoFJfX8mQe6F26Y=) 2: 071BCFF849D011EF9F8A8969C4F9AE02.roa (hash: ta+wizYmG5Li1UNdnV+RjnG6RQDSQFnDtjBK6l15sJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.crl rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:57:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B79F, serialNumber=78E4290BCCC9991580B276DC0C2C97BFB08620D8 Validity Not Before: May 31 03:57:14 2025 GMT Not After : Jun 7 03:57:14 2025 GMT Subject: CN=683a7e1a-31d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c0:5c:6e:6a:ab:e2:63:d6:fe:f8:82:11:bc: 1e:1c:36:00:5b:43:53:39:66:41:7c:90:7f:77:cd: 56:74:16:54:d9:61:22:c4:f3:44:bc:ad:98:f5:93: 28:7a:e0:c0:4f:36:1a:d3:5c:4d:0b:c0:e6:0c:cb: 62:3f:9e:56:f8:41:cd:9f:f6:72:aa:cd:58:86:be: e8:05:22:5f:1d:4e:6a:d3:63:64:7c:23:9c:50:1b: 73:13:9d:15:56:66:42:b9:d7:fe:38:4e:3e:32:f4: 02:73:ad:76:c2:84:48:6c:c4:cd:db:1d:7e:23:e7: 0f:e6:ee:b9:a8:69:46:d4:06:94:7e:41:4b:07:36: 3f:1b:9e:f0:2d:5a:ca:26:e7:c0:fb:a5:33:df:c6: 86:17:cf:04:a0:d6:16:62:0d:11:60:a5:51:46:12: 8d:94:8c:b6:1a:5f:44:40:4a:03:35:67:8b:32:3b: 35:3a:9c:8b:79:c9:27:62:59:28:cb:c9:9d:61:7d: 34:05:c0:47:de:f1:a8:d9:bd:6f:58:f8:63:c6:66: 48:fb:c4:ab:1f:85:be:f6:cf:36:11:92:31:eb:7b: b5:19:67:97:08:fb:07:b8:47:e7:89:58:c1:9e:cc: cd:0f:b8:67:24:55:39:08:3b:df:f0:20:ba:00:67: 96:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:12:BE:C2:CA:8D:AB:3D:40:6F:9A:6F:85:A1:5A:E5:AA:A0:22:03 X509v3 Authority Key Identifier: keyid:78:E4:29:0B:CC:C9:99:15:80:B2:76:DC:0C:2C:97:BF:B0:86:20:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:68:89:8c:6e:f2:93:b7:f9:2e:06:1a:1f:3e:00:e8:9e:96: 78:7d:87:54:a2:08:35:52:6b:8e:f8:74:74:70:4c:c2:2c:69: ae:9a:64:52:ed:68:9c:98:22:80:d7:ba:a9:77:02:02:fa:73: 01:80:a4:29:66:38:4b:96:8e:6d:b4:b2:4e:df:08:a3:1f:4c: 9d:bc:f2:8c:54:88:0a:f2:8c:80:36:26:5e:ce:49:d5:72:48: 7a:e9:54:47:3c:21:69:5f:35:eb:12:0e:d7:57:d0:d7:33:da: f6:fb:d5:1b:34:a1:93:1c:82:e8:67:9d:1e:4f:8a:41:7b:12: b2:66:66:28:84:a2:f2:05:39:d0:c6:3a:2b:21:0f:b4:6b:10: c3:fa:96:88:25:6e:8d:b4:91:ad:2c:44:5c:4c:49:b3:bf:d7: 6f:12:bc:83:34:c8:9b:c0:50:7c:37:da:d0:19:57:ba:77:06: 14:99:6e:80:af:88:27:67:fb:98:74:16:22:c0:69:3f:62:ab: 81:6d:81:38:1b:c7:53:cf:91:81:be:78:a0:4d:c2:54:57:0b: 83:b5:87:66:a2:76:4a:97:e1:66:15:bc:4a:23:ab:c0:09:c8: 67:cb:ef:f2:5e:a3:43:b3:f7:80:33:00:c2:d4:18:b2:be:39: 6b:c7:bc:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI3OUYxMTAvBgNVBAUTKDc4RTQyOTBCQ0NDOTk5MTU4MEIyNzZEQzBDMkM5N0JG QjA4NjIwRDgwHhcNMjUwNTMxMDM1NzE0WhcNMjUwNjA3MDM1NzE0WjAYMRYwFAYD VQQDEw02ODNhN2UxYS0zMWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMBcbmqr4mPW/viCEbweHDYAW0NTOWZBfJB/d81WdBZU2WEixPNEvK2Y9ZMo euDATzYa01xNC8DmDMtiP55W+EHNn/Zyqs1Yhr7oBSJfHU5q02NkfCOcUBtzE50V VmZCudf+OE4+MvQCc612woRIbMTN2x1+I+cP5u65qGlG1AaUfkFLBzY/G57wLVrK JufA+6Uz38aGF88EoNYWYg0RYKVRRhKNlIy2Gl9EQEoDNWeLMjs1OpyLecknYlko y8mdYX00BcBH3vGo2b1vWPhjxmZI+8SrH4W+9s82EZIx63u1GWeXCPsHuEfniVjB nszND7hnJFU5CDvf8CC6AGeWTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKESvsLK jas9QG+ab4WhWuWqoCIDMB8GA1UdIwQYMBaAFHjkKQvMyZkVgLJ23Awsl7+whiDY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Qjc5Ri9EQTY4MzdGMDRF MjkxMUVFOTQ1QzM5NEZDNEY5QUUwMi9lT1FwQzh6Sm1SV0FzbmJjREN5WHY3Q0dJ TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VPUXBDOHpKbVJXQXNuYmNEQ3lYdjdDR0lOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Qjc5Ri9EQTY4MzdGMDRFMjkxMUVFOTQ1QzM5NEZDNEY5QUUwMi9lT1FwQzh6Sm1S V0FzbmJjREN5WHY3Q0dJTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQaImMbvKTt/kuBhofPgDonpZ4fYdUogg1UmuO+HR0cEzCLGmummRS 7WicmCKA17qpdwIC+nMBgKQpZjhLlo5ttLJO3wijH0ydvPKMVIgK8oyANiZezknV ckh66VRHPCFpXzXrEg7XV9DXM9r2+9UbNKGTHILoZ50eT4pBexKyZmYohKLyBTnQ xjorIQ+0axDD+paIJW6NtJGtLERcTEmzv9dvEryDNMibwFB8N9rQGVe6dwYUmW6A r4gnZ/uYdBYiwGk/YquBbYE4G8dTz5GBvnigTcJUVwuDtYdmonZKl+FmFbxKI6vA Cchny+/yXqNDs/eAMwDC1Biyvjlrx7yY -----END CERTIFICATE-----Generated at Sat May 31 17:00:18 2025 by rpki-client