$ rpki-client -vvf rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft File: eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft (raw, json) Hash identifier: 2LxKkYRK6zcDhPhLKv93uRk1fOt8weoz0YSvoM96IYQ= Subject key identifier: DD:53:34:15:33:1D:80:08:BF:F6:25:F2:32:48:75:03:EA:1F:3A:59 Authority key identifier: 78:EC:0F:0E:49:4F:22:8E:AA:43:83:D6:C6:0D:EB:1C:36:2A:50:51 Certificate issuer: /CN=A914CFBF/serialNumber=78EC0F0E494F228EAA4383D6C60DEB1C362A5051 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOwPDklPIo6qQ4PWxg3rHDYqUFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft Manifest number: 38 Signing time: Sat 31 May 2025 07:10:22 +0000 Manifest this update: Sat 31 May 2025 07:10:22 +0000 Manifest next update: Sat 07 Jun 2025 07:10:22 +0000 Files and hashes: 1: eOwPDklPIo6qQ4PWxg3rHDYqUFE.crl (hash: Op4qkpufd4CqORvci1eNy6GJf8X6yvFyHIDFf+jYtPg=) 2: FDB7B000370C11F08D3A0061C4F9AE02.roa (hash: Oi7qbfIeedADNBuGLbSCRcKYQPpXPMSZUOd7rqg8qXg=) 3: 7FDB55F4ED1211EFAD21985DC4F9AE02.roa (hash: SxbvQb0AhwJxdqmMLleQ5Oebk4aeq+L/Y76ffLrCJ+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.crl rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOwPDklPIo6qQ4PWxg3rHDYqUFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:10:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CFBF, serialNumber=78EC0F0E494F228EAA4383D6C60DEB1C362A5051 Validity Not Before: May 31 07:10:22 2025 GMT Not After : Jun 7 07:10:22 2025 GMT Subject: CN=683aab5e-1247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b5:9d:55:d4:55:6b:5d:cc:00:6e:9d:54:3f: d6:f0:5b:c1:b8:c5:60:92:bb:ec:3b:3d:0b:55:94: b9:ab:a4:b1:c6:9e:e6:fc:f4:d9:a1:09:20:d7:88: 34:0c:ac:e8:ac:56:ed:54:c7:c9:b9:71:fa:c8:e0: b7:5b:9a:56:cc:d9:61:cf:18:38:89:6a:37:96:1f: b6:7d:eb:4d:eb:d5:5b:09:d7:dd:2a:19:ee:28:f5: 80:ee:c3:9b:ec:9e:0c:a6:73:c0:74:20:f9:a9:4b: 96:41:43:44:3c:ee:b9:e2:8a:dc:0a:ce:77:56:35: c9:df:86:64:b4:c5:3e:af:8c:66:cb:f0:a6:c8:bb: e4:fb:cc:f0:a8:31:1f:7f:c1:7c:97:c5:7e:9b:9c: d8:d6:e1:52:ff:ab:58:71:34:60:03:d9:5b:86:c5: 31:5f:65:7a:d5:62:68:ac:5f:80:a6:24:4a:12:4c: 68:9c:b9:e0:96:f4:05:80:1b:30:f5:68:e1:ed:c7: e4:0b:88:d6:f2:ca:7b:9e:16:31:39:51:c5:f1:ad: 11:99:fb:12:76:82:9a:76:4e:a8:15:a1:a7:65:df: 87:8c:97:9c:97:96:62:b5:2e:33:aa:ca:cc:da:9d: 6d:ca:8a:b3:da:40:99:06:f5:a3:d8:00:7e:4a:ff: ba:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:53:34:15:33:1D:80:08:BF:F6:25:F2:32:48:75:03:EA:1F:3A:59 X509v3 Authority Key Identifier: keyid:78:EC:0F:0E:49:4F:22:8E:AA:43:83:D6:C6:0D:EB:1C:36:2A:50:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOwPDklPIo6qQ4PWxg3rHDYqUFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:9d:6d:01:5d:4d:ed:72:2c:fe:a8:2c:0e:f7:c0:87:b2:25: 51:17:ad:13:f3:bf:12:f4:b4:bb:12:eb:f8:d3:14:6b:da:01: 8b:71:6e:da:bd:f1:1f:72:a4:02:2f:4f:dc:88:71:c1:ad:48: 97:74:d0:12:e9:a6:9e:c3:5d:7e:be:c3:15:68:62:38:82:8b: 73:cc:7a:04:ba:df:6b:5b:6a:b1:07:65:72:cd:c4:a3:ad:48: 33:2f:39:de:e1:5f:c2:6d:88:d2:32:13:53:c1:dd:27:82:db: e1:89:86:19:f5:e5:2e:c0:b9:33:f9:d3:19:2a:e9:5f:ca:8d: 14:fb:77:21:03:46:91:53:1e:23:3c:68:99:93:f6:ad:d2:28: 8b:a6:17:ea:9e:3d:18:53:b8:d7:49:2a:95:de:07:11:03:bd: a3:43:50:7f:db:ce:3e:23:4c:c8:96:6f:3b:78:8c:d2:51:98: 47:16:39:6c:9a:69:de:75:5d:1e:5b:31:18:ae:f5:de:0b:3f: 67:59:4b:03:4c:b1:3d:47:ac:e6:e4:23:ea:d8:bd:3d:63:c6: f1:af:ce:77:c7:e1:cc:c2:7f:06:fc:91:98:92:b4:f5:db:d7: 5f:3f:53:b0:ce:6f:ca:ce:6f:71:9b:cb:94:77:be:fc:70:28: a3:df:9e:c8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Q0ZCRjExMC8GA1UEBRMoNzhFQzBGMEU0OTRGMjI4RUFBNDM4M0Q2QzYwREVCMUMz NjJBNTA1MTAeFw0yNTA1MzEwNzEwMjJaFw0yNTA2MDcwNzEwMjJaMBgxFjAUBgNV BAMTDTY4M2FhYjVlLTEyNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTtZ1V1FVrXcwAbp1UP9bwW8G4xWCSu+w7PQtVlLmrpLHGnub89NmhCSDXiDQM rOisVu1Ux8m5cfrI4LdbmlbM2WHPGDiJajeWH7Z9603r1VsJ190qGe4o9YDuw5vs ngymc8B0IPmpS5ZBQ0Q87rniitwKzndWNcnfhmS0xT6vjGbL8KbIu+T7zPCoMR9/ wXyXxX6bnNjW4VL/q1hxNGAD2VuGxTFfZXrVYmisX4CmJEoSTGicueCW9AWAGzD1 aOHtx+QLiNbyynueFjE5UcXxrRGZ+xJ2gpp2TqgVoadl34eMl5yXlmK1LjOqysza nW3KirPaQJkG9aPYAH5K/7pTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3VM0FTMd gAi/9iXyMkh1A+ofOlkwHwYDVR0jBBgwFoAUeOwPDklPIo6qQ4PWxg3rHDYqUFEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDRkJGLzMyNzYxMDM4RUQx MjExRUY5QjJENDk1Q0M0RjlBRTAyL2VPd1BEa2xQSW82cVE0UFd4ZzNySERZcVVG RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZU93UERrbFBJbzZxUTRQV3hnM3JIRFlxVUZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRD RkJGLzMyNzYxMDM4RUQxMjExRUY5QjJENDk1Q0M0RjlBRTAyL2VPd1BEa2xQSW82 cVE0UFd4ZzNySERZcVVGRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI2dbQFdTe1yLP6oLA73wIeyJVEXrRPzvxL0tLsS6/jTFGvaAYtxbtq9 8R9ypAIvT9yIccGtSJd00BLppp7DXX6+wxVoYjiCi3PMegS632tbarEHZXLNxKOt SDMvOd7hX8JtiNIyE1PB3SeC2+GJhhn15S7AuTP50xkq6V/KjRT7dyEDRpFTHiM8 aJmT9q3SKIumF+qePRhTuNdJKpXeBxEDvaNDUH/bzj4jTMiWbzt4jNJRmEcWOWya ad51XR5bMRiu9d4LP2dZSwNMsT1HrObkI+rYvT1jxvGvznfH4czCfwb8kZiStPXb 118/U7DOb8rOb3Gby5R3vvxwKKPfnsg= -----END CERTIFICATE-----Generated at Sat May 31 17:04:53 2025 by rpki-client