$ rpki-client -vvf rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft File: eo-Oag5Y9XX8feHNg4R51_c_4nk.mft (raw, json) Hash identifier: fVnd+G1R5ZMGokm8EIbf9X+s1z2IMUvUN3q03ZcIID8= Subject key identifier: 29:03:4B:EF:92:45:26:1A:4C:4E:A1:87:94:20:54:A5:31:80:17:0F Authority key identifier: 7A:8F:8E:6A:0E:58:F5:75:FC:7D:E1:CD:83:84:79:D7:F7:3F:E2:79 Certificate issuer: /CN=A91775B7/serialNumber=7A8F8E6A0E58F575FC7DE1CD838479D7F73FE279 Certificate serial: 34A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eo-Oag5Y9XX8feHNg4R51_c_4nk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft Manifest number: 3494 Signing time: Sat 31 May 2025 15:06:11 +0000 Manifest this update: Sat 31 May 2025 15:06:10 +0000 Manifest next update: Sat 07 Jun 2025 15:06:10 +0000 Files and hashes: 1: eo-Oag5Y9XX8feHNg4R51_c_4nk.crl (hash: 38lU4ffmY2uaXXACtoFDdUYkCsWWkbpta7wt+eP5oM4=) 2: 92210D6AB66711EC86445C11C4F9AE02.roa (hash: d5k3YRL/FAKw8Wd7VKIcrrwAMtmamoxhcmJJDByEkkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.crl rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eo-Oag5Y9XX8feHNg4R51_c_4nk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:06:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13473 (0x34a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91775B7, serialNumber=7A8F8E6A0E58F575FC7DE1CD838479D7F73FE279 Validity Not Before: May 31 15:06:10 2025 GMT Not After : Jun 7 15:06:10 2025 GMT Subject: CN=683b1ae3-5848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4e:ba:bf:d7:fc:e2:f1:7c:30:cc:c1:84:a0: a5:a9:f4:6b:9c:e6:a3:e5:29:98:22:c0:f2:7c:bc: 3e:cf:54:27:c8:b5:7d:36:2a:f1:d3:e5:69:b9:01: 91:e1:5a:f4:3e:7e:97:52:c9:99:20:88:b4:4a:fc: e3:90:82:91:3e:54:44:9b:ee:d6:01:0b:a8:82:f9: 44:46:65:a0:b1:f7:7c:f2:d7:e1:66:3e:e3:a1:cf: b7:6e:a5:62:82:8e:46:30:ce:fe:8a:1a:8e:44:24: 31:67:bb:7d:c1:98:3f:32:4d:c0:4b:07:ac:e9:13: a0:e9:3e:78:d8:fa:75:1f:ab:51:d7:4b:d5:ed:16: 09:64:f4:8d:38:4c:ff:59:38:81:ef:b7:c9:9a:3a: a5:e4:ce:42:ec:a8:47:50:b4:c1:ef:de:96:2c:9c: ee:d7:a2:44:a8:bb:73:99:e8:35:ea:33:fd:89:f7: 2b:01:4d:5a:8b:65:4e:b5:46:cd:57:0e:e6:8b:b0: d6:b7:58:94:65:3c:21:94:b5:b7:dc:f6:9c:97:54: 99:77:d6:c5:f2:1f:a7:d3:03:60:e8:a7:9b:03:9c: 58:05:cb:1e:cb:c1:f1:6a:c4:ca:95:cf:23:c5:00: e0:63:3f:e9:14:e0:b8:7b:15:ab:28:42:6b:d8:23: ab:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:03:4B:EF:92:45:26:1A:4C:4E:A1:87:94:20:54:A5:31:80:17:0F X509v3 Authority Key Identifier: keyid:7A:8F:8E:6A:0E:58:F5:75:FC:7D:E1:CD:83:84:79:D7:F7:3F:E2:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eo-Oag5Y9XX8feHNg4R51_c_4nk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:04:c6:cb:ca:24:1d:8b:4f:1e:6f:ea:34:d6:e6:c7:af:85: 18:68:28:e9:19:28:47:c7:86:d1:5c:30:f5:54:2e:d7:fb:01: 05:09:20:c0:00:1d:71:31:37:2a:00:b4:e0:52:6c:08:04:8b: 87:69:e7:ff:ba:a6:c4:56:ca:f5:37:d7:be:91:95:23:cd:7d: ca:ad:24:8e:66:c6:1a:e3:62:8a:46:8e:1f:2f:4d:ff:c0:b3: 48:54:d4:18:ee:4c:60:98:9d:94:be:4f:be:5d:97:a3:84:e3: 23:6b:5c:e6:1b:31:b7:de:5f:c7:27:53:b3:56:f3:2c:dd:18: fc:f7:66:95:42:d4:0a:6d:9b:90:09:cc:cd:3a:be:5e:0e:79: 76:48:04:0d:12:d8:1b:1f:82:88:4b:cb:e3:8a:a9:f0:64:31: 7b:57:2d:0c:30:8b:1e:99:ed:1e:93:f4:66:f0:bf:23:a8:2f: e2:19:68:b5:32:e9:21:51:a2:8d:09:ab:46:bf:4b:92:5d:c9: 05:a2:b0:88:09:38:47:92:b9:d9:33:f1:58:97:cc:04:2b:9d: 01:6b:78:62:b9:de:1e:e3:34:fe:2f:d2:23:ee:aa:14:42:2c: df:19:72:0c:e0:23:8f:65:2d:1f:50:e1:ef:89:e7:49:1b:8e: 93:64:20:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc1QjcxMTAvBgNVBAUTKDdBOEY4RTZBMEU1OEY1NzVGQzdERTFDRDgzODQ3OUQ3 RjczRkUyNzkwHhcNMjUwNTMxMTUwNjEwWhcNMjUwNjA3MTUwNjEwWjAYMRYwFAYD VQQDEw02ODNiMWFlMy01ODQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsk66v9f84vF8MMzBhKClqfRrnOaj5SmYIsDyfLw+z1QnyLV9Nirx0+VpuQGR 4Vr0Pn6XUsmZIIi0SvzjkIKRPlREm+7WAQuogvlERmWgsfd88tfhZj7joc+3bqVi go5GMM7+ihqORCQxZ7t9wZg/Mk3ASwes6ROg6T542Pp1H6tR10vV7RYJZPSNOEz/ WTiB77fJmjql5M5C7KhHULTB796WLJzu16JEqLtzmeg16jP9ifcrAU1ai2VOtUbN Vw7mi7DWt1iUZTwhlLW33Pacl1SZd9bF8h+n0wNg6KebA5xYBcsey8HxasTKlc8j xQDgYz/pFOC4exWrKEJr2COrDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkDS++S RSYaTE6hh5QgVKUxgBcPMB8GA1UdIwQYMBaAFHqPjmoOWPV1/H3hzYOEedf3P+J5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzVCNy8wOEE0OUJEMjFE QTIxMUUyOTM2NDk1OTQwOEIwMkNEMi9lby1PYWc1WTlYWDhmZUhOZzRSNTFfY180 bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VvLU9hZzVZOVhYOGZlSE5nNFI1MV9jXzRuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzVCNy8wOEE0OUJEMjFEQTIxMUUyOTM2NDk1OTQwOEIwMkNEMi9lby1PYWc1WTlY WDhmZUhOZzRSNTFfY180bmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvBMbLyiQdi08eb+o01ubHr4UYaCjpGShHx4bRXDD1VC7X+wEFCSDA AB1xMTcqALTgUmwIBIuHaef/uqbEVsr1N9e+kZUjzX3KrSSOZsYa42KKRo4fL03/ wLNIVNQY7kxgmJ2Uvk++XZejhOMja1zmGzG33l/HJ1OzVvMs3Rj892aVQtQKbZuQ CczNOr5eDnl2SAQNEtgbH4KIS8vjiqnwZDF7Vy0MMIseme0ek/Rm8L8jqC/iGWi1 MukhUaKNCatGv0uSXckForCICThHkrnZM/FYl8wEK50Ba3hiud4e4zT+L9Ij7qoU QizfGXIM4COPZS0fUOHviedJG46TZCBD -----END CERTIFICATE-----Generated at Sat May 31 17:34:27 2025 by rpki-client