$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft File: EAXM1eGCMPuprdPSf4XaOPE-QXI.mft (raw, json) Hash identifier: Dp88rQNxL3oMh6SqRL0cVSFXUehRc4L8699TuyXjHjI= Subject key identifier: 3C:EA:31:6B:70:71:3F:85:6E:F1:43:17:E1:0C:0B:F2:68:E7:BD:A9 Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Certificate serial: 03B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft Manifest number: 0349 Signing time: Sat 31 May 2025 01:30:10 +0000 Manifest this update: Sat 31 May 2025 01:30:10 +0000 Manifest next update: Sat 07 Jun 2025 01:30:10 +0000 Files and hashes: 1: EAXM1eGCMPuprdPSf4XaOPE-QXI.crl (hash: 2WrZJ8fYmI/zJBxKnxY8gn5h0LmNCLq2UzKA3w3eDws=) 2: 90D0D0C4932111EE9C797C3DC4F9AE02.roa (hash: O+w5tLUYY2vDAPyyihGdNaVeLcPrzrretQfcUAVViMY=) 3: 010342748FE911EDA6F5922AC4F9AE02.roa (hash: 5w2gwK/+zmYTYrBGcuIv1emp3tFDL4QjnfqeQ2tORBo=) 4: 1B2129BEA89C11EFB7509755C4F9AE02.roa (hash: KY39ZDloooDTLSWdSYEfYOluFdXRey3d+9IwjJV7kvw=) 5: 3BFEA04CB6A611EDAF611B68C4F9AE02.roa (hash: w55707A6oGZPVJb5dLEvH7DmAsCJ21ZtMMUXzrwNCRM=) 6: 5BE270E26BBC11EFA9584A4EC4F9AE02.roa (hash: PO28TqT7JFAgsJS4OG8H4ivCR2vG+AQUGdE3hSyf+fM=) 7: 7CCE329266F711EF86880681C4F9AE02.roa (hash: 6anx6+tUYpCyea4W0BqwQSGkyUCAr4k+8K9NAhmwsJE=) 8: 21B7F8F2932111EEA205F93BC4F9AE02.roa (hash: BC1XUzBkjyQzlz4GvtxH81hMdlkimJB+lU8F+PmiFVI=) 9: 118AD6DE11C611EEA9D06D11C4F9AE02.roa (hash: ABW3By8YU2W6olwHz1/qOoSOHNFidR8eMB8CQ1rCUFk=) 10: DBEED4E0B44911EEA11B100BC4F9AE02.roa (hash: q0o0blyQ81NictXAsmCb5KMZ0BzFrp/mj7hc480MWyw=) 11: C68D1AE69B9611EFB95B8038C4F9AE02.roa (hash: R17w/Fkdvp/1oePeXfLYVtvseH7RLcT+pcv0SXzugK4=) 12: 4A27AA70305B11F08E81A33BC4F9AE02.roa (hash: QdBFtLVQnvTC0U8ce4xfWA4Knfofq/bGhnYdWQPREvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:30:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 944 (0x3b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Validity Not Before: May 31 01:30:10 2025 GMT Not After : Jun 7 01:30:10 2025 GMT Subject: CN=683a5ba2-b295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2f:71:e2:6d:51:ab:9b:8b:2b:16:66:ad:78: 12:a4:10:f5:dc:b3:a3:ca:e1:54:db:81:83:63:19: 4e:d8:d9:c4:57:7a:b0:64:fd:dd:d2:75:7d:d1:00: c7:d8:cb:01:fc:79:f4:ec:66:8a:68:47:d5:c3:11: 93:a9:d6:b0:87:81:0c:b4:1b:bd:65:07:07:7a:c9: 1a:3d:1b:da:8d:bf:af:fb:48:68:d2:04:b8:c3:7d: 4d:ef:62:42:4b:bc:58:ba:d2:2c:71:63:b7:29:5b: eb:be:9e:9f:50:19:5d:cd:2d:59:48:db:e4:9c:e6: 83:f4:c6:87:3c:6e:cc:04:0a:62:f9:fc:0e:35:a8: 1a:9b:c0:27:ef:43:65:88:78:2c:aa:63:8c:fd:ab: 3c:9b:b2:82:7c:3e:e0:69:b1:1a:5b:49:89:d6:7d: cc:fc:52:0b:89:17:7d:0b:47:ab:66:f0:96:a7:83: c8:82:19:28:5b:be:a6:63:ba:e5:20:10:7e:1c:0e: ed:81:99:3f:d0:ca:26:db:b9:a4:cc:74:1a:27:da: 0f:33:c8:63:65:10:90:c6:61:c8:94:29:a7:bb:56: 6d:f8:fa:3c:26:64:3e:63:bd:01:af:97:a9:26:db: 48:1b:3e:9b:cd:30:7d:12:de:57:a9:d6:e1:13:50: a4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EA:31:6B:70:71:3F:85:6E:F1:43:17:E1:0C:0B:F2:68:E7:BD:A9 X509v3 Authority Key Identifier: keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:50:7d:a3:b7:9d:de:03:d9:66:2b:88:86:7a:da:6b:85:d6: 81:6b:4c:66:11:67:02:60:cc:bb:e0:39:b1:1e:02:34:f7:8f: 80:77:9a:f6:11:aa:29:97:2b:36:11:d1:67:80:f9:c8:81:02: 37:b8:cf:1d:19:c5:3e:a8:2e:d2:db:85:9a:4b:04:1a:59:5e: 1c:4d:fb:73:b8:9a:72:1b:12:11:85:9f:d1:6e:9b:8d:63:f1: 74:ac:a0:e4:f8:a2:09:74:1d:1e:a7:b7:7e:ec:6f:1e:4c:20: 90:d8:e3:36:01:86:0b:89:c4:95:55:3a:4b:03:00:a1:58:77: 06:80:8e:fe:16:f5:7c:cb:5f:20:90:ea:1d:00:13:bf:65:86: 4f:12:7b:54:7f:63:60:63:6f:ac:e2:12:4e:23:f4:4f:7d:e2: 0e:c9:3e:6f:98:38:91:09:a7:49:0e:f3:0f:7e:c6:b3:05:a4: 7e:61:b0:9b:e4:2a:f2:e3:02:9a:f5:1e:87:75:c0:a2:e7:84: 7d:eb:fa:b0:ea:0d:8c:cb:e8:8d:59:27:cb:e6:3e:d7:93:55: 68:dc:17:a7:ef:3d:72:fd:f5:4b:5f:8b:35:d6:72:8f:b8:d2: d5:f7:27:63:c4:b5:49:f1:42:7c:80:48:48:c9:10:0a:bc:5c: ca:a0:92:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4 RjEzRTQxNzIwHhcNMjUwNTMxMDEzMDEwWhcNMjUwNjA3MDEzMDEwWjAYMRYwFAYD VQQDEw02ODNhNWJhMi1iMjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2i9x4m1Rq5uLKxZmrXgSpBD13LOjyuFU24GDYxlO2NnEV3qwZP3d0nV90QDH 2MsB/Hn07GaKaEfVwxGTqdawh4EMtBu9ZQcHeskaPRvajb+v+0ho0gS4w31N72JC S7xYutIscWO3KVvrvp6fUBldzS1ZSNvknOaD9MaHPG7MBApi+fwONagam8An70Nl iHgsqmOM/as8m7KCfD7gabEaW0mJ1n3M/FILiRd9C0erZvCWp4PIghkoW76mY7rl IBB+HA7tgZk/0Mom27mkzHQaJ9oPM8hjZRCQxmHIlCmnu1Zt+Po8JmQ+Y70Br5ep JttIGz6bzTB9Et5XqdbhE1Ck5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzqMWtw cT+FbvFDF+EMC/Jo572pMB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEFGMi83M0M4ODc5MkUwNjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01Q dXByZFBTZjRYYU9QRS1RWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUUH2jt53eA9lmK4iGetprhdaBa0xmEWcCYMy74DmxHgI094+Ad5r2 Eaoplys2EdFngPnIgQI3uM8dGcU+qC7S24WaSwQaWV4cTftzuJpyGxIRhZ/RbpuN Y/F0rKDk+KIJdB0ep7d+7G8eTCCQ2OM2AYYLicSVVTpLAwChWHcGgI7+FvV8y18g kOodABO/ZYZPEntUf2NgY2+s4hJOI/RPfeIOyT5vmDiRCadJDvMPfsazBaR+YbCb 5Cry4wKa9R6HdcCi54R96/qw6g2My+iNWSfL5j7Xk1Vo3Ben7z1y/fVLX4s11nKP uNLV9ydjxLVJ8UJ8gEhIyRAKvFzKoJLn -----END CERTIFICATE-----Generated at Sat May 31 14:43:10 2025 by rpki-client