$ rpki-client -vvf rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.mft File: e5GosBHWGcQnHUUgOg4z2Rhe94E.mft (raw, json) Hash identifier: /YTgch0ihm6IKezPrFu5wg1DZkrieNiEIMJRUWl8X14= Subject key identifier: B5:A5:74:EE:A1:08:0D:A9:D0:57:48:89:F4:6F:F8:F1:11:5F:56:72 Authority key identifier: 7B:91:A8:B0:11:D6:19:C4:27:1D:45:20:3A:0E:33:D9:18:5E:F7:81 Certificate issuer: /CN=A917EFA9/serialNumber=7B91A8B011D619C4271D45203A0E33D9185EF781 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5GosBHWGcQnHUUgOg4z2Rhe94E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.mft Manifest number: 013A Signing time: Thu 13 Mar 2025 03:05:00 +0000 Manifest this update: Thu 13 Mar 2025 03:05:00 +0000 Manifest next update: Thu 20 Mar 2025 03:05:00 +0000 Files and hashes: 1: e5GosBHWGcQnHUUgOg4z2Rhe94E.crl (hash: S2QjvsXe2TC/HCyvp5tTs4ZzVyJTjUtBsWaEbcuQUMg=) 2: 1468305C31A811EE939F1D33C4F9AE02.roa (hash: A0nJe/MkW8TSZdk/E2Vu0knizTlyVLUt37DSyW+bHLE=) 3: 113D35904DD611EE8F798349C4F9AE02.roa (hash: /egOGavRQgmetbzvLfczJLgMzHXL9RZQguM8QCgkO14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.crl rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5GosBHWGcQnHUUgOg4z2Rhe94E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 03:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EFA9 Validity Not Before: Mar 13 03:05:00 2025 GMT Not After : Mar 20 03:05:00 2025 GMT Subject: CN=67d24b5c-9014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8b:9f:38:8d:61:46:24:c3:49:0f:a1:a3:3d: aa:19:19:ed:d5:96:c5:78:24:16:bf:3c:3b:71:b7: e0:99:3d:b3:d6:60:b2:b0:2c:d9:20:c0:74:9a:23: 95:37:a7:ca:6d:09:c0:66:5d:33:e6:5b:81:a3:3f: 8a:41:2b:46:12:d4:aa:41:c2:26:22:39:da:f3:36: 1a:7e:f1:a6:78:9a:a0:77:ea:03:39:db:87:a0:9b: 7b:c3:b9:71:7f:ca:59:7c:83:71:99:30:56:e2:57: 96:81:e7:18:90:b0:10:7e:d4:f9:74:d3:dd:4e:03: 02:ec:30:a9:42:f3:cf:a6:fe:a1:26:3a:73:58:67: b9:ad:9f:42:3c:8c:6e:b4:03:a0:75:d6:28:2d:80: bf:e1:f7:4a:d8:e4:3f:23:83:64:2c:10:ce:87:df: 02:0f:68:4f:e7:cd:a0:3e:8c:94:bf:a2:9f:12:89: d2:b1:10:32:c0:d8:58:c8:6f:f9:d5:5a:7c:9d:31: 7b:bf:e4:fb:8a:8a:2c:c6:f0:e7:ae:22:ea:d0:64: 22:13:bb:22:99:3e:f2:4f:87:0b:13:96:b3:8c:36: c7:cc:ae:b1:09:31:34:eb:92:db:f0:d4:a6:9c:59: a5:b1:7c:33:fe:c6:83:54:e2:83:26:ee:9d:ee:dd: 07:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A5:74:EE:A1:08:0D:A9:D0:57:48:89:F4:6F:F8:F1:11:5F:56:72 X509v3 Authority Key Identifier: keyid:7B:91:A8:B0:11:D6:19:C4:27:1D:45:20:3A:0E:33:D9:18:5E:F7:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5GosBHWGcQnHUUgOg4z2Rhe94E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:a6:19:39:83:53:ae:57:ff:62:db:2c:d7:8e:21:1a:c6:82: fd:19:57:ee:58:f1:33:f9:58:89:86:73:49:d4:99:b0:a3:5f: 16:53:14:66:dd:4a:56:91:1e:e2:22:ae:35:30:28:6b:37:ad: 68:16:90:9b:c9:32:13:ff:c1:94:be:a0:94:02:fc:b3:c1:f8: de:ce:f9:ea:83:03:86:d9:65:ae:45:83:3a:18:a8:0f:84:2f: 44:38:af:25:37:dd:63:3a:d3:ef:86:cf:9f:e0:99:34:fc:0e: 1a:f7:d6:01:e6:cb:91:13:18:d2:2f:21:ee:7c:f4:de:2f:dd: ce:09:20:b6:06:bc:fb:f0:f5:b0:1f:de:f1:fa:9d:c2:df:11: d0:b0:fb:22:8b:c8:a4:5c:ba:1a:d9:85:71:89:f8:7e:9b:bf: 21:83:eb:2b:be:ad:fb:87:d7:e9:14:12:a4:e3:4e:49:dd:99: 03:fe:3d:f9:04:1f:bb:33:7e:c4:a5:c0:bc:81:75:18:a3:ee: a8:0b:91:4e:17:ac:5c:8e:dd:0a:9e:14:f5:f9:88:47:a0:ec: fb:8a:57:87:a8:86:d3:36:6a:d2:ef:06:c3:67:e6:8b:52:0b: fd:f1:83:b5:06:4a:78:28:da:df:78:00:78:24:31:d0:d6:b3: f0:ef:3b:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VGQTkxMTAvBgNVBAUTKDdCOTFBOEIwMTFENjE5QzQyNzFENDUyMDNBMEUzM0Q5 MTg1RUY3ODEwHhcNMjUwMzEzMDMwNTAwWhcNMjUwMzIwMDMwNTAwWjAYMRYwFAYD VQQDEw02N2QyNGI1Yy05MDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIufOI1hRiTDSQ+hoz2qGRnt1ZbFeCQWvzw7cbfgmT2z1mCysCzZIMB0miOV N6fKbQnAZl0z5luBoz+KQStGEtSqQcImIjna8zYafvGmeJqgd+oDOduHoJt7w7lx f8pZfINxmTBW4leWgecYkLAQftT5dNPdTgMC7DCpQvPPpv6hJjpzWGe5rZ9CPIxu tAOgddYoLYC/4fdK2OQ/I4NkLBDOh98CD2hP582gPoyUv6KfEonSsRAywNhYyG/5 1Vp8nTF7v+T7ioosxvDnriLq0GQiE7simT7yT4cLE5azjDbHzK6xCTE065Lb8NSm nFmlsXwz/saDVOKDJu6d7t0HewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWldO6h CA2p0FdIifRv+PERX1ZyMB8GA1UdIwQYMBaAFHuRqLAR1hnEJx1FIDoOM9kYXveB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUZBOS9FRDY4QjVGMDMx QTUxMUVFQkVGOEJEMkFDNEY5QUUwMi9lNUdvc0JIV0djUW5IVVVnT2c0ejJSaGU5 NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U1R29zQkhXR2NRbkhVVWdPZzR6MlJoZTk0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUZBOS9FRDY4QjVGMDMxQTUxMUVFQkVGOEJEMkFDNEY5QUUwMi9lNUdvc0JIV0dj UW5IVVVnT2c0ejJSaGU5NEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5phk5g1OuV/9i2yzXjiEaxoL9GVfuWPEz+ViJhnNJ1Jmwo18WUxRm 3UpWkR7iIq41MChrN61oFpCbyTIT/8GUvqCUAvyzwfjezvnqgwOG2WWuRYM6GKgP hC9EOK8lN91jOtPvhs+f4Jk0/A4a99YB5suRExjSLyHufPTeL93OCSC2Brz78PWw H97x+p3C3xHQsPsii8ikXLoa2YVxifh+m78hg+srvq37h9fpFBKk405J3ZkD/j35 BB+7M37EpcC8gXUYo+6oC5FOF6xcjt0KnhT1+YhHoOz7ileHqIbTNmrS7wbDZ+aL Ugv98YO1Bkp4KNrfeAB4JDHQ1rPw7ztk -----END CERTIFICATE-----Generated at Thu Mar 13 21:29:15 2025 by rpki-client