$ rpki-client -vvf rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft File: eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft (raw, json) Hash identifier: 5vlykqn2vgm5nzr6icylvi205jfteA6bdnLCw7IUF6U= Subject key identifier: 1C:A7:47:2B:72:25:45:F8:CE:F2:F0:FA:DD:37:84:7F:34:84:41:CC Authority key identifier: 78:7D:29:54:0E:58:82:37:E8:5D:16:07:96:00:08:29:11:89:FA:22 Certificate issuer: /CN=A9110009/serialNumber=787D29540E588237E85D1607960008291189FA22 Certificate serial: 05F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft Manifest number: 05EE Signing time: Mon 12 May 2025 22:42:52 +0000 Manifest this update: Mon 12 May 2025 22:42:51 +0000 Manifest next update: Mon 19 May 2025 22:42:51 +0000 Files and hashes: 1: eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl (hash: ph63UBpHp/4JzT/IiW5cK8P5CkII5ktJnE1jk7nQGLg=) 2: DDEF7534AC6C11EBB6B1E17DC4F9AE02.roa (hash: 6T0bGam9Fz3MuC3/hi4HGnadBCMddUZ6zt+H3AVBHfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:42:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1523 (0x5f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110009, serialNumber=787D29540E588237E85D1607960008291189FA22 Validity Not Before: May 12 22:42:51 2025 GMT Not After : May 19 22:42:51 2025 GMT Subject: CN=6822796c-ff81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d5:7f:c7:e3:a1:9a:06:65:27:8d:80:d3:08: 93:ab:45:c9:6d:4d:d9:ed:41:06:44:e0:cd:17:c7: 35:03:32:03:95:29:9d:02:8c:83:3b:97:d0:01:69: 22:89:35:f3:38:93:8e:d9:8f:26:bf:d3:de:de:e3: 7e:00:2b:65:08:8e:87:da:59:76:50:b5:40:c6:e5: 10:00:9a:09:f8:c2:a1:52:fa:f7:b8:fa:4e:b1:b7: fd:5f:e5:36:e0:ab:c2:19:1c:f3:34:32:e0:17:3c: b9:5f:dd:54:5b:d9:5d:01:2a:d1:08:92:e8:58:2e: f3:db:cd:2e:15:eb:dc:a1:3d:34:93:62:19:0c:45: a9:ef:33:9b:55:f5:5d:99:e5:fb:25:4a:4f:ba:b1: 0f:b6:ca:75:0d:9f:05:60:7f:72:d6:61:cc:9c:fb: bc:d7:a7:13:b5:b6:25:30:b1:67:b7:0a:c7:1a:67: d8:c4:9d:f2:0a:ca:64:6d:a7:a7:52:bb:44:71:8b: 5a:69:90:1d:91:b4:f2:17:93:fa:da:3f:f7:6c:f1: c7:9a:ac:9f:10:a4:89:7f:6e:b7:55:39:c3:5f:0b: b5:3f:fb:80:2b:e1:f5:86:0e:b3:30:2a:c7:95:31: 6b:97:05:52:3a:a7:0e:9f:45:9d:f7:73:ee:0c:92: b9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A7:47:2B:72:25:45:F8:CE:F2:F0:FA:DD:37:84:7F:34:84:41:CC X509v3 Authority Key Identifier: keyid:78:7D:29:54:0E:58:82:37:E8:5D:16:07:96:00:08:29:11:89:FA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:aa:f9:5e:45:45:78:af:f7:f9:62:7e:42:12:9c:ee:a7:17: d9:11:e7:43:bb:df:10:fa:43:fe:2a:86:32:c8:fa:ae:eb:54: 86:4c:25:8d:88:2d:87:83:b2:6b:0c:e1:db:a8:de:7c:e3:ff: a0:d9:81:64:b9:fd:a1:43:c7:95:1a:81:57:a8:72:16:2b:96: b7:e4:a7:b6:c8:81:63:4c:3e:08:18:d7:7d:5e:4e:66:de:0a: 5c:c9:f9:d6:e4:1f:82:c1:c5:65:7d:20:c6:26:6c:a2:58:5a: 7c:f7:8f:a0:bc:63:4d:af:3b:89:b5:ca:0b:77:b9:4d:6e:4d: 60:5b:61:31:25:e8:93:bc:12:5a:bf:e8:d5:e2:d0:04:98:3f: f5:c5:94:e6:ed:28:49:3d:76:84:4f:03:1a:8e:7c:02:80:1b: e4:09:0f:27:04:f9:06:d0:7d:42:93:7c:07:44:46:71:a3:c1: e7:a3:89:a9:a7:0a:cc:74:7f:ca:91:33:da:37:10:7f:02:f1: 63:71:bf:fc:20:4c:14:03:04:2a:22:11:41:94:e2:73:11:2b: a1:3f:af:74:35:bc:7a:ba:fe:30:41:b5:4b:69:31:ec:81:5b: 8c:87:81:6c:a4:e6:44:f8:f0:94:74:84:40:a4:68:18:80:9c: 15:07:d7:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAwMDkxMTAvBgNVBAUTKDc4N0QyOTU0MEU1ODgyMzdFODVEMTYwNzk2MDAwODI5 MTE4OUZBMjIwHhcNMjUwNTEyMjI0MjUxWhcNMjUwNTE5MjI0MjUxWjAYMRYwFAYD VQQDEw02ODIyNzk2Yy1mZjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9V/x+OhmgZlJ42A0wiTq0XJbU3Z7UEGRODNF8c1AzIDlSmdAoyDO5fQAWki iTXzOJOO2Y8mv9Pe3uN+ACtlCI6H2ll2ULVAxuUQAJoJ+MKhUvr3uPpOsbf9X+U2 4KvCGRzzNDLgFzy5X91UW9ldASrRCJLoWC7z280uFevcoT00k2IZDEWp7zObVfVd meX7JUpPurEPtsp1DZ8FYH9y1mHMnPu816cTtbYlMLFntwrHGmfYxJ3yCspkbaen UrtEcYtaaZAdkbTyF5P62j/3bPHHmqyfEKSJf263VTnDXwu1P/uAK+H1hg6zMCrH lTFrlwVSOqcOn0Wd93PuDJK5HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBynRyty JUX4zvLw+t03hH80hEHMMB8GA1UdIwQYMBaAFHh9KVQOWII36F0WB5YACCkRifoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDAwOS9DQzgxMDEyMEFD NkExMUVCQTU0QUY4N0FDNEY5QUUwMi9lSDBwVkE1WWdqZm9YUllIbGdBSUtSR0ot aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VIMHBWQTVZZ2pmb1hSWUhsZ0FJS1JHSi1pSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDAwOS9DQzgxMDEyMEFDNkExMUVCQTU0QUY4N0FDNEY5QUUwMi9lSDBwVkE1WWdq Zm9YUllIbGdBSUtSR0otaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6qvleRUV4r/f5Yn5CEpzupxfZEedDu98Q+kP+KoYyyPqu61SGTCWN iC2Hg7JrDOHbqN584/+g2YFkuf2hQ8eVGoFXqHIWK5a35Ke2yIFjTD4IGNd9Xk5m 3gpcyfnW5B+CwcVlfSDGJmyiWFp894+gvGNNrzuJtcoLd7lNbk1gW2ExJeiTvBJa v+jV4tAEmD/1xZTm7ShJPXaETwMajnwCgBvkCQ8nBPkG0H1Ck3wHREZxo8Hno4mp pwrMdH/KkTPaNxB/AvFjcb/8IEwUAwQqIhFBlOJzESuhP690Nbx6uv4wQbVLaTHs gVuMh4FspOZE+PCUdIRApGgYgJwVB9fa -----END CERTIFICATE-----Generated at Wed May 14 19:54:17 2025 by rpki-client