$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft File: EPYca742dARRL7yDzdqFqZx_PHU.mft (raw, json) Hash identifier: H9atgEnGQVDZ11cxTEhvg92+93/OldNNj5igm7mlO+I= Subject key identifier: FB:EA:7C:36:38:0A:E8:CF:18:D8:1C:28:B0:B7:CF:FA:A8:C8:9D:71 Authority key identifier: 10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75 Certificate issuer: /CN=A9120974/serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75 Certificate serial: 1067 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft Manifest number: 105D Signing time: Mon 12 May 2025 17:19:44 +0000 Manifest this update: Mon 12 May 2025 17:19:43 +0000 Manifest next update: Mon 19 May 2025 17:19:43 +0000 Files and hashes: 1: EPYca742dARRL7yDzdqFqZx_PHU.crl (hash: brJRIq2q95qTEH9VafcEU9t5EzU478075/15RPSkJhA=) 2: EAE5FA0068F111EC8890FA3FC4F9AE02.roa (hash: EjWAvqG0p06YrvyVbdxSE0MmSKbTzSV0pAzJygZ+3+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:19:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4199 (0x1067) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75 Validity Not Before: May 12 17:19:43 2025 GMT Not After : May 19 17:19:43 2025 GMT Subject: CN=68222daf-7f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:37:9a:a2:b9:3b:6e:af:e2:6e:82:ae:70:52: ce:00:b2:a3:ec:bc:f3:80:a1:60:04:72:a3:03:5c: 5b:df:e9:d3:8f:39:7c:e5:71:af:38:d8:8f:e4:d7: 36:e6:32:e6:86:89:54:c1:59:99:ac:b5:3f:ea:c2: c9:94:16:53:07:f5:ad:ce:af:e6:b1:97:8f:64:cf: f1:f1:9a:94:49:cc:ad:df:32:c5:35:7a:57:1e:79: c2:77:17:26:2f:be:3e:b7:c4:c8:67:6f:9c:c1:56: 31:ad:52:c3:22:82:5c:86:10:97:09:34:ed:da:32: 53:17:d2:c5:aa:17:83:57:4e:57:7c:3b:92:7f:8e: 83:df:9b:97:64:f1:36:83:ac:60:49:b2:51:a6:fb: a4:34:5e:4b:40:74:f6:62:93:8b:2b:e8:2c:19:ea: 68:20:05:52:fe:7d:a3:ea:06:76:e1:17:3b:39:dc: 3c:6d:65:c2:b0:f1:2d:96:7b:a2:09:f3:29:4c:b3: 77:c9:67:15:8e:b0:d4:20:7a:da:30:ea:01:ea:1d: 74:16:13:1f:e6:b3:6f:42:2e:b6:5a:cf:0e:e1:45: e3:f4:d0:26:75:20:c4:94:e0:fa:7b:0e:b7:c1:06: a1:68:03:f4:29:a3:8c:64:b5:64:23:f6:a7:73:9e: 1a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:EA:7C:36:38:0A:E8:CF:18:D8:1C:28:B0:B7:CF:FA:A8:C8:9D:71 X509v3 Authority Key Identifier: keyid:10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:e6:26:71:fc:58:41:28:8a:16:de:1a:54:6f:22:97:05:80: d1:cb:a5:08:78:a9:6d:cc:7b:8b:56:50:27:b6:f8:d8:99:47: 9b:a6:43:0e:17:00:d0:0b:a5:d6:fc:8c:7c:16:b2:7d:69:59: 18:29:95:6b:e8:ba:2d:ab:21:60:22:58:2d:4a:b1:40:65:53: d3:87:73:12:0b:15:15:b7:44:54:9f:4a:9b:cd:28:2a:96:1c: ed:dd:d3:72:99:e4:ad:6c:17:91:9b:4f:ed:85:85:d7:2b:9d: b7:48:56:96:43:f7:e7:1f:c6:e7:c9:58:28:e7:04:be:9b:91: ce:60:c6:5d:a3:86:20:09:15:1b:72:41:95:f2:f7:d7:7d:93: f0:e7:f6:db:18:b3:e7:e1:ec:ca:f4:a9:a5:83:41:64:56:8a: e8:a7:46:4c:87:d2:b1:6a:29:99:04:e6:5e:1f:48:f8:c5:e0: 23:62:1c:8c:13:ee:f3:6e:32:30:83:45:1a:a4:25:57:62:3d: 85:25:a5:91:bf:fb:e5:f6:17:f1:f1:da:e1:58:11:58:61:c9: 4e:a7:34:50:4b:17:5c:6f:3e:1e:46:4a:11:33:9b:b3:a0:b4: 01:a3:f2:20:a9:5c:98:62:4c:df:da:57:cf:26:8a:19:65:47: 09:d7:78:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKDEwRjYxQzZCQkUzNjc0MDQ1MTJGQkM4M0NEREE4NUE5 OUM3RjNDNzUwHhcNMjUwNTEyMTcxOTQzWhcNMjUwNTE5MTcxOTQzWjAYMRYwFAYD VQQDEw02ODIyMmRhZi03ZjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjeaork7bq/iboKucFLOALKj7LzzgKFgBHKjA1xb3+nTjzl85XGvONiP5Nc2 5jLmholUwVmZrLU/6sLJlBZTB/Wtzq/msZePZM/x8ZqUScyt3zLFNXpXHnnCdxcm L74+t8TIZ2+cwVYxrVLDIoJchhCXCTTt2jJTF9LFqheDV05XfDuSf46D35uXZPE2 g6xgSbJRpvukNF5LQHT2YpOLK+gsGepoIAVS/n2j6gZ24Rc7Odw8bWXCsPEtlnui CfMpTLN3yWcVjrDUIHraMOoB6h10FhMf5rNvQi62Ws8O4UXj9NAmdSDElOD6ew63 wQahaAP0KaOMZLVkI/anc54a9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPvqfDY4 CujPGNgcKLC3z/qoyJ1xMB8GA1UdIwQYMBaAFBD2HGu+NnQEUS+8g83ahamcfzx1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9FQzgyMzBFMjNB NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9FUFljYTc0MmRBUlJMN3lEemRxRnFaeF9Q SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VQWWNhNzQyZEFSUkw3eUR6ZHFGcVp4X1BIVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC9FQzgyMzBFMjNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9FUFljYTc0MmRB UlJMN3lEemRxRnFaeF9QSFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA45iZx/FhBKIoW3hpUbyKXBYDRy6UIeKltzHuLVlAntvjYmUebpkMO FwDQC6XW/Ix8FrJ9aVkYKZVr6LotqyFgIlgtSrFAZVPTh3MSCxUVt0RUn0qbzSgq lhzt3dNymeStbBeRm0/thYXXK523SFaWQ/fnH8bnyVgo5wS+m5HOYMZdo4YgCRUb ckGV8vfXfZPw5/bbGLPn4ezK9Kmlg0FkVorop0ZMh9KxaimZBOZeH0j4xeAjYhyM E+7zbjIwg0UapCVXYj2FJaWRv/vl9hfx8drhWBFYYclOpzRQSxdcbz4eRkoRM5uz oLQBo/IgqVyYYkzf2lfPJooZZUcJ13i2 -----END CERTIFICATE-----Generated at Mon May 12 20:52:48 2025 by rpki-client