$ rpki-client -vvf rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft File: eHZtYCpA71cBQmhKcj6KNAxv84I.mft (raw, json) Hash identifier: IMUzH4aNCItC5gR+NWlzwEoderRZfbbu5ti5WsAnlqM= Subject key identifier: 63:BF:45:CD:BE:3E:E0:AA:16:04:68:C4:A8:D7:94:64:FA:BE:10:BD Authority key identifier: 78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82 Certificate issuer: /CN=A912A70D/serialNumber=78766D602A40EF570142684A723E8A340C6FF382 Certificate serial: 0440 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft Manifest number: 043C Signing time: Thu 15 May 2025 00:19:42 +0000 Manifest this update: Thu 15 May 2025 00:19:42 +0000 Manifest next update: Thu 22 May 2025 00:19:42 +0000 Files and hashes: 1: eHZtYCpA71cBQmhKcj6KNAxv84I.crl (hash: 2lQm88eAmitVfdCecOT7p/yR5wjknq27WlKMGdgp4FQ=) 2: 90AE61AC595711EC8761C361C4F9AE02.roa (hash: xHB6klxUWxKIW0ZETWDrSBAoOokIy/M1aOS9u4crx4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.crl rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:19:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1088 (0x440) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A70D, serialNumber=78766D602A40EF570142684A723E8A340C6FF382 Validity Not Before: May 15 00:19:42 2025 GMT Not After : May 22 00:19:42 2025 GMT Subject: CN=6825331e-65c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ab:08:03:5a:15:d9:66:bc:20:ed:b1:e8:9c: 96:c2:83:7b:05:17:74:5f:84:3f:92:23:1e:60:e0: 5f:45:df:9a:1c:b4:5f:71:d0:13:e8:b9:08:02:cd: 5a:ca:f5:f5:9d:93:1b:19:48:fc:e2:f3:a2:42:13: a5:73:dd:98:2f:7c:33:fd:17:d3:e4:74:07:71:52: be:f0:81:75:87:12:58:b9:95:38:8c:2c:0d:8d:29: 8b:46:e7:23:ff:5f:44:ca:3a:89:11:49:7d:fa:fa: e8:86:5a:59:72:89:14:4f:7c:05:f9:1c:45:3e:5a: 98:b1:1a:99:25:73:1b:d4:73:6f:09:6e:92:15:9d: bc:81:b9:02:c1:65:04:ad:be:93:02:ea:6b:32:5c: 18:64:38:35:d6:11:b2:db:6e:32:04:f0:bc:d0:25: e3:67:17:d2:62:37:16:01:1c:5b:67:15:2a:f4:e8: 55:df:6d:90:57:d9:d9:65:ba:f6:1b:fc:09:4f:5e: 28:29:16:e9:60:53:a6:0b:bb:38:ad:a7:f6:fa:c7: c8:88:f8:d6:3f:63:25:6b:61:41:73:ee:0d:7e:fe: 75:dd:3d:27:67:8b:c0:17:38:df:d2:e3:61:18:20: 7e:9f:44:4a:fc:0c:16:1e:f4:8e:d0:06:44:64:92: 2b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BF:45:CD:BE:3E:E0:AA:16:04:68:C4:A8:D7:94:64:FA:BE:10:BD X509v3 Authority Key Identifier: keyid:78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:9c:70:4f:b9:72:44:f2:ad:2f:89:b8:76:ac:40:bb:fc:9f: a4:7f:aa:1c:58:0e:0a:f2:22:c4:49:9b:c3:c2:5e:65:c4:4c: 2a:0f:46:88:16:49:50:cf:d0:f6:95:e3:dd:62:2e:91:5e:ab: e4:4d:d2:91:5f:86:15:03:e2:d4:2c:ec:98:7e:0e:7d:3e:16: 6a:3a:ba:ef:5a:a5:a5:ef:22:eb:3d:bd:64:a3:03:d1:65:d8: 2d:db:b6:d8:71:85:1c:3e:0a:df:a4:27:b5:a0:b9:ee:b3:a7: 70:cd:e4:fe:c0:b5:51:11:97:f7:d5:3b:16:c0:8e:42:ee:92: 60:72:d5:95:ae:e9:e1:6c:3c:88:31:6c:d7:96:07:4c:9d:4f: f9:3b:df:19:01:a0:3f:1e:e9:ad:e0:e8:ca:c7:67:37:3b:26: 20:1b:a6:fd:df:f8:fe:35:3d:63:fc:8b:41:ce:d6:5a:9f:f4: 59:3d:69:01:1f:45:4d:14:26:e4:c6:c3:ba:fc:e1:ff:21:7c: 56:67:9a:5a:61:bb:90:9f:2d:b7:6b:00:f5:28:cd:b9:41:f3: ad:f8:ed:71:31:cb:e4:b7:bf:d1:60:4e:ad:86:c6:1a:67:f1: 48:e9:f8:e3:c9:9a:c2:9a:ce:fd:01:99:26:d9:01:90:06:4a: 3c:f7:1d:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE3MEQxMTAvBgNVBAUTKDc4NzY2RDYwMkE0MEVGNTcwMTQyNjg0QTcyM0U4QTM0 MEM2RkYzODIwHhcNMjUwNTE1MDAxOTQyWhcNMjUwNTIyMDAxOTQyWjAYMRYwFAYD VQQDEw02ODI1MzMxZS02NWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6sIA1oV2Wa8IO2x6JyWwoN7BRd0X4Q/kiMeYOBfRd+aHLRfcdAT6LkIAs1a yvX1nZMbGUj84vOiQhOlc92YL3wz/RfT5HQHcVK+8IF1hxJYuZU4jCwNjSmLRucj /19EyjqJEUl9+vrohlpZcokUT3wF+RxFPlqYsRqZJXMb1HNvCW6SFZ28gbkCwWUE rb6TAuprMlwYZDg11hGy224yBPC80CXjZxfSYjcWARxbZxUq9OhV322QV9nZZbr2 G/wJT14oKRbpYFOmC7s4raf2+sfIiPjWP2Mla2FBc+4Nfv513T0nZ4vAFzjf0uNh GCB+n0RK/AwWHvSO0AZEZJIrowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGO/Rc2+ PuCqFgRoxKjXlGT6vhC9MB8GA1UdIwQYMBaAFHh2bWAqQO9XAUJoSnI+ijQMb/OC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTcwRC8xMTE0QzlCQTU5 NTAxMUVDQUUwOTMyODJDNEY5QUUwMi9lSFp0WUNwQTcxY0JRbWhLY2o2S05BeHY4 NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VIWnRZQ3BBNzFjQlFtaEtjajZLTkF4djg0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTcwRC8xMTE0QzlCQTU5NTAxMUVDQUUwOTMyODJDNEY5QUUwMi9lSFp0WUNwQTcx Y0JRbWhLY2o2S05BeHY4NEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFnHBPuXJE8q0vibh2rEC7/J+kf6ocWA4K8iLESZvDwl5lxEwqD0aI FklQz9D2lePdYi6RXqvkTdKRX4YVA+LULOyYfg59PhZqOrrvWqWl7yLrPb1kowPR Zdgt27bYcYUcPgrfpCe1oLnus6dwzeT+wLVREZf31TsWwI5C7pJgctWVrunhbDyI MWzXlgdMnU/5O98ZAaA/Humt4OjKx2c3OyYgG6b93/j+NT1j/ItBztZan/RZPWkB H0VNFCbkxsO6/OH/IXxWZ5paYbuQny23awD1KM25QfOt+O1xMcvkt7/RYE6thsYa Z/FI6fjjyZrCms79AZkm2QGQBko89x3n -----END CERTIFICATE-----Generated at Fri May 16 02:42:07 2025 by rpki-client