$ rpki-client -vvf rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.mft File: eQckJnCjuJ00jVqEHayNGC62YH4.mft (raw, json) Hash identifier: iLHEvwbHlQkWc8RKTRE5JgPNrI/4bXTaXv7EoG1BcBQ= Subject key identifier: 5B:1F:AE:23:EA:4E:58:8D:2C:2F:74:28:37:41:CA:B2:7A:F6:C7:F1 Authority key identifier: 79:07:24:26:70:A3:B8:9D:34:8D:5A:84:1D:AC:8D:18:2E:B6:60:7E Certificate issuer: /CN=A913DC32/serialNumber=7907242670A3B89D348D5A841DAC8D182EB6607E Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eQckJnCjuJ00jVqEHayNGC62YH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.mft Manifest number: 28 Signing time: Thu 15 May 2025 07:08:10 +0000 Manifest this update: Thu 15 May 2025 07:08:09 +0000 Manifest next update: Thu 22 May 2025 07:08:09 +0000 Files and hashes: 1: eQckJnCjuJ00jVqEHayNGC62YH4.crl (hash: lR+Yqke2IourX4+YiXaMJls9+7DdcHyHxTJznoYa46I=) 2: 22E5730815AC11F0BA789D40C4F9AE02.roa (hash: iWmeds3ikQddJ0zOLOMR2/nAx9kIXx/domN/vEqWgPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.crl rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eQckJnCjuJ00jVqEHayNGC62YH4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 07:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DC32, serialNumber=7907242670A3B89D348D5A841DAC8D182EB6607E Validity Not Before: May 15 07:08:09 2025 GMT Not After : May 22 07:08:09 2025 GMT Subject: CN=682592d9-f78f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4b:b2:9e:14:82:3b:92:93:ec:64:bb:6f:f8: c7:51:3b:e2:16:cd:73:22:a8:d0:ab:e9:38:43:a3: 44:0f:b0:c2:44:94:cb:2f:00:9a:fe:55:d4:da:f3: a5:62:5e:16:39:1e:2c:28:cf:e8:80:fc:fb:f0:00: 93:81:fd:a0:25:17:70:ff:61:3a:9a:7e:49:a1:a0: ef:5c:e0:24:48:b0:00:1a:55:28:44:bb:9f:04:7b: e8:0b:dd:76:71:ff:2c:29:77:f5:d7:b1:4f:83:5e: aa:c8:60:5f:e4:de:d2:fb:46:0d:3f:3e:31:75:a7: ef:49:25:e6:9c:29:ea:92:94:a0:48:1b:fe:fe:6a: 82:4c:03:e1:30:5d:b4:97:9e:68:64:17:61:c0:c5: c8:f2:7e:ae:43:41:e6:86:8d:12:0c:1b:1a:db:76: 82:34:75:7f:42:30:98:fd:ef:8d:90:03:b4:b7:99: 26:44:91:d6:96:8c:b6:fa:40:ef:bc:00:da:c1:4a: bd:81:59:80:13:42:0d:5d:60:8f:2c:0b:e9:f8:f5: 41:d3:0a:30:cd:10:af:43:2f:3f:6d:d5:75:ce:fa: 1b:60:1d:3a:0f:84:28:ef:df:45:a7:05:84:ad:21: 3e:64:e6:53:5b:43:59:95:d4:33:91:82:5d:0b:b7: 33:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:1F:AE:23:EA:4E:58:8D:2C:2F:74:28:37:41:CA:B2:7A:F6:C7:F1 X509v3 Authority Key Identifier: keyid:79:07:24:26:70:A3:B8:9D:34:8D:5A:84:1D:AC:8D:18:2E:B6:60:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eQckJnCjuJ00jVqEHayNGC62YH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:81:bf:39:48:57:f7:08:3e:d3:03:72:e2:b9:82:77:29:91: 00:31:6e:6d:93:49:7f:4f:fe:18:ba:43:86:e7:41:bb:1a:86: b2:01:79:d9:2b:a0:93:57:37:78:7c:30:a6:8e:94:d6:77:60: a1:d9:8c:16:27:91:62:1a:28:0c:ea:b5:cd:38:ad:9e:d5:af: 49:68:b8:26:29:86:fb:29:d1:9b:dd:d5:c3:b5:b4:80:64:48: fb:e0:05:89:91:70:73:84:44:6e:17:ef:74:c9:1a:1d:79:11: ac:6c:89:10:5e:8e:d5:b5:bc:48:71:1f:0f:f8:eb:67:17:d7: 71:83:7e:e5:24:02:02:84:53:70:d1:c9:fa:88:af:d6:7c:6e: cf:3e:fe:29:d4:08:b2:d6:b2:2a:34:59:a1:ee:6c:25:3f:42: 29:58:8f:1f:32:ea:b7:7c:12:94:c1:8b:af:71:29:65:ef:3e: 5a:0e:8c:14:64:42:28:05:94:b8:be:f2:20:72:74:e1:b2:f1: b7:fa:91:50:f6:04:9e:ae:3b:bb:ed:84:fe:87:6e:c0:e2:4a: 6c:23:8b:d2:64:8e:ae:09:be:2e:fc:a4:1e:31:9c:7d:e5:99: 3b:10:8b:0a:fc:34:a8:70:fc:69:05:9c:47:36:0f:c6:a6:91: e2:db:79:47 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz REMzMjExMC8GA1UEBRMoNzkwNzI0MjY3MEEzQjg5RDM0OEQ1QTg0MURBQzhEMTgy RUI2NjA3RTAeFw0yNTA1MTUwNzA4MDlaFw0yNTA1MjIwNzA4MDlaMBgxFjAUBgNV BAMTDTY4MjU5MmQ5LWY3OGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTS7KeFII7kpPsZLtv+MdRO+IWzXMiqNCr6ThDo0QPsMJElMsvAJr+VdTa86Vi XhY5Hiwoz+iA/PvwAJOB/aAlF3D/YTqafkmhoO9c4CRIsAAaVShEu58Ee+gL3XZx /ywpd/XXsU+DXqrIYF/k3tL7Rg0/PjF1p+9JJeacKeqSlKBIG/7+aoJMA+EwXbSX nmhkF2HAxcjyfq5DQeaGjRIMGxrbdoI0dX9CMJj9742QA7S3mSZEkdaWjLb6QO+8 ANrBSr2BWYATQg1dYI8sC+n49UHTCjDNEK9DLz9t1XXO+htgHToPhCjv30WnBYSt IT5k5lNbQ1mV1DORgl0LtzN1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWx+uI+pO WI0sL3QoN0HKsnr2x/EwHwYDVR0jBBgwFoAUeQckJnCjuJ00jVqEHayNGC62YH4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNEQzMyLzdCNzUwQkZFRkNG RDExRUZBREI4NjExNUM0RjlBRTAyL2VRY2tKbkNqdUowMGpWcUVIYXlOR0M2MllI NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZVFja0puQ2p1SjAwalZxRUhheU5HQzYyWUg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE QzMyLzdCNzUwQkZFRkNGRDExRUZBREI4NjExNUM0RjlBRTAyL2VRY2tKbkNqdUow MGpWcUVIYXlOR0M2MllINC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEWBvzlIV/cIPtMDcuK5gncpkQAxbm2TSX9P/hi6Q4bnQbsahrIBedkr oJNXN3h8MKaOlNZ3YKHZjBYnkWIaKAzqtc04rZ7Vr0louCYphvsp0Zvd1cO1tIBk SPvgBYmRcHOERG4X73TJGh15EaxsiRBejtW1vEhxHw/462cX13GDfuUkAgKEU3DR yfqIr9Z8bs8+/inUCLLWsio0WaHubCU/QilYjx8y6rd8EpTBi69xKWXvPloOjBRk QigFlLi+8iBydOGy8bf6kVD2BJ6uO7vthP6HbsDiSmwji9Jkjq4Jvi78pB4xnH3l mTsQiwr8NKhw/GkFnEc2D8amkeLbeUc= -----END CERTIFICATE-----Generated at Thu May 15 23:35:55 2025 by rpki-client