$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft File: eup3fGsZFRNTOw4u3w8NhMtwuhE.mft (raw, json) Hash identifier: TGi6T0YI1EOZ/L9cGR+9aQGa98mt8KyAu/RoItWMYRM= Subject key identifier: B2:0C:AE:AC:32:38:E7:6C:9B:CB:3A:EF:EE:54:6E:7A:12:12:E3:3C Authority key identifier: 7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11 Certificate issuer: /CN=A9142489/serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11 Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft Manifest number: 65 Signing time: Thu 15 May 2025 06:17:43 +0000 Manifest this update: Thu 15 May 2025 06:17:43 +0000 Manifest next update: Thu 22 May 2025 06:17:43 +0000 Files and hashes: 1: eup3fGsZFRNTOw4u3w8NhMtwuhE.crl (hash: GaniuyU2B+ZQedSUmF2wMf8gzZUJ6BAIjwPshgs8EiI=) 2: FCE2ACFA9BFA11EFABCDB96FC4F9AE02.roa (hash: OlXBby3DJZy8rl/8+NH1zeLmOWVMUXLA2k9gi34qwsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142489, serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11 Validity Not Before: May 15 06:17:43 2025 GMT Not After : May 22 06:17:43 2025 GMT Subject: CN=68258707-86b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a5:69:28:6f:84:35:78:48:f8:0b:03:5a:f2: a8:9c:fe:bf:ea:7d:8d:36:da:fc:1a:2c:5d:77:f3: ee:f0:72:e2:7d:57:dc:6b:7f:86:88:a5:91:83:47: 9c:dd:32:83:d9:f5:34:6d:6e:93:2d:02:c4:54:d5: 6e:77:c7:ac:22:8a:cb:68:ed:04:cf:6c:9f:08:d3: 91:7e:6d:07:22:ba:bb:85:cd:10:86:2e:10:88:f7: 74:3e:c0:48:df:ec:2e:c9:2b:1d:b0:8d:8b:1d:f2: e7:f4:94:d7:a5:c8:fd:42:37:a7:00:c5:4a:10:e5: 9d:11:24:a4:1d:45:35:c1:da:3c:84:a2:57:88:bf: 98:32:2d:ea:5d:64:de:d7:a2:62:ef:c7:17:75:c8: 21:46:da:f4:c2:c9:20:fe:1c:2f:e8:b6:89:90:df: 1a:3b:ca:5b:ac:aa:7a:bd:1d:77:30:cb:dc:d1:b1: 27:d6:6a:67:c4:78:6c:a3:09:27:46:db:02:17:3d: a9:26:dd:99:49:4e:93:94:78:a1:66:26:2e:dd:ab: 9b:28:fd:f0:81:30:91:d6:ed:65:17:9c:d2:e1:8a: a5:dc:4b:45:fb:44:1c:bd:7a:a2:96:32:7b:ba:1c: f2:ea:e9:86:e4:e8:12:0f:78:99:bf:05:4e:b5:f5: db:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:0C:AE:AC:32:38:E7:6C:9B:CB:3A:EF:EE:54:6E:7A:12:12:E3:3C X509v3 Authority Key Identifier: keyid:7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:af:48:02:ef:22:1a:3b:ee:fb:54:4e:f0:d4:14:9f:f8:50: 1a:a9:18:06:c5:00:02:44:2d:a7:7b:44:bd:a4:9a:e9:9a:85: 5c:65:a0:1e:a9:7d:61:4c:25:1b:53:b3:5c:f3:8f:6b:6d:ed: 6c:e7:fc:dd:11:25:5a:e1:4a:0b:24:6c:79:e1:57:89:c2:51: 87:5a:4e:2b:44:ba:43:c3:48:9f:48:e1:ad:7b:be:1d:12:72: 6b:d9:26:e7:ef:9d:2b:d9:d9:d8:a8:00:a3:6a:46:3a:67:04: 37:74:1e:51:0f:3a:4d:8b:e9:5a:e6:28:e1:ca:4c:c1:18:47: 72:e6:8d:26:53:c6:86:a4:4e:9e:2c:76:76:4f:d3:08:c0:86: 78:4f:99:e0:d7:ab:a1:a2:9d:57:a9:16:42:e1:b5:37:3d:86: df:39:e6:1b:84:6f:16:fe:f6:83:6e:d0:89:77:ad:58:12:a4: fb:95:f0:69:34:34:be:1f:e6:20:f8:be:0a:15:e0:35:15:03: a5:c9:00:5c:14:e5:8d:fc:5c:d4:68:4e:f2:0c:84:a7:c7:10: b3:a7:2a:6b:51:6b:a3:67:bb:b3:10:22:62:1b:7d:62:4f:9e: ec:fe:99:1c:98:29:c2:e6:68:60:cd:ea:72:28:94:50:5f:d2: f8:e6:d6:a6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjQ4OTExMC8GA1UEBRMoN0FFQTc3N0M2QjE5MTUxMzUzM0IwRTJFREYwRjBEODRD QjcwQkExMTAeFw0yNTA1MTUwNjE3NDNaFw0yNTA1MjIwNjE3NDNaMBgxFjAUBgNV BAMTDTY4MjU4NzA3LTg2YjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRpWkob4Q1eEj4CwNa8qic/r/qfY022vwaLF138+7wcuJ9V9xrf4aIpZGDR5zd MoPZ9TRtbpMtAsRU1W53x6wiisto7QTPbJ8I05F+bQciuruFzRCGLhCI93Q+wEjf 7C7JKx2wjYsd8uf0lNelyP1CN6cAxUoQ5Z0RJKQdRTXB2jyEoleIv5gyLepdZN7X omLvxxd1yCFG2vTCySD+HC/otomQ3xo7ylusqnq9HXcwy9zRsSfWamfEeGyjCSdG 2wIXPakm3ZlJTpOUeKFmJi7dq5so/fCBMJHW7WUXnNLhiqXcS0X7RBy9eqKWMnu6 HPLq6Ybk6BIPeJm/BU619dsbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsgyurDI4 52ybyzrv7lRuehIS4zwwHwYDVR0jBBgwFoAUeup3fGsZFRNTOw4u3w8NhMtwuhEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNDg5LzMyODlBOTBFOUJG QTExRUZCRUI5ODQ2RUM0RjlBRTAyL2V1cDNmR3NaRlJOVE93NHUzdzhOaE10d3Vo RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZXVwM2ZHc1pGUk5UT3c0dTN3OE5oTXR3dWhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy NDg5LzMyODlBOTBFOUJGQTExRUZCRUI5ODQ2RUM0RjlBRTAyL2V1cDNmR3NaRlJO VE93NHUzdzhOaE10d3VoRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKuvSALvIho77vtUTvDUFJ/4UBqpGAbFAAJELad7RL2kmumahVxloB6p fWFMJRtTs1zzj2tt7Wzn/N0RJVrhSgskbHnhV4nCUYdaTitEukPDSJ9I4a17vh0S cmvZJufvnSvZ2dioAKNqRjpnBDd0HlEPOk2L6VrmKOHKTMEYR3LmjSZTxoakTp4s dnZP0wjAhnhPmeDXq6GinVepFkLhtTc9ht855huEbxb+9oNu0Il3rVgSpPuV8Gk0 NL4f5iD4vgoV4DUVA6XJAFwU5Y38XNRoTvIMhKfHELOnKmtRa6Nnu7MQImIbfWJP nuz+mRyYKcLmaGDN6nIolFBf0vjm1qY= -----END CERTIFICATE-----Generated at Fri May 16 06:07:30 2025 by rpki-client