$ rpki-client -vvf rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft File: eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft (raw, json) Hash identifier: CqAINjFepC7St7rlMquxsXJNYB1Z6jY3pCFhs8R2MwY= Subject key identifier: C6:EC:A6:18:1F:CE:D7:8B:FF:60:81:E5:A8:AA:6F:1D:E4:54:A3:DE Authority key identifier: 78:EC:0F:0E:49:4F:22:8E:AA:43:83:D6:C6:0D:EB:1C:36:2A:50:51 Certificate issuer: /CN=A914CFBF/serialNumber=78EC0F0E494F228EAA4383D6C60DEB1C362A5051 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOwPDklPIo6qQ4PWxg3rHDYqUFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft Manifest number: 2F Signing time: Tue 13 May 2025 06:54:54 +0000 Manifest this update: Tue 13 May 2025 06:54:53 +0000 Manifest next update: Tue 20 May 2025 06:54:53 +0000 Files and hashes: 1: eOwPDklPIo6qQ4PWxg3rHDYqUFE.crl (hash: Hl+X0kInFQGssiyFYdG4255bctpTzkj+e5T8oDU6Ryg=) 2: 7FDB55F4ED1211EFAD21985DC4F9AE02.roa (hash: SxbvQb0AhwJxdqmMLleQ5Oebk4aeq+L/Y76ffLrCJ+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.crl rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOwPDklPIo6qQ4PWxg3rHDYqUFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:54:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CFBF, serialNumber=78EC0F0E494F228EAA4383D6C60DEB1C362A5051 Validity Not Before: May 13 06:54:53 2025 GMT Not After : May 20 06:54:53 2025 GMT Subject: CN=6822ecbd-5c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:04:34:2d:af:f1:51:ef:89:fa:4f:04:ce:5c: 03:2e:45:1d:30:b8:4e:cc:22:69:6c:e3:68:95:03: 88:e8:84:d2:6d:78:71:a5:14:07:33:58:85:25:31: f0:06:a2:84:59:55:53:6b:cd:f7:59:1c:40:e4:99: f9:90:2c:12:2e:0e:83:be:72:5d:d7:fe:d9:13:8c: fa:22:57:03:95:64:fc:90:74:49:f3:62:de:17:20: 89:6c:8d:70:2a:2e:04:99:ff:27:23:11:26:03:69: 09:a2:c1:5d:f9:7f:09:ea:c3:ca:de:99:3b:4b:83: ad:98:d1:9d:5f:ea:26:c3:f4:4f:13:23:82:14:a4: 87:9e:79:07:d9:bf:e3:14:d3:10:d7:da:62:5d:7d: 4f:99:a6:e1:df:30:5a:3a:ec:23:ef:0a:d2:8f:bc: 46:51:f5:5c:95:70:31:84:f0:4e:b4:8e:19:54:22: f4:1a:27:e6:b7:6a:f6:18:2c:3c:ce:dc:c3:32:1e: 46:fb:48:b2:49:00:04:84:01:77:b1:dc:15:63:d2: 54:f8:dd:d8:39:ca:bb:c2:8c:ed:98:ef:6d:d8:f4: 51:ad:8b:15:55:9b:1a:28:d1:52:0a:12:9d:04:97: 39:0a:2e:46:6f:fa:9c:04:55:94:f4:88:08:79:14: b7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:EC:A6:18:1F:CE:D7:8B:FF:60:81:E5:A8:AA:6F:1D:E4:54:A3:DE X509v3 Authority Key Identifier: keyid:78:EC:0F:0E:49:4F:22:8E:AA:43:83:D6:C6:0D:EB:1C:36:2A:50:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOwPDklPIo6qQ4PWxg3rHDYqUFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:bd:6f:83:9d:e4:ec:2d:01:7f:b2:e6:6e:7f:2f:bc:fd:8e: b6:be:d0:36:d9:6f:3a:e6:06:f0:2d:86:c9:0a:2c:e4:eb:bf: 65:c3:69:96:b2:44:ff:39:bf:26:c5:9a:d1:1e:c1:96:f9:1c: 3f:a3:5e:bc:28:14:27:a4:9c:64:b7:60:db:9e:c7:66:b2:22: b6:d4:a4:f4:ca:7c:a2:e5:fd:cd:10:89:bf:6b:b9:f1:6e:85: 0f:a5:cb:71:c1:80:2e:e1:95:d9:db:57:8e:36:2d:5e:9b:d5: 82:4d:79:f5:bf:d3:4d:e0:28:02:85:3e:95:ff:65:8b:9b:79: 63:37:c5:5e:f6:fd:98:d2:1c:74:0e:eb:1a:7c:a5:68:8f:ae: 5f:91:86:4d:36:c8:86:ad:6c:95:d8:c2:8e:7d:bd:99:a8:da: 5c:cc:43:70:0c:50:03:5a:86:4c:d5:fc:44:da:8b:2a:7a:17: 6e:4a:e9:ff:f9:02:8e:ba:0a:c8:67:9d:55:c3:43:b5:8c:e0: bc:85:4c:b4:10:19:40:29:2a:da:70:3b:13:f4:18:f6:3a:92: e6:7a:37:18:91:5c:a5:c4:39:ac:8d:43:24:60:28:1f:93:66: 8a:45:5e:3d:f3:78:7f:10:37:96:7c:f4:56:c1:d6:f7:d9:5c: bc:33:01:25 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Q0ZCRjExMC8GA1UEBRMoNzhFQzBGMEU0OTRGMjI4RUFBNDM4M0Q2QzYwREVCMUMz NjJBNTA1MTAeFw0yNTA1MTMwNjU0NTNaFw0yNTA1MjAwNjU0NTNaMBgxFjAUBgNV BAMTDTY4MjJlY2JkLTVjMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjBDQtr/FR74n6TwTOXAMuRR0wuE7MImls42iVA4johNJteHGlFAczWIUlMfAG ooRZVVNrzfdZHEDkmfmQLBIuDoO+cl3X/tkTjPoiVwOVZPyQdEnzYt4XIIlsjXAq LgSZ/ycjESYDaQmiwV35fwnqw8remTtLg62Y0Z1f6ibD9E8TI4IUpIeeeQfZv+MU 0xDX2mJdfU+ZpuHfMFo67CPvCtKPvEZR9VyVcDGE8E60jhlUIvQaJ+a3avYYLDzO 3MMyHkb7SLJJAASEAXex3BVj0lT43dg5yrvCjO2Y723Y9FGtixVVmxoo0VIKEp0E lzkKLkZv+pwEVZT0iAh5FLdTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxuymGB/O 14v/YIHlqKpvHeRUo94wHwYDVR0jBBgwFoAUeOwPDklPIo6qQ4PWxg3rHDYqUFEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDRkJGLzMyNzYxMDM4RUQx MjExRUY5QjJENDk1Q0M0RjlBRTAyL2VPd1BEa2xQSW82cVE0UFd4ZzNySERZcVVG RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZU93UERrbFBJbzZxUTRQV3hnM3JIRFlxVUZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRD RkJGLzMyNzYxMDM4RUQxMjExRUY5QjJENDk1Q0M0RjlBRTAyL2VPd1BEa2xQSW82 cVE0UFd4ZzNySERZcVVGRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG+9b4Od5OwtAX+y5m5/L7z9jra+0DbZbzrmBvAthskKLOTrv2XDaZay RP85vybFmtEewZb5HD+jXrwoFCeknGS3YNuex2ayIrbUpPTKfKLl/c0Qib9rufFu hQ+ly3HBgC7hldnbV442LV6b1YJNefW/003gKAKFPpX/ZYubeWM3xV72/ZjSHHQO 6xp8pWiPrl+Rhk02yIatbJXYwo59vZmo2lzMQ3AMUANahkzV/ETaiyp6F25K6f/5 Ao66CshnnVXDQ7WM4LyFTLQQGUApKtpwOxP0GPY6kuZ6NxiRXKXEOayNQyRgKB+T ZopFXj3zeH8QN5Z89FbB1vfZXLwzASU= -----END CERTIFICATE-----Generated at Tue May 13 11:55:29 2025 by rpki-client