$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft File: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft (raw, json) Hash identifier: p06nMsbWvZJAh5lUFiOb2N1yEhfLEbUtAiGBQTmpbCo= Subject key identifier: 7A:27:75:47:72:30:65:4B:74:6B:A9:A8:FA:24:4E:D2:A2:AB:20:50 Authority key identifier: 10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE Certificate issuer: /CN=A9160C9E/serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft Manifest number: 77 Signing time: Fri 09 May 2025 05:56:13 +0000 Manifest this update: Fri 09 May 2025 05:56:13 +0000 Manifest next update: Fri 16 May 2025 05:56:13 +0000 Files and hashes: 1: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl (hash: v1afSQ10V2CT/ZnuHdSdxXr1k+lTXKf48JxvI0ArEHU=) 2: 44B65A3890FF11EFA6BECB58C4F9AE02.roa (hash: GUv+bR0jB5xe+4YguFwkCK8B685+o0kSH52XBLyO1zw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 05:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160C9E, serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE Validity Not Before: May 9 05:56:13 2025 GMT Not After : May 16 05:56:13 2025 GMT Subject: CN=681d98fd-152e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ee:d0:d6:8f:9b:ce:4e:30:6d:28:dc:83:d3: 09:87:a8:d5:52:d3:96:c0:48:fa:b1:59:49:58:a4: 1e:6b:ef:8f:d9:28:3b:e7:20:72:38:cb:1e:38:54: 81:2e:6f:5f:b5:77:0e:67:7d:7f:c5:51:8e:f4:f2: 6a:d2:6f:fa:9b:4a:dd:cb:24:c9:b3:7b:09:b8:e4: 2d:b9:09:89:0c:36:6e:ee:59:63:8a:8a:21:21:46: 3b:81:8b:82:7d:16:8a:47:29:99:c1:5f:e0:58:7b: c2:be:ab:f2:de:51:86:8c:c7:02:27:72:54:4a:31: 8c:6b:0e:f3:1b:53:96:f7:3f:8f:68:98:a5:f5:5a: f9:28:31:f0:28:5f:6b:8b:e1:09:9a:8b:54:99:bf: ff:42:9a:c3:76:5e:6a:b6:db:8f:59:d8:be:0d:fb: 4d:1c:b1:ed:8f:0d:e7:dd:09:37:62:80:6f:8d:b4: e8:92:5c:c2:e4:64:de:38:92:b8:c9:a9:18:ee:fe: 5a:3e:43:e3:36:d6:1b:4d:4a:34:63:8a:74:d0:bf: 3c:21:6e:46:e9:d6:80:04:7c:2c:b3:80:28:a7:75: b6:b3:0f:ea:76:f1:a0:0d:1d:f6:bb:42:d6:66:bf: 9c:2f:31:4f:40:5b:1a:c1:b4:48:04:15:56:b1:33: 91:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:27:75:47:72:30:65:4B:74:6B:A9:A8:FA:24:4E:D2:A2:AB:20:50 X509v3 Authority Key Identifier: keyid:10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ad:f9:e6:01:06:e9:67:e6:27:c2:80:29:4b:00:b7:c9:fd: 41:e2:04:02:b8:90:03:bd:6f:63:1a:df:88:10:06:67:f5:39: 4a:5f:2c:99:5d:98:48:80:6e:6c:35:21:e5:da:91:5a:31:b4: 0d:3d:6a:25:c2:ea:22:b9:d3:0f:57:fe:f6:d5:89:6a:9b:bc: 91:01:e3:1d:e4:17:e4:a2:94:5d:42:97:2d:f3:c1:db:3c:ba: af:fb:d4:a1:03:11:26:b2:93:ed:0c:7d:15:fa:01:d9:a8:19: 75:1d:8b:a6:bd:4e:9b:63:b8:f1:5e:a4:a7:c5:b6:99:57:83: 2d:33:14:84:fe:2e:c6:a1:54:d1:13:e0:cc:b4:59:7c:18:a9: b2:ba:6d:f7:80:9b:5d:98:fa:83:14:8e:74:37:ba:01:cf:a4: 08:99:15:e6:c4:14:b5:28:eb:c4:4c:69:b4:16:ac:36:1b:0d: df:d2:51:96:83:18:46:33:31:ac:91:e6:64:fa:ac:23:5d:f9: 28:e1:e7:fc:e2:f0:01:ab:53:7f:35:e2:90:aa:ee:09:31:41: b6:e2:77:07:9b:0e:23:a3:74:be:f0:0d:f4:0d:58:e0:0b:05: 69:06:af:f4:3f:ab:a4:e2:c7:a5:ee:8a:8e:ec:fd:a8:90:09: b1:f5:d5:1f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MEM5RTExMC8GA1UEBRMoMTAwRDlBRUU5MUQyMjdGRTQ3NTkzNEYyOTc4QzM2MTdE OENGQThFRTAeFw0yNTA1MDkwNTU2MTNaFw0yNTA1MTYwNTU2MTNaMBgxFjAUBgNV BAMTDTY4MWQ5OGZkLTE1MmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC27tDWj5vOTjBtKNyD0wmHqNVS05bASPqxWUlYpB5r74/ZKDvnIHI4yx44VIEu b1+1dw5nfX/FUY708mrSb/qbSt3LJMmzewm45C25CYkMNm7uWWOKiiEhRjuBi4J9 FopHKZnBX+BYe8K+q/LeUYaMxwInclRKMYxrDvMbU5b3P49omKX1WvkoMfAoX2uL 4Qmai1SZv/9CmsN2Xmq2249Z2L4N+00cse2PDefdCTdigG+NtOiSXMLkZN44krjJ qRju/lo+Q+M21htNSjRjinTQvzwhbkbp1oAEfCyzgCindbazD+p28aANHfa7QtZm v5wvMU9AWxrBtEgEFVaxM5EfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeid1R3Iw ZUt0a6mo+iRO0qKrIFAwHwYDVR0jBBgwFoAUEA2a7pHSJ/5HWTTyl4w2F9jPqO4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwQzlFLzU3RkY0QkNBOEJD QTExRUZBQkZDMUEzOUM0RjlBRTAyL0VBMmE3cEhTSl81SFdUVHlsNHcyRjlqUHFP NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRUEyYTdwSFNKXzVIV1RUeWw0dzJGOWpQcU80LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw QzlFLzU3RkY0QkNBOEJDQTExRUZBQkZDMUEzOUM0RjlBRTAyL0VBMmE3cEhTSl81 SFdUVHlsNHcyRjlqUHFPNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAByt+eYBBuln5ifCgClLALfJ/UHiBAK4kAO9b2Ma34gQBmf1OUpfLJld mEiAbmw1IeXakVoxtA09aiXC6iK50w9X/vbViWqbvJEB4x3kF+SilF1Cly3zwds8 uq/71KEDESayk+0MfRX6AdmoGXUdi6a9TptjuPFepKfFtplXgy0zFIT+LsahVNET 4My0WXwYqbK6bfeAm12Y+oMUjnQ3ugHPpAiZFebEFLUo68RMabQWrDYbDd/SUZaD GEYzMayR5mT6rCNd+Sjh5/zi8AGrU3814pCq7gkxQbbidwebDiOjdL7wDfQNWOAL BWkGr/Q/q6Tix6Xuio7s/aiQCbH11R8= -----END CERTIFICATE-----Generated at Sat May 10 15:14:15 2025 by rpki-client