$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft File: ej19N0jHiYbCxeULUBO-tgq0etw.mft (raw, json) Hash identifier: 70yOnTnS1/ofXIhjYx0JomFiBQRbj1JkcXvt2XAAfFY= Subject key identifier: 30:BD:D6:28:52:A0:52:85:CC:D6:C3:A2:57:35:7E:7E:24:EB:56:A8 Authority key identifier: 7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC Certificate issuer: /CN=A9185D79/serialNumber=7A3D7D3748C78986C2C5E50B5013BEB60AB47ADC Certificate serial: 023F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft Manifest number: 0234 Signing time: Thu 15 May 2025 01:55:47 +0000 Manifest this update: Thu 15 May 2025 01:55:46 +0000 Manifest next update: Thu 22 May 2025 01:55:46 +0000 Files and hashes: 1: ej19N0jHiYbCxeULUBO-tgq0etw.crl (hash: olgF5+LeK+rzs3dVDtYft09Z/eTQuzlsMNgtm3t2efg=) 2: 3303481C820B11EFA5FD6818C4F9AE02.roa (hash: qSn7HxYC79SRKokwqOPpvLlZ94GTIrZHr+Y0TqagvLo=) 3: E0B81ED0D56111EE9E1D7E5BC4F9AE02.roa (hash: EmbjI84JzquBQTIr84bkMPcgLgOL5ED40jMLVI24vcA=) 4: 2A1AAEF2CA7711EF9ED1D782C4F9AE02.roa (hash: U22myChDK0J4NLA39gSglrY/Ph9QMALivvjc+F5pl5Y=) 5: 28144924820B11EF8B053D18C4F9AE02.roa (hash: mm04mj/mfrr+HTospMIe7o235EYlDUVjsUVc02GtxUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.crl rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 01:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 575 (0x23f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D79, serialNumber=7A3D7D3748C78986C2C5E50B5013BEB60AB47ADC Validity Not Before: May 15 01:55:46 2025 GMT Not After : May 22 01:55:46 2025 GMT Subject: CN=682549a3-bddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e0:20:c5:dd:a8:55:49:94:fe:94:22:4f:b8: a7:ea:c8:43:3e:6c:6b:d5:be:8e:4c:2b:ba:20:be: e5:6b:7a:0c:fe:ee:4a:4e:69:85:1c:00:a5:a7:29: 13:0a:57:f8:5a:0c:5d:3f:d1:b1:6b:82:41:7e:86: f8:c2:91:69:6c:65:c9:5b:47:c2:62:92:8b:c7:09: ed:92:d9:8b:54:99:9b:54:41:8c:d8:77:b6:c1:ef: 3f:ba:9f:2f:0c:bf:5e:52:34:9b:be:80:68:e5:2e: c6:20:fe:de:f3:e1:6b:e5:47:1f:79:f8:a5:3d:0d: 9d:c7:5a:4e:82:c8:87:56:6d:4a:57:2b:69:00:28: 44:3f:ae:f3:2d:df:6a:b7:40:5e:4b:55:05:72:e7: 26:52:9c:b0:2f:08:45:58:f1:c8:4a:f5:ee:d0:42: 00:f5:5d:94:f1:04:02:38:44:49:2a:17:9e:82:89: b5:c1:56:7a:4b:96:ea:52:ac:3d:4e:7b:fb:b1:20: 80:3e:37:34:bc:49:51:44:f1:01:d2:0b:a5:0a:fc: 6a:f3:69:16:3f:26:70:6b:d6:e1:e8:94:7d:9c:74: ba:04:68:79:62:02:1b:73:d3:4e:35:ca:66:1b:81: 10:9e:c7:27:69:b5:ac:74:b5:ba:cd:f3:b0:6e:18: 5f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:BD:D6:28:52:A0:52:85:CC:D6:C3:A2:57:35:7E:7E:24:EB:56:A8 X509v3 Authority Key Identifier: keyid:7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:0b:eb:5a:d6:34:10:d2:a1:6d:09:9f:62:7c:0e:b6:7a:c1: 74:08:1d:20:11:31:9d:be:6d:24:f5:38:e4:d0:1f:b1:12:4f: 10:b5:d6:34:a7:c7:94:fd:3d:4e:bf:f6:bb:41:34:e8:fe:25: 9c:15:dd:3b:1b:6a:6d:02:0d:ab:0f:24:99:89:bb:a6:4c:e1: c9:c0:be:dd:af:1e:a2:cd:cc:83:f1:12:b5:98:bc:a3:12:9c: 13:c6:23:e3:06:6f:5e:21:82:e1:9c:65:f6:6c:31:f3:71:a3: af:a4:06:69:e1:28:62:a4:20:70:78:8d:c8:6f:c9:f7:4a:92: 72:fe:9e:46:44:a9:a8:ff:3a:9f:e8:8a:9a:db:6a:14:e8:97: e2:79:a6:0f:00:00:49:a0:7c:db:f4:7c:4d:4c:58:dc:18:62: d5:af:93:b3:c1:2d:87:f7:96:9a:c5:2e:b9:46:9b:a0:36:7c: a9:48:99:68:00:c3:e5:6a:b2:9b:93:1a:4f:51:69:77:4a:b5: a0:91:29:56:0e:ea:a0:c5:2f:f3:d6:64:a8:0c:72:69:16:66: 15:1c:c2:92:56:8b:a3:4e:5c:47:4c:30:c1:82:6f:54:ab:ca: 1f:65:7a:ad:50:30:2b:2b:3b:61:47:16:cc:58:3e:88:4d:7f: fa:31:16:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENzkxMTAvBgNVBAUTKDdBM0Q3RDM3NDhDNzg5ODZDMkM1RTUwQjUwMTNCRUI2 MEFCNDdBREMwHhcNMjUwNTE1MDE1NTQ2WhcNMjUwNTIyMDE1NTQ2WjAYMRYwFAYD VQQDEw02ODI1NDlhMy1iZGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0eAgxd2oVUmU/pQiT7in6shDPmxr1b6OTCu6IL7la3oM/u5KTmmFHAClpykT Clf4WgxdP9Gxa4JBfob4wpFpbGXJW0fCYpKLxwntktmLVJmbVEGM2He2we8/up8v DL9eUjSbvoBo5S7GIP7e8+Fr5UcfefilPQ2dx1pOgsiHVm1KVytpAChEP67zLd9q t0BeS1UFcucmUpywLwhFWPHISvXu0EIA9V2U8QQCOERJKheegom1wVZ6S5bqUqw9 Tnv7sSCAPjc0vElRRPEB0gulCvxq82kWPyZwa9bh6JR9nHS6BGh5YgIbc9NONcpm G4EQnscnabWsdLW6zfOwbhhfiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDC91ihS oFKFzNbDolc1fn4k61aoMB8GA1UdIwQYMBaAFHo9fTdIx4mGwsXlC1ATvrYKtHrc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ3OS9CRjE5NEQ4MDI4 M0QxMUVEQTk0NDczM0RDNEY5QUUwMi9lajE5TjBqSGlZYkN4ZVVMVUJPLXRncTBl dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VqMTlOMGpIaVliQ3hlVUxVQk8tdGdxMGV0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQ3OS9CRjE5NEQ4MDI4M0QxMUVEQTk0NDczM0RDNEY5QUUwMi9lajE5TjBqSGlZ YkN4ZVVMVUJPLXRncTBldHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPC+ta1jQQ0qFtCZ9ifA62esF0CB0gETGdvm0k9Tjk0B+xEk8QtdY0 p8eU/T1Ov/a7QTTo/iWcFd07G2ptAg2rDySZibumTOHJwL7drx6izcyD8RK1mLyj EpwTxiPjBm9eIYLhnGX2bDHzcaOvpAZp4ShipCBweI3Ib8n3SpJy/p5GRKmo/zqf 6Iqa22oU6JfieaYPAABJoHzb9HxNTFjcGGLVr5OzwS2H95aaxS65RpugNnypSJlo AMPlarKbkxpPUWl3SrWgkSlWDuqgxS/z1mSoDHJpFmYVHMKSVoujTlxHTDDBgm9U q8ofZXqtUDArKzthRxbMWD6ITX/6MRZA -----END CERTIFICATE-----Generated at Thu May 15 15:32:18 2025 by rpki-client