$ rpki-client -vvf rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft File: eSD4yoTskTxpqY1UNxIJtDTDMZE.mft (raw, json) Hash identifier: Q4EXkJ5FXjS11zVqgKfL/kN5oVEdpXMm5NK2UluPayo= Subject key identifier: 2A:84:BC:F5:5C:DD:79:51:52:EA:D1:F8:3E:E4:E6:09:B4:BD:E3:02 Authority key identifier: 79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91 Certificate issuer: /CN=A914A554/serialNumber=7920F8CA84EC913C69A98D54371209B434C33191 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft Manifest number: 55 Signing time: Sat 29 Mar 2025 06:35:11 +0000 Manifest this update: Sat 29 Mar 2025 06:35:10 +0000 Manifest next update: Sat 05 Apr 2025 06:35:10 +0000 Files and hashes: 1: eSD4yoTskTxpqY1UNxIJtDTDMZE.crl (hash: yJ9ZKfHHly1QYTtw0aQUl/F81bIKH2zpmajSGZGs3dc=) 2: E188EE7A935711EFBE98944CC4F9AE02.roa (hash: X4btbpCoiYoIXbuMOSmCOyUWCj9oTbrBupewiVqB8lU=) 3: F561A3BE935811EF97E1194EC4F9AE02.roa (hash: aPfjmDHXujlDq60sfxkeUX3+9b02nUsv2TYNf5bZEBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A554 Validity Not Before: Mar 29 06:35:10 2025 GMT Not After : Apr 5 06:35:10 2025 GMT Subject: CN=67e7949f-7118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:87:cc:e7:01:93:38:fa:20:d4:87:87:df:f2: 6c:2d:97:d3:a9:79:26:a0:66:e0:c3:c2:0b:01:0d: e3:bf:a8:c3:50:12:28:4e:21:cb:b6:0f:8d:fc:d6: 52:bf:2f:32:3e:d5:0e:60:aa:52:8c:70:18:67:f8: 52:b1:4b:d8:49:4f:9d:4c:d4:2c:01:8b:a9:8f:66: c2:19:49:af:bc:cd:56:4b:45:4d:62:7e:5d:0b:51: 29:7f:9f:61:1b:30:c3:8c:a6:04:7c:48:8b:8a:6f: 46:88:41:1c:a6:8c:df:62:35:03:a9:34:c1:49:3b: 0c:e0:93:e3:79:3c:e5:2e:bc:9a:fb:0d:52:e1:7e: c3:8a:9a:3a:8d:e3:be:96:e9:04:57:7f:92:fa:f0: a1:76:86:bf:f3:40:51:f7:9b:60:f3:6c:25:af:5e: c8:4c:4c:60:c3:96:40:a1:cf:55:71:2e:d0:70:31: e4:35:dd:f4:38:56:32:a9:83:b8:9c:19:6d:ca:25: 14:77:8f:ee:dc:80:32:02:ee:b4:5f:96:00:7c:b0: bb:c1:a6:eb:55:43:db:65:56:42:f8:1e:07:c5:4d: 3b:e9:a3:9e:e3:34:c6:b8:36:f4:1c:70:0e:60:19: 38:b3:87:b9:cc:a3:b6:8b:e8:56:f7:c4:bf:15:7a: 67:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:84:BC:F5:5C:DD:79:51:52:EA:D1:F8:3E:E4:E6:09:B4:BD:E3:02 X509v3 Authority Key Identifier: keyid:79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:44:9f:df:fb:a1:08:62:0c:24:55:19:c7:11:c2:43:50:e1: 72:d4:a1:1a:c9:cd:bf:79:d8:c2:9b:f3:36:b4:3e:25:0d:5f: fb:d9:29:a1:a1:c4:fc:3d:c4:96:a5:26:3f:b5:68:c6:19:c6: 2b:44:bc:a1:b4:f1:05:f9:35:36:1d:5d:af:61:13:0e:2f:ee: 38:f1:77:34:05:d5:cb:92:3f:c8:7e:ee:ed:c3:55:86:e6:c7: 5a:ba:9f:31:f3:c9:34:da:30:78:de:32:bd:3c:92:67:d1:ed: c9:86:01:2a:02:60:1b:7d:e6:6e:0f:98:d7:ed:47:89:4e:6b: 49:1e:93:e0:8f:b7:f4:df:18:9f:c7:7a:b7:4a:11:64:f8:73: 36:b5:a8:b5:66:f1:0d:b8:8f:85:c4:73:50:4c:b7:3a:ab:7b: 5f:da:57:14:83:5b:a1:75:3d:48:5d:bc:64:32:c7:30:85:ce: 66:0a:25:92:c7:60:bf:a4:de:9c:59:ee:01:e8:82:da:1a:c0: e1:9f:3c:35:81:9b:78:6a:79:20:44:82:63:aa:db:7b:10:94: e7:7d:79:89:d3:b6:bd:06:a8:e3:13:c5:78:a7:a5:ce:0e:0d: 01:36:39:b8:f4:67:8e:34:09:33:27:df:52:3a:75:ac:ac:7a: db:82:77:52 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QTU1NDExMC8GA1UEBRMoNzkyMEY4Q0E4NEVDOTEzQzY5QTk4RDU0MzcxMjA5QjQz NEMzMzE5MTAeFw0yNTAzMjkwNjM1MTBaFw0yNTA0MDUwNjM1MTBaMBgxFjAUBgNV BAMTDTY3ZTc5NDlmLTcxMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD0h8znAZM4+iDUh4ff8mwtl9OpeSagZuDDwgsBDeO/qMNQEihOIcu2D4381lK/ LzI+1Q5gqlKMcBhn+FKxS9hJT51M1CwBi6mPZsIZSa+8zVZLRU1ifl0LUSl/n2Eb MMOMpgR8SIuKb0aIQRymjN9iNQOpNMFJOwzgk+N5POUuvJr7DVLhfsOKmjqN476W 6QRXf5L68KF2hr/zQFH3m2DzbCWvXshMTGDDlkChz1VxLtBwMeQ13fQ4VjKpg7ic GW3KJRR3j+7cgDIC7rRflgB8sLvBputVQ9tlVkL4HgfFTTvpo57jNMa4NvQccA5g GTizh7nMo7aL6Fb3xL8VemfhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKoS89Vzd eVFS6tH4PuTmCbS94wIwHwYDVR0jBBgwFoAUeSD4yoTskTxpqY1UNxIJtDTDMZEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRBNTU0Lzc5Rjg5OTgyOTM1 NjExRUZBOEVERUIzM0M0RjlBRTAyL2VTRDR5b1Rza1R4cHFZMVVOeElKdERURE1a RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZVNENHlvVHNrVHhwcVkxVU54SUp0RFRETVpFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRB NTU0Lzc5Rjg5OTgyOTM1NjExRUZBOEVERUIzM0M0RjlBRTAyL2VTRDR5b1Rza1R4 cHFZMVVOeElKdERURE1aRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKdEn9/7oQhiDCRVGccRwkNQ4XLUoRrJzb952MKb8za0PiUNX/vZKaGh xPw9xJalJj+1aMYZxitEvKG08QX5NTYdXa9hEw4v7jjxdzQF1cuSP8h+7u3DVYbm x1q6nzHzyTTaMHjeMr08kmfR7cmGASoCYBt95m4PmNftR4lOa0kek+CPt/TfGJ/H erdKEWT4cza1qLVm8Q24j4XEc1BMtzqre1/aVxSDW6F1PUhdvGQyxzCFzmYKJZLH YL+k3pxZ7gHogtoawOGfPDWBm3hqeSBEgmOq23sQlOd9eYnTtr0GqOMTxXinpc4O DQE2Obj0Z440CTMn31I6daysetuCd1I= -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:57 2025 by rpki-client