$ rpki-client -vvf rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft File: emYQUZRc4uj7SubeY7KEeLDO014.mft (raw, json) Hash identifier: 2ZKGJiJwHs7ufy7lbgkmAAc5G+u/vmDleF5lOmeA5eI= Subject key identifier: F6:DD:1D:3E:B9:A3:3B:5F:1F:8E:8A:BC:ED:6F:CD:C9:20:3F:FD:07 Authority key identifier: 7A:66:10:51:94:5C:E2:E8:FB:4A:E6:DE:63:B2:84:78:B0:CE:D3:5E Certificate issuer: /CN=A9165FF3/serialNumber=7A661051945CE2E8FB4AE6DE63B28478B0CED35E Certificate serial: 3477 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft Manifest number: 3473 Signing time: Sun 20 Apr 2025 14:59:36 +0000 Manifest this update: Sun 20 Apr 2025 14:59:36 +0000 Manifest next update: Sun 27 Apr 2025 14:59:36 +0000 Files and hashes: 1: emYQUZRc4uj7SubeY7KEeLDO014.crl (hash: 8QB75zjZMsCpQEtLxnCjiweEOZdl1T7CJYSrJAjkL+0=) 2: 5FBB084EAE6A11ECAA9D756AC4F9AE02.roa (hash: K595oFRb/eWrNFeoUywkMOiaWQkDdWUG4us/t6+Lff0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.crl rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 14:59:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13431 (0x3477) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165FF3, serialNumber=7A661051945CE2E8FB4AE6DE63B28478B0CED35E Validity Not Before: Apr 20 14:59:36 2025 GMT Not After : Apr 27 14:59:36 2025 GMT Subject: CN=68050bd8-5f78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2b:71:1c:3c:0e:75:c1:9b:fe:36:8a:4d:86: 3e:15:38:1f:11:f2:3c:f3:89:a7:84:55:d7:b1:7f: 3d:24:d7:17:40:4c:2f:e0:81:fe:1a:7c:c9:e8:3d: 7c:e0:cc:f4:e8:5a:b6:db:5f:c1:38:82:60:ba:c8: 30:bc:7d:0b:d0:1d:68:52:d6:68:6a:20:91:76:a7: bd:03:3c:a0:ad:db:2a:a6:ce:27:f8:bd:89:67:82: 70:3c:ae:d6:45:88:70:f4:b3:0c:f3:3d:b9:8e:56: 48:e2:8b:0a:85:27:71:9c:89:88:0b:c6:62:83:55: c0:f9:34:b6:1f:15:fb:52:6b:e8:87:57:ad:4a:2a: 02:e5:a9:24:a6:cb:f9:bb:6a:f3:80:0d:a0:2c:73: 96:2e:dc:91:3c:5c:e1:1a:7d:ad:9a:0e:07:9f:9a: 93:6e:d4:05:75:8e:99:6d:43:e1:65:41:94:50:f8: 4d:7c:58:45:64:74:f3:99:b8:b1:58:f7:a7:83:cb: 98:89:46:ab:15:19:92:61:95:89:d5:2d:5c:54:7f: a4:72:49:0a:d8:6f:ff:d6:68:9f:59:fc:96:73:3b: 11:61:18:55:79:71:7d:ae:bd:eb:c7:4d:c2:13:fe: d9:85:42:d3:47:96:ff:cf:b5:c6:ed:14:d3:8e:e4: bb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:DD:1D:3E:B9:A3:3B:5F:1F:8E:8A:BC:ED:6F:CD:C9:20:3F:FD:07 X509v3 Authority Key Identifier: keyid:7A:66:10:51:94:5C:E2:E8:FB:4A:E6:DE:63:B2:84:78:B0:CE:D3:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:f8:ed:c3:09:d2:62:bd:d2:33:a7:85:ca:d7:6e:fa:f4:c6: bb:0b:52:cd:22:b5:54:27:23:7e:9b:35:18:37:30:83:f9:da: 66:1c:db:a5:81:52:bd:37:13:ea:d6:02:b0:8a:6d:f7:eb:d9: 50:50:14:65:ac:6a:eb:77:d6:3a:c6:c9:12:11:4e:67:5f:52: 35:ec:11:45:55:0f:a0:2e:f9:9d:f7:00:52:8a:be:9d:2b:3f: 6a:69:4a:45:b4:6e:82:02:9c:cc:ab:d8:a9:a1:05:93:8d:74: 66:3d:4e:c7:ef:67:ad:6a:1d:f6:64:11:c9:66:72:1c:a2:ad: a3:c4:3e:7b:79:e9:94:86:ca:82:d8:fa:a8:6a:58:2b:24:fd: f6:f9:4a:c5:9a:0c:7f:8d:c0:fd:bf:7c:5c:10:b1:07:a9:7e: 80:a8:fe:4a:f4:7e:b1:9c:c4:d4:f8:22:ed:65:61:5d:20:2f: 94:1d:60:2d:9b:22:b0:21:95:09:ae:32:ec:d5:df:c1:8e:0f: f9:ea:46:17:b6:a7:32:9f:7f:71:c1:42:c8:72:ea:fe:69:06: 6a:fa:38:2b:f3:e0:56:f8:7f:6c:57:ad:83:6d:15:ae:bd:48: c1:5d:3d:53:19:fe:21:b3:b7:5b:41:ee:c6:d9:ee:4e:1f:aa: 91:aa:3d:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVGRjMxMTAvBgNVBAUTKDdBNjYxMDUxOTQ1Q0UyRThGQjRBRTZERTYzQjI4NDc4 QjBDRUQzNUUwHhcNMjUwNDIwMTQ1OTM2WhcNMjUwNDI3MTQ1OTM2WjAYMRYwFAYD VQQDEw02ODA1MGJkOC01Zjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvitxHDwOdcGb/jaKTYY+FTgfEfI884mnhFXXsX89JNcXQEwv4IH+GnzJ6D18 4Mz06Fq221/BOIJgusgwvH0L0B1oUtZoaiCRdqe9Azygrdsqps4n+L2JZ4JwPK7W RYhw9LMM8z25jlZI4osKhSdxnImIC8Zig1XA+TS2HxX7Umvoh1etSioC5akkpsv5 u2rzgA2gLHOWLtyRPFzhGn2tmg4Hn5qTbtQFdY6ZbUPhZUGUUPhNfFhFZHTzmbix WPeng8uYiUarFRmSYZWJ1S1cVH+kckkK2G//1mifWfyWczsRYRhVeXF9rr3rx03C E/7ZhULTR5b/z7XG7RTTjuS71wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbdHT65 oztfH46KvO1vzckgP/0HMB8GA1UdIwQYMBaAFHpmEFGUXOLo+0rm3mOyhHiwztNe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUZGMy9DRUFCQjRFNjFE OUQxMUUyOEVBRjREOEQwOEIwMkNEMi9lbVlRVVpSYzR1ajdTdWJlWTdLRWVMRE8w MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VtWVFVWlJjNHVqN1N1YmVZN0tFZUxETzAxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUZGMy9DRUFCQjRFNjFEOUQxMUUyOEVBRjREOEQwOEIwMkNEMi9lbVlRVVpSYzR1 ajdTdWJlWTdLRWVMRE8wMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV+O3DCdJivdIzp4XK12769Ma7C1LNIrVUJyN+mzUYNzCD+dpmHNul gVK9NxPq1gKwim3369lQUBRlrGrrd9Y6xskSEU5nX1I17BFFVQ+gLvmd9wBSir6d Kz9qaUpFtG6CApzMq9ipoQWTjXRmPU7H72etah32ZBHJZnIcoq2jxD57eemUhsqC 2PqoalgrJP32+UrFmgx/jcD9v3xcELEHqX6AqP5K9H6xnMTU+CLtZWFdIC+UHWAt myKwIZUJrjLs1d/Bjg/56kYXtqcyn39xwULIcur+aQZq+jgr8+BW+H9sV62DbRWu vUjBXT1TGf4hs7dbQe7G2e5OH6qRqj3Y -----END CERTIFICATE-----Generated at Sun Apr 20 22:00:07 2025 by rpki-client