$ rpki-client -vvf rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.mft File: EyzK6sEE4qNEW2M3YQVNyNcQehM.mft (raw, json) Hash identifier: CdxcmF17jtxMTM6Lb/mLxl+hGOAycnqz+nXSt0ifOYs= Subject key identifier: 15:96:27:06:A7:DE:D6:FF:55:FD:B8:B8:D6:C8:4D:5B:92:F7:03:34 Authority key identifier: 13:2C:CA:EA:C1:04:E2:A3:44:5B:63:37:61:05:4D:C8:D7:10:7A:13 Certificate issuer: /CN=A91670F6/serialNumber=132CCAEAC104E2A3445B633761054DC8D7107A13 Certificate serial: 04C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyzK6sEE4qNEW2M3YQVNyNcQehM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.mft Manifest number: 04BD Signing time: Wed 02 Apr 2025 23:51:58 +0000 Manifest this update: Wed 02 Apr 2025 23:51:57 +0000 Manifest next update: Wed 09 Apr 2025 23:51:57 +0000 Files and hashes: 1: EyzK6sEE4qNEW2M3YQVNyNcQehM.crl (hash: GS35jdOjrjJOae+vIHW56PHDse/OJtn4o6a7qKnBrv0=) 2: 29935FC21CF311ECA077821AC4F9AE02.roa (hash: Gw9UrgyhZyQgdaUx+vCyY31CJTl4dtl3RMTe5VBeLyw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.crl rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyzK6sEE4qNEW2M3YQVNyNcQehM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 23:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1217 (0x4c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91670F6 Validity Not Before: Apr 2 23:51:57 2025 GMT Not After : Apr 9 23:51:57 2025 GMT Subject: CN=67edcd9e-23b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:83:11:32:63:fc:bb:2c:94:54:fd:a0:30:cb: 76:ab:17:ae:fb:fe:f1:11:ef:e2:45:aa:67:1a:49: 9e:4d:05:20:d3:cf:d6:52:d8:a5:03:2a:fb:be:70: 1f:98:12:1a:f8:44:e5:d0:c4:69:90:1a:43:25:fe: b0:a0:30:c2:49:fe:76:72:71:f4:7c:39:05:6e:72: 73:4d:e6:9d:02:41:80:63:04:55:14:4b:08:34:b3: b7:dc:bf:7b:90:c6:89:4f:76:04:09:18:24:24:33: 99:d9:d1:42:9e:bb:e2:bd:a1:6b:89:51:31:6c:11: 08:0d:cf:f6:64:22:9d:12:da:d2:4b:4e:de:a3:94: 65:8f:80:ef:2b:15:d3:a4:6a:28:bd:29:61:94:1d: a5:4f:18:ac:d8:d1:db:7e:bd:d1:e7:71:f2:6d:bd: f6:e8:06:fb:28:78:f9:c7:72:13:23:b0:0f:cc:4a: 56:e9:24:76:a3:44:42:91:0c:c4:98:38:6a:f4:75: 04:63:43:39:80:e4:38:fd:81:72:d0:b0:6c:57:6e: 87:58:b5:b0:53:a5:c3:85:3a:94:00:5f:23:ca:2c: 5b:98:74:d9:40:47:aa:65:05:d3:6c:7b:9c:32:8f: 2c:6f:c2:74:95:8a:0a:f7:0c:5b:01:13:7a:9f:bc: 20:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:96:27:06:A7:DE:D6:FF:55:FD:B8:B8:D6:C8:4D:5B:92:F7:03:34 X509v3 Authority Key Identifier: keyid:13:2C:CA:EA:C1:04:E2:A3:44:5B:63:37:61:05:4D:C8:D7:10:7A:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyzK6sEE4qNEW2M3YQVNyNcQehM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:cf:4a:ff:c7:5d:99:37:a5:03:cf:5c:c0:4a:ed:fc:03:6b: f6:54:43:85:ac:b0:92:33:cc:99:a7:69:22:00:54:87:6f:f1: 39:1e:88:7d:44:4a:fc:7e:6a:ac:31:5a:99:1f:ed:99:46:9f: 96:b2:3a:84:51:cc:5f:d0:4a:1d:35:83:83:f6:f7:82:9d:61: 17:5e:35:84:aa:c5:43:3e:6d:96:0c:f9:44:af:ec:df:c3:af: 68:fd:c9:54:91:ef:5f:7f:54:d3:19:01:7a:fc:74:1b:dc:72: 2b:81:ad:24:33:eb:e2:84:38:68:fe:78:cf:29:4c:15:d8:f2: e2:dd:ac:15:54:ff:44:c4:a9:c1:2b:2b:17:8f:f7:04:da:31: a7:08:ef:49:ee:1e:83:f2:22:96:9d:c7:63:28:8f:07:c7:d9: d4:c2:46:e4:0b:c5:ea:a0:c6:80:96:e1:77:6e:db:ca:3a:5c: 32:07:3b:f2:c2:92:26:b0:bb:9e:43:0b:60:80:bc:41:df:67: 9c:fc:50:7f:4a:fc:f7:b6:3c:a4:c3:3d:05:53:79:9a:0a:bb: 47:a8:fb:f2:86:cd:a5:16:77:91:a9:df:a2:fe:1c:67:83:3a: 6e:57:1e:e4:02:ba:de:2a:04:1e:75:87:8e:95:e9:63:70:b0: 3a:9c:15:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwRjYxMTAvBgNVBAUTKDEzMkNDQUVBQzEwNEUyQTM0NDVCNjMzNzYxMDU0REM4 RDcxMDdBMTMwHhcNMjUwNDAyMjM1MTU3WhcNMjUwNDA5MjM1MTU3WjAYMRYwFAYD VQQDEw02N2VkY2Q5ZS0yM2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoMRMmP8uyyUVP2gMMt2qxeu+/7xEe/iRapnGkmeTQUg08/WUtilAyr7vnAf mBIa+ETl0MRpkBpDJf6woDDCSf52cnH0fDkFbnJzTeadAkGAYwRVFEsINLO33L97 kMaJT3YECRgkJDOZ2dFCnrvivaFriVExbBEIDc/2ZCKdEtrSS07eo5Rlj4DvKxXT pGoovSlhlB2lTxis2NHbfr3R53Hybb326Ab7KHj5x3ITI7APzEpW6SR2o0RCkQzE mDhq9HUEY0M5gOQ4/YFy0LBsV26HWLWwU6XDhTqUAF8jyixbmHTZQEeqZQXTbHuc Mo8sb8J0lYoK9wxbARN6n7wgtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWWJwan 3tb/Vf24uNbITVuS9wM0MB8GA1UdIwQYMBaAFBMsyurBBOKjRFtjN2EFTcjXEHoT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzBGNi8xODVEQUZENjFD RUYxMUVDOUVERDgwMTFDNEY5QUUwMi9FeXpLNnNFRTRxTkVXMk0zWVFWTnlOY1Fl aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V5eks2c0VFNHFORVcyTTNZUVZOeU5jUWVoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzBGNi8xODVEQUZENjFDRUYxMUVDOUVERDgwMTFDNEY5QUUwMi9FeXpLNnNFRTRx TkVXMk0zWVFWTnlOY1FlaE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgz0r/x12ZN6UDz1zASu38A2v2VEOFrLCSM8yZp2kiAFSHb/E5Hoh9 REr8fmqsMVqZH+2ZRp+WsjqEUcxf0EodNYOD9veCnWEXXjWEqsVDPm2WDPlEr+zf w69o/clUke9ff1TTGQF6/HQb3HIrga0kM+vihDho/njPKUwV2PLi3awVVP9ExKnB KysXj/cE2jGnCO9J7h6D8iKWncdjKI8Hx9nUwkbkC8XqoMaAluF3btvKOlwyBzvy wpImsLueQwtggLxB32ec/FB/Svz3tjykwz0FU3maCrtHqPvyhs2lFneRqd+i/hxn gzpuVx7kArreKgQedYeOleljcLA6nBWq -----END CERTIFICATE-----Generated at Fri Apr 4 18:30:22 2025 by rpki-client