$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft File: e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft (raw, json) Hash identifier: 3ixKfW80pfFggLMWCMPtle03Wh07VRqwOHP2N8UCObA= Subject key identifier: 7D:CF:BF:3C:E8:73:85:86:AF:9E:A0:BD:A0:63:A2:A2:14:5D:3E:00 Authority key identifier: 7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F Certificate issuer: /CN=A916D36A/serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft Manifest number: 0113 Signing time: Tue 08 Apr 2025 16:32:36 +0000 Manifest this update: Tue 08 Apr 2025 16:32:36 +0000 Manifest next update: Tue 15 Apr 2025 16:32:36 +0000 Files and hashes: 1: e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl (hash: N6OMRi79KHfiOFJQtFu/7dXLe6aUM66cTUL5964AvvE=) 2: 21A970BC737211EEB3112437C4F9AE02.roa (hash: aUIyfh4rOAFfQ6V1QGk9Ci9jD2H4crp4Ilb6Y+4J9lg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 16:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D36A Validity Not Before: Apr 8 16:32:36 2025 GMT Not After : Apr 15 16:32:36 2025 GMT Subject: CN=67f54fa4-503a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1c:b5:30:45:39:90:f6:39:77:88:5d:bd:b1: 5f:e9:8f:26:28:39:97:95:f8:0a:82:74:1e:91:d3: 6e:b4:2c:84:f0:73:a2:62:35:22:da:7c:74:ce:d6: be:09:f3:57:f2:b3:16:05:0e:ec:19:a9:34:03:82: 57:8a:13:3d:54:38:41:c6:d0:b8:52:18:1e:14:24: 01:56:e9:c4:28:6a:13:7f:a7:9e:69:2e:32:a7:4c: 4b:1f:31:64:04:f3:41:e9:73:4f:f7:05:98:3c:30: d6:73:87:5c:d2:63:cc:f7:07:03:90:e4:b5:fe:35: ef:e7:51:70:1e:19:fd:51:07:74:43:e4:62:97:ec: 59:ef:7f:da:10:28:bb:6d:39:8c:f7:af:c9:af:6c: 87:33:26:92:cb:74:f9:0b:85:4d:69:5e:52:b7:ef: ed:d7:cd:85:58:38:ce:6c:3a:f7:82:ce:15:03:05: 35:37:73:73:cf:96:cf:3b:e1:47:91:5e:6f:5e:66: 1a:3e:a4:db:7a:1b:bc:cc:bf:12:a6:cd:82:76:09: c5:5c:a1:c3:0e:0a:6b:fe:d3:b2:13:3f:12:06:43: 67:14:3e:79:6c:39:c7:b5:46:81:da:bd:80:ce:bd: 79:60:a6:80:b8:3c:2c:f2:99:fe:9c:83:c1:0e:75: fb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:CF:BF:3C:E8:73:85:86:AF:9E:A0:BD:A0:63:A2:A2:14:5D:3E:00 X509v3 Authority Key Identifier: keyid:7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:eb:ce:e7:34:0f:7e:e0:96:70:93:14:4a:60:49:62:0b:74: 67:62:6e:b3:9d:93:02:7c:9e:98:bc:ff:3e:d6:74:58:e0:a1: ae:d0:1c:30:6a:6b:f5:fa:c3:66:05:50:bd:4f:5f:11:52:81: 6f:ae:f3:30:31:5f:77:1a:b6:e8:41:b2:23:c8:ac:16:57:ff: 24:71:2d:cf:c0:09:dc:f6:ce:24:69:d4:65:f8:31:53:5a:90: 6f:6b:91:fd:f6:4b:9f:35:be:ff:67:af:e2:ec:44:8e:51:92: 3e:7f:88:95:3c:13:3c:9e:d4:35:00:85:e5:1e:8d:c8:53:36: 10:4f:08:02:5a:85:7d:68:e1:9e:86:5d:a3:75:2b:b7:8e:bc: 0b:c3:c3:52:9b:6b:b2:b2:26:7b:06:0c:a1:02:15:77:9e:74: 12:38:93:cb:21:07:c4:81:88:74:aa:eb:c5:8f:a2:39:f5:be: 2e:49:45:3d:bc:69:ac:02:2d:24:fd:35:28:b9:a3:32:bc:0c: da:61:fa:f5:0c:70:0b:0d:af:50:8e:92:4d:05:f6:c8:11:0c: fa:2c:ed:02:d9:33:10:99:49:7a:6a:f9:d5:02:de:ca:bc:08: 40:9c:53:fb:05:cd:eb:73:3a:09:bb:c5:3b:0f:2f:a2:3d:c0: 87:ca:24:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQzNkExMTAvBgNVBAUTKDdCOUNFREM4MzI4MDI4QTc0NTZFOUM0MTRCQjc3REFG RUJDRTc2NUYwHhcNMjUwNDA4MTYzMjM2WhcNMjUwNDE1MTYzMjM2WjAYMRYwFAYD VQQDEw02N2Y1NGZhNC01MDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhy1MEU5kPY5d4hdvbFf6Y8mKDmXlfgKgnQekdNutCyE8HOiYjUi2nx0zta+ CfNX8rMWBQ7sGak0A4JXihM9VDhBxtC4UhgeFCQBVunEKGoTf6eeaS4yp0xLHzFk BPNB6XNP9wWYPDDWc4dc0mPM9wcDkOS1/jXv51FwHhn9UQd0Q+Ril+xZ73/aECi7 bTmM96/Jr2yHMyaSy3T5C4VNaV5St+/t182FWDjObDr3gs4VAwU1N3Nzz5bPO+FH kV5vXmYaPqTbehu8zL8Sps2CdgnFXKHDDgpr/tOyEz8SBkNnFD55bDnHtUaB2r2A zr15YKaAuDws8pn+nIPBDnX7owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3Pvzzo c4WGr56gvaBjoqIUXT4AMB8GA1UdIwQYMBaAFHuc7cgygCinRW6cQUu3fa/rznZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDM2QS9DNkRENTFCNDcz NkYxMUVFOTE3RDAzMzRDNEY5QUUwMi9lNXp0eURLQUtLZEZicHhCUzdkOXItdk9k bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2U1enR5REtBS0tkRmJweEJTN2Q5ci12T2RsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDM2QS9DNkRENTFCNDczNkYxMUVFOTE3RDAzMzRDNEY5QUUwMi9lNXp0eURLQUtL ZEZicHhCUzdkOXItdk9kbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA687nNA9+4JZwkxRKYEliC3RnYm6znZMCfJ6YvP8+1nRY4KGu0Bww amv1+sNmBVC9T18RUoFvrvMwMV93GrboQbIjyKwWV/8kcS3PwAnc9s4kadRl+DFT WpBva5H99kufNb7/Z6/i7ESOUZI+f4iVPBM8ntQ1AIXlHo3IUzYQTwgCWoV9aOGe hl2jdSu3jrwLw8NSm2uysiZ7BgyhAhV3nnQSOJPLIQfEgYh0quvFj6I59b4uSUU9 vGmsAi0k/TUouaMyvAzaYfr1DHALDa9QjpJNBfbIEQz6LO0C2TMQmUl6avnVAt7K vAhAnFP7Bc3rczoJu8U7Dy+iPcCHyiR3 -----END CERTIFICATE-----Generated at Fri Apr 11 00:17:54 2025 by rpki-client