$ rpki-client -vvf rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft File: eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft (raw, json) Hash identifier: b3eDbmyNAaIMhwhWRBpgidRNtw/VYd12suEEaaUuwCM= Subject key identifier: C6:BD:F9:0D:B5:68:BA:3B:A6:29:6A:52:8F:B8:DC:6A:A1:04:3D:6A Authority key identifier: 78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29 Certificate issuer: /CN=A91A495C/serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429 Certificate serial: 0D29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft Manifest number: 0D04 Signing time: Thu 10 Apr 2025 18:05:56 +0000 Manifest this update: Thu 10 Apr 2025 18:05:55 +0000 Manifest next update: Thu 17 Apr 2025 18:05:55 +0000 Files and hashes: 1: eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl (hash: EK/WnPwmPpt8Rqn14G3IrO0UGg+rgROgp62bxAf0GQk=) 2: 9F12E3A025A511EE87132E45C4F9AE02.roa (hash: bGVPdIvZlYGFNzxT3y5YSA5PehaGI7Seiy7YCZdX9Sg=) 3: 055A1A7A05FC11EFB61A7767C4F9AE02.roa (hash: +In7lqAfHKKuHVBt4b296chjrd7RaFgigBnxlxSxJ4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 18:05:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3369 (0xd29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A495C, serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429 Validity Not Before: Apr 10 18:05:55 2025 GMT Not After : Apr 17 18:05:55 2025 GMT Subject: CN=67f80884-cb6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:97:50:7d:7b:7c:48:63:97:52:17:28:a5:91: 58:d7:06:d9:cd:b8:59:45:19:ab:21:01:df:40:e9: 0d:4e:ad:cf:8c:c8:22:61:e5:6f:3b:c7:eb:0d:c1: eb:84:da:2a:e7:b8:0e:08:9b:9f:34:cb:27:68:14: e2:a8:07:1e:99:75:12:9f:7d:bb:88:db:a5:92:89: e5:9b:fd:9d:ab:8f:ba:03:3d:31:d4:c1:65:d2:d2: 53:ad:c9:49:bb:61:5d:6a:da:4d:51:bd:e4:8b:93: 41:1e:e2:c8:4a:0e:6c:84:e2:00:a1:ff:c5:d5:cf: 8d:2f:3f:f4:73:ba:89:90:a9:ab:5e:88:10:81:78: 17:0d:91:02:49:db:79:e9:29:1c:be:6d:af:09:ec: 4e:88:57:6e:22:32:7a:37:bf:3c:29:6f:62:bd:02: 68:2a:6e:a1:6b:4b:59:f3:f9:9d:96:b3:6e:57:cc: 11:27:b9:d2:32:b6:ef:96:17:5e:f9:e3:aa:01:99: 2e:40:03:99:4b:11:18:03:a4:a0:d7:6b:90:ff:3b: d1:de:94:06:4f:1e:aa:e2:ee:71:3b:63:7c:32:cf: 07:d2:37:ca:b1:c5:c6:56:74:0b:38:79:3f:d7:f0: d0:b8:6e:6e:1c:2b:36:7a:d3:1e:7d:ef:b1:ec:10: 2b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:BD:F9:0D:B5:68:BA:3B:A6:29:6A:52:8F:B8:DC:6A:A1:04:3D:6A X509v3 Authority Key Identifier: keyid:78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:be:a4:6d:df:a4:cd:fd:7d:c6:39:4e:1f:6a:b0:17:45:c9: f4:ac:45:24:6b:54:20:c6:ff:84:06:47:16:17:9e:5f:c2:08: 19:8d:3f:ff:e0:45:9a:23:ea:e8:f2:25:ac:14:5e:8c:5f:cb: fa:5b:20:80:ce:86:7e:9f:26:44:66:a2:1b:87:f7:67:fd:ce: 5f:99:44:ab:f5:55:7d:7a:44:f9:a2:32:77:ee:50:82:96:99: 19:c7:46:aa:89:84:ab:bc:92:e9:e7:b2:63:8a:c4:65:04:fe: ff:46:c5:fd:62:51:c6:88:8a:3e:a5:ed:fb:dd:fc:3a:3c:42: 1e:54:68:e0:d9:76:db:5a:f9:cb:e4:a6:e2:e6:5a:17:73:96: f6:42:cf:92:2c:91:51:fb:b2:bb:6c:4c:38:cb:e6:b8:03:9e: e9:7f:0a:af:ed:78:0a:90:b3:0c:cd:8a:69:63:8d:3f:e8:f5: d6:fd:a9:79:e2:7f:81:ae:40:7f:96:f2:db:17:a4:c8:52:89: 69:b1:48:3e:38:1d:f3:7c:6d:0b:8d:6a:a0:6f:97:f8:de:26: e2:24:45:2e:84:6d:32:6e:9e:b7:28:50:1c:8b:a7:2a:7a:cf: 8f:05:6c:f9:73:6d:26:7a:90:36:95:57:40:c5:ce:4f:fa:8c: 62:21:60:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ5NUMxMTAvBgNVBAUTKDc4QkVEQkVEQzA0NTlCOTAwQzI4Mjg5MkYxM0IxNzgy QTk1NjA0MjkwHhcNMjUwNDEwMTgwNTU1WhcNMjUwNDE3MTgwNTU1WjAYMRYwFAYD VQQDEw02N2Y4MDg4NC1jYjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3JdQfXt8SGOXUhcopZFY1wbZzbhZRRmrIQHfQOkNTq3PjMgiYeVvO8frDcHr hNoq57gOCJufNMsnaBTiqAcemXUSn327iNulkonlm/2dq4+6Az0x1MFl0tJTrclJ u2FdatpNUb3ki5NBHuLISg5shOIAof/F1c+NLz/0c7qJkKmrXogQgXgXDZECSdt5 6Skcvm2vCexOiFduIjJ6N788KW9ivQJoKm6ha0tZ8/mdlrNuV8wRJ7nSMrbvlhde +eOqAZkuQAOZSxEYA6Sg12uQ/zvR3pQGTx6q4u5xO2N8Ms8H0jfKscXGVnQLOHk/ 1/DQuG5uHCs2etMefe+x7BArzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMa9+Q21 aLo7pilqUo+43GqhBD1qMB8GA1UdIwQYMBaAFHi+2+3ARZuQDCgokvE7F4KpVgQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDk1Qy81NTkxODAwNEUy QUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01QU1LQ2lTOFRzWGdxbFdC Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VMN2I3Y0JGbTVBTUtDaVM4VHNYZ3FsV0JDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDk1Qy81NTkxODAwNEUyQUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01 QU1LQ2lTOFRzWGdxbFdCQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKvqRt36TN/X3GOU4farAXRcn0rEUka1Qgxv+EBkcWF55fwggZjT// 4EWaI+ro8iWsFF6MX8v6WyCAzoZ+nyZEZqIbh/dn/c5fmUSr9VV9ekT5ojJ37lCC lpkZx0aqiYSrvJLp57JjisRlBP7/RsX9YlHGiIo+pe373fw6PEIeVGjg2XbbWvnL 5Kbi5loXc5b2Qs+SLJFR+7K7bEw4y+a4A57pfwqv7XgKkLMMzYppY40/6PXW/al5 4n+BrkB/lvLbF6TIUolpsUg+OB3zfG0LjWqgb5f43ibiJEUuhG0ybp63KFAci6cq es+PBWz5c20mepA2lVdAxc5P+oxiIWAM -----END CERTIFICATE-----Generated at Sat Apr 12 17:47:57 2025 by rpki-client