$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft File: eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft (raw, json) Hash identifier: BuMgHtRt6ZUvtq1psOY309i587qDooZz++C3fpS6zdA= Subject key identifier: C4:D4:1B:ED:AB:9B:CD:1B:61:CE:C8:44:67:CD:C7:2A:76:8E:9C:A9 Authority key identifier: 78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71 Certificate issuer: /CN=A91A55C9/serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71 Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft Manifest number: D7 Signing time: Thu 03 Apr 2025 04:49:48 +0000 Manifest this update: Thu 03 Apr 2025 04:49:48 +0000 Manifest next update: Thu 10 Apr 2025 04:49:48 +0000 Files and hashes: 1: eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl (hash: BJ4rYKt7lt08J/LnZxhXnYbK9ddufAGMdfvCrlhkfVg=) 2: B9C587ACA61911EFAD319873C4F9AE02.roa (hash: UVNnVE482CTuury1gOUSOm7uwVR741BfWPntovKeG3A=) 3: BA8A5FBEA61911EFAD319873C4F9AE02.roa (hash: GxG7PljqaIsL4NG1p4pqVTS9JJNKWXLA96c3vNu2FFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:49:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55C9 Validity Not Before: Apr 3 04:49:48 2025 GMT Not After : Apr 10 04:49:48 2025 GMT Subject: CN=67ee136c-27fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:42:2f:e0:c2:e2:25:f3:1d:9a:0c:28:30:b5: de:e1:f8:a3:18:b0:6d:16:74:50:f0:98:7d:c3:3a: 51:5f:3b:e5:32:5b:0a:ce:fe:31:70:64:9e:ad:6a: 99:e9:d8:37:99:7a:d7:ca:77:79:67:4b:2c:94:02: fe:6c:cc:7d:b0:28:d3:c7:02:da:ff:7e:66:c8:02: 77:ca:1d:38:6a:5f:4f:21:01:98:e7:dc:c2:a7:dd: 7a:13:47:0f:51:78:fb:5e:08:92:1b:4b:58:9d:56: 6a:e6:fa:a2:94:b1:bb:8c:92:2f:dd:17:45:e3:a0: d9:5d:95:a6:c7:29:e5:03:57:20:10:e0:2f:f8:0d: 18:75:06:7d:96:1e:8c:d7:6c:09:1d:39:1b:3d:d4: 19:b7:31:07:7f:7d:b5:21:bb:00:f7:01:e9:53:43: aa:d2:83:0a:d9:40:ea:7d:fa:f4:9e:e9:e7:84:62: c2:68:e6:43:63:41:55:97:38:a3:b7:9c:e3:5a:e5: 10:11:99:90:66:fa:58:ef:6f:55:07:13:9d:46:58: 2a:dd:6f:86:0b:6b:89:13:82:b7:86:64:85:6c:87: f2:1d:7f:94:04:01:2e:97:51:c3:6b:eb:89:55:8b: ab:b2:32:3f:65:68:67:b1:f5:04:92:98:05:7a:9f: 9e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D4:1B:ED:AB:9B:CD:1B:61:CE:C8:44:67:CD:C7:2A:76:8E:9C:A9 X509v3 Authority Key Identifier: keyid:78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:90:cb:58:da:ae:eb:02:3c:77:d3:71:0c:87:af:ee:6b:c8: f8:94:f0:78:39:a5:88:32:7e:83:6d:78:29:77:30:18:fe:60: c3:1d:4f:47:9d:9a:92:97:bb:ec:2b:b2:68:fc:eb:b4:f6:7c: fc:fd:4d:da:95:ca:fd:75:12:a8:42:81:ee:d9:73:3c:37:f1: 19:76:58:e6:59:7a:37:b6:2c:61:2b:c4:bc:a1:03:02:47:11: dc:c3:45:c7:ce:98:3b:76:c8:77:38:97:ec:4e:aa:8a:e9:3c: ab:8c:91:99:45:9c:f5:44:d0:48:40:a1:2b:32:0f:fe:09:fe: ea:2e:33:cd:05:df:11:db:2c:7f:bf:39:53:9b:ea:18:16:a4: 15:83:a2:28:c2:2d:4e:64:cf:8e:81:8c:62:78:84:e9:9d:94: 4e:6e:93:46:19:81:48:74:08:7e:c9:ad:a9:f6:34:57:68:8a: d9:fa:31:fa:09:b7:97:d8:34:0f:62:0b:95:bf:85:3d:42:ed: e7:0c:d6:36:8b:be:e4:1d:69:46:b3:d3:08:f3:b8:ed:56:c8: 4a:81:fa:68:5b:18:96:65:06:a8:6d:da:cb:9f:5f:c0:61:48: 86:c1:30:2c:53:64:2b:5c:bd:d7:79:7c:dc:aa:34:80:8e:06: 7c:f0:a2:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1QzkxMTAvBgNVBAUTKDc4MzlBMUZDMDE3NDAyNEJDQkE4NEQwMTJEM0VDNENB NDY3OUFDNzEwHhcNMjUwNDAzMDQ0OTQ4WhcNMjUwNDEwMDQ0OTQ4WjAYMRYwFAYD VQQDEw02N2VlMTM2Yy0yN2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEIv4MLiJfMdmgwoMLXe4fijGLBtFnRQ8Jh9wzpRXzvlMlsKzv4xcGSerWqZ 6dg3mXrXynd5Z0sslAL+bMx9sCjTxwLa/35myAJ3yh04al9PIQGY59zCp916E0cP UXj7XgiSG0tYnVZq5vqilLG7jJIv3RdF46DZXZWmxynlA1cgEOAv+A0YdQZ9lh6M 12wJHTkbPdQZtzEHf321IbsA9wHpU0Oq0oMK2UDqffr0nunnhGLCaOZDY0FVlzij t5zjWuUQEZmQZvpY729VBxOdRlgq3W+GC2uJE4K3hmSFbIfyHX+UBAEul1HDa+uJ VYursjI/ZWhnsfUEkpgFep+eXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMTUG+2r m80bYc7IRGfNxyp2jpypMB8GA1UdIwQYMBaAFHg5ofwBdAJLy6hNAS0+xMpGeaxx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVDOS84ODJGMjMyMEM5 RUIxMUVFOEI4NTdCMENDNEY5QUUwMi9lRG1oX0FGMEFrdkxxRTBCTFQ3RXlrWjVy SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VEbWhfQUYwQWt2THFFMEJMVDdFeWtaNXJIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTVDOS84ODJGMjMyMEM5RUIxMUVFOEI4NTdCMENDNEY5QUUwMi9lRG1oX0FGMEFr dkxxRTBCTFQ3RXlrWjVySEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAkMtY2q7rAjx303EMh6/ua8j4lPB4OaWIMn6DbXgpdzAY/mDDHU9H nZqSl7vsK7Jo/Ou09nz8/U3alcr9dRKoQoHu2XM8N/EZdljmWXo3tixhK8S8oQMC RxHcw0XHzpg7dsh3OJfsTqqK6TyrjJGZRZz1RNBIQKErMg/+Cf7qLjPNBd8R2yx/ vzlTm+oYFqQVg6Iowi1OZM+OgYxieITpnZRObpNGGYFIdAh+ya2p9jRXaIrZ+jH6 CbeX2DQPYguVv4U9Qu3nDNY2i77kHWlGs9MI87jtVshKgfpoWxiWZQaobdrLn1/A YUiGwTAsU2QrXL3XeXzcqjSAjgZ88KLN -----END CERTIFICATE-----Generated at Fri Apr 4 21:58:23 2025 by rpki-client