$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft File: eFfRGlHcrpwuCIahDOBvVfW4QwA.mft (raw, json) Hash identifier: 9cDemDz/AwOzmFpZjjv4+ZDy+tRa7yBDvsdgoAhqud4= Subject key identifier: 5C:5B:D4:F4:37:41:69:08:24:46:C4:78:1F:FD:6C:17:A1:0C:80:B4 Authority key identifier: 78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00 Certificate issuer: /CN=A91A5D8A/serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300 Certificate serial: 0598 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft Manifest number: 058F Signing time: Wed 02 Apr 2025 23:15:49 +0000 Manifest this update: Wed 02 Apr 2025 23:15:49 +0000 Manifest next update: Wed 09 Apr 2025 23:15:49 +0000 Files and hashes: 1: eFfRGlHcrpwuCIahDOBvVfW4QwA.crl (hash: 5TCi7uyDwVJ/4aQ9giBIbY2j8ZGDi/p6s+IKpgxn/dg=) 2: 8183B0FACAF111EBA40AF15BC4F9AE02.roa (hash: 2FiQQsbz3nt2u/cekKkmnmxwVKcgAmIxkizQKnpeMp0=) 3: 18981398329B11EDB9F09862C4F9AE02.roa (hash: dJlRsSYRiHAfXA1Nnt7jiiGzcupZLCHRX4H/d6aCfuU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 23:15:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1432 (0x598) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5D8A Validity Not Before: Apr 2 23:15:49 2025 GMT Not After : Apr 9 23:15:49 2025 GMT Subject: CN=67edc525-9e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3b:ef:4c:53:0d:25:cf:76:04:4b:c1:18:c6: 5d:21:c3:59:ea:56:93:4a:ae:67:28:b0:c3:65:fb: 82:cd:ec:ae:2e:64:7c:f5:6c:ef:33:a6:7b:4b:6d: 50:14:ff:99:c8:28:32:a5:14:5c:5d:2c:09:06:9d: 01:41:5f:b1:72:98:73:5a:79:7d:1c:7d:d8:45:45: db:97:b9:21:01:c2:bf:dc:df:30:7a:e3:4d:09:dc: f5:fc:a5:59:25:31:4f:eb:92:25:f4:f2:25:92:4d: 4a:0a:a8:33:e8:19:03:d8:3a:d0:ca:70:11:08:f3: 04:74:5c:13:b0:41:49:0b:62:2c:d1:cf:d0:0b:d7: e6:c1:ee:de:f0:92:d5:8c:e7:a6:ea:79:4f:20:47: 3f:98:32:8b:9f:cc:f2:20:b1:8b:d8:51:f0:bd:45: 14:f7:0e:a6:fb:f8:44:96:93:50:e0:0b:f5:b2:10: de:97:0c:81:46:9b:f3:b2:65:a9:a8:52:d6:cf:fc: 56:c5:5f:df:dd:d9:ba:4b:42:e9:85:fa:c0:61:aa: eb:50:f7:ed:c2:5f:1a:60:34:4d:cc:0b:f8:5d:84: 2b:5d:ad:f0:25:dc:89:24:25:3d:c0:a0:27:02:43: c0:0f:cb:b2:fd:81:a0:a5:1a:11:84:35:f6:d3:63: 65:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5B:D4:F4:37:41:69:08:24:46:C4:78:1F:FD:6C:17:A1:0C:80:B4 X509v3 Authority Key Identifier: keyid:78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f9:e2:c2:02:19:5c:e1:cd:4f:92:00:c3:13:02:0e:8a:71: 9b:67:ea:cc:e1:67:d1:a1:d8:77:3f:17:b0:37:42:6b:b9:cd: 78:c3:78:44:5e:15:9b:61:3b:17:5a:85:b7:39:15:41:11:e7: 7c:cb:76:25:b7:4d:f4:03:2c:fa:4b:ab:c0:11:17:1d:a9:85: 16:7e:dc:22:20:de:c3:c5:58:cc:1a:55:36:83:92:f0:85:73: bc:50:10:41:72:c2:1b:a8:f4:70:aa:48:c2:10:e8:4a:98:f0: 3a:38:29:6b:5e:a6:20:8d:34:e9:c5:9e:a4:f8:ae:07:70:bf: 7a:08:2e:5d:6e:44:d2:66:a1:73:7d:92:44:aa:dc:44:35:49: 38:86:4b:0d:ff:0c:6d:ba:e8:35:80:96:54:89:1a:43:e3:9b: 7e:40:ec:af:85:25:f6:3f:48:d3:73:42:aa:80:21:a5:6a:ec: bf:3d:3e:13:f6:1f:22:0d:0a:61:39:fc:fa:2c:90:0c:28:56: f0:d6:aa:12:a1:55:f0:f1:3d:1f:d8:38:14:60:f0:65:79:9e: a4:c8:11:30:e0:9c:5e:4c:af:b6:d8:72:a7:6d:b4:59:b8:41: e0:81:05:b3:b9:84:d1:89:94:b6:e9:e0:68:a3:9c:97:e6:9e: 35:de:d6:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVEOEExMTAvBgNVBAUTKDc4NTdEMTFBNTFEQ0FFOUMyRTA4ODZBMTBDRTA2RjU1 RjVCODQzMDAwHhcNMjUwNDAyMjMxNTQ5WhcNMjUwNDA5MjMxNTQ5WjAYMRYwFAYD VQQDEw02N2VkYzUyNS05ZTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjvvTFMNJc92BEvBGMZdIcNZ6laTSq5nKLDDZfuCzeyuLmR89WzvM6Z7S21Q FP+ZyCgypRRcXSwJBp0BQV+xcphzWnl9HH3YRUXbl7khAcK/3N8weuNNCdz1/KVZ JTFP65Il9PIlkk1KCqgz6BkD2DrQynARCPMEdFwTsEFJC2Is0c/QC9fmwe7e8JLV jOem6nlPIEc/mDKLn8zyILGL2FHwvUUU9w6m+/hElpNQ4Av1shDelwyBRpvzsmWp qFLWz/xWxV/f3dm6S0LphfrAYarrUPftwl8aYDRNzAv4XYQrXa3wJdyJJCU9wKAn AkPAD8uy/YGgpRoRhDX202Nl1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxb1PQ3 QWkIJEbEeB/9bBehDIC0MB8GA1UdIwQYMBaAFHhX0RpR3K6cLgiGoQzgb1X1uEMA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUQ4QS9CQTJGMUI5QUNB RUUxMUVCQTJGQkQwNTZDNEY5QUUwMi9lRmZSR2xIY3Jwd3VDSWFoRE9CdlZmVzRR d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VGZlJHbEhjcnB3dUNJYWhET0J2VmZXNFF3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUQ4QS9CQTJGMUI5QUNBRUUxMUVCQTJGQkQwNTZDNEY5QUUwMi9lRmZSR2xIY3Jw d3VDSWFoRE9CdlZmVzRRd0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd+eLCAhlc4c1PkgDDEwIOinGbZ+rM4WfRodh3PxewN0Jruc14w3hE XhWbYTsXWoW3ORVBEed8y3Ylt030Ayz6S6vAERcdqYUWftwiIN7DxVjMGlU2g5Lw hXO8UBBBcsIbqPRwqkjCEOhKmPA6OClrXqYgjTTpxZ6k+K4HcL96CC5dbkTSZqFz fZJEqtxENUk4hksN/wxtuug1gJZUiRpD45t+QOyvhSX2P0jTc0KqgCGlauy/PT4T 9h8iDQphOfz6LJAMKFbw1qoSoVXw8T0f2DgUYPBleZ6kyBEw4JxeTK+22HKnbbRZ uEHggQWzuYTRiZS26eBoo5yX5p413tau -----END CERTIFICATE-----Generated at Fri Apr 4 22:14:58 2025 by rpki-client