$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft File: e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft (raw, json) Hash identifier: tw18JF89fW8b67tAz2pydlRjBOh87KGY36zWiuQWiSQ= Subject key identifier: 1A:BE:4B:59:4F:73:6C:48:BC:C7:A1:C0:A2:07:10:7A:03:4A:C1:A4 Authority key identifier: 7B:E9:8C:7A:AA:D8:7C:9F:25:92:96:30:16:43:A3:61:0A:7B:51:88 Certificate issuer: /CN=A91CDB75/serialNumber=7BE98C7AAAD87C9F259296301643A3610A7B5188 Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft Manifest number: E0 Signing time: Thu 03 Apr 2025 04:43:20 +0000 Manifest this update: Thu 03 Apr 2025 04:43:20 +0000 Manifest next update: Thu 10 Apr 2025 04:43:20 +0000 Files and hashes: 1: e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl (hash: 7v19w6a+KOM6aFCeRXmwEOQ0YeJu/ph2i0nKO5kOgSk=) 2: 4CC50DB2BB7811EE9416DD42C4F9AE02.roa (hash: zPBkBX8TSXO+DP7kaXxBDzxvo14LuZd67QJ/cyraKFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:43:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDB75 Validity Not Before: Apr 3 04:43:20 2025 GMT Not After : Apr 10 04:43:20 2025 GMT Subject: CN=67ee11e8-ab72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:62:fd:14:ea:6e:6e:ec:e2:dd:1d:19:2f:01: b3:eb:36:0d:af:29:05:c0:3e:7e:3e:24:ee:7a:64: 64:25:3c:5d:d6:b3:8b:2a:63:57:c4:24:88:3c:80: fe:35:05:e1:33:5f:58:68:cf:93:66:06:63:71:58: 2f:5e:c5:32:14:f1:ed:e5:22:53:28:1d:50:23:51: 3d:a0:1f:ef:fa:1a:30:01:3b:b2:40:50:e7:49:6e: 5e:99:3f:a2:48:6e:db:a8:c8:29:db:4d:35:99:a4: bc:45:71:73:d9:71:e5:20:88:af:0d:24:8f:b6:22: e5:0e:7c:fd:c2:0a:92:66:e2:3a:60:74:aa:49:ed: db:15:74:67:23:02:85:c8:63:00:78:95:a7:95:1a: 9e:14:b6:4d:42:23:3b:9c:86:b1:e4:e5:b0:f1:82: b4:19:24:be:63:fa:d1:6b:52:e6:db:96:69:c1:b0: db:1c:51:43:2b:71:ce:46:74:8a:c7:b3:fe:19:89: 60:f0:51:50:ac:7d:79:e1:14:8b:4c:37:00:28:74: 06:80:ea:2f:3e:44:83:31:c9:e9:c2:44:3b:b7:97: ab:ac:0a:c7:cb:66:83:51:14:7f:2a:2f:b4:5a:55: cd:54:8a:25:d4:93:86:57:b4:04:0f:97:b0:2f:51: e0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BE:4B:59:4F:73:6C:48:BC:C7:A1:C0:A2:07:10:7A:03:4A:C1:A4 X509v3 Authority Key Identifier: keyid:7B:E9:8C:7A:AA:D8:7C:9F:25:92:96:30:16:43:A3:61:0A:7B:51:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:19:be:34:ca:2f:c6:d2:77:85:ab:f8:88:0a:55:b3:88:4c: 6c:ca:be:ac:a2:04:f2:d0:fb:52:86:60:73:c9:01:fc:a2:6f: 36:80:1d:95:6f:99:cd:00:4e:7f:a8:54:ee:17:8d:91:e8:7a: 3f:da:2f:84:07:4a:ad:fe:f6:cd:55:9d:7f:9a:41:0a:9f:c2: 5d:97:15:0e:3b:ca:d8:12:57:d0:b0:31:03:f0:1e:ed:60:5b: 0a:c5:58:7a:c1:50:ac:7d:a6:c2:07:f1:25:e7:08:9e:67:1a: 11:dc:32:15:cf:3b:6d:17:20:76:74:d1:2a:3e:31:bd:81:8b: c4:4c:a6:b9:8d:14:15:2e:d9:7d:42:1b:f9:48:3d:61:80:f7: d4:84:a5:4b:8d:3b:85:2e:2c:a6:52:9d:ac:9c:f7:37:b3:35: 32:ec:08:ad:d2:eb:f6:0e:c1:c4:bf:79:8a:cf:77:f5:37:3e: 25:a4:22:5f:44:2c:86:2e:cf:8c:7d:aa:26:a1:dd:70:8d:8b: 42:81:51:82:b0:2f:e8:1b:b8:fe:2c:d1:f0:70:ae:68:38:2d: 57:2a:2f:9f:2d:28:70:a0:78:2c:4e:d4:ca:2c:56:26:9d:40: 97:0b:50:f5:1d:11:40:5f:25:3d:3f:e5:03:29:be:68:f5:8c: 74:9d:c8:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RCNzUxMTAvBgNVBAUTKDdCRTk4QzdBQUFEODdDOUYyNTkyOTYzMDE2NDNBMzYx MEE3QjUxODgwHhcNMjUwNDAzMDQ0MzIwWhcNMjUwNDEwMDQ0MzIwWjAYMRYwFAYD VQQDEw02N2VlMTFlOC1hYjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WL9FOpubuzi3R0ZLwGz6zYNrykFwD5+PiTuemRkJTxd1rOLKmNXxCSIPID+ NQXhM19YaM+TZgZjcVgvXsUyFPHt5SJTKB1QI1E9oB/v+howATuyQFDnSW5emT+i SG7bqMgp2001maS8RXFz2XHlIIivDSSPtiLlDnz9wgqSZuI6YHSqSe3bFXRnIwKF yGMAeJWnlRqeFLZNQiM7nIax5OWw8YK0GSS+Y/rRa1Lm25ZpwbDbHFFDK3HORnSK x7P+GYlg8FFQrH154RSLTDcAKHQGgOovPkSDMcnpwkQ7t5errArHy2aDURR/Ki+0 WlXNVIol1JOGV7QED5ewL1HgTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBq+S1lP c2xIvMehwKIHEHoDSsGkMB8GA1UdIwQYMBaAFHvpjHqq2HyfJZKWMBZDo2EKe1GI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREI3NS9FNjUxOUExNEJC NzcxMUVFQUFEN0IyNDFDNEY5QUUwMi9lLW1NZXFyWWZKOGxrcFl3RmtPallRcDdV WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UtbU1lcXJZZko4bGtwWXdGa09qWVFwN1VZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REI3NS9FNjUxOUExNEJCNzcxMUVFQUFEN0IyNDFDNEY5QUUwMi9lLW1NZXFyWWZK OGxrcFl3RmtPallRcDdVWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtGb40yi/G0neFq/iIClWziExsyr6sogTy0PtShmBzyQH8om82gB2V b5nNAE5/qFTuF42R6Ho/2i+EB0qt/vbNVZ1/mkEKn8JdlxUOO8rYElfQsDED8B7t YFsKxVh6wVCsfabCB/El5wieZxoR3DIVzzttFyB2dNEqPjG9gYvETKa5jRQVLtl9 Qhv5SD1hgPfUhKVLjTuFLiymUp2snPc3szUy7Ait0uv2DsHEv3mKz3f1Nz4lpCJf RCyGLs+Mfaomod1wjYtCgVGCsC/oG7j+LNHwcK5oOC1XKi+fLShwoHgsTtTKLFYm nUCXC1D1HRFAXyU9P+UDKb5o9Yx0ncjC -----END CERTIFICATE-----Generated at Fri Apr 4 22:30:08 2025 by rpki-client