$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft File: e1ZuSGesy4G3S6nWZiJObARfDCc.mft (raw, json) Hash identifier: /TUvs4hdjJe8koGr22T7yMl3Xq+vNsVy5wNEl9LI0ms= Subject key identifier: BA:09:BE:8D:F7:F0:E8:59:F3:28:0A:4E:7D:1D:1E:BC:C7:65:98:95 Authority key identifier: 7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27 Certificate issuer: /CN=A91F2DFB/serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27 Certificate serial: 037B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft Manifest number: 0377 Signing time: Sun 13 Apr 2025 00:32:54 +0000 Manifest this update: Sun 13 Apr 2025 00:32:54 +0000 Manifest next update: Sun 20 Apr 2025 00:32:54 +0000 Files and hashes: 1: e1ZuSGesy4G3S6nWZiJObARfDCc.crl (hash: v7uQYQD850NCL35fbdpeFrmiU5d4vF2I5XTbV+vzDSg=) 2: 478248BEA05511ECABAEA234C4F9AE02.roa (hash: NkEOP97SzecD0KGRDamIN3H3KINufJxbEUvLVltNpgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 00:32:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 891 (0x37b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2DFB, serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27 Validity Not Before: Apr 13 00:32:54 2025 GMT Not After : Apr 20 00:32:54 2025 GMT Subject: CN=67fb0636-9095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:62:22:4e:ed:65:9d:88:82:05:25:ed:0e:70: 5d:45:ae:cf:91:d8:78:42:31:e2:90:61:5a:b1:fe: ce:7b:0c:cd:9a:5b:9e:7c:06:0d:e5:4a:c0:87:b9: 5e:8d:c4:c6:00:82:ae:d3:b4:08:c4:b9:e4:7e:d1: aa:8e:de:98:b4:90:d6:63:01:ba:2a:49:09:60:56: 81:6e:65:8f:b5:04:4a:a7:54:ec:14:62:ba:12:86: 03:6a:61:69:1d:74:2d:3b:c2:12:ec:68:95:c0:48: b7:8d:ea:88:68:c4:a3:7d:58:d0:fc:dd:8c:80:24: 45:f7:1d:68:5e:93:8a:71:fb:89:77:87:c8:07:2e: 07:bf:ac:59:fa:15:60:96:c7:8c:9d:12:8f:ea:6e: 5d:1d:1c:62:61:78:b7:c9:6d:db:a9:63:d6:f5:69: 36:0a:f0:97:49:89:8d:72:07:0a:65:8b:9d:52:0d: e6:71:7e:bc:2a:b6:2d:0e:e0:21:a9:c4:11:a4:5d: 74:e2:83:0e:f3:75:9c:4f:b4:ff:98:8c:11:89:ca: 8d:ba:16:27:3b:61:ee:69:63:56:3e:ab:9b:b9:e3: 00:6d:ab:54:4f:78:ef:ed:f4:ed:12:e6:b9:7e:03: e0:03:2f:44:2e:d1:73:5e:bb:69:91:b4:6e:01:45: 93:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:09:BE:8D:F7:F0:E8:59:F3:28:0A:4E:7D:1D:1E:BC:C7:65:98:95 X509v3 Authority Key Identifier: keyid:7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:a6:2a:51:1b:02:b0:06:5d:38:91:6c:8d:1f:f6:f7:c5:51: 8a:80:ce:77:9e:34:c3:e4:c0:62:f5:d2:81:78:16:99:7d:e3: 87:da:6c:02:e4:a3:26:98:fd:c2:b5:a3:6b:ed:b6:ca:68:17: f3:55:29:9e:60:62:10:e8:b0:79:ad:d0:2e:cb:35:71:a7:70: b1:fe:9f:4d:7e:60:d2:8a:b7:f2:27:41:f6:95:40:d2:ae:6c: 80:40:83:47:72:71:8e:52:9b:0e:84:4a:20:b0:3b:b4:7a:c2: 1e:68:21:c9:99:d9:cb:8d:31:17:0f:cf:7e:e9:79:1d:dd:16: ce:78:21:31:b9:84:f6:62:7a:ac:36:87:4c:89:43:0b:6e:e8: ef:7f:47:b0:a0:90:d8:81:04:05:0e:0f:df:e6:97:d0:58:02: 20:f5:65:77:46:55:8e:3e:10:d6:40:3b:33:48:cd:38:97:c0: 47:10:81:d5:07:49:10:6b:d3:ff:88:e2:30:50:ec:fd:96:f1: 73:e8:5e:ee:79:c6:e2:02:b7:41:3d:cf:8b:06:e3:43:a3:76: c7:84:eb:26:04:72:f4:88:0e:ce:1a:82:d3:9c:d6:c2:2c:c7: c1:ec:80:c3:b5:54:46:5a:cd:db:42:d0:43:e2:f1:77:d1:d0: 7e:26:c7:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJERkIxMTAvBgNVBAUTKDdCNTY2RTQ4NjdBQ0NCODFCNzRCQTlENjY2MjI0RTZD MDQ1RjBDMjcwHhcNMjUwNDEzMDAzMjU0WhcNMjUwNDIwMDAzMjU0WjAYMRYwFAYD VQQDEw02N2ZiMDYzNi05MDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoWIiTu1lnYiCBSXtDnBdRa7Pkdh4QjHikGFasf7OewzNmluefAYN5UrAh7le jcTGAIKu07QIxLnkftGqjt6YtJDWYwG6KkkJYFaBbmWPtQRKp1TsFGK6EoYDamFp HXQtO8IS7GiVwEi3jeqIaMSjfVjQ/N2MgCRF9x1oXpOKcfuJd4fIBy4Hv6xZ+hVg lseMnRKP6m5dHRxiYXi3yW3bqWPW9Wk2CvCXSYmNcgcKZYudUg3mcX68KrYtDuAh qcQRpF104oMO83WcT7T/mIwRicqNuhYnO2HuaWNWPqubueMAbatUT3jv7fTtEua5 fgPgAy9ELtFzXrtpkbRuAUWTqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLoJvo33 8OhZ8ygKTn0dHrzHZZiVMB8GA1UdIwQYMBaAFHtWbkhnrMuBt0up1mYiTmwEXwwn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkRGQi85RkNBQURGRUEw NTAxMUVDOTdCRjhENzJDNEY5QUUwMi9lMVp1U0dlc3k0RzNTNm5XWmlKT2JBUmZE Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UxWnVTR2VzeTRHM1M2bldaaUpPYkFSZkRDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkRGQi85RkNBQURGRUEwNTAxMUVDOTdCRjhENzJDNEY5QUUwMi9lMVp1U0dlc3k0 RzNTNm5XWmlKT2JBUmZEQ2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwpipRGwKwBl04kWyNH/b3xVGKgM53njTD5MBi9dKBeBaZfeOH2mwC 5KMmmP3CtaNr7bbKaBfzVSmeYGIQ6LB5rdAuyzVxp3Cx/p9NfmDSirfyJ0H2lUDS rmyAQINHcnGOUpsOhEogsDu0esIeaCHJmdnLjTEXD89+6Xkd3RbOeCExuYT2Ynqs NodMiUMLbujvf0ewoJDYgQQFDg/f5pfQWAIg9WV3RlWOPhDWQDszSM04l8BHEIHV B0kQa9P/iOIwUOz9lvFz6F7uecbiArdBPc+LBuNDo3bHhOsmBHL0iA7OGoLTnNbC LMfB7IDDtVRGWs3bQtBD4vF30dB+JsfY -----END CERTIFICATE-----Generated at Sun Apr 13 04:17:38 2025 by rpki-client