$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft File: eE7A8P-dbYDcn33OORSfxg-WFJk.mft (raw, json) Hash identifier: 65w00AxqVYRy2LhyZxgtW8oMMw+Z9cuVpg5HnLxBQ08= Subject key identifier: F1:94:0C:F3:09:C5:37:E0:F2:1A:AA:30:D1:F1:AB:BF:92:C2:25:AB Authority key identifier: 78:4E:C0:F0:FF:9D:6D:80:DC:9F:7D:CE:39:14:9F:C6:0F:96:14:99 Certificate issuer: /CN=A91FA69F/serialNumber=784EC0F0FF9D6D80DC9F7DCE39149FC60F961499 Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft Manifest number: 95 Signing time: Fri 11 Apr 2025 05:33:15 +0000 Manifest this update: Fri 11 Apr 2025 05:33:14 +0000 Manifest next update: Fri 18 Apr 2025 05:33:14 +0000 Files and hashes: 1: eE7A8P-dbYDcn33OORSfxg-WFJk.crl (hash: jMufsiBimUEc12fZbvlWgDRv4tSwl+XCLK8yE86WkGI=) 2: 4FAF60B433A411EFB7A29C24C4F9AE02.roa (hash: LD7B5+XzyaE0f/ths6DbB5WXZXs6tAf0rdqOWz9N/kI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.crl rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 05:33:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA69F, serialNumber=784EC0F0FF9D6D80DC9F7DCE39149FC60F961499 Validity Not Before: Apr 11 05:33:14 2025 GMT Not After : Apr 18 05:33:14 2025 GMT Subject: CN=67f8a99b-507f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c9:3b:72:1e:19:a5:2e:ba:40:b8:bb:21:c4: 0a:7c:e2:92:9c:bc:74:5e:17:12:11:69:ff:3a:20: 68:1f:ee:23:72:46:cd:72:74:e6:22:bb:3f:38:24: c9:e4:02:e8:2e:ff:6f:c0:b6:6a:b2:b0:bc:27:30: 90:fe:ea:e1:a1:87:5d:69:bd:fe:cf:93:af:97:2b: 61:91:c2:f1:0f:66:91:e5:b1:98:c1:90:83:f5:14: 83:3c:91:9a:e6:57:d5:cd:44:01:39:cf:33:da:1f: 6f:5d:3a:8b:6d:d3:21:dd:9a:67:e0:dc:ea:01:34: 40:5d:3c:5d:19:81:38:f2:b1:96:25:d0:e3:4e:97: e4:58:c4:d3:b9:d7:14:ec:cd:68:1a:7f:68:48:f7: 88:8f:d2:34:6e:f7:67:f9:64:10:86:98:84:81:08: 78:b1:cf:d7:cb:7d:93:68:f7:55:a9:5e:56:18:ca: 7f:bf:c3:fa:52:fd:76:ea:d9:57:69:d8:62:87:8d: b7:46:d8:4c:e0:9b:b7:d0:51:ca:52:12:58:93:3e: 8c:7d:56:fc:6d:04:6e:ee:7c:c9:55:89:15:4e:83: 05:6b:4d:7a:04:77:f7:a1:29:fa:6b:81:01:73:70: 8c:ad:e3:c3:db:6f:ab:f8:f2:3e:96:bd:f1:96:ae: 15:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:94:0C:F3:09:C5:37:E0:F2:1A:AA:30:D1:F1:AB:BF:92:C2:25:AB X509v3 Authority Key Identifier: keyid:78:4E:C0:F0:FF:9D:6D:80:DC:9F:7D:CE:39:14:9F:C6:0F:96:14:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:2e:95:75:0a:7f:76:fc:5a:97:37:ec:5d:79:5f:86:19:aa: 5d:a0:cd:44:a2:64:e3:93:75:01:5a:04:5c:4f:1e:3b:28:fe: c1:fd:64:48:1b:66:0e:da:cc:36:46:71:70:ea:9a:88:10:34: cf:27:d2:e3:aa:2b:61:cb:78:20:29:45:43:e4:cf:26:a7:7b: 51:4f:9d:01:0f:8a:a5:94:3b:27:c6:ee:05:97:6d:04:7c:4e: 99:67:05:f9:cb:60:96:49:ff:de:ad:86:d7:c2:94:e3:14:0b: ff:2d:40:31:5b:35:f4:a6:31:d4:10:74:e6:23:8d:03:68:03: 35:a8:ea:71:55:ea:e8:f1:b6:ef:a8:bc:79:cd:ae:9f:81:66: 94:40:b1:83:25:13:a9:af:73:68:9a:72:62:77:a7:1f:fe:7d: ce:e9:5d:45:f9:58:15:b1:d1:cd:5b:96:29:84:0a:85:b8:9a: 08:08:ab:05:25:20:bb:d7:dd:05:98:7f:82:71:cf:0b:5d:5b: 1b:70:22:6a:a8:1d:f9:ce:dd:1b:1d:62:da:7e:2a:60:e3:56: c7:3d:6f:da:66:52:2a:a5:56:7a:36:c1:9d:d4:e1:ec:39:7f: 84:21:fc:d1:b1:79:dd:d4:20:19:06:32:ff:8b:94:7a:0c:a3: 58:7f:2c:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2OUYxMTAvBgNVBAUTKDc4NEVDMEYwRkY5RDZEODBEQzlGN0RDRTM5MTQ5RkM2 MEY5NjE0OTkwHhcNMjUwNDExMDUzMzE0WhcNMjUwNDE4MDUzMzE0WjAYMRYwFAYD VQQDEw02N2Y4YTk5Yi01MDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8k7ch4ZpS66QLi7IcQKfOKSnLx0XhcSEWn/OiBoH+4jckbNcnTmIrs/OCTJ 5ALoLv9vwLZqsrC8JzCQ/urhoYddab3+z5OvlythkcLxD2aR5bGYwZCD9RSDPJGa 5lfVzUQBOc8z2h9vXTqLbdMh3Zpn4NzqATRAXTxdGYE48rGWJdDjTpfkWMTTudcU 7M1oGn9oSPeIj9I0bvdn+WQQhpiEgQh4sc/Xy32TaPdVqV5WGMp/v8P6Uv126tlX adhih423RthM4Ju30FHKUhJYkz6MfVb8bQRu7nzJVYkVToMFa016BHf3oSn6a4EB c3CMrePD22+r+PI+lr3xlq4VDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPGUDPMJ xTfg8hqqMNHxq7+SwiWrMB8GA1UdIwQYMBaAFHhOwPD/nW2A3J99zjkUn8YPlhSZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY5Ri9DNjY1REYyMjMz QTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9lRTdBOFAtZGJZRGNuMzNPT1JTZnhnLVdG SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VFN0E4UC1kYllEY24zM09PUlNmeGctV0ZKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTY5Ri9DNjY1REYyMjMzQTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9lRTdBOFAtZGJZ RGNuMzNPT1JTZnhnLVdGSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnLpV1Cn92/FqXN+xdeV+GGapdoM1EomTjk3UBWgRcTx47KP7B/WRI G2YO2sw2RnFw6pqIEDTPJ9Ljqithy3ggKUVD5M8mp3tRT50BD4qllDsnxu4Fl20E fE6ZZwX5y2CWSf/erYbXwpTjFAv/LUAxWzX0pjHUEHTmI40DaAM1qOpxVero8bbv qLx5za6fgWaUQLGDJROpr3NomnJid6cf/n3O6V1F+VgVsdHNW5YphAqFuJoICKsF JSC7190FmH+Ccc8LXVsbcCJqqB35zt0bHWLafipg41bHPW/aZlIqpVZ6NsGd1OHs OX+EIfzRsXnd1CAZBjL/i5R6DKNYfyzJ -----END CERTIFICATE-----Generated at Sat Apr 12 15:07:14 2025 by rpki-client