$ rpki-client -vvf rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft File: eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft (raw, json) Hash identifier: UDJ7Z08kx1HWnhmiygGWlUZB/M0Drk87mQcRzsqLWd0= Subject key identifier: 28:96:75:DE:23:C1:7D:6A:9A:25:41:B1:79:6A:B1:75:D5:6E:DE:BB Authority key identifier: 79:2E:0B:3E:B3:60:44:27:FC:84:8F:96:C7:34:AC:4D:99:FE:75:96 Certificate issuer: /CN=A9113A27/serialNumber=792E0B3EB3604427FC848F96C734AC4D99FE7596 Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft Manifest number: 0169 Signing time: Thu 05 Jun 2025 03:17:32 +0000 Manifest this update: Thu 05 Jun 2025 03:17:31 +0000 Manifest next update: Thu 12 Jun 2025 03:17:31 +0000 Files and hashes: 1: eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl (hash: DqGoyIrEIwjNqavUolMLb9e6VR7tJe4zt1u5AJLE758=) 2: C110D9D23D8611EEB7F2D04BC4F9AE02.roa (hash: nZO3fD/UXNr3uqqv02fIgSVaBw0L8cPP2uBqZUuZXQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 03:17:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113A27, serialNumber=792E0B3EB3604427FC848F96C734AC4D99FE7596 Validity Not Before: Jun 5 03:17:31 2025 GMT Not After : Jun 12 03:17:31 2025 GMT Subject: CN=68410c4b-b853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:be:40:17:9b:8f:bd:20:c7:f1:6e:9e:4d:c6: 3d:fb:06:9c:7d:d5:14:be:be:56:1b:e0:e1:3c:99: 8e:4f:3e:56:27:78:ce:8c:85:49:b6:d9:84:1d:95: 17:37:80:de:7a:22:87:76:96:d6:b1:f2:20:82:10: 14:38:6a:61:52:ea:d9:05:56:c0:16:55:ef:42:65: 84:3a:1a:c0:17:a3:c1:75:9c:7f:8c:31:2c:b9:72: e6:d9:9b:b1:ba:ec:3b:26:3b:73:11:91:61:79:73: 60:bc:59:68:5e:d1:7b:dd:9e:76:21:a8:3d:48:28: c2:b6:6c:4e:96:9a:bc:0b:0b:eb:9f:c8:b6:d4:2c: 73:42:54:2b:11:5d:ee:b6:a7:45:bd:e1:f1:0b:58: ef:c7:72:2e:86:18:ed:b8:07:47:f4:91:8b:6d:10: c3:97:a1:ff:e5:63:b8:4f:7b:8e:cc:40:57:70:d1: 11:67:27:df:75:53:13:a8:4a:af:19:64:ff:7a:02: 8d:22:3b:da:cd:84:7a:87:a1:3b:16:bd:5f:58:ba: 72:44:fd:64:cc:86:ee:07:bf:72:6b:c7:18:a2:93: 83:09:0f:2e:51:1e:21:70:bb:2b:dd:01:6b:64:ff: ff:11:78:91:22:c2:d8:ff:26:0d:e3:33:cf:a4:4e: b3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:96:75:DE:23:C1:7D:6A:9A:25:41:B1:79:6A:B1:75:D5:6E:DE:BB X509v3 Authority Key Identifier: keyid:79:2E:0B:3E:B3:60:44:27:FC:84:8F:96:C7:34:AC:4D:99:FE:75:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:63:17:6c:d4:48:f9:fd:aa:98:cf:36:5c:79:da:08:ef:b2: 1c:63:b5:0f:69:73:1d:6b:54:90:1a:97:dd:43:aa:3d:4a:26: 78:4f:74:17:8a:89:15:ec:b2:68:49:be:05:9d:38:8c:6a:33: 3a:15:7f:35:08:20:34:ae:f3:c8:b0:90:f8:39:6e:74:21:f2: 65:97:e8:e2:eb:61:fb:b2:1d:e6:cf:38:5a:c8:43:42:9c:ab: 5a:37:28:c5:7c:cc:7f:4f:54:54:eb:f3:a5:dc:54:bf:a6:63: c9:cc:06:5d:bc:62:19:17:fb:a3:d1:7c:3c:90:44:fc:ae:b1: 15:6b:83:9f:3a:c2:86:6e:b5:f3:9f:cf:19:4e:45:99:52:a8: df:5a:64:6a:84:6a:8c:9f:4d:f7:41:9a:4f:9b:aa:5f:04:2f: f0:c9:ca:85:fe:c6:83:be:62:e6:5d:3b:40:b7:a1:1c:ba:77: 03:86:4f:fa:f1:60:ab:2d:e8:20:77:1a:f2:76:29:48:50:5a: 69:10:58:9f:d1:e3:13:7e:72:88:c4:86:75:15:7e:f5:3c:85: 32:7c:66:2e:14:a6:2e:32:19:94:ed:8b:92:75:64:23:08:1c: 5e:07:fe:1a:ff:c6:1d:af:7a:ed:8d:57:9a:9f:9f:eb:b8:6e: b2:8b:d1:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNBMjcxMTAvBgNVBAUTKDc5MkUwQjNFQjM2MDQ0MjdGQzg0OEY5NkM3MzRBQzRE OTlGRTc1OTYwHhcNMjUwNjA1MDMxNzMxWhcNMjUwNjEyMDMxNzMxWjAYMRYwFAYD VQQDEw02ODQxMGM0Yi1iODUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2b5AF5uPvSDH8W6eTcY9+wacfdUUvr5WG+DhPJmOTz5WJ3jOjIVJttmEHZUX N4DeeiKHdpbWsfIgghAUOGphUurZBVbAFlXvQmWEOhrAF6PBdZx/jDEsuXLm2Zux uuw7JjtzEZFheXNgvFloXtF73Z52Iag9SCjCtmxOlpq8Cwvrn8i21CxzQlQrEV3u tqdFveHxC1jvx3IuhhjtuAdH9JGLbRDDl6H/5WO4T3uOzEBXcNERZyffdVMTqEqv GWT/egKNIjvazYR6h6E7Fr1fWLpyRP1kzIbuB79ya8cYopODCQ8uUR4hcLsr3QFr ZP//EXiRIsLY/yYN4zPPpE6zeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCiWdd4j wX1qmiVBsXlqsXXVbt67MB8GA1UdIwQYMBaAFHkuCz6zYEQn/ISPlsc0rE2Z/nWW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0EyNy81MzVFQTY0RTIx RjcxMUVFQkI4NDg2MzRDNEY5QUUwMi9lUzRMUHJOZ1JDZjhoSS1XeHpTc1Rabi1k WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VTNExQck5nUkNmOGhJLVd4elNzVFpuLWRaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0EyNy81MzVFQTY0RTIxRjcxMUVFQkI4NDg2MzRDNEY5QUUwMi9lUzRMUHJOZ1JD ZjhoSS1XeHpTc1Rabi1kWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdYxds1Ej5/aqYzzZcedoI77IcY7UPaXMda1SQGpfdQ6o9SiZ4T3QX iokV7LJoSb4FnTiMajM6FX81CCA0rvPIsJD4OW50IfJll+ji62H7sh3mzzhayENC nKtaNyjFfMx/T1RU6/Ol3FS/pmPJzAZdvGIZF/uj0Xw8kET8rrEVa4OfOsKGbrXz n88ZTkWZUqjfWmRqhGqMn033QZpPm6pfBC/wycqF/saDvmLmXTtAt6EcuncDhk/6 8WCrLeggdxrydilIUFppEFif0eMTfnKIxIZ1FX71PIUyfGYuFKYuMhmU7YuSdWQj CBxeB/4a/8Ydr3rtjVean5/ruG6yi9HS -----END CERTIFICATE-----Generated at Thu Jun 5 19:53:17 2025 by rpki-client