$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft File: E4zRCkd43g41kR6cnJRPSyHE2wk.mft (raw, json) Hash identifier: b4+1J1pGBaHBdXnzW6liDtBItw9UqknAZJM7zAqHlpY= Subject key identifier: 17:59:2A:30:22:85:98:B4:3B:4E:87:BA:B1:1F:A6:F6:12:69:CA:53 Authority key identifier: 13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 Certificate issuer: /CN=A9130F9C/serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Certificate serial: 0CA3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft Manifest number: 0C8B Signing time: Fri 30 May 2025 18:27:17 +0000 Manifest this update: Fri 30 May 2025 18:27:16 +0000 Manifest next update: Fri 06 Jun 2025 18:27:16 +0000 Files and hashes: 1: E4zRCkd43g41kR6cnJRPSyHE2wk.crl (hash: SD5gvtYnxxa5RoJ5W/UqU6IeByQdcnszU4BTyI1axnw=) 2: 1FC5063AE0D411ECB6C0B01CC4F9AE02.roa (hash: nc7TBefBbU0mXqPXG5FtS5khsHRLeEqmotd1zbLKCfY=) 3: 0827E4147F7911EC86DE4B56C4F9AE02.roa (hash: tjqskq9N3o/egf3xRNWQ42djlqYwKoTyXRLEqPg8Ljw=) 4: 41CBB5B87F7611ECAD50FA4EC4F9AE02.roa (hash: QVZHVEKIjuuhqR8CaduzUx2n60lfnPfkbZyqpQZ1wv4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3235 (0xca3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F9C, serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Validity Not Before: May 30 18:27:16 2025 GMT Not After : Jun 6 18:27:16 2025 GMT Subject: CN=6839f885-1300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:78:87:83:3e:d5:07:ca:b7:9a:bc:3a:90:24: 9a:10:c7:f9:81:bc:7e:e1:b8:5f:a9:4f:05:c4:75: 65:a0:ef:44:e9:0a:78:4c:d1:1b:50:45:60:8b:8d: 21:41:4e:a0:b1:15:69:05:51:a7:eb:8a:04:be:d9: df:38:3c:05:48:61:78:03:d8:da:6c:e6:2e:47:a4: 5e:50:d1:42:76:a2:89:59:28:75:c7:61:e0:55:85: ae:20:e1:43:36:19:9e:3e:32:f4:02:72:69:16:5c: 7e:09:d9:2f:10:2e:ad:32:1a:41:d7:0e:67:7c:ad: d9:28:99:9e:ab:c6:41:5e:23:38:4d:0d:b7:74:9c: f6:42:41:2e:a2:b6:95:51:9e:cb:5c:4a:be:59:2c: 10:64:08:1e:4d:50:0d:a1:a3:5a:7c:f4:3a:77:a7: 30:5a:10:c5:1c:d3:9f:4b:67:7a:c0:93:b9:8e:70: 03:8b:d4:62:73:34:72:cd:8c:e6:6e:58:15:91:5d: 9e:c9:60:fe:6c:12:ec:8d:62:aa:48:a7:d0:46:dd: d3:9b:b7:e4:8d:55:21:98:30:91:51:75:84:6b:5e: 9f:ee:c9:d9:23:09:33:44:af:e6:cc:2f:2d:6b:9b: f6:08:b9:42:fe:55:2f:52:55:24:cd:d7:f4:bf:aa: 8c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:59:2A:30:22:85:98:B4:3B:4E:87:BA:B1:1F:A6:F6:12:69:CA:53 X509v3 Authority Key Identifier: keyid:13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:0d:4f:4b:23:9d:e8:b1:6f:e2:88:74:25:2a:87:f9:90:5a: f1:ae:0a:a6:2f:04:19:49:ff:d6:20:12:32:5b:2e:48:db:58: c5:45:ad:e2:16:c4:61:45:4b:0c:41:fd:de:33:72:63:19:c5: 20:3d:c5:d5:87:aa:8e:d9:be:37:07:1f:80:e7:5c:6c:d3:cd: 08:46:07:c4:e6:77:74:8e:f5:28:96:44:e9:98:c2:f4:53:27: 5b:69:60:de:ea:78:5a:56:ee:48:15:40:67:65:9e:63:38:98: b6:f4:2e:0b:86:d8:de:60:f2:db:98:4f:a9:4c:8f:56:d0:82: 59:01:27:1b:26:8f:1f:1a:17:88:2d:cc:28:e0:88:62:bd:5d: 3b:ed:6b:09:41:c2:eb:27:86:cf:68:6f:65:b9:e2:bc:7c:ca: 92:83:3b:31:85:87:7c:c2:43:b5:35:2b:7f:6b:80:44:9e:19: 7b:83:17:31:97:f0:22:18:78:78:15:24:da:4d:9d:3e:75:50: 38:c5:91:f3:f0:4b:2c:4e:2f:3b:ae:1b:06:55:0f:8a:4b:4c: 8a:37:fe:7d:a5:c4:51:8d:1c:ca:17:b5:95:79:82:01:c1:58: 78:a3:48:2c:91:7e:21:03:05:57:e9:3f:74:b3:91:c8:02:92: 51:b2:60:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBGOUMxMTAvBgNVBAUTKDEzOENEMTBBNDc3OERFMEUzNTkxMUU5QzlDOTQ0RjRC MjFDNERCMDkwHhcNMjUwNTMwMTgyNzE2WhcNMjUwNjA2MTgyNzE2WjAYMRYwFAYD VQQDEw02ODM5Zjg4NS0xMzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3iHgz7VB8q3mrw6kCSaEMf5gbx+4bhfqU8FxHVloO9E6Qp4TNEbUEVgi40h QU6gsRVpBVGn64oEvtnfODwFSGF4A9jabOYuR6ReUNFCdqKJWSh1x2HgVYWuIOFD NhmePjL0AnJpFlx+CdkvEC6tMhpB1w5nfK3ZKJmeq8ZBXiM4TQ23dJz2QkEuoraV UZ7LXEq+WSwQZAgeTVANoaNafPQ6d6cwWhDFHNOfS2d6wJO5jnADi9RiczRyzYzm blgVkV2eyWD+bBLsjWKqSKfQRt3Tm7fkjVUhmDCRUXWEa16f7snZIwkzRK/mzC8t a5v2CLlC/lUvUlUkzdf0v6qMfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBdZKjAi hZi0O06HurEfpvYSacpTMB8GA1UdIwQYMBaAFBOM0QpHeN4ONZEenJyUT0shxNsJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEY5Qy8yOUNCMDIwRUZB MEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNnNDFrUjZjbkpSUFN5SEUy d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U0elJDa2Q0M2c0MWtSNmNuSlJQU3lIRTJ3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEY5Qy8yOUNCMDIwRUZBMEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNn NDFrUjZjbkpSUFN5SEUyd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXDU9LI53osW/iiHQlKof5kFrxrgqmLwQZSf/WIBIyWy5I21jFRa3i FsRhRUsMQf3eM3JjGcUgPcXVh6qO2b43Bx+A51xs080IRgfE5nd0jvUolkTpmML0 UydbaWDe6nhaVu5IFUBnZZ5jOJi29C4LhtjeYPLbmE+pTI9W0IJZAScbJo8fGheI Lcwo4IhivV077WsJQcLrJ4bPaG9lueK8fMqSgzsxhYd8wkO1NSt/a4BEnhl7gxcx l/AiGHh4FSTaTZ0+dVA4xZHz8EssTi87rhsGVQ+KS0yKN/59pcRRjRzKF7WVeYIB wVh4o0gskX4hAwVX6T90s5HIApJRsmCO -----END CERTIFICATE-----Generated at Sat May 31 16:30:34 2025 by rpki-client