$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft File: Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft (raw, json) Hash identifier: jxRtWYX6ATKV3TMSoNBcisOoiQCz9DB3dWY8ZjzTICU= Subject key identifier: C4:23:35:31:30:D5:A9:94:50:E6:B7:AE:91:63:15:83:BE:19:D8:8A Authority key identifier: 11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86 Certificate issuer: /CN=A917E0BB/serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386 Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft Manifest number: E0 Signing time: Sat 31 May 2025 05:07:29 +0000 Manifest this update: Sat 31 May 2025 05:07:28 +0000 Manifest next update: Sat 07 Jun 2025 05:07:28 +0000 Files and hashes: 1: Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl (hash: 0aKAZEzTwK+oU+BETZytxWfkoR9sVHleDJCNLkj4IL4=) 2: 2D08F32A110011EFBF50D06AC4F9AE02.roa (hash: nAAaBPNOT83reooBTbRysc5FUHQ0lj/e8r5J8CDIx/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:07:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0BB, serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386 Validity Not Before: May 31 05:07:28 2025 GMT Not After : Jun 7 05:07:28 2025 GMT Subject: CN=683a8e90-42cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4b:27:53:53:c8:07:20:bc:09:90:cd:c8:86: e5:5f:d3:f6:eb:39:4f:67:6e:88:b8:ab:00:39:15: f9:d6:ad:75:8a:84:d3:01:a0:31:71:ec:07:cc:7d: e4:89:15:ba:08:61:7c:a2:96:9a:be:a4:03:0d:9f: d7:0f:41:d3:ff:59:cc:d6:8c:17:73:06:de:a6:a2: 30:c3:3b:1f:cd:e6:5c:42:03:04:f7:8c:7c:1d:68: 90:7d:2e:fc:e0:f0:d5:1e:ac:15:61:cc:58:83:f1: 7b:5f:77:54:cb:19:45:40:c5:b9:d2:6c:7d:46:7a: b9:fc:76:b6:e2:4c:02:31:fd:ad:99:4d:57:30:d1: 6a:56:dd:10:50:1f:50:9e:4c:fd:b0:04:6d:67:39: f5:75:88:84:a5:54:13:32:50:a9:a0:51:19:e4:62: 79:8e:d5:65:79:0c:45:9c:76:0a:4d:70:f1:38:a2: 8f:42:f0:05:f2:7a:99:bf:a5:08:6c:63:11:b6:b9: 0b:2f:da:e1:dc:f8:c3:d4:d1:89:2b:c3:bd:87:53: b7:21:1b:ff:b3:95:03:ef:52:a0:f9:8b:45:24:1f: f5:fd:03:d5:a7:62:92:ca:d9:f4:b8:ad:46:ac:c8: 59:39:30:23:8e:c8:ed:54:41:6c:36:3e:6d:17:af: 63:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:23:35:31:30:D5:A9:94:50:E6:B7:AE:91:63:15:83:BE:19:D8:8A X509v3 Authority Key Identifier: keyid:11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:de:52:e5:4b:83:86:d0:63:68:d8:9a:8d:ca:59:2c:24:ad: 7a:bd:10:ef:f7:d0:13:89:e8:7b:57:89:48:7f:bf:36:a0:d1: c7:e8:7b:76:c7:9b:a4:c1:0e:5d:8e:f5:89:20:09:cf:79:9f: 20:ba:f8:41:ee:33:6f:60:8f:1a:49:5c:cc:62:c7:33:60:5e: 4f:97:5e:02:a9:66:e3:22:e3:c3:d4:56:ed:5e:e0:e3:4f:8a: 2d:6e:b6:78:33:b5:2a:bb:54:a5:44:f4:19:d8:5d:0c:7f:44: e3:09:6e:78:94:3d:43:aa:c3:17:5c:cb:bf:da:d3:5a:97:3e: 5c:39:3e:95:eb:a9:ed:9d:7f:f3:d9:fd:eb:f8:50:bb:ba:a5: 27:47:bc:27:aa:a1:0a:8d:3a:db:e3:9c:53:fc:e2:e5:54:b4: 4f:2d:3b:cf:03:23:42:3f:d0:18:38:20:37:56:91:32:fb:f8: c4:fd:85:c3:92:14:3d:89:f6:a2:7f:4b:43:fe:06:f2:31:14: 1a:d8:3c:92:ab:12:e1:1d:d7:33:31:3f:4e:74:ba:d0:2c:a9: b7:8c:8d:2a:7f:bc:1c:b3:3c:3f:75:9f:fd:7e:d7:ef:d8:b3: d7:f3:b2:3e:e0:27:be:a5:25:48:d9:4e:4a:e2:68:c0:88:fa: 87:78:bf:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQkIxMTAvBgNVBAUTKDExQUIzN0RDNjU0MTUwQzQ5M0M4QUZDN0U4NkQ2NjlD MjBBRTUzODYwHhcNMjUwNTMxMDUwNzI4WhcNMjUwNjA3MDUwNzI4WjAYMRYwFAYD VQQDEw02ODNhOGU5MC00MmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0snU1PIByC8CZDNyIblX9P26zlPZ26IuKsAORX51q11ioTTAaAxcewHzH3k iRW6CGF8opaavqQDDZ/XD0HT/1nM1owXcwbepqIwwzsfzeZcQgME94x8HWiQfS78 4PDVHqwVYcxYg/F7X3dUyxlFQMW50mx9Rnq5/Ha24kwCMf2tmU1XMNFqVt0QUB9Q nkz9sARtZzn1dYiEpVQTMlCpoFEZ5GJ5jtVleQxFnHYKTXDxOKKPQvAF8nqZv6UI bGMRtrkLL9rh3PjD1NGJK8O9h1O3IRv/s5UD71Kg+YtFJB/1/QPVp2KSytn0uK1G rMhZOTAjjsjtVEFsNj5tF69jYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQjNTEw 1amUUOa3rpFjFYO+GdiKMB8GA1UdIwQYMBaAFBGrN9xlQVDEk8ivx+htZpwgrlOG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBCQi82ODQzMUZBMkU4 RTYxMUVFOUNBQkUwNkFDNEY5QUUwMi9FYXMzM0dWQlVNU1R5S19INkcxbW5DQ3VV NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VhczMzR1ZCVU1TVHlLX0g2RzFtbkNDdVU0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBCQi82ODQzMUZBMkU4RTYxMUVFOUNBQkUwNkFDNEY5QUUwMi9FYXMzM0dWQlVN U1R5S19INkcxbW5DQ3VVNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp3lLlS4OG0GNo2JqNylksJK16vRDv99ATieh7V4lIf782oNHH6Ht2 x5ukwQ5djvWJIAnPeZ8guvhB7jNvYI8aSVzMYsczYF5Pl14CqWbjIuPD1FbtXuDj T4otbrZ4M7Uqu1SlRPQZ2F0Mf0TjCW54lD1DqsMXXMu/2tNalz5cOT6V66ntnX/z 2f3r+FC7uqUnR7wnqqEKjTrb45xT/OLlVLRPLTvPAyNCP9AYOCA3VpEy+/jE/YXD khQ9ifaif0tD/gbyMRQa2DySqxLhHdczMT9OdLrQLKm3jI0qf7wcszw/dZ/9ftfv 2LPX87I+4Ce+pSVI2U5K4mjAiPqHeL8R -----END CERTIFICATE-----Generated at Sat May 31 17:42:45 2025 by rpki-client