$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft File: EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft (raw, json) Hash identifier: 8SJn3lJV2jvroTNvqxxTKJ2AmVWuA/n2Vrujd5GrTJk= Subject key identifier: 0E:2D:ED:85:57:9B:10:8C:DE:F9:6B:93:2D:12:84:3C:B8:B8:0D:3B Authority key identifier: 13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2 Certificate issuer: /CN=A917FFB0/serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2 Certificate serial: 3504 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft Manifest number: 34CA Signing time: Sat 31 May 2025 14:44:09 +0000 Manifest this update: Sat 31 May 2025 14:44:09 +0000 Manifest next update: Sat 07 Jun 2025 14:44:09 +0000 Files and hashes: 1: EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl (hash: xVd8ozgfJyT7rnMhr+fxEMu1ZX5bT4xXP2viV/Hzsj8=) 2: 80B30FA48F5611EA9C04912BC4F9AE02.roa (hash: pAR1FgGTlUIXKdXPzl2g83tghG6tiadwAtJ5qGgzg7c=) 3: 19CCFBDE6F0911ED8A7BD268C4F9AE02.roa (hash: JTK51f8dfP+bxciKZy6FgqfkHpvTyTd0gqBndr+pK/M=) 4: A88A36D0003A11EEB8430127C4F9AE02.roa (hash: S9c42K/e6Cb4RZkOmU2A+Wc3g/Elgh6iQKBCJml/etM=) 5: 187F92966F0911ED8A7BD268C4F9AE02.roa (hash: WY+AEtZNGfOw12yKOfvg/F8cjo6zbb8RMRrGslASsW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:44:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13572 (0x3504) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FFB0, serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2 Validity Not Before: May 31 14:44:09 2025 GMT Not After : Jun 7 14:44:09 2025 GMT Subject: CN=683b15b9-0dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8c:1c:b3:58:72:38:dc:ef:54:b5:d8:d4:7c: bc:c0:c7:6b:92:8b:f4:d3:8f:b3:8d:a6:6c:7c:81: 03:da:01:de:ec:6e:70:be:a7:3d:b7:79:d3:1e:5f: 32:aa:5d:2c:b1:5e:2f:0f:bd:86:44:34:fa:d0:fb: 58:27:bd:71:c7:b9:82:cc:98:b4:35:d2:05:57:d9: da:85:81:3c:f7:2b:5c:4d:e7:c6:63:fe:c1:0f:03: 18:64:c3:6c:ad:a6:c4:7f:db:fa:30:08:fd:f0:73: 7a:70:0d:90:7f:14:41:28:9d:bf:f3:46:34:22:22: 57:e3:c3:a0:9c:de:cb:04:8b:ae:9c:04:fe:6a:4a: d0:51:8a:04:58:bc:4c:34:04:16:63:f3:fc:19:79: 00:43:ac:d2:af:86:df:e0:ca:5c:da:4f:0f:c8:5c: 03:e7:17:64:28:69:10:fb:b1:42:bd:9f:ed:d5:65: 02:f0:60:1e:78:4a:5b:fc:37:0b:66:d6:d5:47:c9: 37:5a:91:f9:07:ee:0d:59:e6:fa:50:54:ae:c4:fd: 21:2e:2b:fe:16:e2:5b:fa:8a:47:a0:ee:57:80:c4: 2a:00:36:5f:fb:70:3e:4b:2a:4b:be:c7:33:5a:3a: dc:49:b4:6b:76:d3:07:be:14:17:21:97:23:b5:ed: c7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:2D:ED:85:57:9B:10:8C:DE:F9:6B:93:2D:12:84:3C:B8:B8:0D:3B X509v3 Authority Key Identifier: keyid:13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:27:89:0a:e4:e8:66:f1:8f:d5:55:66:58:f6:af:dc:38:19: 0e:62:1b:f1:48:74:1f:d3:bf:f3:6d:7f:44:2d:ba:3c:ea:d8: e1:13:55:79:17:1f:ca:c5:53:3b:fb:69:b9:c3:7d:74:e8:26: 03:82:96:81:44:98:f1:cb:21:96:d0:1e:0c:60:b0:0b:2a:4a: 52:eb:e3:60:25:82:09:73:85:52:53:12:8e:17:36:f2:dd:06: 29:fe:e3:08:24:38:9d:9f:cd:d7:65:4a:45:44:4b:d4:67:f7: cf:fb:85:0c:06:eb:86:e5:04:4e:58:cd:e0:77:99:32:fb:7e: 71:5f:c8:f8:db:50:53:ce:de:43:5e:12:6a:6d:b6:45:b8:eb: f8:7b:91:96:fc:db:ef:11:34:8f:1e:40:03:6a:48:27:1e:2c: 15:c0:8e:e1:49:b8:25:95:e1:9a:e2:fd:a6:51:29:6c:e6:3f: 1f:1b:0b:10:ec:34:27:e6:ae:41:dd:b0:d7:4b:c8:a4:29:01: ff:6d:cd:10:8b:86:22:82:b3:00:3d:55:f9:a3:b8:65:0d:e3: 88:26:83:35:20:50:69:91:d6:4f:1f:57:f8:8d:29:01:89:d9: 5a:6c:e5:44:8c:65:4d:fb:53:b7:89:5d:9d:e7:7a:d7:19:23: 65:1d:ec:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZGQjAxMTAvBgNVBAUTKDEzMjQwNDMwMjFCQjQ1RDdGRjY2RjIwQUZDNjgzOTM0 MzEzMEMzRjIwHhcNMjUwNTMxMTQ0NDA5WhcNMjUwNjA3MTQ0NDA5WjAYMRYwFAYD VQQDEw02ODNiMTViOS0wZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA64wcs1hyONzvVLXY1Hy8wMdrkov004+zjaZsfIED2gHe7G5wvqc9t3nTHl8y ql0ssV4vD72GRDT60PtYJ71xx7mCzJi0NdIFV9nahYE89ytcTefGY/7BDwMYZMNs rabEf9v6MAj98HN6cA2QfxRBKJ2/80Y0IiJX48OgnN7LBIuunAT+akrQUYoEWLxM NAQWY/P8GXkAQ6zSr4bf4Mpc2k8PyFwD5xdkKGkQ+7FCvZ/t1WUC8GAeeEpb/DcL ZtbVR8k3WpH5B+4NWeb6UFSuxP0hLiv+FuJb+opHoO5XgMQqADZf+3A+SypLvscz WjrcSbRrdtMHvhQXIZcjte3HCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4t7YVX mxCM3vlrky0ShDy4uA07MB8GA1UdIwQYMBaAFBMkBDAhu0XX/2byCvxoOTQxMMPy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkZCMC9FNTU3QzAwMDFE OTIxMUUyOTMzQTIxRjYwOEIwMkNEMi9FeVFFTUNHN1JkZl9adklLX0dnNU5ERXd3 X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V5UUVNQ0c3UmRmX1p2SUtfR2c1TkRFd3dfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkZCMC9FNTU3QzAwMDFEOTIxMUUyOTMzQTIxRjYwOEIwMkNEMi9FeVFFTUNHN1Jk Zl9adklLX0dnNU5ERXd3X0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVJ4kK5Ohm8Y/VVWZY9q/cOBkOYhvxSHQf07/zbX9ELbo86tjhE1V5 Fx/KxVM7+2m5w3106CYDgpaBRJjxyyGW0B4MYLALKkpS6+NgJYIJc4VSUxKOFzby 3QYp/uMIJDidn83XZUpFREvUZ/fP+4UMBuuG5QROWM3gd5ky+35xX8j421BTzt5D XhJqbbZFuOv4e5GW/NvvETSPHkADakgnHiwVwI7hSbglleGa4v2mUSls5j8fGwsQ 7DQn5q5B3bDXS8ikKQH/bc0Qi4YigrMAPVX5o7hlDeOIJoM1IFBpkdZPH1f4jSkB idlabOVEjGVN+1O3iV2d53rXGSNlHex3 -----END CERTIFICATE-----Generated at Sat May 31 16:39:52 2025 by rpki-client