$ rpki-client -vvf rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft File: eHDyQLxFFuOanCWVjPl7GUvnZWc.mft (raw, json) Hash identifier: 0RgcsumxbTj8CBgQ3tYDus05Sqn5kKd9ieNQcCGRJQc= Subject key identifier: 49:CA:B4:22:86:00:55:38:0C:C4:7F:1A:EB:1A:1E:DB:0B:9B:2A:5B Authority key identifier: 78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67 Certificate issuer: /CN=A91A09BF/serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567 Certificate serial: 0BA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft Manifest number: 0B8B Signing time: Sun 08 Jun 2025 18:49:44 +0000 Manifest this update: Sun 08 Jun 2025 18:49:43 +0000 Manifest next update: Sun 15 Jun 2025 18:49:43 +0000 Files and hashes: 1: eHDyQLxFFuOanCWVjPl7GUvnZWc.crl (hash: +bwWjYfdvw/7kxhkmkUoSkLuRomxZs4Oy2XpcpB6+Ko=) 2: 7510C8E4A58111EFB180AE4CC4F9AE02.roa (hash: EYUdErvrNyXXGWy2iexeF4zrxrreLq1Yski9zt4iFNY=) 3: EC4AB04AAA5511EABCEBDE19C4F9AE02.roa (hash: xCXQqgm7s0yqcl5rlXb69u+J291yS3/BUfkPMKe4WIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.crl rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 18:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2983 (0xba7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A09BF, serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567 Validity Not Before: Jun 8 18:49:43 2025 GMT Not After : Jun 15 18:49:43 2025 GMT Subject: CN=6845db48-2134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5a:73:50:4e:c8:f0:1b:a9:c5:9a:f1:64:d3: 06:f4:42:93:56:4a:30:6d:81:15:4e:0b:a2:e4:3a: dd:b5:c5:78:bb:b3:a9:af:4f:b3:aa:c8:a3:56:42: 53:bb:db:d7:e3:52:78:ba:b8:8b:6c:f9:4d:6c:90: af:ff:3f:ee:4b:ac:a9:bc:1f:ab:db:bf:ed:b9:13: 8b:a0:fc:31:07:55:67:5e:03:a6:51:42:02:48:07: 4f:09:1a:d9:cb:a7:18:8d:2e:ef:7f:45:6b:5d:ed: 01:44:18:ce:1f:f7:f6:c5:35:eb:53:c1:32:28:77: 8d:e6:13:88:90:5f:3f:c4:fc:02:7a:7b:77:71:3b: 87:5e:e5:a0:11:8d:3d:e8:c2:e7:bd:35:3a:23:3f: 33:a5:2f:80:0f:17:b4:1d:98:89:6c:81:ee:dc:0d: 88:d3:f6:7e:d2:e1:31:9c:40:b9:ca:28:bf:6b:af: b0:b7:7c:cc:c8:80:32:51:df:c4:ce:c3:d2:eb:1d: da:6f:e7:64:e3:52:d5:0d:9b:f5:a7:16:6e:40:d5: e5:5b:e7:43:4c:b3:ca:54:a3:74:a9:35:b5:a4:1a: 0d:ea:e8:c2:3d:b8:93:6f:ca:04:d3:ac:e9:37:a1: 07:0b:cc:d8:35:72:b2:35:ff:48:d8:59:cf:ec:14: aa:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:CA:B4:22:86:00:55:38:0C:C4:7F:1A:EB:1A:1E:DB:0B:9B:2A:5B X509v3 Authority Key Identifier: keyid:78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:42:b4:de:8c:c0:4f:da:cb:e2:e4:08:db:a7:b8:21:b9:1b: 19:8e:d8:60:55:4f:db:59:44:f4:d7:7d:2a:c1:1f:fd:a7:5b: 68:6d:4c:b9:82:27:e6:d4:5c:f2:e7:f5:ea:11:2b:43:92:bc: cd:ce:8a:f3:0b:da:cf:37:cc:d6:46:4c:d6:f9:bb:e5:9d:e1: d9:ff:4e:e6:28:65:ca:13:b4:b0:8f:49:8e:93:1b:75:8f:2f: fb:85:1a:2b:53:c1:d2:ad:73:29:e9:44:23:ed:c6:36:c8:70: 4f:03:a4:75:b8:e0:64:56:88:b9:a0:7b:e7:a0:1c:85:e3:6b: c9:fd:18:fe:85:c7:8f:ab:2e:de:ab:2c:b4:7b:a5:41:4d:b0: 9a:ee:a1:ca:b6:7a:76:bc:cd:d7:33:e2:14:30:9b:33:43:e1: b3:23:04:b7:81:a4:bc:94:64:a5:45:c5:34:56:95:7c:f7:e4: 9f:a1:79:d3:40:b4:72:0b:20:c6:ba:14:4a:98:10:15:a4:6d: d7:0d:f6:d1:4c:bf:5a:88:79:af:3f:8c:95:6e:a9:9d:07:2f: d2:1b:b6:bb:94:90:a2:be:b8:72:95:a9:e2:74:46:38:49:99: 46:07:29:3a:85:7a:a3:37:13:86:8c:ee:74:ec:7f:f4:4a:11: 1b:76:73:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA5QkYxMTAvBgNVBAUTKDc4NzBGMjQwQkM0NTE2RTM5QTlDMjU5NThDRjk3QjE5 NEJFNzY1NjcwHhcNMjUwNjA4MTg0OTQzWhcNMjUwNjE1MTg0OTQzWjAYMRYwFAYD VQQDEw02ODQ1ZGI0OC0yMTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoVpzUE7I8BupxZrxZNMG9EKTVkowbYEVTgui5DrdtcV4u7Opr0+zqsijVkJT u9vX41J4uriLbPlNbJCv/z/uS6ypvB+r27/tuROLoPwxB1VnXgOmUUICSAdPCRrZ y6cYjS7vf0VrXe0BRBjOH/f2xTXrU8EyKHeN5hOIkF8/xPwCent3cTuHXuWgEY09 6MLnvTU6Iz8zpS+ADxe0HZiJbIHu3A2I0/Z+0uExnEC5yii/a6+wt3zMyIAyUd/E zsPS6x3ab+dk41LVDZv1pxZuQNXlW+dDTLPKVKN0qTW1pBoN6ujCPbiTb8oE06zp N6EHC8zYNXKyNf9I2FnP7BSqyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnKtCKG AFU4DMR/GusaHtsLmypbMB8GA1UdIwQYMBaAFHhw8kC8RRbjmpwllYz5exlL52Vn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDlCRi9EMTNEQTFENDJE RkMxMUVBQkMxQjZCODJDNEY5QUUwMi9lSER5UUx4RkZ1T2FuQ1dWalBsN0dVdm5a V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VIRHlRTHhGRnVPYW5DV1ZqUGw3R1V2blpXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDlCRi9EMTNEQTFENDJERkMxMUVBQkMxQjZCODJDNEY5QUUwMi9lSER5UUx4RkZ1 T2FuQ1dWalBsN0dVdm5aV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoQrTejMBP2svi5Ajbp7ghuRsZjthgVU/bWUT0130qwR/9p1tobUy5 gifm1Fzy5/XqEStDkrzNzorzC9rPN8zWRkzW+bvlneHZ/07mKGXKE7Swj0mOkxt1 jy/7hRorU8HSrXMp6UQj7cY2yHBPA6R1uOBkVoi5oHvnoByF42vJ/Rj+hcePqy7e qyy0e6VBTbCa7qHKtnp2vM3XM+IUMJszQ+GzIwS3gaS8lGSlRcU0VpV89+SfoXnT QLRyCyDGuhRKmBAVpG3XDfbRTL9aiHmvP4yVbqmdBy/SG7a7lJCivrhylanidEY4 SZlGByk6hXqjNxOGjO507H/0ShEbdnMx -----END CERTIFICATE-----Generated at Tue Jun 10 11:48:58 2025 by rpki-client