$ rpki-client -vvf rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft File: eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft (raw, json) Hash identifier: pZokdxlm8QXM4jSLBlrJ7ljz4gTMacA084myW1QGq90= Subject key identifier: A9:DB:72:84:8C:A7:FF:54:02:07:7E:1C:65:A2:8A:CC:16:42:3D:18 Authority key identifier: 78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29 Certificate issuer: /CN=A91A495C/serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429 Certificate serial: 0D42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft Manifest number: 0D1D Signing time: Fri 30 May 2025 18:17:14 +0000 Manifest this update: Fri 30 May 2025 18:17:13 +0000 Manifest next update: Fri 06 Jun 2025 18:17:13 +0000 Files and hashes: 1: eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl (hash: dbT3/sKZ6eadtLcQbO79aEa9vuPrnk1ezBcVs0BdbKs=) 2: 9F12E3A025A511EE87132E45C4F9AE02.roa (hash: bGVPdIvZlYGFNzxT3y5YSA5PehaGI7Seiy7YCZdX9Sg=) 3: 055A1A7A05FC11EFB61A7767C4F9AE02.roa (hash: +In7lqAfHKKuHVBt4b296chjrd7RaFgigBnxlxSxJ4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3394 (0xd42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A495C, serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429 Validity Not Before: May 30 18:17:13 2025 GMT Not After : Jun 6 18:17:13 2025 GMT Subject: CN=6839f62a-fcfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8c:91:74:32:29:68:ad:c6:ca:24:bb:b8:f6: 31:aa:dd:3e:e9:88:34:0f:91:03:b9:67:41:94:58: f1:f1:c5:9c:5d:e0:78:06:17:a0:a0:4b:26:a7:fa: 1d:ba:2a:15:49:38:05:bf:fb:54:64:80:2d:57:80: fb:7d:67:97:b9:a4:3a:dc:db:86:f9:f0:50:3f:de: 4f:13:65:68:57:5e:43:0d:af:4f:0c:ad:46:6d:fe: 8f:df:c8:d2:d3:84:43:04:97:5e:a5:10:d8:94:e7: c1:b0:bb:ea:12:ab:08:52:b8:39:7d:1c:f4:9d:3c: 87:d0:e6:25:d5:4c:69:cb:ca:03:e4:97:f3:d7:02: 48:41:11:9e:f7:e8:a0:0a:4c:ed:53:9f:e9:64:a5: 3f:bf:78:d9:eb:ea:11:f8:e1:0e:39:85:d7:a4:31: 7b:ef:a3:83:dc:6b:17:b5:38:ee:55:91:81:03:19: 04:72:87:43:ef:63:f1:84:eb:2f:2a:c8:c7:1a:94: a5:e7:39:8a:ca:04:4b:de:90:fb:3f:53:bb:d1:ca: 6f:a5:92:c7:5a:07:c9:22:40:68:05:60:64:23:1c: c7:e4:cf:f1:0c:4f:fc:eb:f1:f3:54:7d:3d:a7:b7: 1e:85:76:14:a2:db:d8:94:60:2c:d7:6e:c5:42:65: fe:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DB:72:84:8C:A7:FF:54:02:07:7E:1C:65:A2:8A:CC:16:42:3D:18 X509v3 Authority Key Identifier: keyid:78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:7f:9f:28:2f:58:3d:d0:ee:9c:ee:39:1a:62:fd:3f:80:36: 38:d9:e6:7f:d8:1d:3f:e0:6d:43:fa:a8:7e:a4:cc:fd:b1:82: 43:b0:52:11:e8:31:72:6f:78:e7:5e:ee:b2:61:a8:16:fe:05: 18:e9:f1:55:04:e6:33:b4:41:d2:2b:59:53:15:c8:6a:37:01: eb:17:11:bb:b8:a9:50:2d:c3:9f:fb:cd:81:0b:6b:41:78:48: fb:7a:79:3a:10:59:f0:88:33:b4:f6:f7:31:1b:c0:7e:13:72: 3a:0a:ce:85:be:5e:34:f0:57:ae:69:15:b1:5f:78:08:57:cf: db:ac:10:66:bf:c2:3c:fb:5e:f3:2b:c2:b6:34:67:ea:77:92: 8c:fb:51:44:02:e9:30:11:66:bf:2d:b6:2e:69:52:1c:9e:28: 2d:a1:8a:79:32:2c:1d:16:54:9c:31:9b:ed:2f:0e:bf:25:1e: 71:3e:a5:42:63:2f:44:21:a3:92:ad:94:9c:5d:fe:f2:4b:37: 7f:5b:e0:9e:40:eb:94:43:b6:1a:16:c8:53:b5:ec:ae:91:ce: 76:05:8b:e2:95:01:e7:c6:4f:4b:e8:ab:f7:19:8d:12:82:fe: ad:1b:d8:9c:3c:bd:f4:e7:d3:99:35:24:e4:ca:99:37:75:23: 87:70:c0:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ5NUMxMTAvBgNVBAUTKDc4QkVEQkVEQzA0NTlCOTAwQzI4Mjg5MkYxM0IxNzgy QTk1NjA0MjkwHhcNMjUwNTMwMTgxNzEzWhcNMjUwNjA2MTgxNzEzWjAYMRYwFAYD VQQDEw02ODM5ZjYyYS1mY2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4yRdDIpaK3GyiS7uPYxqt0+6Yg0D5EDuWdBlFjx8cWcXeB4BhegoEsmp/od uioVSTgFv/tUZIAtV4D7fWeXuaQ63NuG+fBQP95PE2VoV15DDa9PDK1Gbf6P38jS 04RDBJdepRDYlOfBsLvqEqsIUrg5fRz0nTyH0OYl1Uxpy8oD5Jfz1wJIQRGe9+ig CkztU5/pZKU/v3jZ6+oR+OEOOYXXpDF776OD3GsXtTjuVZGBAxkEcodD72PxhOsv KsjHGpSl5zmKygRL3pD7P1O70cpvpZLHWgfJIkBoBWBkIxzH5M/xDE/86/HzVH09 p7cehXYUotvYlGAs127FQmX+1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKnbcoSM p/9UAgd+HGWiiswWQj0YMB8GA1UdIwQYMBaAFHi+2+3ARZuQDCgokvE7F4KpVgQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDk1Qy81NTkxODAwNEUy QUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01QU1LQ2lTOFRzWGdxbFdC Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VMN2I3Y0JGbTVBTUtDaVM4VHNYZ3FsV0JDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDk1Qy81NTkxODAwNEUyQUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01 QU1LQ2lTOFRzWGdxbFdCQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAef58oL1g90O6c7jkaYv0/gDY42eZ/2B0/4G1D+qh+pMz9sYJDsFIR 6DFyb3jnXu6yYagW/gUY6fFVBOYztEHSK1lTFchqNwHrFxG7uKlQLcOf+82BC2tB eEj7enk6EFnwiDO09vcxG8B+E3I6Cs6Fvl408FeuaRWxX3gIV8/brBBmv8I8+17z K8K2NGfqd5KM+1FEAukwEWa/LbYuaVIcnigtoYp5MiwdFlScMZvtLw6/JR5xPqVC Yy9EIaOSrZScXf7ySzd/W+CeQOuUQ7YaFshTteyukc52BYvilQHnxk9L6Kv3GY0S gv6tG9icPL3059OZNSTkypk3dSOHcMAU -----END CERTIFICATE-----Generated at Sat May 31 15:43:37 2025 by rpki-client