$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft File: E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft (raw, json) Hash identifier: vEqHA6mlNoyZREW4vk3AIyms1BFrkZrtZY3yNC4Ul1k= Subject key identifier: 9C:86:89:98:AF:20:66:4E:39:21:A2:87:0E:85:77:2F:7E:94:67:53 Authority key identifier: 13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 Certificate issuer: /CN=A91BA521/serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Certificate serial: 086B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft Manifest number: 0866 Signing time: Fri 30 May 2025 20:54:14 +0000 Manifest this update: Fri 30 May 2025 20:54:14 +0000 Manifest next update: Fri 06 Jun 2025 20:54:14 +0000 Files and hashes: 1: E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl (hash: IRlftz9MdMsHTECRN/IfqFxi/yK9/yX+SPu7p6mKnN0=) 2: 3046CBE2C4E811EAB607D255C4F9AE02.roa (hash: cbktrrt4RsOUs9FstYccY602a8M1M48rOaYFq7f84Xg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2155 (0x86b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA521, serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Validity Not Before: May 30 20:54:14 2025 GMT Not After : Jun 6 20:54:14 2025 GMT Subject: CN=683a1af6-c00b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:84:2e:c9:b2:f7:23:49:75:81:79:a8:90:8d: d3:93:d8:16:a9:78:5a:f8:af:bc:a0:29:95:e9:1a: fa:4b:63:6e:5a:e8:a8:75:b0:c7:20:f2:e7:4b:76: b8:91:e8:e8:b8:8c:83:ab:9c:b1:2a:1c:ff:37:a8: a3:10:40:2a:f5:dc:48:c5:b7:84:10:e2:61:b4:14: 92:26:cc:08:52:41:bb:ef:f9:27:b8:51:75:57:cd: 2b:8e:f1:41:d7:28:6b:28:14:17:f3:11:a4:06:88: 04:1f:e7:02:8a:3b:5f:8d:de:0b:9b:b7:c3:dd:31: d3:c1:c0:de:36:c2:16:f2:43:d0:9a:53:c5:f5:33: 0e:d2:08:41:8b:9d:67:25:81:34:18:da:d8:fc:8f: 94:2c:af:c4:3d:47:e1:7a:02:c0:03:89:71:aa:6c: cb:72:83:de:1c:bd:f5:3e:57:88:68:7d:20:96:9a: ca:a6:ce:c1:18:45:79:fe:0a:c5:11:3d:71:92:60: 61:e1:4e:d4:2b:7a:13:f2:62:d5:8c:2b:e6:78:0e: 9d:6e:90:08:75:16:8c:cd:fa:af:0f:d4:2e:7e:6f: 59:b5:74:fc:02:59:82:74:ca:76:84:23:62:57:43: 93:d8:ae:11:b3:fa:f5:62:f2:94:7b:e7:dd:99:59: f7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:86:89:98:AF:20:66:4E:39:21:A2:87:0E:85:77:2F:7E:94:67:53 X509v3 Authority Key Identifier: keyid:13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:7c:90:56:0e:f0:fa:74:ac:2f:66:cb:46:78:35:f4:b4:60: 15:61:15:55:eb:e3:32:e2:ce:e8:7a:61:66:f0:37:31:12:c3: 29:79:54:ac:cc:31:4a:bf:f5:58:4c:c3:95:fb:97:60:ec:d9: 90:00:76:87:0e:5b:0c:a4:d3:dc:7a:85:2e:58:84:3c:87:bd: e8:e7:b7:23:76:3e:72:1c:79:a5:91:a8:5b:58:34:a7:2c:e8: 30:af:55:fe:a7:de:3b:3f:1c:4c:1f:02:4a:28:ca:dd:4f:b0: 21:62:ac:9a:7c:9f:06:fb:b6:2a:95:fe:a7:a5:57:7d:fa:84: 65:b2:cd:07:6e:3f:90:9b:dc:57:f3:ff:53:61:3c:b9:88:3c: 60:0a:0e:57:8e:8e:7f:24:18:b2:15:44:0a:c5:2d:a1:d9:60: 9c:31:18:c4:56:13:a7:bc:89:73:32:ea:8e:40:81:e9:f7:5a: aa:9d:50:20:95:f6:03:24:62:40:eb:fd:34:55:85:52:f0:81: e0:e8:80:8e:4f:6b:dc:5d:2d:2d:08:e0:7f:21:10:5f:ef:d5: 48:82:6d:c9:ed:61:1f:bd:66:5d:f5:3a:91:83:a7:c3:5b:8a: 33:fd:d1:9b:3b:b8:23:66:43:88:e5:4a:46:1d:22:07:fc:11: 0a:e0:ec:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1MjExMTAvBgNVBAUTKDEzQ0I5OTM0MUU1NDk3OTJBMEFDMEEzNjYyMjExREUx N0YzNDkzODIwHhcNMjUwNTMwMjA1NDE0WhcNMjUwNjA2MjA1NDE0WjAYMRYwFAYD VQQDEw02ODNhMWFmNi1jMDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4IQuybL3I0l1gXmokI3Tk9gWqXha+K+8oCmV6Rr6S2NuWuiodbDHIPLnS3a4 kejouIyDq5yxKhz/N6ijEEAq9dxIxbeEEOJhtBSSJswIUkG77/knuFF1V80rjvFB 1yhrKBQX8xGkBogEH+cCijtfjd4Lm7fD3THTwcDeNsIW8kPQmlPF9TMO0ghBi51n JYE0GNrY/I+ULK/EPUfhegLAA4lxqmzLcoPeHL31PleIaH0glprKps7BGEV5/grF ET1xkmBh4U7UK3oT8mLVjCvmeA6dbpAIdRaMzfqvD9Qufm9ZtXT8AlmCdMp2hCNi V0OT2K4Rs/r1YvKUe+fdmVn3LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyGiZiv IGZOOSGihw6Fdy9+lGdTMB8GA1UdIwQYMBaAFBPLmTQeVJeSoKwKNmIhHeF/NJOC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTUyMS9DOUZBRTdDQUM0 RTYxMUVBQTY0NTRGNTRDNEY5QUUwMi9FOHVaTkI1VWw1S2dyQW8yWWlFZDRYODBr NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U4dVpOQjVVbDVLZ3JBbzJZaUVkNFg4MGs0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTUyMS9DOUZBRTdDQUM0RTYxMUVBQTY0NTRGNTRDNEY5QUUwMi9FOHVaTkI1VWw1 S2dyQW8yWWlFZDRYODBrNEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhfJBWDvD6dKwvZstGeDX0tGAVYRVV6+My4s7oemFm8DcxEsMpeVSs zDFKv/VYTMOV+5dg7NmQAHaHDlsMpNPceoUuWIQ8h73o57cjdj5yHHmlkahbWDSn LOgwr1X+p947PxxMHwJKKMrdT7AhYqyafJ8G+7Yqlf6npVd9+oRlss0Hbj+Qm9xX 8/9TYTy5iDxgCg5Xjo5/JBiyFUQKxS2h2WCcMRjEVhOnvIlzMuqOQIHp91qqnVAg lfYDJGJA6/00VYVS8IHg6ICOT2vcXS0tCOB/IRBf79VIgm3J7WEfvWZd9TqRg6fD W4oz/dGbO7gjZkOI5UpGHSIH/BEK4OwG -----END CERTIFICATE-----Generated at Sat May 31 16:25:55 2025 by rpki-client